last executing test programs:

16.895603439s ago: executing program 0 (id=939):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x42)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket(0x22, 0x2, 0x24)
getpgrp(0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)

15.814712045s ago: executing program 0 (id=943):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)

13.944217909s ago: executing program 2 (id=947):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socketpair(0xf, 0x3, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0)
sendfile(r0, r1, 0x0, 0x1000000003fffff)
r6 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000080)=0x2)

12.70812171s ago: executing program 2 (id=949):
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000a2a000/0x2000)=nil, 0x2000}, 0x1})
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2})
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xda}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x0)

11.625375127s ago: executing program 2 (id=952):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e1f, 0x80000, @loopback, 0x7}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0)

11.341494475s ago: executing program 3 (id=954):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

11.269518722s ago: executing program 3 (id=955):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)

10.013302256s ago: executing program 3 (id=958):
unshare(0x22020600)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

9.96514717s ago: executing program 2 (id=959):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9b}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0)

8.64847283s ago: executing program 3 (id=961):
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x2b, 0x80801, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
close_range(r5, 0xffffffffffffffff, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xff)
syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff)
connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0xfff}, 0x1b)
r7 = dup2(r6, r6)
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)

8.468435598s ago: executing program 0 (id=962):
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000340)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020)

7.675017215s ago: executing program 3 (id=964):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x183001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

7.194578062s ago: executing program 0 (id=966):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

4.913539047s ago: executing program 0 (id=969):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)

3.785459898s ago: executing program 1 (id=971):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r0, r1, 0x0, 0x110003)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x764, 0x3, 0x100002, 0xa, 0x18, "f4944e0080ffff8f9f5c2200"})

3.756406971s ago: executing program 0 (id=972):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)

3.55824606s ago: executing program 1 (id=973):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"})

3.55714932s ago: executing program 3 (id=974):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "000600", "230000fff600fcff"}, 0x28)
sendmsg$inet(r2, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0)
read(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)

3.517905735s ago: executing program 4 (id=975):
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000a2a000/0x2000)=nil, 0x2000}, 0x1})
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2})
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xda}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x0)

2.164016067s ago: executing program 2 (id=976):
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r0)
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d61703d61636f726e2c06007365303030303030302c7569643db476d7fa7705bc37c442bce1df0bd0406ccb0a2a1d71d7acb10b377d7d68815e691f21547a68de2d31acfd4038d243ee35588e11d8dbf37296e8", @ANYRESDEC=0x0, @ANYBLOB="0000b18eb07a9dbec07d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690d1049c884d79e243210c733da8adfb6db6f3b3464aca805a08f3cacf9bce83fd7888eb1f09a8a7f55959926a7fc0ac27fd519bccdcfda872f5036561697524e41311c104625541e5813f59723a93937459c71151e933b1336955d87ece53534c57842af04b6669c71c3bd22895f4233899b168d36e849302af060f3fc513037a650e0100fe30ac79b938156478bc40add08ab493adc2140a5193909ac1f22216a92158df65", @ANYRES8=0x0, @ANYRES8, @ANYRES8], 0x1, 0x65b, &(0x7f00000017c0)="$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")
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000080)="854d2587a6e6c2bd74481c795ee2c25e60de1ff893cb9d6c01f36058b12549ee03060d41d0a5a8bb6d7ff9c0b7078420b93be179ebdff2e8e6bc74c572faa5c4ccfcd7e8a988749de01725bb8a11d1df2d4cfba05b6f7f3af32c2872eb", &(0x7f0000000300)}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mq_open(0x0, 0x40, 0x9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
open(0x0, 0x628040, 0x20)
pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000002000)}, {0x0}], 0x2, 0x5, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd6, 0x8000000c28)

2.163772577s ago: executing program 4 (id=977):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000000040)="89325a0000000000", 0x8, 0x6000c804, 0x0, 0x0)

2.13429568s ago: executing program 1 (id=978):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/157, 0x9d}, {&(0x7f00000000c0)}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000300)=0x1, 0x4)
sendto$inet(r6, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r6, &(0x7f000000e280), 0x58a, 0x42, 0x0)
socket$unix(0x1, 0x1, 0x0)
dup(0xffffffffffffffff)
fanotify_mark(r2, 0x39, 0x1a, r1, 0x0)

1.977329826s ago: executing program 4 (id=979):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x400000b4, 0x0, 0x0})

1.955294068s ago: executing program 1 (id=980):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

1.893370414s ago: executing program 4 (id=981):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e1f, 0x80000, @loopback, 0x7}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0)

963.472255ms ago: executing program 1 (id=982):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x1, 0x0, [0x7, 0x7ff, 0xfffffff3, 0x6, 0x0, 0xfffffffc, 0x2, 0x81, 0x8, 0xf, 0x8, 0xc, 0x80, 0x5e, 0x80, 0x7]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x5, 0x0, [0x7, 0x7, 0x1d4, 0x0, 0x6, 0xecb, 0x64d8, 0x3, 0x9, 0x1ff, 0x8, 0x10000000, 0x5d8, 0x2, 0xfffffffe, 0x6]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x7, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x240}}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

834.237888ms ago: executing program 4 (id=983):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)

266.551524ms ago: executing program 4 (id=984):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10700, &(0x7f0000000040)={[{@auto_da_alloc}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@lazytime}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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")

21.366838ms ago: executing program 1 (id=985):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

