last executing test programs:

1m34.857412562s ago: executing program 1 (id=190):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
msgget$private(0x0, 0x1)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_settime(0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

1m32.8431242s ago: executing program 1 (id=192):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r1, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})

1m32.307596687s ago: executing program 1 (id=194):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
socket$inet_sctp(0x2, 0x3, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38)

1m27.887062126s ago: executing program 1 (id=204):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0xfd, 0x1e6, &(0x7f0000000880)="$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")
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

1m25.087249673s ago: executing program 1 (id=211):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = io_uring_setup(0x24fc, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8)
gettid()
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
rename(0x0, &(0x7f0000000240)='.\x00')
close(r4)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary)
r7 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r6)
add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='D', 0x1, r7)
keyctl$link(0x8, r7, r7)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)})

1m21.494031329s ago: executing program 1 (id=216):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe)
socket$inet6(0xa, 0x1, 0x0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2)
llistxattr(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100))
syz_open_dev$MSR(0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
r4 = socket(0xa, 0x2, 0x0)
getsockopt$inet_int(r4, 0x0, 0x3, 0x0, &(0x7f0000000080))

1m6.337927354s ago: executing program 32 (id=216):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe)
socket$inet6(0xa, 0x1, 0x0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2)
llistxattr(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100))
syz_open_dev$MSR(0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
r4 = socket(0xa, 0x2, 0x0)
getsockopt$inet_int(r4, 0x0, 0x3, 0x0, &(0x7f0000000080))

41.112967376s ago: executing program 4 (id=274):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010)
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sendto$inet(r0, &(0x7f0000000940)="318b6d01c31ffbf029f33ea323bdd727ffe264c8842fd215a0c70c0e813376c959f68a05343b9d7a7554ce776921bc8cd5d5cfeea5", 0x35, 0x48000, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x7, 0x0, 0x0)

38.774208332s ago: executing program 4 (id=277):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0)
read$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r0)

34.663180424s ago: executing program 4 (id=283):
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

34.447791553s ago: executing program 4 (id=284):
eventfd2(0x9, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x3a3, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
r2 = syz_clone(0x4c000, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, 0x0, 0x0, 0xc002a0, 0x0)

32.923132007s ago: executing program 4 (id=286):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010)
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sendto$inet(r0, &(0x7f0000000940)="318b6d01c31ffbf029f33ea323bdd727ffe264c8842fd215a0c70c0e813376c959f68a05343b9d7a7554ce776921bc8cd5d5cfeea59a87", 0x37, 0x48000, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x7, 0x0, 0x0)

29.973581577s ago: executing program 4 (id=288):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000001c80)={[{@grpid}, {@resuid}, {@commit={'commit', 0x3d, 0x1}}, {@dioread_nolock}, {@quota}]}, 0x0, 0x54c, &(0x7f0000000280)="$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")
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x4000418, &(0x7f0000000280)=ANY=[], 0x1, 0x1504, &(0x7f0000000740)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2], 0x1, 0x538, &(0x7f0000003480)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x100)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r5, 0x40, 0x1)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file1\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x18, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4)

25.3951702s ago: executing program 2 (id=294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
gettid()
timer_create(0x9, 0x0, &(0x7f0000bbdffc)=<r3=>0x0)
timer_gettime(r3, 0x0)
io_pgetevents(0x0, 0xe5, 0x0, 0x0, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000240)="48b12300", 0x8, r4)
syz_usb_connect$uac1(0x3, 0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d0101400001020f010902ac000301dd80030904000800010100000a24010100090200000f24060406040400070007000600080b2407030300ceeca763ce0c2402050302ff0201060204024000007f05240402020904010000010200000904010101010200000e2402010703040605c38883eb3d9d9d22c9e7449651a30c42dc52cd3d1f08240201000381090905010940cfaedf96c024a2c60905000904020000010200000904020101010200000905820908000609e8072501010584e200000000"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}]})

21.214683637s ago: executing program 2 (id=295):
eventfd2(0x9, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x3a3, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
r2 = syz_clone(0x4c000, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, 0x0, 0x0, 0xc002a0, 0x0)

19.493803308s ago: executing program 2 (id=296):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r3, 0x4020744f, 0x0)

14.379871107s ago: executing program 33 (id=288):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000001c80)={[{@grpid}, {@resuid}, {@commit={'commit', 0x3d, 0x1}}, {@dioread_nolock}, {@quota}]}, 0x0, 0x54c, &(0x7f0000000280)="$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")
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x4000418, &(0x7f0000000280)=ANY=[], 0x1, 0x1504, &(0x7f0000000740)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2], 0x1, 0x538, &(0x7f0000003480)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x100)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r5, 0x40, 0x1)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file1\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x18, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4)

13.332790979s ago: executing program 2 (id=307):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
ppoll(&(0x7f0000000200)=[{r3, 0x581773e80d0508b1}], 0x1, 0x0, 0x0, 0x0)
write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000000000000001000008000100"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffffffffff72)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'})
syz_usb_connect(0x4, 0x2d, 0x0, 0x0)

10.726847098s ago: executing program 3 (id=309):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00')
r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, 0x0, 0x60000526)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r7, &(0x7f0000004440)=""/4096, 0x1000)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffe)
ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000002c0))
read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

10.24398991s ago: executing program 2 (id=311):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
fanotify_init(0x0, 0x101000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000500)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x10000008)

8.31524373s ago: executing program 0 (id=313):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b703257a3d77ba65f617bee62a9d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f08000000b40d94de59edbb0507bf01e357e13bef384234e823d8137beac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22ef303bcddff402dacf8c1372a5e8ff5bc596a5375037cf99b4ee7eb6f41587c2904d5cc071c32bc429a286bddc094a"], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
fallocate(0xffffffffffffffff, 0x20, 0x0, 0x7000000)

7.810979104s ago: executing program 3 (id=314):
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
close_range(r1, 0xffffffffffffffff, 0x0)

7.336409796s ago: executing program 3 (id=315):
syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4cb032021042302bdb10102030109022e00010000000009040000030202ff00052406000005"], 0x0)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)

6.775260845s ago: executing program 0 (id=316):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000280)='^', 0x1, 0x40001, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x0, 0x300, 0xfffffffffffffffe}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000680)='iZ', 0x2, 0x805, 0x0, 0x0)

