last executing test programs:

2m55.37608815s ago: executing program 1 (id=51):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
sendto$inet6(r0, &(0x7f0000000540)="1119795f624517", 0x7, 0x850, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40)

2m55.199174453s ago: executing program 1 (id=54):
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
fanotify_init(0x250, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r1])

2m54.10039055s ago: executing program 1 (id=57):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38)

2m53.980183472s ago: executing program 1 (id=61):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00')
lseek(r1, 0x1000000, 0x0)

2m52.439796895s ago: executing program 1 (id=69):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000001080)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x1010814, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRES16, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x219, &(0x7f0000000740)="$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")
chdir(&(0x7f0000000700)='./file0\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

2m52.196969159s ago: executing program 1 (id=75):
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xfff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)

2m37.163754992s ago: executing program 32 (id=75):
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xfff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)

2m27.819703558s ago: executing program 0 (id=187):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x0, 0x1}}, 0x26)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xc, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote, 0xfffffffc}}}, 0x32)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)

2m27.314712625s ago: executing program 0 (id=192):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50)
ftruncate(0xffffffffffffffff, 0xc17a)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

2m27.0094856s ago: executing program 0 (id=195):
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0)

2m25.809607869s ago: executing program 0 (id=200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)

2m24.896404323s ago: executing program 0 (id=206):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x6000)

2m18.016916189s ago: executing program 0 (id=234):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
read$FUSE(r3, &(0x7f0000019080)={0x2020}, 0x2020)

2m17.077340924s ago: executing program 33 (id=234):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
read$FUSE(r3, &(0x7f0000019080)={0x2020}, 0x2020)

1m13.918456974s ago: executing program 6 (id=561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x63)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0xdc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x10, 0x28, 0x9, 0x1ff, 0x5, 0x71b3, 0xfffe, 0x1, [{0x5, 0x1ff, 0x8fd3, 0x8315}, {0x9, 0x3df, 0x3, 0x9}, {0x4, 0x8, 0xfffffffe, 0x9}, {0x6, 0x6, 0x1, 0x6}, {0x7, 0x2, 0xdc35, 0x8}, {0x3, 0x9, 0x5, 0x6}, {0x7, 0x8, 0x8, 0x5}, {0x3fb, 0x7, 0x0, 0x10001}, {0x3, 0x9, 0x7000000, 0x800}]}}, @TCA_U32_LINK={0x8, 0x3, 0x3ff}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x24004000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m12.917306679s ago: executing program 6 (id=564):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

1m10.93050935s ago: executing program 6 (id=573):
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

1m10.831920562s ago: executing program 6 (id=576):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)

1m8.275670351s ago: executing program 6 (id=585):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x100000001, 0x77c8, 0x4, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400000000000, 0x8, 0x9, 0xfffffffffffffffc, 0x4002, 0x7}, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x84)

1m2.595858589s ago: executing program 6 (id=604):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe)

1m2.417082032s ago: executing program 34 (id=604):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe)

58.264643227s ago: executing program 2 (id=624):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe8d, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

57.969594391s ago: executing program 2 (id=628):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0)

56.799026419s ago: executing program 2 (id=630):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0x9, 0x400, 0x1, 0x400}, 0x4f, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x200000, 0xfffffffe, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x2, 0x0, 0x3, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x4, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0xfffffffc], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5b3f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x5a8, 0x0, 0x8f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc5]}, 0x45c)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8000000000000000, &(0x7f0000000040))
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000140)=@abs={0x1}, 0x6e)

56.517257103s ago: executing program 2 (id=632):
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x2}, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

56.062128941s ago: executing program 2 (id=635):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
setpgid(0x0, r0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)

54.572440114s ago: executing program 2 (id=647):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
syz_io_uring_setup(0x1458, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r0, 0xab03)

41.546551045s ago: executing program 7 (id=697):
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
fanotify_init(0x250, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r1])

39.903007581s ago: executing program 7 (id=706):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)

39.801498093s ago: executing program 7 (id=707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0x1}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

39.496797737s ago: executing program 35 (id=647):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
syz_io_uring_setup(0x1458, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r0, 0xab03)

38.439293214s ago: executing program 7 (id=711):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x2, 0x30}, 0xc)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3)
sendmsg$inet6(r0, 0x0, 0x2000c0d1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}, 0x40000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)

19.771936703s ago: executing program 3 (id=766):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

18.04846788s ago: executing program 8 (id=709):
r0 = io_uring_setup(0x7c8c, &(0x7f0000000180)={0x0, 0x6aa8, 0x0, 0x2, 0x1fa})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8c0)
socket$nl_route(0x10, 0x3, 0x0)
write$snapshot(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7c", 0x12)
close_range(r0, 0xffffffffffffffff, 0x0)

18.03866495s ago: executing program 5 (id=777):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
writev(r3, &(0x7f00000021c0)=[{&(0x7f0000002240)="566cf2499998", 0x6}], 0x1)

18.03415654s ago: executing program 4 (id=778):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = gettid()
tkill(r2, 0x13)

16.444499065s ago: executing program 8 (id=767):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0})
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)

16.435418725s ago: executing program 5 (id=780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

16.417216945s ago: executing program 4 (id=781):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8)
syz_mount_image$fuse(0x0, &(0x7f0000004040)='./file0\x00', 0x2000080, 0x0, 0xfd, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chroot(&(0x7f0000000240)='./file0\x00')
syz_fuse_handle_req(r1, &(0x7f0000000900)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x3, 0x42800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000100)={&(0x7f00000003c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x2, 0x7e, 0xffff, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15.157088335s ago: executing program 8 (id=768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

15.130571285s ago: executing program 5 (id=783):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x6, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc0200", 0x43353039})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r2, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f00000002c0), 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

15.121863646s ago: executing program 3 (id=784):
syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
r0 = socket(0x1e, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b})
epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0)
r3 = dup3(r0, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
ftruncate(r4, 0xc17a)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f})

13.930721604s ago: executing program 8 (id=769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff2f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

13.930534014s ago: executing program 3 (id=770):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = io_uring_setup(0x7d5, &(0x7f0000000500))
io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

13.927390064s ago: executing program 4 (id=771):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002b00b99f000000000000000001"], 0x114}], 0x1}, 0x0)

13.918444934s ago: executing program 5 (id=786):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000180))
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1)
write$UHID_CREATE2(r1, 0x0, 0x119)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

13.656421078s ago: executing program 5 (id=772):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8020, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x2, 0x3000)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r3 = dup(r0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3})

11.987643814s ago: executing program 4 (id=773):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r2, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x4, 0x3f}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb8}, 0x1, 0x7a00}, 0x0)

11.971254095s ago: executing program 8 (id=774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00008c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000095c000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
ptrace(0x10, 0x1)

11.871484466s ago: executing program 3 (id=776):
r0 = io_uring_setup(0x207e05, &(0x7f00000000c0)={0x0, 0x5b02, 0x10, 0x3, 0x2002})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x7, @remote, 0x9}}, 0x0, 0x0, 0x12, 0x0, "6bc1724dcbf67f7a13a2d34bef873391a051c60bc3115826a9b938e3b63b6fbaea9a236d4089a1d710d618077d5642088ab0d4f13358f7682cd440ac52b631a283177c69255772ae6121b72a48a83e3b"}, 0xd8)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
ftruncate(0xffffffffffffffff, 0xc17a)
ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xd)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

11.691619259s ago: executing program 3 (id=779):
memfd_create(0x0, 0x0)
mlockall(0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
r1 = shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$IPC_RMID(0x0, 0x0)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000bcd000/0x2000)=nil)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080))
mlockall(0x6)
mmap$binder(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x4)
shmdt(r1)

10.903945211s ago: executing program 4 (id=782):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4)

9.68907583s ago: executing program 3 (id=785):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0})
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)

9.6888086s ago: executing program 4 (id=787):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x5}, @fda={0x66646185, 0x7, 0x0, 0x24}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

9.68794876s ago: executing program 5 (id=796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x19, 0x1f, 0x200, &(0x7f0000000140)="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"})

9.68468934s ago: executing program 8 (id=797):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="0101", 0x2)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000002c0), 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000480)={[&(0x7f0000000000)='#.-\\\\\x7f{:\x00', 0x0, &(0x7f0000000400)=']}%\x00']}, 0x0, 0x0)

7.273792257s ago: executing program 7 (id=711):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x2, 0x30}, 0xc)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3)
sendmsg$inet6(r0, 0x0, 0x2000c0d1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}, 0x40000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)

0s ago: executing program 7 (id=711):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x2, 0x30}, 0xc)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3)
sendmsg$inet6(r0, 0x0, 0x2000c0d1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}, 0x40000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)

kernel console output (not intermixed with test programs):