0s ago: executing program 2 (id=986):
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000a2a000/0x2000)=nil, 0x2000}, 0x1})
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2})
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xda}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts.
[   72.656694][ T4178] cgroup: Unknown subsys name 'net'
[   72.796643][ T4178] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.406302][ T4178] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   76.461657][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   76.660238][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   76.686650][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   76.770627][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.777997][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.787411][ T4192] device bridge_slave_0 entered promiscuous mode
[   76.815858][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.823729][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.832380][ T4192] device bridge_slave_1 entered promiscuous mode
[   76.870380][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   76.916803][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.925010][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.934095][ T4189] device bridge_slave_0 entered promiscuous mode
[   76.953553][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.966608][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.985593][ T4195] chnl_net:caif_netlink_parms(): no params data found
[   76.995967][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.003595][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.012754][ T4189] device bridge_slave_1 entered promiscuous mode
[   77.077785][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.085219][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.093636][ T4194] device bridge_slave_0 entered promiscuous mode
[   77.105406][ T4192] team0: Port device team_slave_0 added
[   77.118039][ T4192] team0: Port device team_slave_1 added
[   77.139882][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.147120][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.155635][ T4194] device bridge_slave_1 entered promiscuous mode
[   77.198916][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.211110][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.257612][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.272506][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.279663][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.307792][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.320446][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.327758][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.335972][ T4190] device bridge_slave_0 entered promiscuous mode
[   77.361168][ T4189] team0: Port device team_slave_0 added
[   77.369293][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.385092][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.392558][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.420226][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.436549][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.443809][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.452138][ T4190] device bridge_slave_1 entered promiscuous mode
[   77.469034][ T4189] team0: Port device team_slave_1 added
[   77.525299][ T4194] team0: Port device team_slave_0 added
[   77.541540][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.548926][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.556848][ T4195] device bridge_slave_0 entered promiscuous mode
[   77.575250][ T4194] team0: Port device team_slave_1 added
[   77.584189][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.595716][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.603478][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.612196][ T4195] device bridge_slave_1 entered promiscuous mode
[   77.620559][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.628910][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.657483][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.689435][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.715346][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.722752][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.751023][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.800954][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.808480][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.836182][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.852041][ T4192] device hsr_slave_0 entered promiscuous mode
[   77.859832][ T4192] device hsr_slave_1 entered promiscuous mode
[   77.870193][ T4190] team0: Port device team_slave_0 added
[   77.880251][ T4190] team0: Port device team_slave_1 added
[   77.888067][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.909246][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.916348][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.943688][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.971462][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.017303][ T4189] device hsr_slave_0 entered promiscuous mode
[   78.025097][ T4189] device hsr_slave_1 entered promiscuous mode
[   78.032911][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.041453][ T4189] Cannot create hsr debugfs directory
[   78.061579][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.068740][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.096255][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.142567][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.149740][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.154846][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[   78.176826][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.182991][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[   78.204187][ T4195] team0: Port device team_slave_0 added
[   78.218162][ T4194] device hsr_slave_0 entered promiscuous mode
[   78.226076][ T4194] device hsr_slave_1 entered promiscuous mode
[   78.229403][ T4200] Bluetooth: hci4: command 0x0409 tx timeout
[   78.233534][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   78.239779][ T4200] Bluetooth: hci3: command 0x0409 tx timeout
[   78.245047][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   78.251095][ T4200] Bluetooth: hci1: command 0x0409 tx timeout
[   78.263870][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.272282][ T4194] Cannot create hsr debugfs directory
[   78.286870][ T4195] team0: Port device team_slave_1 added
[   78.393087][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.400488][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.427622][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.467292][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.475801][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.503890][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.539018][ T4190] device hsr_slave_0 entered promiscuous mode
[   78.545963][ T4190] device hsr_slave_1 entered promiscuous mode
[   78.553895][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.561804][ T4190] Cannot create hsr debugfs directory
[   78.661599][ T4195] device hsr_slave_0 entered promiscuous mode
[   78.669799][ T4195] device hsr_slave_1 entered promiscuous mode
[   78.677077][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.685025][ T4195] Cannot create hsr debugfs directory
[   78.871718][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.887399][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.909225][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.919840][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.957652][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.968748][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.988886][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.003521][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.080587][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.091979][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.133140][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.144820][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.181281][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.218088][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.243794][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.255513][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.297402][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.329807][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.350056][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   79.369245][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.380935][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.403317][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   79.426306][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.436484][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.446446][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.454625][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.464075][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.472591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.481206][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.492085][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.501272][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.509172][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.519603][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.534762][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.560150][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.581250][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.594070][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.603596][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.613164][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.620552][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.631735][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.644647][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.655023][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.677180][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.694701][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.704968][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.714777][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.725282][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.735039][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.745144][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.752449][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.761071][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.777979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.786452][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.810630][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   79.830183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.839962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.850401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.860676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.869902][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.880337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.889515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.914056][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.926479][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.948699][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.957826][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.967954][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.976017][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.985270][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.994701][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.010356][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.019521][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.028731][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.038510][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.047410][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.057692][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.067061][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.074278][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.083005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.091775][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.104735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.114426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.157324][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.168012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.185660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.197347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.231781][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.257424][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.273721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.285418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.294850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.319436][ T4250] Bluetooth: hci0: command 0x041b tx timeout
[   80.326868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.328598][ T4250] Bluetooth: hci1: command 0x041b tx timeout
[   80.336609][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.350564][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.360828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.368664][ T4250] Bluetooth: hci3: command 0x041b tx timeout
[   80.379724][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   80.389926][ T4250] Bluetooth: hci2: command 0x041b tx timeout
[   80.402059][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.412429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.416849][ T4250] Bluetooth: hci4: command 0x041b tx timeout