6.423156306s ago: executing program 0 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
gettid()
timer_create(0x9, 0x0, &(0x7f0000bbdffc)=<r3=>0x0)
timer_gettime(r3, 0x0)
io_pgetevents(0x0, 0xe5, 0x0, 0x0, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000240)="48b12300", 0x8, r4)
syz_usb_connect$uac1(0x3, 0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d0101400001020f010902ac000301dd80030904000800010100000a24010100090200000f24060406040400070007000600080b2407030300ceeca763ce0c2402050302ff0201060204024000007f05240402020904010000010200000904010101010200000e2402010703040605c38883eb3d9d9d22c9e7449651a30c42dc52cd3d1f08240201000381090905010940cfaedf96c024a2c60905000904020000010200000904020101010200000905820908000609e8072501010584e2000000000000"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}]})

4.32460738s ago: executing program 3 (id=318):
eventfd2(0x9, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x3a3, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
r2 = syz_clone(0x4c000, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400), 0x0, 0xc002a0, 0x0)

3.111060467s ago: executing program 3 (id=319):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
ppoll(&(0x7f0000000200)=[{r3, 0x581773e80d0508b1}], 0x1, 0x0, 0x0, 0x0)
write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000000000000001000008000100"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffffffffff72)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'})
syz_usb_connect(0x4, 0x2d, 0x0, 0x0)

2.219934475s ago: executing program 0 (id=320):
mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="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", 0x122}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bd", 0x70}, {&(0x7f0000000d40)="518d091c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d0000000000000000000000000000c691982d5010be49260288f8f9629ccc782d9acbdb9cba112648136045612cd4d67e00f5bb0e1ac16467a133dc1c16fb5f364f689e2cc053bd4230cfc69fc863967ffb3f2196c2b42fe3bfeea73ccd4e83d75afed8077204552c34fcf30b180b341707fa86712df21db64c1da4bec3dd8adec0e45f60fdc6fbd9417c6c7958ce970e54e96b81da444ccf90f7041e93f2fb061d2fe681fed67fc52841607461af044c7191", 0xe7}, {&(0x7f0000000740)="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", 0x152}, {&(0x7f0000000b40)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb425705d6cdbb4a07ea786417aac814e03e5d80b297abe644830816977ccba1f493", 0x5a}], 0x6}}], 0x1, 0x8040)
gettid()
close_range(r0, 0xffffffffffffffff, 0x0)

2.203736957s ago: executing program 2 (id=321):
r0 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
close(r4)
socket$vsock_stream(0x28, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0)={0xa0028000})

581.119379ms ago: executing program 0 (id=322):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00')
r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = inotify_init1(0x800)
inotify_add_watch(r5, 0x0, 0x60000526)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r6, &(0x7f0000004440)=""/4096, 0x1000)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000002c0))
read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

156.040527ms ago: executing program 0 (id=323):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0)
truncate(&(0x7f0000000180)='./file1\x00', 0x6)