oop3): open_ctree failed: -12
[   90.471117][ T4033] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /35/mnt/lost+found: directory fails checksum at offset 0
[   90.516382][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   90.587873][ T5017] binder: 5016:5017 tried to acquire reference to desc 0, got 1 instead
[   90.592906][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   90.606224][ T5017] binder: 5016:5017 got reply transaction with bad transaction stack, transaction 60 has target 5016:0
[   90.609572][ T5017] binder: 5016:5017 transaction failed 29201/-71, size 0-0 line 2837
[   90.640993][ T4348] binder: release 5016:5017 transaction 60 out, still active
[   90.653403][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   90.677275][ T4348] binder: send failed reply for transaction 60, target dead
[   93.376865][ T4033] EXT4-fs warning: 132 callbacks suppressed
[   93.376878][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.395446][ T5051] udc-core: couldn't find an available UDC or it's busy
[   93.397482][ T5051] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   93.430871][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.473382][ T4033] EXT4-fs error: 205 callbacks suppressed
[   93.473395][ T4033] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[   93.512410][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.540356][ T4033] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /35/mnt/lost+found: directory fails checksum at offset 0
[   93.588609][ T4033] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /35/mnt/lost+found: directory fails checksum at offset 1024
[   93.623649][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.657236][ T4033] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[   93.680401][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.709718][ T4033] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /35/mnt/lost+found: directory fails checksum at offset 0
[   93.748344][ T4033] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /35/mnt/lost+found: directory fails checksum at offset 1024
[   93.785984][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.810363][ T4033] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[   93.824782][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.829127][ T4033] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /35/mnt/lost+found: directory fails checksum at offset 0
[   93.858532][ T4033] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /35/mnt/lost+found: directory fails checksum at offset 1024
[   93.873607][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.897914][ T4033] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[   93.913027][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   93.946871][ T4033] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   94.056213][ T5068] loop3: detected capacity change from 0 to 128
[   94.074909][ T5068] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   94.089476][ T5068] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   94.667686][ T5086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.232'.
[   94.762337][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'.
[   96.159497][ T5084] loop3: detected capacity change from 0 to 32768
[   96.249400][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'.
[   96.271675][ T5105] input: syz1 as /devices/virtual/input/input2
[   96.438978][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.438978][ T5084] 
[   96.455522][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.455522][ T5084] 
[   96.458426][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.458426][ T5084] 
[   96.471314][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.471314][ T5084] 
[   96.482680][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.482680][ T5084] 
[   96.524296][ T5117] ERROR: (device loop3): dbAllocAG: unable to allocate blocks
[   96.524296][ T5117] 
[   96.565343][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.565343][ T5084] 
[   96.568039][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.568039][ T5084] 
[   96.570546][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.570546][ T5084] 
[   96.609924][ T5117] jfs_create: dtInsert returned -EIO
[   96.611930][ T5117] ERROR: (device loop3): txAbort: 
[   96.611930][ T5117] 
[   96.628059][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.628059][ T5084] 
[   96.631400][ T5084] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.631400][ T5084] 
[   96.709275][    T9] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.709275][    T9] 
[   96.712798][    T9] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   96.712798][    T9] 
[   97.203810][ T5138] 9pnet: p9_client_clunk (5138): Trying to clunk with invalid fid
[   97.206334][ T5138] CPU: 0 PID: 5138 Comm: syz.2.241 Not tainted 5.15.186-syzkaller #0
[   97.208543][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   97.211122][ T5138] Call trace:
[   97.211982][ T5138]  dump_backtrace+0x0/0x43c
[   97.213139][ T5138]  show_stack+0x2c/0x3c
[   97.214198][ T5138]  __dump_stack+0x30/0x40
[   97.215345][ T5138]  dump_stack_lvl+0xf8/0x160
[   97.216515][ T5138]  dump_stack+0x1c/0x5c
[   97.217638][ T5138]  p9_client_clunk+0x280/0x368
[   97.218954][ T5138]  v9fs_statfs+0x154/0x2d0
[   97.220142][ T5138]  user_statfs+0x1bc/0x4f0
[   97.221358][ T5138]  __arm64_sys_statfs+0xc8/0x148
[   97.222667][ T5138]  invoke_syscall+0x98/0x2b8
[   97.223944][ T5138]  el0_svc_common+0x138/0x258
[   97.225257][ T5138]  do_el0_svc+0x58/0x14c
[   97.226389][ T5138]  el0_svc+0x78/0x1e0
[   97.227433][ T5138]  el0t_64_sync_handler+0xcc/0xe4
[   97.228737][ T5138]  el0t_64_sync+0x1a0/0x1a4
[   97.463443][ T5107] chnl_net:caif_netlink_parms(): no params data found
[   97.736203][ T5151] netlink: set zone limit has 8 unknown bytes
[   98.970819][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.981080][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.992457][ T5107] device bridge_slave_0 entered promiscuous mode
[   99.041985][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.050077][ T5005] Bluetooth: hci1: command 0x0409 tx timeout
[   99.053086][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.055796][ T5107] device bridge_slave_1 entered promiscuous mode
[   99.107494][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.133115][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.240724][ T5107] team0: Port device team_slave_0 added
[   99.255978][ T5107] team0: Port device team_slave_1 added
[   99.339152][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.344133][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.350943][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.383464][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.385990][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.393237][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.547656][ T5107] device hsr_slave_0 entered promiscuous mode
[   99.604710][ T5107] device hsr_slave_1 entered promiscuous mode
[   99.694083][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.700847][ T5107] Cannot create hsr debugfs directory
[   99.720186][ T5194] loop5: detected capacity change from 0 to 2048
[  100.390039][ T5194] NILFS (loop5): invalid segment: Checksum error in super root
[  100.401866][ T5194] NILFS (loop5): error -22 while loading super root
[  100.548224][ T4336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.883587][ T4336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.910650][ T5267] loop4: detected capacity change from 0 to 2048
[  100.962873][ T5267] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature
[  101.052726][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  101.052740][   T26] audit: type=1326 audit(100.990:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.4.257" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff885359a8 code=0x0
[  101.068967][ T4336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.094311][ T5007] Bluetooth: hci1: command 0x041b tx timeout
[  101.193689][ T4336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.217435][ T5275] loop3: detected capacity change from 0 to 16
[  101.264537][ T5275] erofs: Unknown parameter 'ÿÿÿÿ18446744073709551615'
[  101.292111][ T5222] loop5: detected capacity change from 0 to 32768
[  101.308914][ T5275] loop3: detected capacity change from 0 to 736
[  101.394832][ T5107] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  101.482552][ T5107] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  101.526067][ T5107] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  101.549942][ T5250] loop2: detected capacity change from 0 to 32768
[  101.606651][ T5250] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  101.609228][ T5250] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  101.637422][ T5107] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  101.755847][ T5250] gfs2: fsid=syz:syz.s: journal 0 mapped with 1 extents in 0ms
[  101.934035][ T5250] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  101.999943][ T5296] loop4: detected capacity change from 0 to 2048
[  102.013496][ T5296] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  102.019954][ T5296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.098626][ T5305] device syzkaller0 entered promiscuous mode
[  102.142891][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.363197][ T5107] 8021q: adding VLAN 0 to HW filter on device team0
[  102.437079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.446755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.453479][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.470818][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.480520][  T499] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.482446][  T499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.497272][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.519691][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.530991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.556855][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.558801][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.572156][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.596498][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.666817][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.670132][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.673087][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.677330][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.702928][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.715322][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.731943][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.733269][ T5338] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  102.745245][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.758942][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.762742][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.766737][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.833389][ T5344] netlink: 'syz.2.277': attribute type 10 has an invalid length.
[  102.877503][ T5346] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  102.893405][ T5346] loop3: detected capacity change from 0 to 512
[  102.942306][ T5346] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  102.977631][ T5346] [EXT4 FS bs=4096, gc=1, bpg=64, ipg=32, mo=804ec018, mo2=0000]
[  102.980529][ T5346] EXT4-fs (loop3): orphan cleanup on readonly fs
[  103.000137][ T5346] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.278: Allocating blocks 41-42 which overlap fs metadata
[  103.057141][ T5353] loop5: detected capacity change from 0 to 2048
[  103.125902][ T5346] Quota error (device loop3): write_blk: dquota write failed
[  103.128322][ T5346] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  103.131084][ T5346] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.278: Failed to acquire dquot type 0
[  103.146116][ T5353] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  103.164827][ T5353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.174373][ T5006] Bluetooth: hci1: command 0x040f tx timeout
[  103.188645][ T5346] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  103.223062][ T5346] EXT4-fs (loop3): 1 truncate cleaned up
[  103.237647][ T5346] EXT4-fs (loop3): pa 00000000a6f84798: logic 1, phys. 41, len 23
[  103.240062][ T5346] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 22, pa_free 23
[  103.265497][ T5346] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,usrquota,nolazytime,nogrpid,errors=continue,debug,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  103.352605][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.356971][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.359145][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.808523][ T5406] loop2: detected capacity change from 0 to 512
[  104.872783][ T5416] binder: 5413:5416 ioctl c0306201 20000480 returned -14
[  104.881287][ T5416] binder: 5413:5416 tried to acquire reference to desc 0, got 1 instead
[  104.911933][ T5416] binder: 5413:5416 got transaction with invalid parent offset or type
[  104.917053][ T5416] binder: 5413:5416 transaction failed 29201/-22, size 80-24 line 3286
[  104.922100][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  104.965444][ T5406] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  104.984880][ T5406] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #13: comm syz.2.292: iget: bad i_size value: 12154757448730
[  104.994272][ T5406] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.292: couldn't read orphan inode 13 (err -117)
[  105.002703][ T4336] device hsr_slave_0 left promiscuous mode
[  105.028639][ T5406] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback.
[  105.083686][ T4336] device hsr_slave_1 left promiscuous mode
[  105.174404][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.176641][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.191812][ T4336] device bridge_slave_1 left promiscuous mode
[  105.193729][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.246915][ T4336] device bridge_slave_0 left promiscuous mode
[  105.248779][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.254660][    T7] Bluetooth: hci1: command 0x0419 tx timeout
[  105.259838][ T5429] netlink: 116 bytes leftover after parsing attributes in process `syz.2.295'.
[  105.435593][ T4336] device veth1_macvtap left promiscuous mode
[  105.437297][ T4336] device veth0_macvtap left promiscuous mode
[  105.439036][ T4336] device veth1_vlan left promiscuous mode
[  105.440670][ T4336] device veth0_vlan left promiscuous mode
[  105.832860][ T4336] team0 (unregistering): Port device team_slave_1 removed
[  105.845789][ T4336] team0 (unregistering): Port device team_slave_0 removed
[  105.858628][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.902161][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.069385][ T5445] loop3: detected capacity change from 0 to 256
[  106.101214][ T5445] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d5f, chksum : 0xc5863518, utbl_chksum : 0x000cd30d)
[  106.108106][ T4336] bond0 (unregistering): Released all slaves
[  106.229267][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'.
[  106.234240][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'.
[  106.274181][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.277035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.318825][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.321624][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.344946][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.347827][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.355468][ T5107] device veth0_vlan entered promiscuous mode