[   80.427011][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.445995][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.466813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.477038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.487175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.498227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.508966][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.517045][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.526359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.536416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.545553][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.552791][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.562997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.583868][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.644246][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.664283][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.689841][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.703878][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.720175][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.734285][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.745015][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.754814][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.764538][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.776377][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.786683][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.810323][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.822207][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.831786][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.853887][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.870225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.877768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.907635][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.920338][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.930916][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.972333][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   80.988101][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.003506][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.033703][ T4194] device veth0_vlan entered promiscuous mode
[   81.052031][ T4194] device veth1_vlan entered promiscuous mode
[   81.064437][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.073414][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.083731][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.092190][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.101452][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.111255][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.118410][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.126444][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.136743][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.153103][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.161722][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.170153][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.178742][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.186398][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.207750][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.219624][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.228738][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.236127][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.244478][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.261263][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.296971][ T4192] device veth0_vlan entered promiscuous mode
[   81.308854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.329355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.347098][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.364201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.372460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.400847][ T4192] device veth1_vlan entered promiscuous mode
[   81.407944][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.418409][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.427216][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.437735][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.451730][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.482881][ T4194] device veth0_macvtap entered promiscuous mode
[   81.496338][ T4194] device veth1_macvtap entered promiscuous mode
[   81.504585][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.516034][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.525789][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.535471][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.544686][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.553650][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.563291][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.572411][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.583872][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.594211][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.603637][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.640545][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.655537][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.663862][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.681976][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.716382][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.731865][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.758043][ T4192] device veth0_macvtap entered promiscuous mode
[   81.779756][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.790599][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.801059][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.813747][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.823801][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.844439][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.854366][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.863217][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.872175][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.884943][ T4189] device veth0_vlan entered promiscuous mode
[   81.902797][ T4189] device veth1_vlan entered promiscuous mode
[   81.913658][ T4192] device veth1_macvtap entered promiscuous mode
[   81.927495][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.947322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.957726][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.974035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.983779][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.994935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.021316][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.030968][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.044186][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.053359][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.067289][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.076883][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.097410][ T4189] device veth0_macvtap entered promiscuous mode
[   82.107624][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.118441][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.144537][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.156223][ T4189] device veth1_macvtap entered promiscuous mode
[   82.167231][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.178177][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.194436][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.208529][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.222000][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.259218][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.272457][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.291840][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.302996][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.314766][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.337244][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.346715][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.355985][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.365436][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.379079][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.388172][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.400556][ T4250] Bluetooth: hci3: command 0x040f tx timeout
[   82.407050][ T4250] Bluetooth: hci1: command 0x040f tx timeout
[   82.407399][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.414008][ T4250] Bluetooth: hci0: command 0x040f tx timeout
[   82.429925][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.454997][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.473256][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.484121][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.484581][ T4257] Bluetooth: hci4: command 0x040f tx timeout
[   82.495196][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.507940][ T4257] Bluetooth: hci2: command 0x040f tx timeout
[   82.516107][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.563312][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.574293][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.586955][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.597799][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.608060][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.620030][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.635316][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.672495][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.683817][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.693501][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.703350][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.713417][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.722340][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.731602][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.742638][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.752732][ T4195] device veth0_vlan entered promiscuous mode
[   82.769148][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.778184][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.787382][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.797786][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.863591][ T4195] device veth1_vlan entered promiscuous mode
[   82.869729][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.877904][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.895137][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.903759][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.913335][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.922840][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.931614][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.941275][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.941687][ T4190] device veth0_vlan entered promiscuous mode
[   82.956705][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.969459][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.077696][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.087381][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.097971][ T4190] device veth1_vlan entered promiscuous mode
[   83.129225][  T310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.129594][ T4195] device veth0_macvtap entered promiscuous mode
[   83.147583][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.164030][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.174946][  T310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.186319][ T4195] device veth1_macvtap entered promiscuous mode
[   83.193059][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.194279][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.227959][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.250042][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.259264][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.267562][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.276985][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.286635][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.295439][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.336099][ T4190] device veth0_macvtap entered promiscuous mode
[   83.367703][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.384227][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.394985][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.406168][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.416514][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.428767][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.440548][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.449257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.460096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.470487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.480059][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.489421][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.501033][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.512615][ T4190] device veth1_macvtap entered promiscuous mode
[   83.519512][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.545348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.570291][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.595706][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.635436][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.651010][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.661978][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.679570][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.691079][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.800372][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.817001][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.826328][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.846772][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.865402][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.287543][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.296721][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.305722][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.314834][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.324151][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.333242][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.342419][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.351422][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.360415][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.369529][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   85.427032][ T4314] loop0: detected capacity change from 0 to 32768