0s ago: executing program 3 (id=324):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x29, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts.
[   68.056554][ T4253] cgroup: Unknown subsys name 'net'
[   68.159096][ T4253] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.659580][ T4253] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   71.068820][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.077784][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.087099][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.096086][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.104274][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.112750][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.121420][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.129579][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.137510][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.145334][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.154737][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.160857][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.162128][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.170362][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.177772][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.183512][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.191416][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.197919][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.212341][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   71.212947][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.220407][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.228023][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.234365][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.241780][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   71.257417][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.265056][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   71.272506][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.278881][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   71.280400][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.295058][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.484210][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[   71.490842][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[   71.572254][ T4266] chnl_net:caif_netlink_parms(): no params data found
[   71.754578][ T4276] chnl_net:caif_netlink_parms(): no params data found
[   71.843419][ T4265] chnl_net:caif_netlink_parms(): no params data found
[   71.867104][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.877095][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.889879][ T4266] device bridge_slave_0 entered promiscuous mode
[   71.902984][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.910276][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.918809][ T4266] device bridge_slave_1 entered promiscuous mode
[   71.950822][ T4269] chnl_net:caif_netlink_parms(): no params data found
[   72.012812][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   72.023787][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.032160][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.039986][ T4276] device bridge_slave_0 entered promiscuous mode
[   72.057489][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.064694][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.073660][ T4276] device bridge_slave_1 entered promiscuous mode
[   72.084423][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.108682][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.184096][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.199507][ T4266] team0: Port device team_slave_0 added
[   72.226429][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.244332][ T4266] team0: Port device team_slave_1 added
[   72.250690][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.258099][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.266267][ T4265] device bridge_slave_0 entered promiscuous mode
[   72.313402][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.320711][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.331244][ T4265] device bridge_slave_1 entered promiscuous mode
[   72.338863][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.348720][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.357374][ T4269] device bridge_slave_0 entered promiscuous mode
[   72.367934][ T4276] team0: Port device team_slave_0 added
[   72.374510][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.381821][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.389633][ T4277] device bridge_slave_0 entered promiscuous mode
[   72.413147][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.420356][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.429858][ T4269] device bridge_slave_1 entered promiscuous mode
[   72.446864][ T4276] team0: Port device team_slave_1 added
[   72.453251][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.460488][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.469450][ T4277] device bridge_slave_1 entered promiscuous mode
[   72.477963][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.485525][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.512399][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.526608][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.533909][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.560526][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.595246][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.621612][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.633555][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.657576][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.668860][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.691001][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.701466][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.728713][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.741663][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.772826][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.779994][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.807261][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.839537][ T4265] team0: Port device team_slave_0 added
[   72.867246][ T4277] team0: Port device team_slave_0 added
[   72.878118][ T4266] device hsr_slave_0 entered promiscuous mode
[   72.887599][ T4266] device hsr_slave_1 entered promiscuous mode
[   72.896060][ T4265] team0: Port device team_slave_1 added
[   72.904611][ T4269] team0: Port device team_slave_0 added
[   72.912672][ T4277] team0: Port device team_slave_1 added
[   72.936093][ T4269] team0: Port device team_slave_1 added
[   72.977827][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.985250][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.011911][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.030573][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.038508][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.064817][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.079194][ T4276] device hsr_slave_0 entered promiscuous mode
[   73.086114][ T4276] device hsr_slave_1 entered promiscuous mode
[   73.093382][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.101300][ T4276] Cannot create hsr debugfs directory
[   73.117398][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.125111][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.152402][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.183888][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.190873][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.218491][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.230260][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.237756][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.264311][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.306971][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.314307][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.342296][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[   73.342455][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[   73.349378][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.361344][ T4282] Bluetooth: hci0: command 0x0409 tx timeout
[   73.366706][ T4271] Bluetooth: hci4: command 0x0409 tx timeout
[   73.401339][ T4271] Bluetooth: hci2: command 0x0409 tx timeout
[   73.420953][ T4277] device hsr_slave_0 entered promiscuous mode
[   73.427966][ T4277] device hsr_slave_1 entered promiscuous mode
[   73.435471][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.443438][ T4277] Cannot create hsr debugfs directory
[   73.452657][ T4265] device hsr_slave_0 entered promiscuous mode
[   73.460094][ T4265] device hsr_slave_1 entered promiscuous mode
[   73.466992][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.475037][ T4265] Cannot create hsr debugfs directory
[   73.533779][ T4269] device hsr_slave_0 entered promiscuous mode
[   73.540495][ T4269] device hsr_slave_1 entered promiscuous mode
[   73.547504][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.555503][ T4269] Cannot create hsr debugfs directory
[   73.894133][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.910039][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.924548][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.935688][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.962015][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.972446][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.006860][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.035475][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.046995][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.057120][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.084383][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.094741][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.186807][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.218041][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.252224][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.268052][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.294694][ T4269] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.321725][ T4269] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.352079][ T4269] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.367125][ T4269] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.387556][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.427590][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.459192][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.469400][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.485108][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.507022][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   74.521021][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   