[  106.365593][ T5107] device veth1_vlan entered promiscuous mode
[  106.395237][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.397950][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.400839][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.406164][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.411813][ T5107] device veth0_macvtap entered promiscuous mode
[  106.417814][ T5107] device veth1_macvtap entered promiscuous mode
[  106.440431][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.443321][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.449605][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.452385][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.456198][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.459388][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.463567][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.466509][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.469609][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.472282][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.496371][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.565525][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.568511][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.584513][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.897078][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.311673][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.315794][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.424726][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.435326][ T5107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.471186][ T5107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.517256][ T5107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.529982][ T5107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.325928][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  108.328894][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  108.712063][ T5255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.715687][ T5255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.720470][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.875323][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.877768][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.882805][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.002707][ T5486] loop5: detected capacity change from 0 to 4096
[  109.321418][ T5486] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  109.497045][ T5486] ntfs3: loop5: Failed to load $Extend.
[  109.538375][ T5514] tipc: Started in network mode
[  109.559264][ T5514] tipc: Node identity 4, cluster identity 4711
[  109.560952][ T5514] tipc: Node number set to 4
[  109.765003][ T5528] block device autoloading is deprecated and will be removed.
[  111.073153][ T5549] Cannot find add_set index 0 as target
[  111.100708][ T5547] device syzkaller0 entered promiscuous mode
[  113.156293][ T5567] ptrace attach of "./syz-executor exec"[4031] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               Œ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      À•              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ"[5567]
[  114.363673][ T5581] loop2: detected capacity change from 0 to 512
[  114.599750][ T5581] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2
[  115.273946][ T5584] binder: BINDER_SET_CONTEXT_MGR already set
[  115.275658][ T5584] binder: 5583:5584 ioctl 4018620d 20000040 returned -16
[  115.291200][ T5584] binder: tried to use weak ref as strong ref
[  115.293201][ T5584] binder: 5583:5584 Acquire 1 refcount change on invalid ref 0 ret -22
[  116.084922][ T5596] binder: 5583:5596 got transaction to invalid handle, 1
[  116.087062][ T5596] binder: 5583:5596 transaction failed 29201/-22, size 0-0 line 2917
[  116.196034][ T4265] binder: undelivered TRANSACTION_ERROR: 29201
[  116.741808][ T5605] loop3: detected capacity change from 0 to 1024
[  116.925611][ T5608] binder: 5606:5608 tried to acquire reference to desc 0, got 1 instead
[  116.951853][ T5608] binder: 5606:5608 BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  116.980628][ T5608] binder: 5606:5608 got reply transaction with no transaction stack
[  116.982972][ T5608] binder: 5606:5608 transaction failed 29201/-71, size 0-0 line 2822
[  117.001883][ T5605] EXT4-fs (loop3): Ignoring removed nobh option
[  117.003645][ T5605] EXT4-fs (loop3): Ignoring removed bh option
[  117.007107][ T5605] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.014444][ T4349] binder: undelivered TRANSACTION_COMPLETE
[  117.044919][ T4349] binder: undelivered TRANSACTION_ERROR: 29201
[  117.046856][ T4349] binder: undelivered transaction 80, process died.
[  117.102266][ T5605] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  117.373009][ T5626] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.342: Allocating blocks 497-513 which overlap fs metadata
[  117.397340][ T5623] loop6: detected capacity change from 0 to 4096
[  117.584573][ T5623] ntfs3: Unknown parameter '0x00000000000000000x00000000000000000x0000000000000000'
[  118.884243][ T5626] EXT4-fs (loop3): pa 00000000a1201bb2: logic 48768, phys. 129, len 24
[  118.886950][ T5626] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 23, pa_free 24
[  118.894656][ T5637] netlink: 'syz.5.348': attribute type 10 has an invalid length.
[  118.902812][ T5637] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  119.173790][ T4348] Bluetooth: hci1: command 0x0405 tx timeout
[  120.247881][ T5678] fuse: Bad value for 'fd'
[  120.309314][ T5681] loop2: detected capacity change from 0 to 512
[  120.350634][ T5681] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  120.359173][ T5682] binder: 5679:5682 tried to acquire reference to desc 0, got 1 instead
[  120.367573][ T5682] binder: 5679:5682 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  120.371208][ T5682] binder: 5682 RLIMIT_NICE not set
[  120.387010][ T4348] binder: undelivered TRANSACTION_COMPLETE
[  120.446010][ T5681] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv1,minixdf,,errors=continue. Quota mode: writeback.
[  120.502985][ T5689] binder: 5688:5689 tried to acquire reference to desc 0, got 1 instead
[  120.532433][ T5689] binder: 5688:5689 sending u0000000000000002 node 98, cookie mismatch 0000000002000000 != 0000000000000000
[  120.546871][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  120.574071][ T5689] binder: 5688:5689 transaction failed 29201/-22, size 80-24 line 3225
[  120.616211][ T4349] binder: undelivered transaction 97, process died.
[  120.618265][ T4349] binder: undelivered TRANSACTION_COMPLETE
[  120.619857][ T4349] binder: undelivered TRANSACTION_ERROR: 29201
[  120.644830][ T5698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.674202][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'.
[  120.691419][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'.
[  120.723510][ T5706] loop3: detected capacity change from 0 to 1024
[  120.838813][ T5710] bridge0: port 3(syz_tun) entered blocking state
[  120.848956][ T5710] bridge0: port 3(syz_tun) entered disabled state
[  120.872764][ T5710] device syz_tun entered promiscuous mode
[  120.904659][ T5710] bridge0: port 3(syz_tun) entered blocking state
[  120.906784][ T5710] bridge0: port 3(syz_tun) entered forwarding state
[  120.953962][ T5706] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  120.956577][ T5706] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  121.020556][ T5262] hfsplus: b-tree write err: -5, ino 4
[  121.077510][ T5723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.371'.
[  121.171457][ T5727] loop3: detected capacity change from 0 to 16
[  121.189199][ T4349] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  121.191779][ T4349] Bluetooth: hci3: Injecting HCI hardware error event
[  121.195664][ T5727] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  121.197866][ T4028] Bluetooth: hci3: hardware error 0x00
[  121.212790][ T5733] netlink: 'syz.4.374': attribute type 39 has an invalid length.
[  121.250050][ T5727] cramfs: empty filesystem
[  121.276640][ T4182] udevd[4182]: incorrect cramfs checksum on /dev/loop3
[  121.348967][ T5290] udevd[5290]: incorrect cramfs checksum on /dev/loop3
[  121.392499][ T5738] device syzkaller0 entered promiscuous mode
[  121.396370][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'.
[  121.399983][ T5290] udevd[5290]: incorrect cramfs checksum on /dev/loop3
[  121.422198][ T4182] udevd[4182]: incorrect cramfs checksum on /dev/loop3
[  121.455750][ T4182] udevd[4182]: incorrect cramfs checksum on /dev/loop3
[  121.624667][ T5747] loop2: detected capacity change from 0 to 2048
[  121.808819][ T5704] loop6: detected capacity change from 0 to 40427
[  123.140179][ T5704] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff
[  123.203613][ T5704] F2FS-fs (loop6): invalid crc value
[  123.253785][ T5704] F2FS-fs (loop6): Found nat_bits in checkpoint
[  123.348602][ T5704] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  123.477107][ T5704] F2FS-fs (loop6) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x14c/0x9e8
[  123.501599][ T5766] netlink: 27 bytes leftover after parsing attributes in process `syz.3.381'.
[  123.518633][ T5768] netlink: 'syz.3.381': attribute type 10 has an invalid length.
[  123.570641][ T5768] team0: Port device wlan1 added
[  123.646278][ T5107] attempt to access beyond end of device
[  123.646278][ T5107] loop6: rw=2049, want=45152, limit=40427
[  123.907624][ T5788] binder: 5786:5788 tried to acquire reference to desc 0, got 1 instead
[  123.940725][ T5793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.388'.
[  124.000391][ T5788] binder: 5786:5788 got transaction with invalid parent offset
[  124.002625][ T5788] binder: 5786:5788 transaction failed 29201/-22, size 104-24 line 3381
[  124.006407][ T5007] binder: undelivered TRANSACTION_ERROR: 29201
[  125.038027][ T5809] lo speed is unknown, defaulting to 1000
[  125.040198][ T5809] lo speed is unknown, defaulting to 1000
[  125.043628][ T5809] lo speed is unknown, defaulting to 1000
[  125.092794][ T5814] netlink: 6 bytes leftover after parsing attributes in process `syz.4.391'.
[  125.107272][ T5809] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  125.114199][ T5814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.141037][ T5809] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  125.211959][ T5816] device syzkaller0 entered promiscuous mode
[  125.219185][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  125.308799][ T5809] lo speed is unknown, defaulting to 1000
[  125.311334][ T5809] lo speed is unknown, defaulting to 1000
[  125.313489][ T5809] lo speed is unknown, defaulting to 1000
[  125.350551][ T5809] lo speed is unknown, defaulting to 1000
[  125.377037][ T5809] lo speed is unknown, defaulting to 1000
[  125.386899][ T5822] loop3: detected capacity change from 0 to 512
[  125.462419][ T5822] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  126.560760][ T5807] loop6: detected capacity change from 0 to 32768
[  126.628613][ T5807] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.389 (5807)
[  126.660288][ T5807] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm
[  126.662699][ T5807] BTRFS info (device loop6): setting nodatasum
[  126.670079][ T5807] BTRFS info (device loop6): metadata ratio 7
[  126.671825][ T5807] BTRFS info (device loop6): using free space tree
[  126.673637][ T5807] BTRFS info (device loop6): has skinny extents
[  126.926821][ T5876] loop3: detected capacity change from 0 to 256
[  127.023668][ T5876] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  127.054451][ T5807] BTRFS info (device loop6): enabling ssd optimizations
[  127.080766][ T5874] tipc: Resetting bearer <eth:syzkaller0>
[  127.182747][ T5874] tipc: Disabling bearer <eth:syzkaller0>
[  128.241937][ T4182] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop6 scanned by udevd (4182)
[  128.318504][ T5942] binder: 5940:5942 tried to acquire reference to desc 0, got 1 instead
[  128.325368][ T5942] binder: 5940:5942 BC_FREE_BUFFER u0000000000000000 no match
[  128.330349][ T4347] binder: release 5940:5942 transaction 114 out, still active
[  128.332668][ T4347] binder: undelivered TRANSACTION_COMPLETE
[  128.358171][ T4347] binder: send failed reply for transaction 114, target dead
[  128.416990][ T5949] binder: 5948:5949 ioctl c0306201 20000080 returned -14
[  128.430329][ T5949] binder: 5948:5949 tried to acquire reference to desc 0, got 1 instead
[  128.442149][ T4347] binder: undelivered TRANSACTION_COMPLETE
[  128.488001][ T4347] binder: undelivered transaction 119, process died.
[  128.553214][ T5957] udc-core: couldn't find an available UDC or it's busy
[  128.568168][ T5957] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  129.141736][ T5986] lo speed is unknown, defaulting to 1000
[  129.196188][ T5989] loop6: detected capacity change from 0 to 512
[  129.297925][ T5989] EXT4-fs (loop6): Invalid log block size: 7
[  129.392468][ T5996] udc-core: couldn't find an available UDC or it's busy
[  129.397501][ T5996] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  131.099932][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  131.851929][ T6036] binder: 6035:6036 tried to acquire reference to desc 0, got 1 instead
[  131.894327][ T4265] binder: release 6035:6036 transaction 128 out, still active
[  131.935591][ T4265] binder: undelivered TRANSACTION_COMPLETE
[  131.937305][ T4265] binder: send failed reply for transaction 128, target dead
[  133.218601][ T6057] loop5: detected capacity change from 0 to 32768
[  133.266952][ T6057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.445 (6057)
[  133.275331][ T6057] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  133.278133][ T6057] BTRFS info (device loop5): force clearing of disk cache
[  133.280012][ T6057] BTRFS info (device loop5): turning on async discard
[  133.281839][ T6057] BTRFS info (device loop5): enabling auto defrag
[  133.283590][ T6057] BTRFS info (device loop5): max_inline at 0
[  133.285352][ T6057] BTRFS info (device loop5): enabling disk space caching
[  133.287271][ T6057] BTRFS info (device loop5): disk space caching is enabled
[  133.289178][ T6057] BTRFS info (device loop5): has skinny extents
[  133.752553][ T6057] BTRFS info (device loop5): enabling ssd optimizations
[  133.756513][ T6057] BTRFS info (device loop5): clearing free space tree
[  133.758401][ T6057] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.760949][ T6057] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  135.108541][ T6110] udc-core: couldn't find an available UDC or it's busy
[  135.127303][ T6110] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  135.143261][ T6110] loop2: detected capacity change from 0 to 16
[  135.180619][ T6110] erofs: (device loop2): mounted with root inode @ nid 36.
[  135.208909][ T4182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4182)
[  135.253617][ T6101] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  135.833293][ T6132] loop4: detected capacity change from 0 to 512
[  135.917116][ T6134] binder: 6133:6134 tried to acquire reference to desc 0, got 1 instead
[  135.933687][ T6134] binder: 6133:6134 got transaction with fd, 0, but target does not allow fds
[  135.965325][ T6134] binder: 6133:6134 transaction failed 29201/-1, size 112-24 line 3331
[  135.992459][ T4262] binder: undelivered TRANSACTION_ERROR: 29201
[  136.014204][ T6132] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  137.202678][ T6146] binder: 6143:6146 tried to acquire reference to desc 0, got 1 instead
[  137.205243][ T6146] binder: 6143:6146 ioctl c0306201 200003c0 returned -14
[  137.209133][ T4095] binder: release 6143:6146 transaction 138 out, still active