[   85.447661][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.504182][ T4180] Bluetooth: hci0: command 0x0419 tx timeout
[   85.517774][ T4180] Bluetooth: hci1: command 0x0419 tx timeout
[   85.517916][ T4314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4314)
[   85.524133][ T4180] Bluetooth: hci3: command 0x0419 tx timeout
[   85.612970][ T4180] Bluetooth: hci2: command 0x0419 tx timeout
[   85.672652][ T4180] Bluetooth: hci4: command 0x0419 tx timeout
[   85.686752][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.710814][ T4314] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   85.720057][ T4314] BTRFS info (device loop0): using free space tree
[   85.726746][ T4314] BTRFS info (device loop0): has skinny extents
[   86.149361][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.163782][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.180512][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.200081][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.218410][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.231347][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.245863][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.257986][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.280272][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.297879][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.349075][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.382086][ T4314] BTRFS info (device loop0): enabling ssd optimizations
[   86.530891][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.555142][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.607424][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.664755][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.869464][ T4344] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   86.907574][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.971812][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.031645][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.102911][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.186337][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.225878][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.239230][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.338535][ T4206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4206)
[   87.575628][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.602711][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.615096][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.618166][ T4343] loop1: detected capacity change from 0 to 32768
[   87.634402][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.710307][ T4343] =======================================================
[   87.710307][ T4343] WARNING: The mand mount option has been deprecated and
[   87.710307][ T4343]          and is ignored by this kernel. Remove the mand
[   87.710307][ T4343]          option from the mount to silence this warning.
[   87.710307][ T4343] =======================================================
[   88.733353][ T4343] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   88.795036][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.888427][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.897715][ T4343] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[   88.936276][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.988722][ T4343] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   88.991694][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.028382][ T4343] OCFS2: File system is now read-only.
[   89.046088][ T4343] (syz.1.7,4343,1):ocfs2_find_entry_dx:1029 ERROR: status = -30
[   89.049663][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.081465][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.114166][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.126742][ T4343] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[   89.150984][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.159968][ T4343] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   89.180682][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.194767][ T4367] loop3: detected capacity change from 0 to 4096
[   89.202657][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.208478][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.216313][ T4343] (syz.1.7,4343,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[   89.256229][ T4367] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   89.267521][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.276664][ T4343] (syz.1.7,4343,0):ocfs2_mknod:502 ERROR: status = -30
[   89.307711][ T4343] (syz.1.7,4343,0):ocfs2_create:676 ERROR: status = -30
[   89.449482][ T4192] ocfs2: Unmounting device (7,1) on (node local)
[   90.142258][ T4387] process 'syz.2.13' launched './file0' with NULL argv: empty string added
[   93.490570][ T4406] loop2: detected capacity change from 0 to 4096
[   93.677575][ T4409] loop4: detected capacity change from 0 to 32768
[   93.919925][ T4412] overlayfs: overlapping lowerdir path
[   94.581813][ T4408] sched: RT throttling activated
[   94.770726][ T2857] cfg80211: failed to load regulatory.db
[   94.777183][ T4406] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   96.059951][ T4195] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[   96.066570][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   96.140137][ T4195] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[   96.442031][ T4429] loop1: detected capacity change from 0 to 512
[   96.841553][ T4429] EXT4-fs (loop1): Mount option "noload" incompatible with ext2
[   98.425967][ T4443] loop2: detected capacity change from 0 to 512
[   98.655730][ T4443] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   98.666989][ T4452] batman_adv: batadv0: Adding interface: dummy0
[   98.673594][ T4452] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.700938][ T4452] batman_adv: batadv0: Interface activated: dummy0
[   98.707658][ T4449] loop1: detected capacity change from 0 to 64
[   98.716697][ T4443] EXT4-fs (loop2): orphan cleanup on readonly fs
[   98.734235][ T4452] batadv0: mtu less than device minimum
[   98.750477][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.761455][ T4443] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   98.763561][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.789800][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.802702][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.815456][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.828646][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.841494][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.854494][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.866623][ T4443] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   98.867450][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.885405][ T4443] EXT4-fs error (device loop2): __ext4_iget:4894: inode #16: block 127754: comm syz.2.28: invalid block
[   98.909329][ T4443] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.28: couldn't read orphan inode 16 (err -117)
[   98.961261][ T4443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.008505][ T4265] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.017777][ T4453] netlink: 'syz.0.30': attribute type 10 has an invalid length.
[   99.114602][ T4453] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.541790][ T4460] attempt to access beyond end of device
[   99.541790][ T4460] loop1: rw=2049, want=66, limit=64
[   99.553333][ T4460] Buffer I/O error on dev loop1, logical block 65, lost async page write
[   99.562261][ T4460] attempt to access beyond end of device
[   99.562261][ T4460] loop1: rw=2049, want=67, limit=64
[   99.573383][ T4460] Buffer I/O error on dev loop1, logical block 66, lost async page write
[   99.582488][ T4460] attempt to access beyond end of device
[   99.582488][ T4460] loop1: rw=2049, want=68, limit=64
[   99.593419][ T4460] Buffer I/O error on dev loop1, logical block 67, lost async page write
[   99.602011][ T4460] attempt to access beyond end of device
[   99.602011][ T4460] loop1: rw=2049, want=69, limit=64
[   99.612963][ T4460] Buffer I/O error on dev loop1, logical block 68, lost async page write
[   99.622218][ T4460] attempt to access beyond end of device
[   99.622218][ T4460] loop1: rw=2049, want=73, limit=64
[   99.633178][ T4460] Buffer I/O error on dev loop1, logical block 72, lost async page write
[   99.642094][ T4460] attempt to access beyond end of device
[   99.642094][ T4460] loop1: rw=2049, want=74, limit=64
[   99.652973][ T4460] Buffer I/O error on dev loop1, logical block 73, lost async page write
[   99.661822][ T4460] attempt to access beyond end of device
[   99.661822][ T4460] loop1: rw=2049, want=77, limit=64
[   99.672885][ T4460] Buffer I/O error on dev loop1, logical block 76, lost async page write
[   99.681566][ T4460] attempt to access beyond end of device
[   99.681566][ T4460] loop1: rw=2049, want=78, limit=64
[   99.692507][ T4460] Buffer I/O error on dev loop1, logical block 77, lost async page write
[   99.798446][ T4453] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   99.878746][ T4265] usb 5-1: Using ep0 maxpacket: 32
[  100.150291][ T4265] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  100.161589][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.176166][ T4265] usb 5-1: config 0 descriptor??
[  100.879912][ T4472] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  100.973185][ T4265] gspca_main: nw80x-2.14.0 probing 055f:d001
[  101.338568][ T4265] gspca_nw80x: reg_w err -71
[  101.343933][ T4265] nw80x: probe of 5-1:0.0 failed with error -71
[  101.633714][ T4265] usb 5-1: USB disconnect, device number 2
[  103.274717][ T4485] loop2: detected capacity change from 0 to 40427
[  103.449015][ T4485] F2FS-fs (loop2): Unrecognized mount option "barrier" or missing value
[  103.607456][ T4487] loop3: detected capacity change from 0 to 32768
[  104.882197][ T4487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  105.140386][ T4487] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  105.908932][ T4487] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  105.948500][ T4487] OCFS2: File system is now read-only.
[  105.954360][ T4487] (syz.3.41,4487,1):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  105.993541][ T4487] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  106.074875][ T4523] loop1: detected capacity change from 0 to 1024
[  106.162614][ T4487] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  106.235011][ T4487] (syz.3.41,4487,1):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  106.243563][ T4487] (syz.3.41,4487,1):ocfs2_mknod:502 ERROR: status = -30
[  106.258820][ T4487] (syz.3.41,4487,1):ocfs2_create:676 ERROR: status = -30
[  107.352082][ T4257] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  107.361070][ T4257] Bluetooth: hci1: Injecting HCI hardware error event
[  107.371036][ T4208] Bluetooth: hci1: hardware error 0x00
[  109.556480][ T4523] EXT4-fs: error -4 creating inode table initialization thread
[  109.614501][ T4189] ocfs2: Unmounting device (7,3) on (node local)
[  109.737052][ T4523] EXT4-fs (loop1): mount failed
[  109.772258][ T4537] loop2: detected capacity change from 0 to 64
[  110.399387][ T4545] attempt to access beyond end of device
[  110.399387][ T4545] loop2: rw=2049, want=66, limit=64
[  110.410882][ T4545] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  110.420308][ T4545] attempt to access beyond end of device
[  110.420308][ T4545] loop2: rw=2049, want=67, limit=64
[  110.431617][ T4545] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  110.441107][ T4545] attempt to access beyond end of device
[  110.441107][ T4545] loop2: rw=2049, want=68, limit=64
[  110.452837][ T4545] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  110.462265][ T4545] attempt to access beyond end of device
[  110.462265][ T4545] loop2: rw=2049, want=69, limit=64
[  110.513693][ T4545] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  110.524067][ T4545] attempt to access beyond end of device
[  110.524067][ T4545] loop2: rw=2049, want=73, limit=64
[  110.535473][ T4545] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  110.544505][ T4545] attempt to access beyond end of device
[  110.544505][ T4545] loop2: rw=2049, want=74, limit=64
[  110.555716][ T4545] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  110.564564][ T4545] attempt to access beyond end of device
[  110.564564][ T4545] loop2: rw=2049, want=77, limit=64
[  110.575671][ T4545] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  110.585175][ T4545] attempt to access beyond end of device
[  110.585175][ T4545] loop2: rw=2049, want=78, limit=64
[  110.596341][ T4545] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  110.606579][ T4545] attempt to access beyond end of device
[  110.606579][ T4545] loop2: rw=2049, want=838, limit=64
[  111.553612][ T4552] loop4: detected capacity change from 0 to 512
[  112.443118][ T4552] EXT4-fs (loop4): Mount option "noload" incompatible with ext2
[  112.978816][ T4577] overlayfs: failed to resolve './file1': -2
[  113.809107][ T4307] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.067383][ T4575] loop1: detected capacity change from 0 to 8192
[  114.098352][ T4307] usb 1-1: Using ep0 maxpacket: 32
[  114.304957][ T4206]  loop1: p1 p2
[  114.316207][ T4206] loop1: partition table partially beyond EOD, truncated
[  114.988726][ T4307] usb 1-1: config index 0 descriptor too short (expected 44, got 36)
[  115.017369][ T4206] loop1: p1 start 16777216 is beyond EOD, truncated