74.536322][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.546142][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.575871][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.588462][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.598435][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.605879][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.628298][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.636685][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.645105][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.655312][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.665839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.675296][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.682625][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.695501][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   74.723379][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.735974][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.747282][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.754596][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.763756][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.796730][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.806189][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.815794][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.827109][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.834357][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.844036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.853987][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.863491][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.872481][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.879911][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.888249][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.897668][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.906824][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.914547][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.924683][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.934227][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.944254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.954736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.991970][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.000232][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.010167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.021417][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.030253][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.040967][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.050519][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.060026][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.069392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.079431][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.089214][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.098319][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.107826][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.117415][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.125946][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.135102][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.144962][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.155588][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.172293][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.189532][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.210396][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.226010][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.264640][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.273032][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.283955][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.293346][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.301901][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.310342][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.320133][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.330576][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.339803][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.356341][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   75.376430][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.389017][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.401844][ T4282] Bluetooth: hci4: command 0x041b tx timeout
[   75.408190][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[   75.408669][ T4271] Bluetooth: hci0: command 0x041b tx timeout
[   75.414584][ T4275] Bluetooth: hci1: command 0x041b tx timeout
[   75.440068][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   75.450099][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.474678][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.483066][ T4275] Bluetooth: hci2: command 0x041b tx timeout
[   75.490575][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.500493][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.509986][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.565081][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.597146][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.620746][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.628716][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.671840][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.683369][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.692431][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.699914][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.710126][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.719991][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.737595][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.745445][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.760918][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.778035][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.787756][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.804933][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.814629][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.822682][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.833520][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.843935][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.877812][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.902982][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.922653][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.947575][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.973420][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.983138][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.023111][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.034165][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.053182][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.074030][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.092766][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.109335][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.119653][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.135072][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.145907][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.155541][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.165321][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.174352][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.183215][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.192721][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.204364][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.220191][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.232901][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.250145][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.267205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.276944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.334651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.343241][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.356445][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.397262][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.435367][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.500078][ T4276] device veth0_vlan entered promiscuous mode
[   76.524108][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.540396][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.551051][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.564045][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.574410][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.582901][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.593684][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.632755][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.644543][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.677716][ T4276] device veth1_vlan entered promiscuous mode
[   76.718529][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.741113][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.769376][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.792300][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.803110][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.851093][ T4277] device veth0_vlan entered promiscuous mode
[   76.878041][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   76.898830][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.929510][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.956367][ T4276] device veth0_macvtap entered promiscuous mode
[   76.970569][ T4277] device veth1_vlan entered promiscuous mode
[   76.997777][ T4276] device veth1_macvtap entered promiscuous mode
[   77.024000][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.038457][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.048200][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.056428][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.080772][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.096352][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.123681][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.131484][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.139046][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.149155][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.158682][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.196542][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.216332][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.225447][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.235992][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.245908][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.258754][ T4277] device veth0_macvtap entered promiscuous mode
[   77.269383][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.306533][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.316822][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.335361][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.349664][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.358818][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.369100][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.384578][ T4277] device veth1_macvtap entered promiscuous mode
[   77.460990][ T4265] device veth0_vlan entered promiscuous mode
[   77.480488][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.488492][ T4282] Bluetooth: hci0: command 0x040f tx timeout