[  137.211329][ T4095] binder: undelivered TRANSACTION_COMPLETE
[  137.220603][ T4095] binder: send failed reply for transaction 138, target dead
[  137.340991][ T6122] loop6: detected capacity change from 0 to 512
[  137.475871][ T6122] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback.
[  138.332035][ T6179] 9pnet: p9_client_clunk (6179): Trying to clunk with invalid fid
[  138.334443][ T6179] CPU: 1 PID: 6179 Comm: syz.6.471 Not tainted 5.15.186-syzkaller #0
[  138.336630][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  138.339427][ T6179] Call trace:
[  138.340224][ T6179]  dump_backtrace+0x0/0x43c
[  138.341421][ T6179]  show_stack+0x2c/0x3c
[  138.342568][ T6179]  __dump_stack+0x30/0x40
[  138.343692][ T6179]  dump_stack_lvl+0xf8/0x160
[  138.344976][ T6179]  dump_stack+0x1c/0x5c
[  138.346150][ T6179]  p9_client_clunk+0x280/0x368
[  138.347530][ T6179]  v9fs_statfs+0x154/0x2d0
[  138.348688][ T6179]  user_statfs+0x1bc/0x4f0
[  138.349913][ T6179]  __arm64_sys_statfs+0xc8/0x148
[  138.351262][ T6179]  invoke_syscall+0x98/0x2b8
[  138.352537][ T6179]  el0_svc_common+0x138/0x258
[  138.353792][ T6179]  do_el0_svc+0x58/0x14c
[  138.354930][ T6179]  el0_svc+0x78/0x1e0
[  138.355962][ T6179]  el0t_64_sync_handler+0xcc/0xe4
[  138.357284][ T6179]  el0t_64_sync+0x1a0/0x1a4
[  138.509535][ T6185] device syzkaller0 entered promiscuous mode
[  138.762792][ T6172] loop5: detected capacity change from 0 to 32768
[  138.928462][ T6199] binder: 6198:6199 tried to acquire reference to desc 0, got 1 instead
[  138.954114][ T6199] binder: 6198:6199 ioctl c0306201 200003c0 returned -14
[  139.004173][ T5003] binder: send failed reply for transaction 143 to 6198:6199
[  139.006611][ T5003] binder: undelivered TRANSACTION_COMPLETE
[  139.008153][ T5003] binder: undelivered TRANSACTION_ERROR: 29189
[  139.028374][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.028374][ T6172] 
[  139.047282][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.047282][ T6172] 
[  139.058218][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.058218][ T6172] 
[  139.068643][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.068643][ T6172] 
[  139.078366][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.078366][ T6172] 
[  139.088781][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.088781][ T6172] 
[  139.097049][ T6203] binder: 6202:6203 tried to acquire reference to desc 0, got 1 instead
[  139.100912][ T6203] binder: 6202:6203 got transaction with fd, 0, but target does not allow fds
[  139.104233][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.104233][ T6172] 
[  139.115752][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.115752][ T6172] 
[  139.125264][ T6203] binder: 6202:6203 transaction failed 29201/-1, size 112-24 line 3331
[  139.130871][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.130871][ T6172] 
[  139.139790][ T6201] loop3: detected capacity change from 0 to 4096
[  139.147554][ T6172] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.147554][ T6172] 
[  139.151662][ T5003] binder: undelivered TRANSACTION_ERROR: 29201
[  139.159943][ T6201] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  139.173799][ T6204] ERROR: (device loop5): dbAllocAG: unable to allocate blocks
[  139.173799][ T6204] 
[  139.208073][ T6204] jfs_create: dtInsert returned -EIO
[  139.212046][ T6204] ERROR: (device loop5): txAbort: 
[  139.212046][ T6204] 
[  139.241220][ T6201] ntfs3: loop3: Inode r=19 is not in use!
[  139.244198][ T6201] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  139.310006][ T4396] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.310006][ T4396] 
[  139.312587][ T4396] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  139.312587][ T4396] 
[  140.117061][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.482'.
[  140.931460][ T6230] netlink: 'syz.4.495': attribute type 10 has an invalid length.
[  140.985214][ T6230] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  141.171804][ T6238] binder: 6237:6238 tried to acquire reference to desc 0, got 1 instead
[  141.180498][ T6238] binder: 6237:6238 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  141.190062][ T6238] binder: 6238 RLIMIT_NICE not set
[  141.200578][ T4264] binder: undelivered TRANSACTION_COMPLETE
[  141.275063][ T6241] loop3: detected capacity change from 0 to 2048
[  141.320762][ T6247] binder: 6243:6247 tried to acquire reference to desc 0, got 1 instead
[  141.338369][ T6247] binder: 6243:6247 ioctl c0306201 200003c0 returned -14
[  141.354121][ T4264] binder: release 6243:6247 transaction 158 out, still active
[  141.356435][ T4264] binder: undelivered TRANSACTION_COMPLETE
[  141.383514][ T4264] binder: send failed reply for transaction 158, target dead
[  141.455451][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.457644][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.459201][ T6250] loop4: detected capacity change from 0 to 4096
[  141.459738][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.471370][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.473589][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.478754][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.480972][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.483028][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.499636][ T6241] loop3: detected capacity change from 0 to 164
[  141.510257][ T6250] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  141.514231][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.524249][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.526714][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.529390][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.531475][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.533494][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.559204][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.571795][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.581147][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.589284][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.596796][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.607113][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.616397][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.623140][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.634231][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.642246][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.652652][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.660426][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.669190][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.674343][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.678933][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.682438][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.686906][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.690416][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.695102][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.698511][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.707967][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.710631][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.713103][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.715820][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.718244][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.720733][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.723149][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.725654][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.727911][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  141.732835][ T4264] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  141.803577][ T6250] ntfs3: loop4: Inode r=19 is not in use!
[  141.806286][ T6250] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  143.981471][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  144.033089][ T6281] loop5: detected capacity change from 0 to 256
[  144.191038][ T6285] binder: 6284:6285 tried to acquire reference to desc 0, got 1 instead
[  144.202926][ T6285] binder: 6284:6285 BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  144.218649][ T6285] binder: 6284:6285 got reply transaction with no transaction stack
[  144.228509][ T6285] binder: 6284:6285 transaction failed 29201/-71, size 0-0 line 2822
[  144.239501][ T4095] binder: undelivered TRANSACTION_COMPLETE
[  144.279307][ T4095] binder: undelivered TRANSACTION_ERROR: 29201
[  144.281150][ T4095] binder: undelivered transaction 163, process died.
[  145.467539][ T6268] loop2: detected capacity change from 0 to 40427
[  145.522236][ T6268] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[  145.533194][ T6301] device syzkaller0 entered promiscuous mode
[  145.545705][ T6268] F2FS-fs (loop2): invalid crc value
[  145.563783][ T6268] F2FS-fs (loop2): Found nat_bits in checkpoint
[  145.627092][ T6268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  145.746857][ T6268] F2FS-fs (loop2) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x14c/0x9e8
[  145.811797][ T4031] attempt to access beyond end of device
[  145.811797][ T4031] loop2: rw=2049, want=45152, limit=40427
[  146.102416][ T6313] loop5: detected capacity change from 0 to 4096
[  146.163106][ T6297] loop3: detected capacity change from 0 to 32768
[  147.297610][ T6313] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  147.382189][ T6313] ntfs3: loop5: Inode r=19 is not in use!
[  147.386257][ T6313] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  147.593495][ T6345] binder: 6343:6345 tried to acquire reference to desc 0, got 1 instead
[  147.610055][ T6345] binder: tried to use weak ref as strong ref
[  147.611796][ T6345] binder: 6343:6345 got transaction with invalid handle, 0
[  147.634485][ T6345] binder: 6343:6345 transaction failed 29201/-22, size 88-24 line 3242
[  147.637924][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  147.646288][ T6348] input: syz1 as /devices/virtual/input/input4
[  147.960316][ T6359] loop5: detected capacity change from 0 to 512
[  148.207882][ T6359] EXT4-fs (loop5): orphan cleanup on readonly fs
[  148.339360][ T6371] loop6: detected capacity change from 0 to 512
[  148.514393][ T6371] EXT2-fs (loop6): warning: mounting ext3 filesystem as ext2
[  149.027930][ T6359] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6)
[  149.031943][ T6359] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  149.089500][ T6359] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.524: Failed to acquire dquot type 1
[  149.110219][ T6359] EXT4-fs (loop5): 1 truncate cleaned up
[  149.117924][ T6359] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,noinit_itable,noblock_validity,grpjquota=,grpjquota=,noquota,sysvgroups,noload,nodiscard,,errors=continue. Quota mode: writeback.
[  149.171745][ T6359] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  149.182181][ T6359] EXT4-fs warning (device loop5): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount
[  149.182181][ T6359] 
[  149.302493][ T6377] binder: 6375:6377 tried to acquire reference to desc 0, got 1 instead
[  149.335373][ T6377] binder: 6375:6377 BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  149.337991][ T6377] binder: 6375:6377 got reply transaction with no transaction stack
[  149.352220][ T6377] binder: 6375:6377 transaction failed 29201/-71, size 0-0 line 2822
[  149.363763][ T4066] binder: undelivered TRANSACTION_COMPLETE
[  149.382048][ T4066] binder: undelivered TRANSACTION_ERROR: 29201
[  149.383963][ T4066] binder: undelivered transaction 180, process died.
[  150.262219][ T6393] loop2: detected capacity change from 0 to 512
[  150.293299][ T6392] netlink: 'syz.5.530': attribute type 39 has an invalid length.
[  150.448800][ T6399] loop6: detected capacity change from 0 to 512
[  150.619306][ T6399] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  150.806124][ T6393] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nodelalloc,quota,,errors=continue. Quota mode: writeback.
[  150.933648][ T6393] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.531: corrupted inode contents
[  150.952832][ T6393] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.531: mark_inode_dirty error
[  151.814522][ T6393] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.531: corrupted inode contents
[  151.828812][ T6393] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.531: mark_inode_dirty error
[  151.900759][ T6398] loop4: detected capacity change from 0 to 32768
[  151.978306][ T6398] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  151.980668][ T6398] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  152.057933][ T6398] gfs2: fsid=syz:syz.s: journal 0 mapped with 1 extents in 0ms
[  152.342632][ T6426] loop3: detected capacity change from 0 to 512
[  152.873952][ T6426] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2
[  153.096480][ T6398] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  153.855465][ T6430] loop2: detected capacity change from 0 to 32768
[  153.963567][ T6436] loop5: detected capacity change from 0 to 32768
[  154.048589][ T6436] XFS (loop5): Mounting V5 Filesystem
[  154.248849][ T6471] udc-core: couldn't find an available UDC or it's busy
[  154.250739][ T6471] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  154.281759][ T6436] XFS (loop5): Ending clean mount
[  154.296118][ T6436] XFS (loop5): Quotacheck needed: Please wait.
[  154.370911][ T6436] XFS (loop5): Quotacheck: Done.
[  155.350899][ T6430] loop2: detected capacity change from 0 to 32768
[  155.436453][ T6430] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.538 (6430)
[  155.496016][ T6430] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  155.499621][ T6430] BTRFS info (device loop2): force zlib compression, level 3
[  155.501971][ T6430] BTRFS info (device loop2): setting nodatasum
[  155.505978][ T6430] BTRFS info (device loop2): doing ref verification
[  155.508993][ T6430] BTRFS info (device loop2): allowing degraded mounts
[  155.519443][ T6430] BTRFS info (device loop2): force clearing of disk cache
[  155.523820][ T6430] BTRFS info (device loop2): using free space tree
[  155.535462][ T6430] BTRFS info (device loop2): has skinny extents
[  155.675138][ T4646] XFS (loop5): Unmounting Filesystem
[  155.724675][  T136] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x6683c582e6d194bc found 0x19ca09aae56a1e5e level 0
[  155.728976][ T6430] BTRFS warning (device loop2): couldn't read tree root
[  155.841526][ T6430] BTRFS error (device loop2): open_ctree failed: -22
[  156.242521][ T6530] netlink: 'syz.6.557': attribute type 39 has an invalid length.
[  156.418712][ T6534] loop5: detected capacity change from 0 to 1024
[  156.466972][ T6534] EXT4-fs (loop5): Ignoring removed nobh option
[  156.477359][ T6534] EXT4-fs (loop5): Ignoring removed bh option
[  156.479136][ T6534] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  156.482492][ T6536] netlink: 'syz.3.550': attribute type 39 has an invalid length.
[  157.321074][ T6542] udc-core: couldn't find an available UDC or it's busy
[  157.322927][ T6542] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  157.368981][ T6534] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  157.531913][ T6545] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.548: Allocating blocks 497-513 which overlap fs metadata
[  157.541414][ T6545] EXT4-fs (loop5): pa 000000000ae78226: logic 48768, phys. 129, len 24
[  157.544050][ T6545] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 23, pa_free 24
[  160.293818][ T6605] loop2: detected capacity change from 0 to 1024
[  160.309696][ T6608] lo speed is unknown, defaulting to 1000
[  160.339344][ T6605] EXT4-fs (loop2): Ignoring removed nobh option
[  160.341051][ T6605] EXT4-fs (loop2): Ignoring removed bh option