[  115.037215][ T4307] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  115.047138][ T4206] loop1: p2 size 515840 extends beyond EOD, truncated
[  115.239300][ T4307] usb 1-1: config 0 has no interface number 0
[  115.266137][ T4307] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  115.352868][ T4354] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  115.364908][ T4354] Bluetooth: hci3: Injecting HCI hardware error event
[  115.400388][ T4210] Bluetooth: hci3: hardware error 0x00
[  116.106321][ T4307] usb 1-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.164828][ T4307] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  116.410798][ T4307] usb 1-1: config 0 interface 126 has no altsetting 0
[  116.489930][ T4307] usb 1-1: string descriptor 0 read error: -71
[  116.496333][ T4307] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  116.538843][ T4575]  loop1: p1 p2
[  116.542392][ T4575] loop1: partition table partially beyond EOD, truncated
[  116.564785][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.617317][ T4575] loop1: p1 start 16777216 is beyond EOD, truncated
[  116.672387][ T4575] loop1: p2 size 515840 extends beyond EOD, truncated
[  117.400000][ T4307] usb 1-1: config 0 descriptor??
[  117.440554][ T4307] usb 1-1: can't set config #0, error -71
[  117.526984][ T4307] usb 1-1: USB disconnect, device number 2
[  119.041632][ T4630] overlayfs: failed to resolve './file1': -2
[  119.371140][ T4633] loop2: detected capacity change from 0 to 512
[  119.459628][ T4633] EXT4-fs (loop2): Mount option "noload" incompatible with ext2
[  119.761020][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  121.277623][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  121.334826][ T4354] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  121.345338][ T4354] Bluetooth: hci4: Injecting HCI hardware error event
[  121.352906][ T4208] Bluetooth: hci4: hardware error 0x00
[  122.727726][ T4662] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.83'.
[  122.765658][ T4644] loop2: detected capacity change from 0 to 32768
[  122.841237][ T4644] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  122.876261][ T4644] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  122.954166][ T4644] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  122.969738][ T4644] OCFS2: File system is now read-only.
[  122.977063][ T4644] (syz.2.78,4644,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  122.986383][ T4644] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  123.004450][ T4644] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  123.022158][ T4644] (syz.2.78,4644,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  123.038021][ T4644] (syz.2.78,4644,0):ocfs2_mknod:502 ERROR: status = -30
[  123.047786][ T4644] (syz.2.78,4644,0):ocfs2_create:676 ERROR: status = -30
[  123.114896][ T4195] ocfs2: Unmounting device (7,2) on (node local)
[  123.881905][ T4678] loop3: detected capacity change from 0 to 8
[  124.145703][ T4682] overlayfs: failed to resolve './file1': -2
[  125.550557][ T4691] loop2: detected capacity change from 0 to 1024
[  125.604240][ T4694] loop4: detected capacity change from 0 to 4096
[  125.690966][ T4694] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[  125.736018][ T4694] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  125.748035][ T4694] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  125.756088][ T4694] EXT4-fs (loop4): DAX unsupported by block device.
[  128.027921][ T4354] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  128.036906][ T4354] Bluetooth: hci2: Injecting HCI hardware error event
[  128.045854][ T4209] Bluetooth: hci2: hardware error 0x00
[  128.800775][ T4712] loop4: detected capacity change from 0 to 512
[  129.587476][ T4719] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  130.338432][    T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  130.598406][    T7] usb 1-1: Using ep0 maxpacket: 32
[  130.649086][ T4721] loop2: detected capacity change from 0 to 32768
[  130.720871][    T7] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  130.774496][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.849727][    T7] usb 1-1: config 0 descriptor??
[  131.139224][ T4721] XFS (loop2): Mounting V5 Filesystem
[  131.594406][    T7] gspca_main: nw80x-2.14.0 probing 055f:d001
[  131.648447][    T7] gspca_nw80x: reg_w err -71
[  131.653441][    T7] nw80x: probe of 1-1:0.0 failed with error -71
[  131.713976][ T4715] loop3: detected capacity change from 0 to 32768
[  131.760875][    T7] usb 1-1: USB disconnect, device number 3
[  131.816166][ T4721] XFS (loop2): Ending clean mount
[  131.919244][ T4721] XFS (loop2): Quotacheck needed: Please wait.
[  131.958798][ T4715] XFS (loop3): Mounting V5 Filesystem
[  132.050810][ T4754] ODEBUG: Out of memory. ODEBUG disabled
[  132.264789][ T4759] netlink: 9900 bytes leftover after parsing attributes in process `syz.0.108'.
[  132.294514][ T4715] XFS (loop3): AIL initialisation failed: error -12
[  132.969621][ T4715] XFS (loop3): log mount failed
[  133.070835][ T4721] XFS (loop2): Quotacheck: Done.
[  133.152940][ T4195] XFS (loop2): Unmounting Filesystem
[  134.540747][ T4774] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  135.409937][ T4782] smc: net device ip6tnl0 applied user defined pnetid SYZ2
[  136.982930][ T4802] netlink: 9900 bytes leftover after parsing attributes in process `syz.4.121'.
[  138.318395][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  138.902106][    T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  138.928562][    T7] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  138.954620][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  139.014390][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  139.046025][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  139.046375][ T4806] loop4: detected capacity change from 0 to 32768
[  139.094873][ T4806] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.124 (4806)
[  139.154116][ T4806] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  139.165483][ T4806] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  139.188421][    T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  139.207130][    T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  139.216915][ T4806] BTRFS info (device loop4): use zstd compression, level 3
[  139.224639][    T7] usb 2-1: Product: syz
[  139.229784][ T4806] BTRFS info (device loop4): enabling auto defrag
[  139.236749][    T7] usb 2-1: Manufacturer: syz
[  139.244223][ T4806] BTRFS info (device loop4): using free space tree
[  139.276452][ T4806] BTRFS info (device loop4): has skinny extents
[  139.299631][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  139.304916][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  139.370884][    T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  139.402056][    T7] cdc_wdm 2-1:1.0: Unknown control protocol
[  139.567946][ T4806] BTRFS info (device loop4): enabling ssd optimizations
[  139.586569][ T4320] BTRFS warning (device loop4): checksum verify failed on 5267456 wanted 0xbf82b992d7a5ee92cc36a174676fd1e8aa0607ff5fb0b85d1488be038f134163 found 0xbe8df4713e3a88b38037f31e1af9ddb4a0c912646d0a44e793e9af9f8df01d9e level 0
[  139.621349][ T4806] BTRFS warning (device loop4): failed to read fs tree: -5
[  139.621991][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  139.635671][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  141.316116][ T4871] usb 2-1: USB disconnect, device number 2
[  141.409890][ T4806] BTRFS error (device loop4): open_ctree failed: -5
[  141.899121][ T4880] netlink: 9900 bytes leftover after parsing attributes in process `syz.2.135'.
[  143.714027][ T4898] loop3: detected capacity change from 0 to 512
[  144.085448][ T4898] EXT4-fs (loop3): Ignoring removed bh option
[  144.420275][ T4898] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  144.454722][ T4898] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  145.429928][ T4921] input: syz1 as /devices/virtual/input/input6
[  146.444656][ T4943] netlink: 9900 bytes leftover after parsing attributes in process `syz.1.153'.
[  146.629289][    C1] net_ratelimit: 13 callbacks suppressed
[  146.629324][    C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  147.128800][ T4940] can: request_module (can-proto-4) failed.
[  149.028339][   T26] audit: type=1326 audit(1760105807.071:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  149.072146][   T26] audit: type=1326 audit(1760105807.071:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  149.096385][   T26] audit: type=1326 audit(1760105807.131:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  149.119818][   T26] audit: type=1326 audit(1760105807.131:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  149.187223][   T26] audit: type=1326 audit(1760105807.131:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  149.246822][ T4942] loop2: detected capacity change from 0 to 32768
[  149.384076][ T4967] capability: warning: `syz.4.163' uses deprecated v2 capabilities in a way that may be insecure
[  149.571894][ T4976] input: syz1 as /devices/virtual/input/input7
[  150.946550][ T4987] loop4: detected capacity change from 0 to 8192
[  152.782434][ T5001] loop1: detected capacity change from 0 to 2048
[  154.278402][ T5001] EXT4-fs (loop1): Ignoring removed bh option
[  154.368685][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  154.446446][ T5005] sctp: failed to load transform for md5: -2
[  154.496547][ T5013] loop4: detected capacity change from 0 to 4096
[  154.540771][ T5001] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  154.610681][ T5001] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28
[  154.644368][ T5013] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  154.748429][ T5001] EXT4-fs (loop1): This should not happen!! Data will be lost
[  154.748429][ T5001] 
[  154.785644][ T5013] ntfs3: loop4: Failed to load $Extend.
[  154.820933][ T5001] EXT4-fs (loop1): Total free blocks count 0
[  154.827211][ T5001] EXT4-fs (loop1): Free/Dirty block details
[  154.888577][ T5001] EXT4-fs (loop1): free_blocks=2415919104
[  154.894465][ T5001] EXT4-fs (loop1): dirty_blocks=48
[  154.938331][ T5001] EXT4-fs (loop1): Block reservation details
[  154.958662][ T5001] EXT4-fs (loop1): i_reserved_data_blocks=3
[  154.992359][ T5018] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 4 with error 28
[  155.132347][ T5018] EXT4-fs (loop1): This should not happen!! Data will be lost
[  155.132347][ T5018] 
[  155.506321][ T5028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.179'.
[  156.595890][ T5028] loop1: detected capacity change from 0 to 32768
[  157.418690][ T5025] loop3: detected capacity change from 0 to 32768
[  158.903507][ T5049] loop2: detected capacity change from 0 to 8192
[  158.991674][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  160.150878][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  161.599506][ T5078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.193'.
[  162.816800][ T5078] loop2: detected capacity change from 0 to 32768
[  166.217371][ T5108] sctp: [Deprecated]: syz.0.199 (pid 5108) Use of int in maxseg socket option.
[  166.217371][ T5108] Use struct sctp_assoc_value instead
[  168.585016][ T5120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.206'.
[  169.677415][ T5120] loop4: detected capacity change from 0 to 32768
[  170.378484][ T5125] loop3: detected capacity change from 0 to 16
[  171.753184][ T5138] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  174.544949][ T5169] loop3: detected capacity change from 0 to 8192
[  175.457635][ T4306] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  176.108951][ T4306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.168946][ T4306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.358806][ T4306] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  176.396170][ T4306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  176.502694][ T4306] usb 5-1: SerialNumber: syz
[  176.963889][ T4306] usb 5-1: 0:2 : does not exist
[  177.002485][ T4209] Bluetooth: Wrong link type (-57)
[  177.140437][ T4306] usb 5-1: USB disconnect, device number 3
[  177.535382][ T4206] udevd[4206]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.215361][ T4868] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  179.916753][ T4306] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  180.228317][ T5225] loop2: detected capacity change from 0 to 8192
[  181.280573][ T5231] loop3: detected capacity change from 0 to 8192
[  182.162038][ T5234] overlayfs: failed to resolve './file0': -2
[  183.079448][ T4306] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  184.945353][ T4871] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  185.929558][ T5280] loop4: detected capacity change from 0 to 8192
[  187.100841][ T5291] loop2: detected capacity change from 0 to 8192
[  187.597329][ T4871] usb 4-1: unable to read config index 0 descriptor/start: -71
[  187.690923][ T5295] loop3: detected capacity change from 0 to 40427
[  187.783588][ T4871] usb 4-1: can't read configurations, error -71
[  188.689482][ T5295] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  188.697641][ T5295] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  188.714161][ T5295] F2FS-fs (loop3): invalid crc value
[  190.101083][ T5295] F2FS-fs (loop3): Found nat_bits in checkpoint
[  190.175444][ T5295] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  190.183012][ T5295] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.913202][ T5338] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  192.279196][ T5347] loop2: detected capacity change from 0 to 2048
[  192.403019][ T5351] loop4: detected capacity change from 0 to 8192
[  192.504912][ T5347] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  192.579416][ T5347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.221272][ T5347] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  193.528591][ T4353] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  194.453374][ T4354] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  195.168372][ T4871] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  195.418348][ T4354] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  195.431240][ T4871] usb 3-1: Using ep0 maxpacket: 16