[   77.489632][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.494665][ T4282] Bluetooth: hci4: command 0x040f tx timeout
[   77.508735][ T4275] Bluetooth: hci3: command 0x040f tx timeout
[   77.510744][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[   77.517292][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.531502][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.540751][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.549683][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.558036][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.571443][ T4275] Bluetooth: hci2: command 0x040f tx timeout
[   77.595550][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.605030][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.614756][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.623415][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.637709][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.655051][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.666838][ T4265] device veth1_vlan entered promiscuous mode
[   77.674479][ T4269] device veth0_vlan entered promiscuous mode
[   77.685366][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.697544][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.709790][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.738151][ T4269] device veth1_vlan entered promiscuous mode
[   77.760377][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.774527][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.785310][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.794327][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.804394][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.833752][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.847055][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.859580][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.875959][ T4266] device veth0_vlan entered promiscuous mode
[   77.905106][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.916584][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.926029][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.935217][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.945304][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.954295][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.964434][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.973930][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.982271][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.992617][ T4265] device veth0_macvtap entered promiscuous mode
[   78.009376][ T4266] device veth1_vlan entered promiscuous mode
[   78.034583][ T4265] device veth1_macvtap entered promiscuous mode
[   78.045693][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.062278][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.071468][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.080544][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.089699][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.101098][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.120706][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.129990][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.138908][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.147924][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.162015][ T4269] device veth0_macvtap entered promiscuous mode
[   78.185754][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.197454][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.211558][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.222619][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.234407][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.246977][ T4269] device veth1_macvtap entered promiscuous mode
[   78.271610][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.281595][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.290035][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.302634][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.321451][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.332736][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.343361][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.354108][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.367283][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.382148][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.391994][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.400495][ T4266] device veth0_macvtap entered promiscuous mode
[   78.412196][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.426996][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.436830][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.449132][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.459004][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.472602][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.482317][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.492053][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.501424][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.522107][ T4266] device veth1_macvtap entered promiscuous mode
[   78.530909][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.539863][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.553554][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.567969][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.578418][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.589220][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.599213][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.611615][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.623984][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.673944][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.687733][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.707574][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.718925][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.730252][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.741583][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.751628][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.764276][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.777162][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.788121][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.799718][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.851768][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.889510][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.903175][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.914039][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.925070][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.942356][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.957495][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.970302][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.989283][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.998547][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.021640][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.038201][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.049936][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.066522][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.078480][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.098321][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.119189][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.141705][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.160646][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.177816][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.187241][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.203989][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.242593][ T4353] loop2: detected capacity change from 0 to 40427
[   79.263177][ T4353] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   79.271734][ T4353] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   79.283214][ T4353] F2FS-fs (loop2): invalid crc value
[   79.305282][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.320794][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.340936][ T4353] F2FS-fs (loop2): Found nat_bits in checkpoint
[   79.389824][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.400486][ T4353] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   79.408602][ T4353] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   79.418179][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.446707][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.466430][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.478070][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.500109][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.559564][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.568023][ T4275] Bluetooth: hci3: command 0x0419 tx timeout
[   79.575139][ T4275] Bluetooth: hci4: command 0x0419 tx timeout
[   79.581965][ T4282] Bluetooth: hci0: command 0x0419 tx timeout
[   79.588020][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   79.642390][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.652786][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[   80.614944][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.754230][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.781506][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.788690][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.822234][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.833017][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.842952][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.850907][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.852974][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.868538][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.887220][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.906047][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.927723][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.996124][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.057880][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.080478][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.115195][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.151359][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.223999][ T4366] loop1: detected capacity change from 0 to 1024
[   81.231927][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   81.241320][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.241825][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:7 Not tainted syzkaller #0
[   81.249944][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.256481][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   81.256502][ T4282] Workqueue: hci0 hci_rx_work
[   81.256531][ T4282] Call Trace:
[   81.256541][ T4282]  <TASK>
[   81.256551][ T4282]  dump_stack_lvl+0x188/0x24e
[   81.256584][ T4282]  ? show_regs_print_info+0x12/0x12
[   81.256608][ T4282]  ? load_image+0x400/0x400
[   81.256640][ T4282]  sysfs_create_dir_ns+0x26a/0x290
[   81.256665][ T4282]  ? sysfs_warn_dup+0xa0/0xa0
[   81.256692][ T4282]  ? do_raw_spin_unlock+0x11d/0x230
[   81.256717][ T4282]  kobject_add_internal+0x61c/0xcc0
[   81.256744][ T4282]  kobject_add+0x160/0x230