[  160.342874][ T6605] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  160.419403][ T6605] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  160.589686][ T6585] loop4: detected capacity change from 0 to 32768
[  160.725103][ T6591] loop3: detected capacity change from 0 to 32768
[  160.805655][ T6615] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.565: Allocating blocks 497-513 which overlap fs metadata
[  160.813531][ T6615] EXT4-fs (loop2): pa 00000000195a3816: logic 48768, phys. 129, len 24
[  160.816076][ T6615] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 23, pa_free 24
[  161.050483][ T6620] xt_connbytes: Forcing CT accounting to be enabled
[  161.052301][ T6620] xt_nat: multiple ranges no longer supported
[  162.144125][ T6631] loop5: detected capacity change from 0 to 512
[  162.188424][ T6631] EXT4-fs (loop5): Ignoring removed nobh option
[  162.190289][ T6631] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.207825][ T6631] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.570: iget: bad i_size value: 38620345925642
[  162.224285][ T6631] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.570: couldn't read orphan inode 15 (err -117)
[  162.245102][ T6631] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  162.349859][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.574'.
[  162.352584][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.574'.
[  162.355266][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.574'.
[  162.357894][ T6639] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  162.510819][ T6643] loop6: detected capacity change from 0 to 128
[  163.497365][ T6643] EXT4-fs (loop6): Ignoring removed nobh option
[  163.638104][ T6643] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[  164.511885][ T6660] binder: BINDER_SET_CONTEXT_MGR already set
[  164.513573][ T6660] binder: 6659:6660 ioctl 4018620d 20000040 returned -16
[  164.534744][ T6660] binder: 6659:6660 got transaction to invalid handle, 1
[  164.549495][ T6660] binder: 6659:6660 transaction failed 29201/-22, size 88-0 line 2917
[  164.600119][ T4142] binder: undelivered TRANSACTION_ERROR: 29201
[  164.640390][ T6667] binder: 6666:6667 tried to acquire reference to desc 0, got 1 instead
[  164.652646][ T5003] binder: release 6666:6667 transaction 195 out, still active
[  164.734111][ T5003] binder: undelivered TRANSACTION_COMPLETE
[  164.735856][ T5003] binder: send failed reply for transaction 195, target dead
[  164.780090][ T6670] netlink: 'syz.3.594': attribute type 10 has an invalid length.
[  164.892883][ T6675] loop5: detected capacity change from 0 to 512
[  164.905566][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  165.419801][ T5107] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /50/mnt/lost+found: directory fails checksum at offset 0
[  165.697877][ T6670] team0: Port device wlan1 removed
[  165.701693][ T6670] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  165.764061][ T6675] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  165.850193][ T5107] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /50/mnt/lost+found: directory fails checksum at offset 1024
[  165.940120][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  166.007616][ T5107] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[  166.022721][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  166.935681][ T5107] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /50/mnt/lost+found: directory fails checksum at offset 0
[  166.960904][ T6681] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  166.969393][ T5107] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /50/mnt/lost+found: directory fails checksum at offset 1024
[  167.036086][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  167.040423][ T5107] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[  167.114066][ T6691] loop5: detected capacity change from 0 to 1024
[  167.122404][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  167.137191][ T5107] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /50/mnt/lost+found: directory fails checksum at offset 0
[  167.374061][ T6691] EXT4-fs (loop5): inline encryption not supported
[  167.376431][ T6691] EXT4-fs (loop5): Ignoring removed bh option
[  167.384129][ T5107] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /50/mnt/lost+found: directory fails checksum at offset 1024
[  168.460699][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  168.514576][ T6691] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback.
[  168.577084][ T6709] binder: 6708:6709 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  168.580826][ T5107] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[  168.600897][ T6707] binder: 6705:6707 tried to acquire reference to desc 0, got 1 instead
[  168.610785][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  168.629788][ T6710] binder: 6708:6710 tried to acquire reference to desc 0, got 1 instead
[  168.630580][ T6707] binder: 6705:6707 got transaction with invalid data ptr
[  168.635128][ T6709] binder: undelivered transaction 205, put_user failed
[  168.674546][ T6709] binder: 6708:6709 ioctl c0306201 20000280 returned -14
[  168.676766][ T6707] binder: 6705:6707 transaction failed 29201/-14, size 1792-0 line 3406
[  168.688754][ T5107] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /50/mnt/lost+found: directory fails checksum at offset 0
[  168.693333][   T25] binder: undelivered TRANSACTION_COMPLETE
[  168.731308][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  168.748105][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  168.766746][ T5107] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  168.813273][ T4095] binder: undelivered TRANSACTION_ERROR: 29201
[  169.014139][ T4095] Bluetooth: hci2: command 0x0406 tx timeout
[  169.334769][ T6721] loop5: detected capacity change from 0 to 40427
[  169.352018][ T6721] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff
[  169.354441][ T6721] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4
[  169.359648][ T6721] F2FS-fs (loop5): invalid crc value
[  169.376108][ T6721] F2FS-fs (loop5): Found nat_bits in checkpoint
[  169.392704][ T6721] F2FS-fs (loop5): Start checkpoint disabled!
[  169.416038][ T6721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  169.868569][ T1845] attempt to access beyond end of device
[  169.868569][ T1845] loop5: rw=2049, want=45104, limit=40427
[  170.602811][ T6736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'.
[  172.348919][ T6758] binder: 6757:6758 tried to acquire reference to desc 0, got 1 instead
[  172.366343][ T6758] binder: 6757:6758 got transaction with invalid data ptr
[  172.378573][ T6758] binder: 6757:6758 transaction failed 29201/-14, size 0-12280 line 3186
[  172.395942][ T4095] binder: undelivered TRANSACTION_COMPLETE
[  172.397855][ T4095] binder: undelivered TRANSACTION_ERROR: 29201
[  172.469040][ T4095] binder: undelivered transaction 210, process died.
[  172.548643][ T6772] loop5: detected capacity change from 0 to 64
[  172.571396][ T6754] lo speed is unknown, defaulting to 1000
[  172.890410][ T6754] chnl_net:caif_netlink_parms(): no params data found
[  173.810473][ T6793] loop2: detected capacity change from 0 to 512
[  173.843753][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.850745][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.858254][ T6754] device bridge_slave_0 entered promiscuous mode
[  173.863469][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.870083][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.872948][ T6754] device bridge_slave_1 entered promiscuous mode
[  173.976498][ T6793] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.990352][ T6793] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[  173.991717][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.993477][ T6793] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  174.000349][ T6793] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.631: Failed to acquire dquot type 0
[  174.006181][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.313510][ T1960] Bluetooth: hci1: command 0x0409 tx timeout
[  174.932722][ T6754] team0: Port device team_slave_0 added
[  174.949943][ T6754] team0: Port device team_slave_1 added
[  175.167372][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.169361][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.178315][ T6754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.182667][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.185123][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.191881][ T6754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.211577][ T4396] Bluetooth: hci4: Frame reassembly failed (-84)
[  176.166202][ T6754] device hsr_slave_0 entered promiscuous mode
[  176.204843][ T6754] device hsr_slave_1 entered promiscuous mode
[  176.690423][ T6754] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  176.738685][ T6754] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  176.776979][ T6754] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  176.790687][ T6829] binder: 6828:6829 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  176.816868][ T6754] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  177.018730][ T6833] binder: 6828:6833 tried to acquire reference to desc 0, got 1 instead
[  177.037789][ T6829] binder: undelivered transaction 216, put_user failed
[  177.047120][ T6829] binder: 6828:6829 ioctl c0306201 20000280 returned -14
[  177.057433][ T4095] binder: undelivered TRANSACTION_COMPLETE
[  177.166413][ T1960] Bluetooth: hci1: command 0x041b tx timeout
[  177.350687][ T6754] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.379500][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.382194][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.390875][ T4142] Bluetooth: hci4: command 0x1003 tx timeout
[  177.392749][ T4029] Bluetooth: hci4: sending frame failed (-49)
[  177.403661][ T6754] 8021q: adding VLAN 0 to HW filter on device team0
[  177.414522][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.417774][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.420404][ T1845] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.422297][ T1845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.425229][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.428082][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.430773][ T1845] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.432749][ T1845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.446289][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.457671][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  177.470033][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.473599][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.490280][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.510389][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.519354][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.529180][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.532414][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.540624][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.552635][ T6754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.560349][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  177.565751][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.569688][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.693514][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.696077][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.538379][ T6754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.615197][ T6853] loop4: detected capacity change from 0 to 512
[  178.783008][ T6853] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  178.810777][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.813676][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.830191][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.832988][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.845408][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.854712][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.860561][ T6853] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present
[  178.863582][ T6853] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  178.876162][ T6754] device veth0_vlan entered promiscuous mode
[  178.882977][ T6754] device veth1_vlan entered promiscuous mode
[  178.883985][ T6853] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.638: Failed to acquire dquot type 0
[  178.951517][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.959810][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.962483][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.967998][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.980629][ T6754] device veth0_macvtap entered promiscuous mode
[  178.987531][ T6754] device veth1_macvtap entered promiscuous mode
[  179.009259][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.012323][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.022331][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.025596][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.028271][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.030936][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.033476][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.043233][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.047753][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.051177][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  179.064413][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  179.067094][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  179.071261][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  179.081902][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.084774][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.087342][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.091595][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.099083][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.102243][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.112593][ T6754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.229101][ T6869] loop5: detected capacity change from 0 to 32768
[  179.254289][ T6754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.263197][ T6754] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.280887][ T4142] Bluetooth: hci1: command 0x040f tx timeout
[  179.288658][ T6754] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.291071][ T6754] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.293360][ T6754] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.295750][ T6754] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.300383][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.303665][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  179.891559][ T1960] Bluetooth: hci4: command 0x1001 tx timeout
[  180.158955][ T6869] XFS (loop5): Mounting V5 Filesystem
[  180.161054][  T499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.163468][  T499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.183434][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.203976][ T4029] Bluetooth: hci4: sending frame failed (-49)
[  180.233335][  T499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.236526][  T499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.257059][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.318924][ T6869] XFS (loop5): Ending clean mount
[  180.323091][ T6869] XFS (loop5): Quotacheck needed: Please wait.
[  180.367204][ T6883] loop7: detected capacity change from 0 to 512
[  180.386068][ T6869] XFS (loop5): Quotacheck: Done.
[  180.431785][ T6883] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  180.595182][ T4646] XFS (loop5): Unmounting Filesystem