[  195.648418][ T4871] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.688412][ T4354] usb 5-1: Using ep0 maxpacket: 32
[  195.820073][ T4354] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  196.089268][ T4354] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  196.165198][ T4354] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  196.259945][ T4354] usb 5-1: Product: syz
[  196.319362][ T4354] usb 5-1: Manufacturer: syz
[  196.333763][ T4354] usb 5-1: SerialNumber: syz
[  196.407611][ T4354] usb 5-1: config 0 descriptor??
[  196.431114][ T4871] usb 3-1: config 0 interface 0 has no altsetting 0
[  196.437794][ T4871] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  196.447459][ T4871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.448806][ T5382] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  196.469866][ T4871] usb 3-1: config 0 descriptor??
[  197.307906][ T4871] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  197.539042][ T4354] usb 5-1: USB disconnect, device number 4
[  197.737003][ T5400] loop3: detected capacity change from 0 to 4096
[  197.766414][ T5400] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  197.967729][ T5408] ntfs3: loop3: ino=1b, "file0" directory corrupted
[  198.311662][ T2857] usb 3-1: USB disconnect, device number 3
[  201.055895][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  201.062402][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  202.073546][ T5463] loop4: detected capacity change from 0 to 256
[  203.185730][ T4354] Bluetooth: hci0: command 0x0406 tx timeout
[  203.217058][ T5461] loop2: detected capacity change from 0 to 4096
[  204.881751][ T5461] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  205.718416][ T4354] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  206.149310][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  206.214793][ T5498] loop2: detected capacity change from 0 to 512
[  206.319248][ T4354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.345309][ T4354] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.438634][ T4354] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  206.448897][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  206.456985][ T4354] usb 2-1: SerialNumber: syz
[  206.485523][ T5498] EXT4-fs (loop2): Test dummy encryption mode enabled
[  206.495670][ T5498] EXT4-fs (loop2): Test dummy encryption mode enabled
[  206.516107][ T5498] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,delalloc,test_dummy_encryption,min_batch_time=0x000000000. Quota mode: writeback.
[  206.742244][ T4354] usb 2-1: 0:2 : does not exist
[  209.577624][ T4354] usb 2-1: USB disconnect, device number 3
[  210.909087][ T4206] udevd[4206]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  211.032457][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[  211.789867][ T5535] orangefs_mount: mount request failed with -4
[  212.093588][ T4250] kernel write not supported for file /input/event2 (pid: 4250 comm: kworker/1:5)
[  212.713385][ T5561] netlink: 'syz.3.330': attribute type 9 has an invalid length.
[  212.722344][ T5561] netlink: 'syz.3.330': attribute type 7 has an invalid length.
[  212.730953][ T5561] netlink: 'syz.3.330': attribute type 8 has an invalid length.
[  214.566719][ T4863] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  215.915290][ T5594] loop3: detected capacity change from 0 to 128
[  216.115958][ T4863] usb 4-1: device not accepting address 4, error -71
[  216.338476][ T5599] netlink: 'syz.4.342': attribute type 12 has an invalid length.
[  216.877370][ T5594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  216.912265][ T5594] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  217.376894][ T5616] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  217.388939][ T5616] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  220.427410][ T5639] loop4: detected capacity change from 0 to 32768
[  221.715449][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  222.860545][ T4257] kernel write not supported for file /input/event2 (pid: 4257 comm: kworker/1:6)
[  222.876292][ T5675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  222.887961][ T5675] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  225.911583][ T5703] netlink: 'syz.3.372': attribute type 12 has an invalid length.
[  227.071140][ T5717] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  227.082780][ T5717] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  227.748395][ T1335] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  228.199102][ T5735] fuse: Unknown parameter ''
[  228.339393][ T1335] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  229.091231][ T5737] loop3: detected capacity change from 0 to 128
[  229.114214][ T1335] usb 1-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping
[  229.253023][ T1335] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  229.602326][ T5742] netlink: 'syz.0.385': attribute type 12 has an invalid length.
[  229.613329][ T1335] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  229.649222][ T5737] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  229.669363][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.713200][ T5737] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.726502][ T4306] Bluetooth: hci0: command 0x0c20 tx timeout
[  229.962890][ T1335] usb 1-1: can't set config #4, error -71
[  229.974614][ T1335] usb 1-1: USB disconnect, device number 4
[  230.080107][ T5737] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10)
[  232.210404][ T5756] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  232.221618][ T5756] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  233.157179][ T5775] fuse: Unknown parameter ''
[  237.713543][ T5824] fuse: Unknown parameter ''
[  240.817992][ T5859] loop2: detected capacity change from 0 to 128
[  240.929458][ T5863] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  240.984651][ T5859] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  241.015184][ T5859] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.092694][ T5859] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10)
[  241.240847][ T5871] fuse: Unknown parameter ''
[  242.364685][ T5879] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  242.376804][ T5879] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  244.583219][ T5876] loop2: detected capacity change from 0 to 32768
[  246.953599][ T5918] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  246.965187][ T5918] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  250.777483][ T5973] loop2: detected capacity change from 0 to 32768
[  250.863416][ T5979] loop4: detected capacity change from 0 to 1024
[  250.905871][ T5973] XFS (loop2): Mounting V5 Filesystem
[  251.327746][ T5982] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  251.338976][ T5982] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  251.822372][ T5973] XFS (loop2): Ending clean mount
[  252.005636][ T4195] XFS (loop2): Unmounting Filesystem
[  252.333697][ T6005] netlink: 76 bytes leftover after parsing attributes in process `syz.1.454'.
[  252.632007][ T4775] hfsplus: bad catalog file entry
[  252.689424][ T4775] hfsplus: b-tree write err: -5, ino 3
[  255.032918][ T6029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  255.044384][ T6029] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  259.759642][ T6081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  259.771545][ T6081] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  261.080328][ T6093] Zero length message leads to an empty skb
[  262.632838][ T6114] netlink: 76 bytes leftover after parsing attributes in process `syz.2.484'.
[  262.659545][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  262.682271][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  264.949403][   T26] audit: type=1326 audit(1760105922.991:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  264.972441][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.152961][   T26] audit: type=1326 audit(1760105922.991:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  265.188123][   T26] audit: type=1326 audit(1760105922.991:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5197053ec9 code=0x7ffc0000
[  265.385170][ T6143] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  265.398245][ T6143] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  266.360629][ T6154] loop2: detected capacity change from 0 to 512
[  266.422276][ T6154] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  266.466111][ T6154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  266.509163][ T6154] EXT4-fs (loop2): 1 truncate cleaned up
[  266.515163][ T6154] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,discard,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,. Quota mode: none.
[  266.723396][ T6133] loop3: detected capacity change from 0 to 32768
[  267.073240][ T6133] XFS (loop3): Mounting V5 Filesystem
[  267.523104][ T6168] loop2: detected capacity change from 0 to 1024
[  267.567199][ T6133] XFS (loop3): Ending clean mount
[  268.349365][ T4189] XFS (loop3): Unmounting Filesystem
[  268.567640][ T6189] loop2: detected capacity change from 0 to 64
[  269.011663][ T6198] fuse: Unknown parameter ''
[  270.171350][ T6207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.513'.
[  270.243050][ T4863] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  270.508533][ T4863] usb 4-1: Using ep0 maxpacket: 8
[  270.688960][ T4863] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  270.756881][ T4863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  270.864171][ T4863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  270.968141][ T4863] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.102700][ T4863] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  271.238373][ T4863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.442522][ T6218] loop2: detected capacity change from 0 to 8192
[  271.568575][ T4863] usb 4-1: GET_CAPABILITIES returned 0
[  272.303379][ T4863] usbtmc 4-1:16.0: can't read capabilities
[  272.314875][ T4863] usb 4-1: USB disconnect, device number 6
[  272.428877][ T6232] input: syz0 as /devices/virtual/input/input8
[  272.557824][ T4420] udevd[4420]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  272.864195][ T6241] fuse: Unknown parameter ''
[  274.392373][ T6243] loop3: detected capacity change from 0 to 2048
[  274.828444][ T6251] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.293975][ T6290] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  277.338374][ T6290] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  278.183811][   T26] audit: type=1326 audit(1760105936.251:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  278.297181][   T26] audit: type=1326 audit(1760105936.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  278.412954][   T26] audit: type=1326 audit(1760105936.241:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  278.436183][   T26] audit: type=1326 audit(1760105936.311:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  278.475081][   T26] audit: type=1326 audit(1760105936.311:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  278.673576][   T26] audit: type=1326 audit(1760105936.311:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  279.308932][   T26] audit: type=1326 audit(1760105936.311:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  279.427640][   T26] audit: type=1326 audit(1760105936.311:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  279.451485][   T26] audit: type=1326 audit(1760105936.311:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f23faba5ec9 code=0x7ffc0000
[  279.475283][   T26] audit: type=1326 audit(1760105936.361:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23fabd8785 code=0x7ffc0000
[  282.078459][ T4863] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  282.313508][ T6342] fuse: Unknown parameter ''
[  282.778473][ T4863] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  283.097367][ T4863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.105511][ T4863] usb 5-1: Product: syz
[  283.109851][ T4863] usb 5-1: Manufacturer: syz
[  283.114927][ T4863] usb 5-1: SerialNumber: syz
[  283.249205][ T4863] usb 5-1: config 0 descriptor??
[  283.918965][ T4863] usb-storage 5-1:0.0: USB Mass Storage device detected
[  284.825102][ T4863] usb 5-1: USB disconnect, device number 5
[  284.884323][ T6348] tipc: Started in network mode
[  284.890264][ T6348] tipc: Node identity ac14140f, cluster identity 4711
[  284.897840][ T6348] tipc: New replicast peer: 255.255.255.255
[  284.905007][ T6348] tipc: Enabled bearer <udp:syz2>, priority 10
[  289.576868][ T4250] tipc: Node number set to 2886997007
[  290.228823][ T4863] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  291.080323][ T6392] fuse: Unknown parameter ''
[  291.418502][ T4863] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x21, skipping
[  291.451830][ T4863] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  291.473263][ T4863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.500999][ T4863] usb 3-1: config 0 descriptor??
[  291.778412][ T4863] ath6kl: Failed to submit usb control message: -71
[  291.788390][ T4863] ath6kl: unable to send the bmi data to the device: -71
[  291.795794][ T4863] ath6kl: Unable to send get target info: -71
[  291.809317][ T4863] ath6kl: Failed to init ath6kl core: -71
[  291.845679][ T4863] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  291.888061][ T4863] usb 3-1: USB disconnect, device number 4
[  296.198413][ T6422] delete_channel: no stack
[  298.631367][ T4863] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  298.656548][ T6446] fuse: Unknown parameter ''
[  299.008879][ T6448] loop4: detected capacity change from 0 to 8192
[  299.048311][ T4863] usb 4-1: Using ep0 maxpacket: 8