[   81.256768][ T4282]  ? kobject_init+0x1d0/0x1d0
[   81.256793][ T4282]  ? klist_children_get+0x50/0x50
[   81.256813][ T4282]  ? get_device_parent+0x121/0x3f0
[   81.256845][ T4282]  device_add+0x483/0xfb0
[   81.256874][ T4282]  ? kmem_cache_free+0xf7/0x290
[   81.256904][ T4282]  hci_conn_add_sysfs+0xd1/0x1e0
[   81.256935][ T4282]  le_conn_complete_evt+0x105f/0x1670
[   81.256979][ T4282]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[   81.257012][ T4282]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[   81.257047][ T4282]  ? skb_pull_data+0xf7/0x200
[   81.257082][ T4282]  hci_le_conn_complete_evt+0x183/0x440
[   81.257108][ T4282]  ? hci_remote_host_features_evt+0x270/0x270
[   81.257139][ T4282]  hci_event_packet+0x7b6/0x1280
[   81.257181][ T4282]  ? bis_list+0x280/0x280
[   81.257201][ T4282]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[   81.257223][ T4282]  ? kcov_remote_start+0x4c7/0x7e0
[   81.257241][ T4282]  ? sync_thread_backup+0x1510/0x2090
[   81.257267][ T4282]  ? hci_send_to_monitor+0x9c/0x4a0
[   81.257289][ T4282]  hci_rx_work+0x3eb/0xd40
[   81.257311][ T4282]  ? _raw_spin_unlock+0x40/0x40
[   81.257338][ T4282]  ? process_one_work+0x7b0/0x1160
[   81.257366][ T4282]  process_one_work+0x8a2/0x1160
[   81.257401][ T4282]  ? worker_detach_from_pool+0x240/0x240
[   81.257426][ T4282]  ? _raw_spin_lock_irq+0xb7/0xf0
[   81.257445][ T4282]  ? _raw_spin_lock_irqsave+0x100/0x100
[   81.257465][ T4282]  ? kthread_data+0x4b/0xc0
[   81.257498][ T4282]  worker_thread+0xaa2/0x1270
[   81.257542][ T4282]  ? __kthread_parkme+0x162/0x1c0
[   81.257573][ T4282]  kthread+0x29d/0x330
[   81.257588][ T4282]  ? worker_clr_flags+0x1a0/0x1a0
[   81.257606][ T4282]  ? kthread_blkcg+0xd0/0xd0
[   81.257634][ T4282]  ret_from_fork+0x1f/0x30
[   81.257669][ T4282]  </TASK>
[   81.260850][ T4282] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   81.278675][ T4364] loop0: detected capacity change from 0 to 512
[   81.282201][ T4282] Bluetooth: hci0: failed to register connection device
[   81.427454][ T4364] EXT4-fs: Ignoring removed oldalloc option
[   81.440643][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.499129][ T4366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   81.565226][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.586450][ T4364] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   81.607219][ T4364] EXT4-fs error (device loop0): ext4_xattr_inode_iget:397: comm syz.0.1: Parent and EA inode have the same ino 15
[   81.677823][ T4364] EXT4-fs (loop0): 1 orphan inode deleted
[   81.691568][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.700253][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.708926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   81.717430][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   81.726036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   81.734562][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   81.743133][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   81.751468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   81.761183][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   81.771189][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   81.825240][   T27] cfg80211: failed to load regulatory.db
[   81.835015][ T4364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   83.013599][ T4382] loop2: detected capacity change from 0 to 512
[   83.071633][ T4366] use of bytesused == 0 is deprecated and will be removed in the future,
[   83.080483][ T4366] use the actual size instead.
[   83.129540][ T4382] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal
[   83.413426][ T4277] EXT4-fs (loop1): unmounting filesystem.
[   83.854489][ T4316] kernel write not supported for file /vcs (pid: 4316 comm: kworker/1:6)
[   83.976934][ T4374] ptrace attach of "./syz-executor exec"[4375] was attempted by "./syz-executor exec"[4374]
[   84.030143][ T4265] EXT4-fs (loop0): unmounting filesystem.
[   84.216214][ T4391] loop2: detected capacity change from 0 to 2048
[   84.348176][ T4395] capability: warning: `syz.0.9' uses 32-bit capabilities (legacy support in use)
[   84.393299][ T4395] program syz.0.9 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.416852][ T4391] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   84.469181][ T4391] UDF-fs: Scanning with blocksize 512 failed
[   84.549334][ T4391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.001257][ T4400] loop3: detected capacity change from 0 to 40427
[   85.027680][ T4400] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   85.035567][ T4400] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   85.062090][ T4400] F2FS-fs (loop3): invalid crc value
[   85.112077][ T4400] F2FS-fs (loop3): Found nat_bits in checkpoint
[   85.190097][ T4400] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   85.197324][ T4400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   85.328789][ T4402] fuse: Unknown parameter '�0x00000000000000070000000000000000000600000000000000000000'
[   86.642487][ T4419] syz.4.12 uses obsolete (PF_INET,SOCK_PACKET)
[   86.748252][ T4393] loop1: detected capacity change from 0 to 32768
[   87.023336][ T4393] =======================================================
[   87.023336][ T4393] WARNING: The mand mount option has been deprecated and
[   87.023336][ T4393]          and is ignored by this kernel. Remove the mand
[   87.023336][ T4393]          option from the mount to silence this warning.
[   87.023336][ T4393] =======================================================
[   87.521856][ T4393] (syz.1.8,4393,1):ocfs2_initialize_super:2286 ERROR: status = -12
[   87.580808][ T4393] (syz.1.8,4393,1):ocfs2_fill_super:1176 ERROR: status = -12
[   88.175379][ T4417] loop2: detected capacity change from 0 to 32768
[   88.256122][ T4417] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.15 (4417)
[   88.488973][ T4417] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   88.544845][ T4442] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0
[   88.566288][ T4417] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   88.605413][ T4417] BTRFS info (device loop2): using free space tree
[   89.060704][ T4462] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   89.166216][ T4417] BTRFS info (device loop2): enabling ssd optimizations
[   89.321958][ T4275] Bluetooth: hci0: command 0x0406 tx timeout
[   89.988874][ T4311] libceph: connect (1)[c::]:6789 error -101
[   90.052389][ T4311] libceph: mon0 (1)[c::]:6789 connect error
[   90.214224][ T4276] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   90.249338][ T4462] kvm [4460]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166
[   90.310848][ T4469] loop1: detected capacity change from 0 to 512
[   90.382562][ T4311] libceph: connect (1)[c::]:6789 error -101
[   90.392604][ T4311] libceph: mon0 (1)[c::]:6789 connect error
[   90.497881][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   90.702695][ T4471] ceph: No mds server is up or the cluster is laggy
[   91.032562][   T14] libceph: connect (1)[c::]:6789 error -101
[   91.039623][   T14] libceph: mon0 (1)[c::]:6789 connect error
[   92.209003][ T4497] loop0: detected capacity change from 0 to 40427
[   92.227266][ T4497] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   92.235187][ T4497] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   92.245378][ T4497] F2FS-fs (loop0): invalid crc value
[   92.376958][ T4497] F2FS-fs (loop0): Found nat_bits in checkpoint
[   92.421988][ T4497] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   92.429100][ T4497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   95.142376][ T4277] EXT4-fs (loop1): unmounting filesystem.
[   96.581641][ T4524] loop3: detected capacity change from 0 to 8
[   97.455641][ T4521] loop2: detected capacity change from 0 to 4096
[   97.572217][ T4521] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   99.429205][ T4540] input: syz0 as /devices/virtual/input/input5
[  100.560481][ T4548] kvm [4547]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166
[  104.201309][   T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.426314][   T22] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  104.527368][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.657754][ T4591] input: syz0 as /devices/virtual/input/input6
[  104.700461][   T22] usb 4-1: config 0 descriptor??
[  104.753581][   T22] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  105.322444][   T22] gspca_sn9c2028: read1 error -110
[  105.817198][   T22] gspca_sn9c2028: read1 error -32
[  105.828811][   T22] gspca_sn9c2028: read1 error -32
[  105.834578][   T22] sn9c2028: probe of 4-1:0.0 failed with error -32
[  105.972024][   T14] usb 4-1: USB disconnect, device number 2
[  106.481729][ T4599] sctp: failed to load transform for md5: -4
[  106.888001][ T4612] loop2: detected capacity change from 0 to 1024
[  106.957580][ T4612] EXT4-fs: Ignoring removed bh option
[  107.164257][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  107.207146][ T4612] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.50: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  107.235212][ T4612] EXT4-fs (loop2): Remounting filesystem read-only
[  107.244174][ T4612] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  108.578638][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  111.022083][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'.
[  112.683760][  T124] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  113.005430][  T124] usb 3-1: config 1 interface 0 has no altsetting 0
[  113.047113][  T124] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  113.159113][  T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.209985][  T124] usb 3-1: Product: syz
[  113.239438][  T124] usb 3-1: Manufacturer: syz
[  113.272169][  T124] usb 3-1: SerialNumber: syz
[  113.743178][  T124] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  115.117423][ T4678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.131681][ T4678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.213093][    C0] usblp0: nonzero write bulk status received: -71
[  116.221744][ T4311] usb 3-1: USB disconnect, device number 2
[  116.270184][ T4649] usblp0: removed
[  116.431034][ T4693] loop3: detected capacity change from 0 to 1024
[  116.459322][ T4693] EXT4-fs: Ignoring removed oldalloc option
[  116.496411][ T4693] EXT4-fs: Ignoring removed orlov option
[  116.621907][ T4693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  117.036907][ T4701] device bridge0 entered promiscuous mode
[  117.054365][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  117.082583][ T4701] device vlan2 entered promiscuous mode
[  117.850592][ T4708] input: syz0 as /devices/virtual/input/input7
[  118.240448][ T4707] loop4: detected capacity change from 0 to 131072
[  118.249554][ T4707] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  118.257782][ T4707] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  118.278823][ T4707] F2FS-fs (loop4): invalid crc value
[  118.309592][ T4707] F2FS-fs (loop4): Found nat_bits in checkpoint