[  180.600764][ T6887] binder: 6886:6887 tried to acquire reference to desc 0, got 1 instead
[  180.609930][ T6887] binder: 6886:6887 ioctl c0306201 20000180 returned -14
[  180.629713][   T25] binder: undelivered transaction 221, process died.
[  180.631778][   T25] binder: undelivered TRANSACTION_COMPLETE
[  180.671833][ T6890] binder: 6889:6890 tried to acquire reference to desc 0, got 1 instead
[  180.682188][ T6890] binder: 6889:6890 got transaction with too large buffer
[  181.520570][   T25] Bluetooth: hci1: command 0x0419 tx timeout
[  181.554022][ T6890] binder: 6889:6890 transaction failed 29201/-22, size 104-24 line 3349
[  181.558905][ T4142] binder: undelivered TRANSACTION_ERROR: 29201
[  182.223396][   T25] Bluetooth: hci4: command 0x1009 tx timeout
[  183.050499][ T6955] binder: 6954:6955 ioctl c0306201 20000480 returned -14
[  183.062022][ T6955] binder: 6954:6955 tried to acquire reference to desc 0, got 1 instead
[  183.085070][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.653'.
[  183.088428][ T6955] binder: 6954:6955 got transaction with invalid parent offset or type
[  183.090866][ T6955] binder: 6954:6955 transaction failed 29201/-22, size 80-24 line 3286
[  183.105608][ T4210] binder: undelivered TRANSACTION_ERROR: 29201
[  183.134686][ T6956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.142982][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'.
[  183.219953][ T6961] loop7: detected capacity change from 0 to 2048
[  183.266703][ T4182]  loop7: p1 < > p3
[  183.271350][ T4182] loop7: p3 size 134217728 extends beyond EOD, truncated
[  183.289819][ T6961]  loop7: p1 < > p3
[  183.292125][ T6961] loop7: p3 size 134217728 extends beyond EOD, truncated
[  183.338872][ T3642]  loop7: p1 < > p3
[  183.340895][ T3642] loop7: p3 size 134217728 extends beyond EOD, truncated
[  183.441317][ T5290] udevd[5290]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  183.451991][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  183.478924][ T6963] device syzkaller0 entered promiscuous mode
[  183.488749][ T5290] udevd[5290]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  183.498111][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  183.532395][ T5290] udevd[5290]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  183.535095][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  183.707883][ T6965] loop5: detected capacity change from 0 to 512
[  183.716426][ T6965] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  183.716426][ T6965] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  183.716426][ T6965] 
[  183.723163][ T6965] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  183.727909][ T6965] EXT4-fs (loop5): journaled quota format not specified
[  186.018967][ T6981] binder: 6980:6981 tried to acquire reference to desc 0, got 1 instead
[  186.022571][ T6981] binder: 6980:6981 transaction failed 29201/-22, size 0-0 line 3059
[  186.028168][ T5003] binder: undelivered TRANSACTION_COMPLETE
[  186.039222][ T5003] binder: undelivered TRANSACTION_ERROR: 29201
[  186.041145][ T5003] binder: undelivered transaction 246, process died.
[  186.075240][ T6983] tipc: Started in network mode
[  186.076868][ T6983] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  186.079209][ T6983] tipc: Enabled bearer <eth:team0>, priority 0
[  186.313660][ T6993] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  187.286940][ T5005] tipc: Node number set to 11578026
[  187.524420][ T6991] loop5: detected capacity change from 0 to 32768
[  188.801061][ T6991] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  188.811340][ T6991] (syz.5.671,6991,1):ocfs2_get_block:148 get_block on system inode 0x00000000ec09bc26 (65)
[  188.850194][ T6991] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  188.897235][ T6991] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  188.900096][ T6991] OCFS2: File system is now read-only.
[  188.901646][ T6991] (syz.5.671,6991,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  188.968565][ T6991] (syz.5.671,6991,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  189.153331][ T6991] (syz.5.671,6991,1):ocfs2_get_clusters:624 ERROR: status = -30
[  189.158202][ T6991] (syz.5.671,6991,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  189.160488][ T6991] (syz.5.671,6991,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0x00000000ec09bc26, block: 0
[  189.623551][ T6991] (syz.5.671,6991,1):ocfs2_get_block:148 get_block on system inode 0x00000000ec09bc26 (65)
[  189.654252][ T6991] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  189.659382][ T6991] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  189.661986][ T6991] (syz.5.671,6991,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  189.924138][ T6991] (syz.5.671,6991,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  189.926378][ T6991] (syz.5.671,6991,1):ocfs2_get_clusters:624 ERROR: status = -30
[  189.931196][ T6991] (syz.5.671,6991,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  189.933552][ T6991] (syz.5.671,6991,1):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0x00000000ec09bc26, block: 0
[  190.079976][ T4646] ocfs2: Unmounting device (7,5) on (node local)
[  190.101793][ T7023] loop4: detected capacity change from 0 to 16
[  190.172581][ T7026] binder: 7025:7026 tried to acquire reference to desc 0, got 1 instead
[  190.180706][ T7023] erofs: (device loop4): mounted with root inode @ nid 36.
[  190.200382][   T25] binder: release 7025:7026 transaction 258 out, still active
[  190.201160][ T4028] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  190.202583][   T25] binder: undelivered TRANSACTION_COMPLETE
[  190.232731][ T7023] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  190.273976][   T25] binder: send failed reply for transaction 258, target dead
[  190.335168][ T7023] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  190.386530][ T7023] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  190.423817][ T7023] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  191.006599][ T7046] loop3: detected capacity change from 0 to 512
[  191.530474][ T7063] netlink: 116 bytes leftover after parsing attributes in process `syz.7.694'.
[  191.559739][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'.
[  192.542227][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  193.226627][ T7087] udc-core: couldn't find an available UDC or it's busy
[  193.228608][ T7087] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  193.285810][ T7089] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  193.378817][ T7095] netlink: 116 bytes leftover after parsing attributes in process `syz.4.708'.
[  193.828903][ T4031] bridge0: port 3(syz_tun) entered disabled state
[  193.851428][ T4031] device syz_tun left promiscuous mode
[  193.853404][ T4031] bridge0: port 3(syz_tun) entered disabled state
[  194.933528][ T7109] loop3: detected capacity change from 0 to 2048
[  194.983285][ T7109] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  195.011939][ T7109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.119412][ T5249] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.008980][ T5249] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.083259][ T5249] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.139977][ T7101] lo speed is unknown, defaulting to 1000
[  196.173867][ T5249] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.210211][ T7111] lo speed is unknown, defaulting to 1000
[  196.343557][ T7101] chnl_net:caif_netlink_parms(): no params data found
[  196.773941][ T4210] Bluetooth: hci1: command 0x0409 tx timeout
[  197.649143][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.660022][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.667564][ T7101] device bridge_slave_0 entered promiscuous mode
[  197.674955][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.677056][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.683600][ T7101] device bridge_slave_1 entered promiscuous mode
[  197.706193][ T5249] tipc: Disabling bearer <eth:team0>
[  197.709183][ T5249] tipc: Left network mode
[  197.780021][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.796932][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.967942][ T7111] chnl_net:caif_netlink_parms(): no params data found
[  197.974203][ T1960] Bluetooth: hci3: command 0x0409 tx timeout
[  197.987397][ T7101] team0: Port device team_slave_0 added
[  198.041746][ T7101] team0: Port device team_slave_1 added
[  198.183525][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.185662][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.188517][ T7111] device bridge_slave_0 entered promiscuous mode
[  198.193794][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.196788][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.204818][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.208724][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.210813][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.218634][ T7111] device bridge_slave_1 entered promiscuous mode
[  198.265842][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.267982][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.275765][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.143479][ T5003] Bluetooth: hci1: command 0x041b tx timeout
[  199.167448][ T7174] loop3: detected capacity change from 0 to 8
[  199.177314][ T7172] binder: 7171:7172 tried to acquire reference to desc 0, got 1 instead
[  199.180518][ T7172] binder: 7171:7172 got transaction with too large buffer
[  199.199396][ T7172] binder: 7171:7172 transaction failed 29201/-22, size 104-24 line 3349
[  199.203336][ T5003] binder: undelivered TRANSACTION_ERROR: 29201
[  199.251298][ T7111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.301954][ T7111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.303097][ T7176] siw: device registration error -23
[  199.407410][ T7101] device hsr_slave_0 entered promiscuous mode
[  199.466305][ T7101] device hsr_slave_1 entered promiscuous mode
[  199.494603][ T7101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.496805][ T7101] Cannot create hsr debugfs directory
[  199.517478][ T7176] netlink: 6 bytes leftover after parsing attributes in process `syz.5.725'.
[  199.519958][ T7176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.574479][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.578423][ T5244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.580742][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.595768][ T7111] team0: Port device team_slave_0 added
[  199.738308][ T4095] Bluetooth: hci5: command 0x0406 tx timeout
[  199.741520][ T7111] team0: Port device team_slave_1 added
[  199.827970][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.829870][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.848325][ T7111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.890829][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.892771][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.955700][ T7111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.020432][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'.
[  200.053969][ T4095] Bluetooth: hci3: command 0x041b tx timeout
[  200.116870][ T7201] loop5: detected capacity change from 0 to 128
[  200.195141][ T7201] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  200.256985][ T7111] device hsr_slave_0 entered promiscuous mode
[  200.284828][ T7111] device hsr_slave_1 entered promiscuous mode
[  200.333667][ T7111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.342180][ T7111] Cannot create hsr debugfs directory
[  200.729609][ T7224] ptrace attach of "./syz-executor exec"[4646] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               Œ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      À•              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ"[7224]
[  201.174305][ T4095] Bluetooth: hci1: command 0x040f tx timeout
[  201.496056][ T7101] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  201.505890][  T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.508875][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.533200][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'.
[  201.606814][ T7101] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  201.666147][ T7101] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  201.722556][ T7227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.724734][ T7227] IPv6: NLM_F_CREATE should be set when creating new route
[  201.733576][ T5249] device hsr_slave_0 left promiscuous mode
[  201.764808][ T5249] device hsr_slave_1 left promiscuous mode
[  201.928288][ T7243] binder: 7242:7243 tried to acquire reference to desc 0, got 1 instead
[  201.931848][ T7243] binder: 7242:7243 got transaction with invalid parent offset
[  201.937368][ T7243] binder: 7242:7243 transaction failed 29201/-22, size 104-24 line 3381
[  201.952252][ T4095] binder: undelivered TRANSACTION_ERROR: 29201
[  201.984148][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.986273][ T5249] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.995037][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.997159][ T5249] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.999922][ T5249] device bridge_slave_1 left promiscuous mode
[  202.001735][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.193932][ T4095] Bluetooth: hci3: command 0x040f tx timeout
[  202.904913][ T5249] device bridge_slave_0 left promiscuous mode
[  202.906804][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.915083][ T7249] loop5: detected capacity change from 0 to 1024
[  203.039910][ T7249] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  203.041950][ T7249] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  203.078789][ T4139] hfsplus: b-tree write err: -5, ino 4
[  204.013604][ T4210] Bluetooth: hci1: command 0x0419 tx timeout
[  204.024279][ T5249] device veth1_macvtap left promiscuous mode
[  204.026008][ T5249] device veth0_macvtap left promiscuous mode
[  204.029371][ T5249] device veth1_vlan left promiscuous mode
[  204.030957][ T5249] device veth0_vlan left promiscuous mode
[  204.429645][ T4210] Bluetooth: hci3: command 0x0419 tx timeout
[  204.704066][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.707691][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.344573][ T4139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.347086][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.375907][ T5244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.422791][ T5249] team0 (unregistering): Port device team_slave_1 removed
[  205.433009][ T5249] team0 (unregistering): Port device team_slave_0 removed
[  205.444842][ T5249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.492004][ T5249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.645819][ T5249] bond0 (unregistering): Released all slaves
[  205.755051][ T7101] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  207.089514][ T7290] ptrace attach of "./syz-executor exec"[4024] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               Œ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      À•              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ"[7290]
[  207.262308][ T5257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.264895][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.133600][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.597805][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.600517][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.696406][ T7101] 8021q: adding VLAN 0 to HW filter on device team0