[  299.174081][ T4863] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  299.205616][ T4863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  299.246947][ T4863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  299.341223][ T4863] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  299.451263][ T4863] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  299.516180][ T4863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.918485][ T4863] usb 4-1: GET_CAPABILITIES returned 0
[  299.925260][ T4863] usbtmc 4-1:16.0: can't read capabilities
[  300.144494][ T4250] usb 4-1: USB disconnect, device number 7
[  302.544219][ T6482] fuse: Unknown parameter ''
[  302.872171][ T6491] loop2: detected capacity change from 0 to 8192
[  309.022007][ T6531] delete_channel: no stack
[  310.352267][ T6540] fuse: Unknown parameter ''
[  310.921893][ T4870] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  312.228639][ T4870] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x21, skipping
[  312.257038][ T4870] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  313.100213][ T4870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.179225][ T4870] usb 5-1: config 0 descriptor??
[  313.408319][ T4870] ath6kl: Failed to submit usb control message: -71
[  313.415019][ T4870] ath6kl: unable to send the bmi data to the device: -71
[  313.434760][ T4870] ath6kl: Unable to send get target info: -71
[  313.453951][ T4870] ath6kl: Failed to init ath6kl core: -71
[  313.502085][ T4870] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  313.539802][ T4870] usb 5-1: USB disconnect, device number 6
[  315.026507][ T6572] delete_channel: no stack
[  315.491439][ T6588] loop3: detected capacity change from 0 to 128
[  315.602951][ T6588] hpfs: bad mount options.
[  316.710421][ T6592] fuse: Unknown parameter ''
[  318.998964][ T6615] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  319.011200][ T6615] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  324.184362][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  324.270779][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  325.718495][ T6619] delete_channel: no stack
[  325.797409][ T6647] fuse: Unknown parameter ''
[  326.238247][ T4306] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  326.328478][ T4250] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  327.718312][ T4306] usb 1-1: Using ep0 maxpacket: 8
[  327.758299][ T4250] usb 4-1: Using ep0 maxpacket: 32
[  327.838523][ T4306] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.855679][ T6668] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  327.878613][ T6668] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  327.884390][ T4306] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  327.906471][ T4306] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  327.908552][ T4250] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  327.947419][ T4306] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  327.955930][ T4250] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  327.988086][ T4306] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  328.009473][ T4250] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  328.028103][ T4306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.238441][ T4250] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  328.247846][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  328.270749][ T4250] usb 4-1: Product: syz
[  328.275086][ T4250] usb 4-1: Manufacturer: syz
[  328.304112][ T4250] usb 4-1: SerialNumber: syz
[  328.308712][ T4306] usb 1-1: GET_CAPABILITIES returned 0
[  328.314607][ T4306] usbtmc 1-1:16.0: can't read capabilities
[  328.328597][ T6652] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  328.354612][ T4250] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9
[  328.532424][ T4306] usb 1-1: USB disconnect, device number 5
[  328.629730][ T4250] usb 4-1: USB disconnect, device number 8
[  328.674599][ T4250] appletouch 4-1:1.0: input: appletouch disconnected
[  329.039137][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  331.899638][ T6692] delete_channel: no stack
[  331.944861][ T6691] loop3: detected capacity change from 0 to 256
[  332.008343][ T6691] FAT-fs (loop3): Unrecognized mount option "short
" or missing value
[  332.977526][ T6708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  333.442988][ T6708] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  333.550622][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'.
[  333.592045][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'.
[  333.749178][ T6717] binder: 6716:6717 ioctl c0306201 2000000001c0 returned -14
[  334.048245][   T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  334.071622][ T4863] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  334.328247][   T21] usb 3-1: Using ep0 maxpacket: 8
[  334.328284][ T4863] usb 4-1: Using ep0 maxpacket: 8
[  334.458680][   T21] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  334.477288][   T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  334.503892][   T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  334.508518][ T4863] usb 4-1: unable to get BOS descriptor or descriptor too short
[  334.524718][   T21] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.575940][   T21] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  334.600756][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.618483][ T4863] usb 4-1: config 4 interface 0 has no altsetting 0
[  334.868486][ T4863] usb 4-1: string descriptor 0 read error: -22
[  334.874801][ T4863] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  334.914647][ T4863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.001589][ T4863] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  335.039690][   T21] usb 3-1: GET_CAPABILITIES returned 0
[  335.046231][   T21] usbtmc 3-1:16.0: can't read capabilities
[  335.095297][ T4863] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  335.129027][ T4863] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  335.157117][ T4863] usb 4-1: media controller created
[  335.230677][ T4863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  335.314033][ T4306] usb 3-1: USB disconnect, device number 5
[  335.478623][ T4863] zl10353_read_register: readreg error (reg=127, ret==0)
[  335.583605][ T4863] usb 4-1: USB disconnect, device number 9
[  335.825693][ T6740] loop2: detected capacity change from 0 to 512
[  335.929948][ T6738] loop4: detected capacity change from 0 to 32768
[  336.048829][ T6740] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback.
[  336.123921][ T6740] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.178292][ T6745] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  336.224265][ T6750] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  336.279565][ T6740] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  336.367871][ T6752] ea_get: invalid extended attribute
[  336.374208][ T6752] ffff88805ea25fb0: 04 00 00 00                                      ....
[  336.951216][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'.
[  337.683767][ T6754] EXT4-fs (loop2): shut down requested (2)
[  340.468873][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[  340.651205][ T6795] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  340.703557][ T6794] loop2: detected capacity change from 0 to 32768
[  342.315208][ T4863] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  342.401921][ T6814] ea_get: invalid extended attribute
[  342.407433][ T6814] ffff88805ea22830: 04 00 00 00                                      ....
[  343.198569][ T4863] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  343.472517][ T6813] fido_id[6813]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  345.126574][ T6838] delete_channel: no stack
[  345.202861][ T6849] binder: 6848:6849 ioctl c0306201 2000000001c0 returned -14
[  346.286191][ T6865] loop3: detected capacity change from 0 to 512
[  346.508715][ T6869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  346.520000][ T6869] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  346.750448][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'.
[  347.679562][ T6865] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  348.258485][ T6862] loop4: detected capacity change from 0 to 32768
[  348.416876][ T6862] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  348.453802][ T6862] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  349.191862][ T4190] ocfs2: Unmounting device (7,4) on (node local)
[  349.987426][ T6892] delete_channel: no stack
[  350.180339][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  350.240954][ T6902] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  355.297026][ T6948] delete_channel: no stack
[  355.533971][   T26] kauditd_printk_skb: 65 callbacks suppressed
[  355.534061][   T26] audit: type=1326 audit(1760106013.601:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.1.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5197053ec9 code=0x0
[  355.616784][ T6952] loop2: detected capacity change from 0 to 8192
[  356.865586][ T6954] loop3: detected capacity change from 0 to 32768
[  357.018698][ T6973] fuse: Unknown parameter ''
[  357.093090][ T6954] XFS (loop3): Mounting V5 Filesystem
[  357.811356][ T6954] XFS (loop3): Ending clean mount
[  358.079631][ T4189] XFS (loop3): Unmounting Filesystem
[  358.278414][ T4257] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  358.558420][ T4257] usb 2-1: Using ep0 maxpacket: 8
[  358.828677][ T4257] usb 2-1: unable to get BOS descriptor or descriptor too short
[  358.978844][ T4257] usb 2-1: config 4 interface 0 has no altsetting 0
[  359.358350][ T4257] usb 2-1: string descriptor 0 read error: -22
[  359.364671][ T4257] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  359.386946][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.758636][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  360.214840][ T6993] delete_channel: no stack
[  360.225216][ T4257] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  360.249191][ T4257] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  360.260342][ T4257] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  360.267623][ T4257] usb 2-1: media controller created
[  360.288898][ T4257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  360.343146][ T7001] loop3: detected capacity change from 0 to 8192
[  360.910337][ T4257] usb 2-1: USB disconnect, device number 4
[  361.873736][ T7013] fuse: Unknown parameter ''
[  363.132592][ T7037] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  363.144002][ T7037] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  366.933515][ T7054] loop3: detected capacity change from 0 to 8192
[  367.648383][ T7042] delete_channel: no stack
[  368.175537][ T7067] fuse: Unknown parameter ''
[  369.307127][ T4200] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  369.598214][ T4200] usb 5-1: Using ep0 maxpacket: 8
[  371.361722][ T4200] usb 5-1: device descriptor read/all, error -71
[  371.834680][ T7092] loop3: detected capacity change from 0 to 1024
[  372.102353][ T7092] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  372.129283][ T7092] EXT4-fs (loop3): orphan cleanup on readonly fs
[  372.182376][ T7092] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.779: Invalid inode table block 0 in block_group 0
[  372.200826][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.207824][ T7092] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem
[  372.219824][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.226587][ T7092] EXT4-fs error (device loop3): ext4_quota_write:6621: inode #3: comm syz.3.779: mark_inode_dirty error
[  372.251823][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.291905][ T7092] Quota error (device loop3): write_blk: dquota write failed
[  372.316929][ T7092] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  372.336902][ T7092] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.779: Failed to acquire dquot type 0
[  372.353702][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.363140][ T7092] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.779: Invalid inode table block 0 in block_group 0
[  372.452401][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.469746][ T7092] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem
[  372.504510][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.546538][ T7092] EXT4-fs error (device loop3): ext4_ext_truncate:4456: inode #15: comm syz.3.779: mark_inode_dirty error
[  372.601743][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.622495][ T7093] loop4: detected capacity change from 0 to 32768
[  372.636798][ T7092] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.779: Invalid inode table block 0 in block_group 0
[  372.710971][ T7093] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  372.778252][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.848271][ T7092] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem
[  372.878277][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.878560][ T7093] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  372.917420][ T7092] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  372.954443][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.961561][ T7092] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.779: Invalid inode table block 0 in block_group 0
[  372.990910][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  372.999678][ T7093] (syz.4.778,7093,0):ocfs2_read_blocks:239 ERROR: status = -12
[  373.018226][ T7092] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem
[  373.028909][ T7093] (syz.4.778,7093,1):ocfs2_xattr_block_find:2835 ERROR: status = -12
[  373.040624][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  373.053292][ T7092] EXT4-fs error (device loop3): ext4_truncate:4273: inode #15: comm syz.3.779: mark_inode_dirty error
[  373.143431][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  373.176648][ T7092] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  373.294476][ T7092] EXT4-fs (loop3): Remounting filesystem read-only