[  118.396817][ T4707] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  118.404278][ T4707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  120.098937][ T4716] loop3: detected capacity change from 0 to 4096
[  120.206119][ T4727] loop2: detected capacity change from 0 to 128
[  120.251605][ T4716] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  120.387636][ T4716] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  120.450004][ T4716] ntfs3: loop3: Failed to load $Extend.
[  120.509423][ T4716] ntfs3: loop3: no free space to extend mft
[  120.565565][ T4716] ntfs3: loop3: no free space to extend mft
[  120.627070][ T4730] ntfs3: loop3: no free space to extend mft
[  127.469824][ T4786] loop3: detected capacity change from 0 to 4096
[  127.528912][ T4786] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  127.558980][ T4786] ntfs3: loop3: Failed to load $Volume.
[  127.741962][ T4790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.749795][ T4790] IPv6: NLM_F_CREATE should be set when creating new route
[  128.664289][ T4796] input: syz0 as /devices/virtual/input/input8
[  132.480403][ T4822] Option '    ' to dns_resolver key: bad/missing value
[  132.951980][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  132.979240][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  133.308241][ T4811] loop3: detected capacity change from 0 to 512
[  133.420748][ T4811] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  134.119741][ T4811] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[  134.423319][ T4811] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.104: inode #15: comm syz.3.104: iget: illegal inode #
[  134.531395][ T4811] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.104: couldn't read orphan inode 15 (err -117)
[  134.576905][ T4811] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  135.517966][ T4842] loop2: detected capacity change from 0 to 32768
[  135.526258][ T4846] x_tables: duplicate underflow at hook 2
[  135.563760][ T4842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (4842)
[  135.613503][ T4842] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.648602][ T4842] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  135.691320][ T4842] BTRFS info (device loop2): force clearing of disk cache
[  135.738296][ T4842] BTRFS info (device loop2): max_inline at 0
[  135.746999][ T4842] BTRFS info (device loop2): enabling auto defrag
[  135.792163][ T4842] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  135.855212][ T4842] BTRFS info (device loop2): force zstd compression, level 3
[  135.917100][ T4842] BTRFS info (device loop2): enabling disk space caching
[  135.973493][ T4842] BTRFS info (device loop2): disk space caching is enabled
[  135.974894][ T4834] loop0: detected capacity change from 0 to 32768
[  136.150020][ T4842] BTRFS info (device loop2): enabling ssd optimizations
[  136.163650][ T4834] XFS (loop0): Mounting V5 Filesystem
[  136.235173][ T4842] BTRFS info (device loop2): rebuilding free space tree
[  136.288599][ T4834] XFS (loop0): Ending clean mount
[  136.357828][ T4834] XFS (loop0): Quotacheck needed: Please wait.
[  136.474765][ T4842] BTRFS info (device loop2): disabling free space tree
[  136.502542][ T4842] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  136.564745][ T4834] XFS (loop0): Quotacheck: Done.
[  136.591431][ T4842] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  137.065021][ T4265] XFS (loop0): Unmounting Filesystem
[  137.715392][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  137.768433][ T4276] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.492278][ T4937] loop4: detected capacity change from 0 to 4096
[  142.552428][ T4937] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  144.155982][ T4941] loop3: detected capacity change from 0 to 262144
[  144.189776][ T4941] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.137 (4941)
[  144.222396][ T4941] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  144.232926][ T4941] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  144.242538][ T4941] BTRFS info (device loop3): setting nodatasum
[  144.248927][ T4941] BTRFS info (device loop3): using free space tree
[  144.983550][ T4966] [U] 
[  144.994042][ T4966] [U] K{�
[  145.000263][ T4966] [U] �T �1��Š�F���Fˊ�`G�Jǘ�G���������O��/�MC�
[  145.083741][ T4966] [U] T�ؖ/,�~�Ĝ��J���}8���'O1��"�7-΂JQ�K��W��Q�5C%"�H12��Y������X�`���ȼ`+��(�¿!(���Z'�TXLN�I�G�J����ݭ�P�~�7�!���"ب���(�5�OBܤ�̓J�
[  145.142716][ T4966] [U] �K\&�}6�6�X�HX��Ե���.`�A�$�40|϶��9��ި����U��4��ĮVBZ��}�W�M�T���Q��ΦR�4��
[  145.227040][ T4966] [U] ".H6��"�KÇ[����J�4��I�N��[Z(��C|T�]Z{��3�C=��X�Ԟ˅�4�W�)\T�XJ��SH{Q;̹���T��+���G��߮D�.˂�>Y����WUH�FN����HL]S�2���\G%�O�&Z)�К'�PUL�_<�     �ذ�Ү��`ұT��ޜ���;_�"(�U{7J��2X �/�'��C���I����H�C�ճ�V�=��AI�%W�ES� R��J�Μ���G��R��͡HI
���A��6-�D��V�� I"��Nƨ ��ASC~4���8C�*�OO5/ߜJ�~���W�VK+����3��Y)��M���V��YQƽ�DTR�
OTPEM%F��EJ�A5��T_-X~�^AAۂҘ�Q��
[  145.263495][    C1] vkms_vblank_simulate: vblank timer overrun
[  145.267823][ T4269] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  145.295266][ T4966] [U]         +�W�G?]��'A:    ��)�
����' B>T���F/��<'�U�'��H�I�.+]E�.�-ɿ߿�%��>2`�^U�8F.�6��3��+�A�«���G3�P��6:�^0��T��V�'E�T����YC�N��Rϩ�N�PJ�;�Z����ۑ8!��\م�A�ʖ2��$е�­WI.��#��/BAI���`��4J��D�Y@�Z��GW�5˿B��ٜ�N�Y"VI2��
[  145.341848][ T4966] [U] ܾ�4B`˗H�T�_K5�T�YJ���9��C�$BR�L�NUL��9W���|�G�"ʃ�%�ڶ�C�؝���Q��
 ��3��Q��N^HP*��$   �.�7Yӱ�2�
[  145.393225][ T4966] [U] �?���H��*����3͝7�ɍ�^#Q�"0~���(�O�XL�B�,'V��=���C�S���G�S��0�ւ��`���ه��=1(�ξ��P#�2DO*Ƀ
[  145.498739][ T4966] [U] �S��G������GU��D-{���|&�����ѐ2��L�C_��!`��OZ֥�B��%>�RѶ�WχݎSS�H"�YA4�O.�Y��ď�RTԶ�B�[+/<<R�B����|ФE���۠�V96#���ͤʦJ�U�%
S851���ҩS�P��\��?Q�|L��QX�0�K�1ORɴ2��|��D�F���ِ��2ޔ���0��H�}C[/����PX^��O
[  145.522368][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.331457][ T4966] [U] �؛���(J�Л��M��XZ�;�����؝_����*3�3��5�\�XM��U��AK!AQ`�
[  148.091418][ T4995] input: syz0 as /devices/virtual/input/input9
[  155.018293][ T5028] loop0: detected capacity change from 0 to 512
[  155.215727][ T5028] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  156.192192][ T5028] EXT4-fs: failed to create workqueue
[  156.213031][ T5028] EXT4-fs (loop0): mount failed
[  159.017936][ T5056] loop3: detected capacity change from 0 to 8
[  162.823562][ T5069] process 'syz.0.168' launched './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  162.937948][ T5069] xt_time: unknown flags 0xc
[  163.051628][ T5069] loop0: detected capacity change from 0 to 2048
[  167.688382][ T5097] loop4: detected capacity change from 0 to 2048
[  167.721534][ T4275] Bluetooth: hci4: command 0x0411 tx timeout
[  167.777754][ T5097] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=27485, location=27485
[  168.016783][ T5104] loop3: detected capacity change from 0 to 512
[  168.613428][ T5104] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  168.632848][ T5104] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[  168.654928][ T5104] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.176: inode #15: comm syz.3.176: iget: illegal inode #
[  168.668651][ T5104] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.176: couldn't read orphan inode 15 (err -117)
[  168.682923][ T5104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  168.731308][ T5097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.953227][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  170.598217][ T5124] Zero length message leads to an empty skb
[  174.419114][ T5146] loop2: detected capacity change from 0 to 1024
[  175.193953][ T5146] EXT4-fs: Ignoring removed oldalloc option
[  175.199987][ T5146] EXT4-fs: Ignoring removed orlov option
[  175.398105][ T5146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  175.637540][ T5158] EXT4-fs error (device loop2): mb_free_blocks:1826: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  175.729136][ T5160] loop3: detected capacity change from 0 to 128
[  175.801646][ T5160] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  175.882583][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  175.888893][ T5160] hpfs: filesystem error: improperly stopped
[  175.938896][ T5160] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  175.997881][ T5160] hpfs: You really don't want any checks? You are crazy...
[  176.036109][ T5160] hpfs: hpfs_map_sector(): read error
[  176.070762][ T5160] hpfs: code page support is disabled
[  176.092652][ T5160] hpfs: hpfs_map_4sectors(): unaligned read
[  176.098920][ T5160] hpfs: hpfs_map_4sectors(): unaligned read
[  176.151417][ T5160] hpfs: filesystem error: unable to find root dir
[  182.019741][ T5204] loop2: detected capacity change from 0 to 1024
[  183.330484][ T5212] xt_time: unknown flags 0xc
[  183.433524][ T5212] loop0: detected capacity change from 0 to 2048
[  185.388750][ T4384] hfsplus: b-tree write err: -5, ino 4
[  185.409499][ T5219] loop3: detected capacity change from 0 to 512
[  185.485512][ T5219] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  185.496034][ T5219] UDF-fs: Scanning with blocksize 512 failed
[  185.539964][ T5219] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  185.595775][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[  185.621293][ T5219] UDF-fs: Scanning with blocksize 1024 failed
[  185.652422][ T5219] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  185.672463][ T5219] UDF-fs: Scanning with blocksize 2048 failed
[  185.696979][ T5219] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  185.739682][ T5219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.124517][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'.
[  189.934001][ T5243] loop2: detected capacity change from 0 to 8
[  194.990101][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.996607][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  195.899820][ T4493] libceph: connect (1)[c::]:6789 error -101
[  195.924163][ T4493] libceph: mon0 (1)[c::]:6789 connect error
[  196.051408][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  196.103802][ T5266] ceph: No mds server is up or the cluster is laggy
[  196.227162][ T5270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.230320][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'.
[  197.721145][ T4275] Bluetooth: hci1: command 0x0406 tx timeout
[  197.721170][ T4282] Bluetooth: hci3: command 0x0406 tx timeout
[  197.721202][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  197.727989][ T4275] Bluetooth: hci2: command 0x0406 tx timeout
[  200.788339][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'.
[  201.889388][ T5285] loop0: detected capacity change from 0 to 32768
[  202.837958][ T4343] libceph: connect (1)[c::]:6789 error -101
[  202.855168][ T4343] libceph: mon0 (1)[c::]:6789 connect error
[  203.086808][ T5300] loop2: detected capacity change from 0 to 8192
[  203.797672][ T4343] libceph: connect (1)[c::]:6789 error -101
[  203.811937][ T5306] ceph: No mds server is up or the cluster is laggy
[  203.841589][ T4343] libceph: mon0 (1)[c::]:6789 connect error
[  204.670184][ T5317] loop0: detected capacity change from 0 to 8