[  209.734133][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.736770][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.739376][ T5257] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.741340][ T5257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.743677][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.769883][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.772579][ T5257] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.774594][ T5257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.777544][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  209.825776][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  210.664295][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  210.705676][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  210.710776][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  210.715693][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.753445][ T5244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.775672][ T4139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.778135][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.054856][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.057998][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.091477][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.094564][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  212.102952][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  212.107768][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.311048][ T7101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  212.317439][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'.
[  212.320306][ T4139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.322787][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.430219][ T7353] ptrace attach of "./syz-executor exec"[4032] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               Œ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      À•              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ"[7353]
[  213.014380][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.481498][ T7363] loop4: detected capacity change from 0 to 1024
[  213.522880][ T5244] Bluetooth: hci4: Frame reassembly failed (-84)
[  213.531987][ T7363] EXT4-fs (loop4): inline encryption not supported
[  213.533800][ T7363] EXT4-fs (loop4): Ignoring removed bh option
[  213.590722][ T7363] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback.
[  213.645749][ T7111] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  213.732214][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.734786][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.741164][ T7111] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  213.786103][ T7111] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  213.819952][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.841093][ T7111] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  214.174806][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.205198][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  214.207901][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  214.213821][ T7111] 8021q: adding VLAN 0 to HW filter on device team0
[  214.250491][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  214.253499][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  214.256583][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.258559][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.262722][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  214.266830][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  214.269567][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.271599][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.275649][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  214.288061][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  214.291460][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  214.296366][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  214.300986][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  214.306100][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  214.309072][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  214.326596][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  214.330015][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  214.335595][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  214.338508][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  214.341349][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  214.345596][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  214.348492][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  214.376836][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  214.403397][ T7101] device veth0_vlan entered promiscuous mode
[  214.415649][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  214.418657][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  214.423185][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  214.429896][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  214.440316][ T7101] device veth1_vlan entered promiscuous mode
[  214.523186][ T7101] device veth0_macvtap entered promiscuous mode
[  214.530369][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  214.533202][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  214.536225][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  214.553437][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  214.557489][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  214.563675][ T7101] device veth1_macvtap entered promiscuous mode
[  214.583325][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.601177][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.608641][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.611624][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.621833][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.631678][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.648667][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.657943][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.665901][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.668052][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  214.670872][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  214.677220][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  214.687957][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.690728][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.693416][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.707283][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.709926][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.712765][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.720632][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.723553][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.735855][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.738693][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  214.741561][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  214.765959][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  214.768222][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  214.785546][ T7101] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.788500][ T7101] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.790959][ T7101] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.793207][ T7101] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.830609][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.964513][  T499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.966884][  T499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.972726][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  215.025861][ T4628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.028316][ T4628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.035416][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  215.574311][  T144] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  216.553145][ T7111] device veth0_vlan entered promiscuous mode
[  216.593660][ T7111] device veth1_vlan entered promiscuous mode
[  216.694616][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  216.697741][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  216.700621][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  216.703468][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  216.761898][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  216.776975][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  217.423960][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  217.426827][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  217.429401][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  217.432143][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  217.496211][ T7111] device veth0_macvtap entered promiscuous mode
[  217.498946][ T5244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.501874][ T5244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.505184][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.538066][ T7111] device veth1_macvtap entered promiscuous mode
[  217.627047][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.629766][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.632430][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.667344][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.686344][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.689143][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.716726][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.719512][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.752154][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.760846][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.794480][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.800424][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  217.803314][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  217.806635][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  217.821865][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  217.848802][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.851657][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.881197][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.896089][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.898901][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.934263][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.937082][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.939837][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.942375][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.995281][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.069406][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.071651][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  218.075190][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  218.085526][ T7111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.094017][ T7111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.096392][ T7111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.113987][ T7111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.190345][ T5244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.192842][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.199460][ T5249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.201822][ T5249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.275562][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  219.499518][ T5249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.502915][ T5249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.182176][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  221.542510][ T7507] ptrace attach of "./syz-executor exec"[7101] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               Œ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      À•              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ"[7507]
[  222.616451][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.708300][ T7521] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.305189][ T5249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.307684][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.540244][ T7532] binder: 7526:7532 tried to acquire reference to desc 0, got 1 instead
[  223.542914][ T7532] binder: 7526:7532 ioctl c0306201 200003c0 returned -14
[  223.550509][ T7532] binder: 7526:7532 got transaction with out-of-order buffer fixup
[  223.552639][ T7532] binder: 7526:7532 transaction failed 29201/-22, size 112-24 line 3299
[  223.565274][ T4132] binder: undelivered TRANSACTION_ERROR: 29201
[  224.630157][  T499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.632597][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.160148][ T4628] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.212461][ T4628] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.230696][ T7580] lo speed is unknown, defaulting to 1000
[  226.266308][ T4628] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.311823][ T4628] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.333984][ T7580] chnl_net:caif_netlink_parms(): no params data found
[  226.385419][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.387652][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.390736][ T7580] device bridge_slave_0 entered promiscuous mode
[  226.395392][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.397376][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.400283][ T7580] device bridge_slave_1 entered promiscuous mode
[  226.423160][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.428730][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.450154][ T7580] team0: Port device team_slave_0 added
[  226.457508][ T7580] team0: Port device team_slave_1 added
[  226.474578][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.476676][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.484439][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.489039][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.490981][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.498374][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.597587][ T7580] device hsr_slave_0 entered promiscuous mode
[  226.656447][ T7580] device hsr_slave_1 entered promiscuous mode
[  228.054052][ T4095] Bluetooth: hci3: command 0x0409 tx timeout
[  228.075320][ T4628] device hsr_slave_0 left promiscuous mode
[  228.130722][ T4628] device hsr_slave_1 left promiscuous mode
[  228.214230][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.216311][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.220336][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.222506][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.225521][ T4628] device bridge_slave_1 left promiscuous mode
[  228.227346][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.266752][ T4628] device bridge_slave_0 left promiscuous mode
[  228.268699][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.376154][  T499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.404285][ T4628] device veth1_macvtap left promiscuous mode
[  228.406814][ T4628] device veth0_macvtap left promiscuous mode
[  228.408571][ T4628] device veth1_vlan left promiscuous mode
[  228.410236][ T4628] device veth0_vlan left promiscuous mode
[  228.678724][ T4628] team0 (unregistering): Port device team_slave_1 removed
[  228.693596][ T4628] team0 (unregistering): Port device team_slave_0 removed
[  228.707811][ T4628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.771872][ T4628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.962403][ T4628] bond0 (unregistering): Released all slaves