[  373.363832][ T7092] EXT4-fs (loop3): 1 truncate cleaned up
[  373.459403][ T7092] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback.
[  373.572088][ T4190] ocfs2: Unmounting device (7,4) on (node local)
[  373.900245][ T7105] delete_channel: no stack
[  380.177984][ T7148] loop3: detected capacity change from 0 to 8192
[  382.558536][ T7157] delete_channel: no stack
[  384.368647][ T7174] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  384.395564][ T7174] CIFS mount error: No usable UNC path provided in device string!
[  384.395564][ T7174] 
[  384.406227][ T7174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  384.907840][ T7174] loop4: detected capacity change from 0 to 512
[  385.290592][ T7174] EXT4-fs (loop4): orphan cleanup on readonly fs
[  385.306517][ T7174] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.799: bg 0: block 248: padding at end of block bitmap is not set
[  385.329289][ T7174] Quota error (device loop4): write_blk: dquota write failed
[  385.336994][ T7174] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  385.347118][ T7174] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.799: Failed to acquire dquot type 1
[  385.361365][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  385.361415][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  385.392802][ T7174] EXT4-fs (loop4): 1 truncate cleaned up
[  385.399536][ T7174] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  387.465576][ T7185] loop4: detected capacity change from 0 to 8192
[  388.872850][ T7193] fuse: Unknown parameter ''
[  389.930137][ T7194] delete_channel: no stack
[  390.437892][ T7210] ieee802154 phy0 wpan0: encryption failed: -22
[  391.629313][ T7216] loop4: detected capacity change from 0 to 32768
[  393.481973][ T7237] fuse: Unknown parameter ''
[  395.276047][ T7238] delete_channel: no stack
[  395.466421][ T7233] loop3: detected capacity change from 0 to 32768
[  396.861847][ T7266] loop4: detected capacity change from 0 to 128
[  396.989182][ T7266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  397.134969][ T7266] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  397.578687][ T7273] syz.0.831 uses obsolete (PF_INET,SOCK_PACKET)
[  398.178407][ T7281] delete_channel: no stack
[  398.375463][ T7288] fuse: Unknown parameter ''
[  399.634560][ T7298] fuse: Bad value for 'fd'
[  400.983658][ T7308] loop3: detected capacity change from 0 to 8192
[  401.720187][ T7319] delete_channel: no stack
[  402.210872][ T7328] fuse: Unknown parameter ''
[  403.294342][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'.
[  403.394973][ T7334] device bridge_slave_1 left promiscuous mode
[  403.410804][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.547316][ T7334] device bridge_slave_0 left promiscuous mode
[  403.602268][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.314033][ T7344] loop4: detected capacity change from 0 to 8192
[  407.101593][ T7357] delete_channel: no stack
[  408.484732][ T7377] loop2: detected capacity change from 0 to 8192
[  410.222663][ T7396] delete_channel: no stack
[  411.673782][ T7420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  411.686318][ T7420] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  412.714342][ T7429] fuse: Unknown parameter ''
[  413.951759][ T7434] delete_channel: no stack
[  415.769099][ T7459] loop3: detected capacity change from 0 to 8192
[  416.068399][ T7466] hub 9-0:1.0: USB hub found
[  416.078388][ T7466] hub 9-0:1.0: 1 port detected
[  417.893559][ T7480] fuse: Unknown parameter ''
[  418.241411][ T7482] overlayfs: failed to resolve './file0': -2
[  418.360923][ T7478] delete_channel: no stack
[  421.397967][ T7519] fuse: Unknown parameter ''
[  422.446848][ T7520] delete_channel: no stack
[  424.518242][ T7541] loop4: detected capacity change from 0 to 8192
[  425.202199][ T7551] overlayfs: failed to resolve './file0': -2
[  426.047266][ T7559] loop3: detected capacity change from 0 to 32768
[  428.603289][ T7569] delete_channel: no stack
[  429.427981][ T7581] loop3: detected capacity change from 0 to 8192
[  431.049545][ T7599] overlayfs: failed to resolve './file0': -2
[  431.992055][ T7613] fuse: Unknown parameter ''
[  433.935272][ T7618] delete_channel: no stack
[  436.199450][ T7651] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  436.734907][ T7653] loop2: detected capacity change from 0 to 32768
[  436.787792][ T7651] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  438.812332][ T7679] loop4: detected capacity change from 0 to 8192
[  446.808981][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  446.815785][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  447.710679][ T7751] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  447.812775][ T7755] loop2: detected capacity change from 0 to 164
[  447.901360][ T7751] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  449.733248][ T7782] loop4: detected capacity change from 0 to 512
[  449.843524][ T7782] EXT4-fs (loop4): Ignoring removed oldalloc option
[  449.947557][ T7782] ------------[ cut here ]------------
[  451.029179][ T7782] WARNING: CPU: 1 PID: 7782 at mm/page_alloc.c:5462 __alloc_pages+0x391/0x470
[  451.244503][ T7782] Modules linked in:
[  451.270451][ T7782] CPU: 1 PID: 7782 Comm: syz.4.984 Not tainted syzkaller #0
[  451.289319][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  451.299900][ T7782] RIP: 0010:__alloc_pages+0x391/0x470
[  451.308638][ T7782] Code: 31 ff e9 b2 fe ff ff e8 3d a9 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 f4 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d e5 8f 4f 7e 41 83 fd 08
[  451.329167][ T7782] RSP: 0018:ffffc9000385f360 EFLAGS: 00010246
[  451.335546][ T7782] RAX: ffffc9000385f3a0 RBX: 1ffff9200070be70 RCX: 0000000000000000
[  451.345877][ T7782] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000385f3c8
[  451.355002][ T7782] RBP: ffffc9000385f460 R08: dffffc0000000000 R09: ffffc9000385f3a0
[  451.378283][ T7782] R10: fffff5200070be79 R11: 1ffff9200070be74 R12: dffffc0000000000
[  451.386774][ T7782] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c
[  451.408212][ T7782] FS:  00007f23f8e0d6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  451.417504][ T7782] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  451.438176][ T7782] CR2: 00007f36eedff000 CR3: 000000005521e000 CR4: 00000000003506f0
[  451.446318][ T7782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  451.478148][ T7782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  451.486813][ T7782] Call Trace:
[  451.508362][ T7782]  <TASK>
[  451.511654][ T7782]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  451.528194][ T7782]  ? zone_statistics+0x170/0x170
[  451.533246][ T7782]  kmalloc_large_node+0x7d/0x190
[  451.548198][ T7782]  __kmalloc_node+0x232/0x3b0
[  451.553145][ T7782]  ext4_expand_extra_isize_ea+0xd55/0x19a0
[  451.574373][   T23] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  451.578275][ T7782]  __ext4_expand_extra_isize+0x301/0x3e0
[  451.588014][ T7782]  __ext4_mark_inode_dirty+0x469/0x700
[  451.598191][ T7782]  ext4_evict_inode+0xa81/0x1080
[  451.603258][ T7782]  ? _raw_spin_unlock+0x24/0x40
[  451.618202][ T7782]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  451.624353][ T7782]  ? do_raw_spin_unlock+0x11d/0x230
[  451.638373][ T7782]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  451.644437][ T7782]  evict+0x485/0x870
[  451.656423][ T7782]  ? __lock_acquire+0x7c60/0x7c60
[  451.669863][ T7782]  ? proc_nr_inodes+0x320/0x320
[  451.676044][ T7782]  ? do_raw_spin_unlock+0x11d/0x230
[  451.685219][ T7782]  ? _raw_spin_unlock+0x24/0x40
[  451.694148][ T7782]  ? iput+0x706/0x8a0
[  451.701425][ T7782]  ext4_orphan_cleanup+0xaa9/0x12e0
[  451.707433][ T7782]  ? ext4_orphan_del+0xb90/0xb90
[  451.714684][ T7782]  ? errseq_check_and_advance+0x62/0x120
[  451.720808][ T7782]  ext4_fill_super+0x92f0/0x9a60
[  451.726183][ T7782]  ? ext4_mount+0x40/0x40
[  451.730870][ T7782]  ? set_blocksize+0x1f1/0x370
[  451.735810][ T7782]  ? sb_set_blocksize+0xa5/0xe0
[  451.741259][ T7782]  mount_bdev+0x287/0x3c0
[  451.745733][ T7782]  ? ext4_mount+0x40/0x40
[  451.750548][ T7782]  legacy_get_tree+0xe6/0x180
[  451.755479][ T7782]  ? ext4_errno_to_code+0x160/0x160
[  451.761365][ T7782]  vfs_get_tree+0x88/0x270
[  451.765857][ T7782]  do_new_mount+0x24a/0xa40
[  451.772265][ T7782]  __se_sys_mount+0x2d6/0x3c0
[  451.777662][ T7782]  ? __x64_sys_mount+0xc0/0xc0
[  451.783037][ T7782]  ? lockdep_hardirqs_on+0x94/0x140
[  451.789146][ T7782]  ? __x64_sys_mount+0x1c/0xc0
[  451.794153][ T7782]  do_syscall_64+0x4c/0xa0
[  451.799181][ T7782]  ? clear_bhb_loop+0x30/0x80
[  451.803991][ T7782]  ? clear_bhb_loop+0x30/0x80
[  451.809080][ T7782]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  451.815027][ T7782] RIP: 0033:0x7f23faba766a
[  451.819909][ T7782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.840249][ T7782] RSP: 002b:00007f23f8e0ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  451.849052][ T7782] RAX: ffffffffffffffda RBX: 00007f23f8e0cef0 RCX: 00007f23faba766a
[  451.857278][ T7782] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007f23f8e0ceb0
[  451.865892][ T7782] RBP: 00002000000002c0 R08: 00007f23f8e0cef0 R09: 0000000000010700
[  451.874448][ T7782] R10: 0000000000010700 R11: 0000000000000246 R12: 00002000000001c0
[  451.885587][ T7782] R13: 00007f23f8e0ceb0 R14: 000000000000045d R15: 0000200000000040
[  451.893999][ T7782]  </TASK>
[  451.897050][ T7782] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  451.904623][ T7782] CPU: 1 PID: 7782 Comm: syz.4.984 Not tainted syzkaller #0
[  451.912033][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  451.922416][ T7782] Call Trace:
[  451.925991][ T7782]  <TASK>
[  451.928959][ T7782]  dump_stack_lvl+0x168/0x230
[  451.934495][ T7782]  ? show_regs_print_info+0x20/0x20
[  451.940430][ T7782]  ? load_image+0x3b0/0x3b0
[  451.945373][ T7782]  panic+0x2c9/0x7f0
[  451.949888][ T7782]  ? bpf_jit_dump+0xd0/0xd0
[  451.954446][ T7782]  ? __alloc_pages+0x391/0x470
[  451.959341][ T7782]  __warn+0x248/0x2b0
[  451.964317][ T7782]  ? __alloc_pages+0x391/0x470
[  451.969408][ T7782]  report_bug+0x1b7/0x2e0
[  451.973866][ T7782]  handle_bug+0x3a/0x70
[  451.978035][ T7782]  exc_invalid_op+0x16/0x40
[  451.982855][ T7782]  asm_exc_invalid_op+0x16/0x20
[  451.987854][ T7782] RIP: 0010:__alloc_pages+0x391/0x470
[  451.993694][ T7782] Code: 31 ff e9 b2 fe ff ff e8 3d a9 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 f4 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d e5 8f 4f 7e 41 83 fd 08
[  452.013957][ T7782] RSP: 0018:ffffc9000385f360 EFLAGS: 00010246
[  452.020255][ T7782] RAX: ffffc9000385f3a0 RBX: 1ffff9200070be70 RCX: 0000000000000000
[  452.028455][ T7782] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000385f3c8
[  452.036546][ T7782] RBP: ffffc9000385f460 R08: dffffc0000000000 R09: ffffc9000385f3a0
[  452.044663][ T7782] R10: fffff5200070be79 R11: 1ffff9200070be74 R12: dffffc0000000000
[  452.052692][ T7782] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c
[  452.060706][ T7782]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  452.067084][ T7782]  ? zone_statistics+0x170/0x170
[  452.072414][ T7782]  kmalloc_large_node+0x7d/0x190
[  452.077460][ T7782]  __kmalloc_node+0x232/0x3b0
[  452.082295][ T7782]  ext4_expand_extra_isize_ea+0xd55/0x19a0
[  452.088509][ T7782]  __ext4_expand_extra_isize+0x301/0x3e0
[  452.094222][ T7782]  __ext4_mark_inode_dirty+0x469/0x700
[  452.099798][ T7782]  ext4_evict_inode+0xa81/0x1080
[  452.104803][ T7782]  ? _raw_spin_unlock+0x24/0x40
[  452.109801][ T7782]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  452.115736][ T7782]  ? do_raw_spin_unlock+0x11d/0x230
[  452.120965][ T7782]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  452.126993][ T7782]  evict+0x485/0x870
[  452.131105][ T7782]  ? __lock_acquire+0x7c60/0x7c60
[  452.136442][ T7782]  ? proc_nr_inodes+0x320/0x320
[  452.141401][ T7782]  ? do_raw_spin_unlock+0x11d/0x230
[  452.147259][ T7782]  ? _raw_spin_unlock+0x24/0x40
[  452.152218][ T7782]  ? iput+0x706/0x8a0
[  452.156306][ T7782]  ext4_orphan_cleanup+0xaa9/0x12e0
[  452.161785][ T7782]  ? ext4_orphan_del+0xb90/0xb90
[  452.166779][ T7782]  ? errseq_check_and_advance+0x62/0x120
[  452.173129][ T7782]  ext4_fill_super+0x92f0/0x9a60
[  452.178339][ T7782]  ? ext4_mount+0x40/0x40
[  452.182925][ T7782]  ? set_blocksize+0x1f1/0x370
[  452.187714][ T7782]  ? sb_set_blocksize+0xa5/0xe0
[  452.192612][ T7782]  mount_bdev+0x287/0x3c0
[  452.197152][ T7782]  ? ext4_mount+0x40/0x40
[  452.201502][ T7782]  legacy_get_tree+0xe6/0x180
[  452.206320][ T7782]  ? ext4_errno_to_code+0x160/0x160
[  452.211542][ T7782]  vfs_get_tree+0x88/0x270
[  452.216002][ T7782]  do_new_mount+0x24a/0xa40
[  452.220713][ T7782]  __se_sys_mount+0x2d6/0x3c0
[  452.225445][ T7782]  ? __x64_sys_mount+0xc0/0xc0
[  452.230423][ T7782]  ? lockdep_hardirqs_on+0x94/0x140
[  452.235754][ T7782]  ? __x64_sys_mount+0x1c/0xc0
[  452.240768][ T7782]  do_syscall_64+0x4c/0xa0
[  452.245296][ T7782]  ? clear_bhb_loop+0x30/0x80
[  452.249992][ T7782]  ? clear_bhb_loop+0x30/0x80
[  452.254809][ T7782]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  452.260730][ T7782] RIP: 0033:0x7f23faba766a
[  452.265264][ T7782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.284885][ T7782] RSP: 002b:00007f23f8e0ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  452.293585][ T7782] RAX: ffffffffffffffda RBX: 00007f23f8e0cef0 RCX: 00007f23faba766a
[  452.301614][ T7782] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007f23f8e0ceb0
[  452.309729][ T7782] RBP: 00002000000002c0 R08: 00007f23f8e0cef0 R09: 0000000000010700
[  452.317832][ T7782] R10: 0000000000010700 R11: 0000000000000246 R12: 00002000000001c0
[  452.325820][ T7782] R13: 00007f23f8e0ceb0 R14: 000000000000045d R15: 0000200000000040
[  452.333836][ T7782]  </TASK>
[  452.337151][ T7782] Kernel Offset: disabled
[  452.341898][ T7782] Rebooting in 86400 seconds..