[  229.015524][  T499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.018133][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.081446][ T7580] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  229.116298][ T7580] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  229.147011][ T7580] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  229.196212][ T7580] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  229.298863][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.309365][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.312179][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.328480][ T7580] 8021q: adding VLAN 0 to HW filter on device team0
[  229.333659][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.337663][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.340392][  T499] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.342233][  T499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.345470][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.363332][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.366483][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.369215][  T499] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.371251][  T499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.373781][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.378998][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.401496][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.405403][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.408234][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.411212][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.414625][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.417515][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  229.420223][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.422895][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.427545][ T7580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  229.436956][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.516265][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  229.518439][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.525758][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.652330][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  229.656083][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  229.686292][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  229.689109][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  229.692024][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  229.695464][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  229.699933][ T7580] device veth0_vlan entered promiscuous mode
[  229.708583][ T7580] device veth1_vlan entered promiscuous mode
[  229.729099][ T7580] device veth0_macvtap entered promiscuous mode
[  229.731604][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  229.736525][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  229.740220][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  229.743121][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  229.748002][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  229.756924][ T7580] device veth1_macvtap entered promiscuous mode
[  229.769683][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.772591][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.776446][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.779350][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.782047][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.786497][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.789157][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.792006][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.795129][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.798008][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.801958][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.807554][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.810578][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.813161][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.817283][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.819922][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.822658][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.825728][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.828611][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.831310][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.834624][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.841407][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.849928][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  229.852530][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  229.858483][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  229.861355][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  229.864861][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  229.872605][ T7580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.875866][ T7580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.878290][ T7580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.880617][ T7580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.962658][ T5249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.970670][ T5249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.990549][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.992341][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  229.994666][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.003767][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  230.134707][ T1960] Bluetooth: hci3: command 0x041b tx timeout
[  230.299039][ T5249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.301581][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.410443][ T4396] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.474474][ T7635] lo speed is unknown, defaulting to 1000
[  233.496626][    C0] ==================================================================
[  233.499235][    C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x40c/0x470
[  233.501287][    C0] Read of size 2 at addr ffff0000ce02e82a by task swapper/0/0
[  233.503372][    C0] 
[  233.504005][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.186-syzkaller #0
[  233.506196][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  233.509105][    C0] Call trace:
[  233.510010][    C0]  dump_backtrace+0x0/0x43c
[  233.511304][    C0]  show_stack+0x2c/0x3c
[  233.512434][    C0]  __dump_stack+0x30/0x40
[  233.513694][    C0]  dump_stack_lvl+0xf8/0x160
[  233.514966][    C0]  print_address_description+0x78/0x30c
[  233.516610][    C0]  kasan_report+0xec/0x15c
[  233.517840][    C0]  __asan_report_load2_noabort+0x44/0x50
[  233.519388][    C0]  rose_timer_expiry+0x40c/0x470
[  233.520885][    C0]  call_timer_fn+0x19c/0x858
[  233.522296][    C0]  __run_timers+0x46c/0x6c4
[  233.523582][    C0]  run_timer_softirq+0x7c/0x114
[  233.524937][    C0]  handle_softirqs+0x344/0xbf0
[  233.526310][    C0]  __irq_exit_rcu+0x240/0x440
[  233.527609][    C0]  irq_exit+0x14/0x88
[  233.528686][    C0]  handle_domain_irq+0x14c/0x1fc
[  233.530071][    C0]  gic_handle_irq+0x78/0x1c8
[  233.531346][    C0]  call_on_irq_stack+0x24/0x30
[  233.531373][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.532673][    C0]  do_interrupt_handler+0x6c/0x88
[  233.536280][    C0]  el1_interrupt+0x30/0x58
[  233.537502][    C0]  el1h_64_irq_handler+0x18/0x24
[  233.538851][    C0]  el1h_64_irq+0x78/0x7c
[  233.540050][    C0]  arch_local_irq_enable+0xc/0x18
[  233.541411][    C0]  default_idle_call+0xcc/0x418
[  233.542724][    C0]  do_idle+0x1c8/0x480
[  233.543859][    C0]  cpu_startup_entry+0x24/0x28
[  233.545200][    C0]  rest_init+0x360/0x390
[  233.546399][    C0]  arch_call_rest_init+0x14/0x20
[  233.547757][    C0]  start_kernel+0x49c/0x54c
[  233.548979][    C0]  __primary_switched+0xa8/0xb0
[  233.550310][    C0] 
[  233.550965][    C0] Allocated by task 7111:
[  233.552215][    C0]  __kasan_kmalloc+0xb0/0xf0
[  233.553479][    C0]  __kmalloc+0x298/0x44c
[  233.554623][    C0]  fib6_info_alloc+0x38/0xe0
[  233.555858][    C0]  ip6_route_info_create+0x3b0/0xf90
[  233.557327][    C0]  ip6_route_add+0x34/0x16c
[  233.558549][    C0]  addrconf_permanent_addr+0x52c/0x89c
[  233.560113][    C0]  addrconf_notify+0x6a4/0xc6c
[  233.561391][    C0]  raw_notifier_call_chain+0xd4/0x164
[  233.562835][    C0]  __dev_notify_flags+0x250/0x46c
[  233.564229][    C0]  dev_change_flags+0xc8/0x154
[  233.565524][    C0]  do_setlink+0xa20/0x3088
[  233.566759][    C0]  rtnl_newlink+0x10d0/0x1404
[  233.567193][ T7635] chnl_net:caif_netlink_parms(): no params data found
[  233.568020][    C0]  rtnetlink_rcv_msg+0x9d4/0xd04
[  233.571298][    C0]  netlink_rcv_skb+0x208/0x3c4
[  233.572569][    C0]  rtnetlink_rcv+0x28/0x38
[  233.573986][    C0]  netlink_unicast+0x60c/0x89c
[  233.575276][    C0]  netlink_sendmsg+0x6e8/0x9cc
[  233.576542][    C0]  __sys_sendto+0x2e8/0x3d8
[  233.577802][    C0]  __arm64_sys_sendto+0xd8/0xf8
[  233.579180][    C0]  invoke_syscall+0x98/0x2b8
[  233.580475][    C0]  el0_svc_common+0x138/0x258
[  233.581701][    C0]  do_el0_svc+0x58/0x14c
[  233.582872][    C0]  el0_svc+0x78/0x1e0
[  233.583984][    C0]  el0t_64_sync_handler+0xcc/0xe4
[  233.585481][    C0]  el0t_64_sync+0x1a0/0x1a4
[  233.586704][    C0] 
[  233.587357][    C0] Freed by task 14:
[  233.588439][    C0]  kasan_set_track+0x4c/0x84
[  233.589745][    C0]  kasan_set_free_info+0x28/0x4c
[  233.591119][    C0]  ____kasan_slab_free+0x118/0x164
[  233.592550][    C0]  __kasan_slab_free+0x18/0x28
[  233.593802][    C0]  slab_free_freelist_hook+0x128/0x1e8
[  233.595351][    C0]  kfree+0x170/0x40c
[  233.596492][    C0]  fib6_info_destroy_rcu+0x190/0x23c
[  233.598002][    C0]  rcu_core+0x7c8/0x1764
[  233.599193][    C0]  rcu_core_si+0x10/0x1c
[  233.600317][    C0]  handle_softirqs+0x344/0xbf0
[  233.601661][    C0]  run_ksoftirqd+0x7c/0x2a0
[  233.602934][    C0]  smpboot_thread_fn+0x4b0/0x920
[  233.604368][    C0]  kthread+0x374/0x454
[  233.605559][    C0]  ret_from_fork+0x10/0x20
[  233.606788][    C0] 
[  233.607476][    C0] Last potentially related work creation:
[  233.609096][    C0]  kasan_save_stack+0x38/0x68
[  233.610383][    C0]  kasan_record_aux_stack+0xcc/0x114
[  233.611804][    C0]  call_rcu+0x110/0x8f0
[  233.612965][    C0]  fib6_del+0xd48/0x1190
[  233.614135][    C0]  fib6_clean_node+0x224/0x49c
[  233.615498][    C0]  fib6_walk_continue+0x654/0x878
[  233.616876][    C0]  fib6_walk+0x140/0x254
[  233.618058][    C0]  __fib6_clean_all+0x1e4/0x320
[  233.619457][    C0]  fib6_clean_all+0x3c/0x50
[  233.620643][    C0]  rt6_disable_ip+0x100/0x658
[  233.621928][    C0]  addrconf_ifdown+0x148/0x1688
[  233.623282][    C0]  addrconf_notify+0x2f4/0xc6c
[  233.624576][    C0]  raw_notifier_call_chain+0xd4/0x164
[  233.626129][    C0]  dev_close_many+0x2cc/0x440
[  233.627434][    C0]  unregister_netdevice_many+0x3d4/0x17d0
[  233.629016][    C0]  default_device_exit_batch+0x444/0x4a4
[  233.630590][    C0]  cleanup_net+0x644/0xa98
[  233.631875][    C0]  process_one_work+0x79c/0x1140
[  233.633313][    C0]  worker_thread+0x8f4/0x101c
[  233.634617][    C0]  kthread+0x374/0x454
[  233.635738][    C0]  ret_from_fork+0x10/0x20
[  233.636961][    C0] 
[  233.637624][    C0] The buggy address belongs to the object at ffff0000ce02e800
[  233.637624][    C0]  which belongs to the cache kmalloc-512 of size 512
[  233.641506][    C0] The buggy address is located 42 bytes inside of
[  233.641506][    C0]  512-byte region [ffff0000ce02e800, ffff0000ce02ea00)
[  233.645150][    C0] The buggy address belongs to the page:
[  233.646699][    C0] page:0000000052281883 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e02c
[  233.649658][    C0] head:0000000052281883 order:2 compound_mapcount:0 compound_pincount:0
[  233.651994][    C0] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  233.654234][    C0] raw: 05ffc00000010200 0000000000000000 0000000700000001 ffff0000c0002600
[  233.656592][    C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  233.658986][    C0] page dumped because: kasan: bad access detected
[  233.660785][    C0] 
[  233.661445][    C0] Memory state around the buggy address:
[  233.663011][    C0]  ffff0000ce02e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  233.665280][    C0]  ffff0000ce02e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  233.667481][    C0] >ffff0000ce02e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.669799][    C0]                                   ^
[  233.671295][    C0]  ffff0000ce02e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.673492][    C0]  ffff0000ce02e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.675663][    C0] ==================================================================
[  233.677897][    C0] Disabling lock debugging due to kernel taint
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  234.776408][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.778724][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.421025][ T4396] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.424909][ T5257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.427377][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.480024][ T4396] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.539526][ T4396] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.038376][ T4396] device hsr_slave_0 left promiscuous mode
[  237.094508][ T4396] device hsr_slave_1 left promiscuous mode
[  237.204136][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.206230][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.208878][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.211089][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.214413][ T4396] device bridge_slave_1 left promiscuous mode
[  237.216258][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.264827][ T4396] device bridge_slave_0 left promiscuous mode
[  237.266723][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.384277][ T4396] device veth1_macvtap left promiscuous mode
[  237.386166][ T4396] device veth0_macvtap left promiscuous mode
[  237.387941][ T4396] device veth1_vlan left promiscuous mode
[  237.389618][ T4396] device veth0_vlan left promiscuous mode
[  237.571323][ T4396] team0 (unregistering): Port device team_slave_1 removed
[  237.582804][ T4396] team0 (unregistering): Port device team_slave_0 removed
[  237.591583][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.662429][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.803746][ T4396] bond0 (unregistering): Released all slaves
[  239.255041][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.214208][ T4396] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.273069][ T4396] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.321094][ T4396] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.362071][ T4396] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.535985][ T4396] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.579438][ T4396] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.629941][ T4396] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.677919][ T4396] bond0: (slave netdevsim0): Releasing backup interface
[  240.716921][ T4396] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.889113][ T4396] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.934485][ T4396] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.991852][ T4396] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.039100][ T4396] bond0: (slave netdevsim0): Releasing backup interface
[  241.068750][ T4396] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.223162][ T4396] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.261961][ T4396] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.313753][ T4396] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.358866][ T4396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.904780][ T4396] tipc: Left network mode
[  242.204336][ T4396] tipc: Left network mode