[  204.873208][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  204.894422][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  204.903888][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  204.943693][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  204.962730][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  204.971352][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.068149][ T4279] Bluetooth: hci5: command 0x0409 tx timeout
[  207.361542][ T5316] chnl_net:caif_netlink_parms(): no params data found
[  209.310009][ T4279] Bluetooth: hci5: command 0x041b tx timeout
[  209.696325][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.704595][ T5338] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  209.894792][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.961864][ T5316] device bridge_slave_0 entered promiscuous mode
[  209.996341][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.025434][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.057315][ T5316] device bridge_slave_1 entered promiscuous mode
[  210.174771][ T5316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.227231][ T5342] loop3: detected capacity change from 0 to 4096
[  210.232369][ T5316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.376124][ T5316] team0: Port device team_slave_0 added
[  210.422420][ T5316] team0: Port device team_slave_1 added
[  210.481376][   T26] audit: type=1804 audit(1771598075.303:2): pid=5347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.247" name=2F6E6577726F6F742F35312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop3" ino=33 res=1 errno=0
[  210.517789][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.577811][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.725223][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.392384][ T4279] Bluetooth: hci5: command 0x040f tx timeout
[  211.441408][ T5316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.056528][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.071139][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.097294][    C0] vkms_vblank_simulate: vblank timer overrun
[  213.205901][ T5316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.291374][ T4983] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  213.423085][ T5316] device hsr_slave_0 entered promiscuous mode
[  213.452901][ T5316] device hsr_slave_1 entered promiscuous mode
[  213.472823][ T5316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.481562][ T4279] Bluetooth: hci5: command 0x0419 tx timeout
[  213.501157][ T4983] usb 4-1: Using ep0 maxpacket: 32
[  213.513088][ T4983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.524331][ T4983] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  213.539463][ T5316] Cannot create hsr debugfs directory
[  213.546975][ T4983] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd
[  213.564119][ T4983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.573979][ T4983] usb 4-1: Product: syz
[  213.578599][ T4983] usb 4-1: Manufacturer: syz
[  213.585106][ T4983] usb 4-1: SerialNumber: syz
[  213.608755][ T4983] usb 4-1: config 0 descriptor??
[  213.661015][ T4983] rndis_wlan 4-1:0.0: skipping garbage
[  213.700882][ T4983] usb 4-1: bad CDC descriptors
[  213.718741][ T4983] rndis_host 4-1:0.0: skipping garbage
[  213.739656][ T4983] usb 4-1: bad CDC descriptors
[  213.747821][ T4983] cdc_acm 4-1:0.0: skipping garbage
[  213.763350][ T4983] cdc_acm 4-1:0.0: Control and data interfaces are not separated!
[  213.778182][ T4983] cdc_acm 4-1:0.0: This needs exactly 3 endpoints
[  213.787099][ T4983] cdc_acm: probe of 4-1:0.0 failed with error -22
[  213.977755][ T4476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.044248][ T5365] Option '    ' to dns_resolver key: bad/missing value
[  214.331267][ T4311] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  214.493063][ T4476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.551230][ T4311] usb 5-1: Using ep0 maxpacket: 16
[  214.565266][ T4311] usb 5-1: unable to get BOS descriptor or descriptor too short
[  214.670688][ T4311] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  214.701283][ T4311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.712925][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  214.729197][ T4311] usb 5-1: config 1 interface 0 has no altsetting 0
[  214.748284][ T4311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  214.760058][ T5358] netlink: 27 bytes leftover after parsing attributes in process `syz.3.251'.
[  214.772698][  T124] usb 4-1: USB disconnect, device number 3
[  214.803133][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15
[  214.827050][ T4311] usb 5-1: Product: syz
[  214.844379][ T4311] usb 5-1: Manufacturer: syz
[  214.849190][ T4311] usb 5-1: SerialNumber: syz
[  214.964236][ T4476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.657808][ T4476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.880413][ T4311] usb 5-1: skipping empty audio interface (v1)
[  217.117829][ T5381] TCP: TCP_TX_DELAY enabled
[  217.468178][ T4311] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  217.592426][ T4311] usb 5-1: USB disconnect, device number 2
[  218.325682][ T5366] udevd[5366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.706093][ T5383] loop4: detected capacity change from 0 to 4096
[  218.794491][ T5316] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  218.856668][ T5383] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  219.013826][ T5391] loop3: detected capacity change from 0 to 512
[  219.653979][ T5391] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal
[  220.601066][    C0] sched: RT throttling activated
[  221.638697][ T5398] loop2: detected capacity change from 0 to 512
[  221.892800][ T5316] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  221.900112][ T5398] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  221.928636][ T5398] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended
[  221.961997][ T5398] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.264: inode #15: comm syz.2.264: iget: illegal inode #
[  221.975472][ T5398] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.264: couldn't read orphan inode 15 (err -117)
[  221.987608][ T5398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  222.119550][ T5316] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.157322][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  222.374618][ T5406] loop4: detected capacity change from 0 to 1024
[  222.402298][ T5406] EXT4-fs: Ignoring removed oldalloc option
[  222.408305][ T5406] EXT4-fs: Ignoring removed orlov option
[  222.639414][ T5406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  222.730787][ T5413] Option '    ' to dns_resolver key: bad/missing value
[  223.021361][ T4986] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  223.271783][ T4986] usb 4-1: Using ep0 maxpacket: 16
[  223.321797][ T4986] usb 4-1: unable to get BOS descriptor or descriptor too short
[  223.459792][ T5316] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  223.480196][ T4986] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  223.520199][ T4986] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.550890][ T4986] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.579119][ T4986] usb 4-1: config 1 interface 0 has no altsetting 0
[  223.602633][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  223.607318][ T4986] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.664445][ T4986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15
[  223.701196][ T4986] usb 4-1: Product: syz
[  223.726181][ T4986] usb 4-1: Manufacturer: syz
[  223.756170][ T4986] usb 4-1: SerialNumber: syz
[  223.956390][ T5403] loop0: detected capacity change from 0 to 32768
[  223.971790][ T5316] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.120231][ T5403] XFS (loop0): Mounting V5 Filesystem
[  224.170214][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  224.260218][ T5403] XFS (loop0): Ending clean mount
[  224.270196][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  224.346509][ T5316] 8021q: adding VLAN 0 to HW filter on device team0
[  224.441186][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  224.500567][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  224.519728][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.527050][ T4607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.659803][ T4265] XFS (loop0): Unmounting Filesystem
[  224.712905][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  224.725446][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  224.743837][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  224.772360][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.779559][ T4607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.812257][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  224.830818][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  224.850981][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  224.888226][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  225.479347][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  225.550214][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.359968][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.396894][ T4986] usb 4-1: skipping empty audio interface (v1)
[  226.456588][ T4986] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  226.501677][ T4986] usb 4-1: USB disconnect, device number 4
[  226.573982][ T5316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  226.578136][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.630293][ T5316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.662691][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  226.673059][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.702490][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  226.778692][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.804136][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  228.648346][ T4476] IPVS: stopping backup sync thread 4442 ...
[  229.277900][ T5468] loop3: detected capacity change from 0 to 512
[  229.373030][ T5468] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal
[  229.767786][ T5475] loop3: detected capacity change from 0 to 164
[  230.381517][ T4986] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  230.485769][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.501420][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.587276][ T4986] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  230.606819][ T4986] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  230.612369][ T5316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.691937][ T4986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  230.735924][ T4986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  231.419814][ T5490] Option '    ' to dns_resolver key: bad/missing value
[  231.848641][ T4986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  233.391742][ T4986] usb 5-1: string descriptor 0 read error: -71
[  233.398253][ T4986] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  233.462095][ T4986] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  233.518194][ T4476] device hsr_slave_0 left promiscuous mode
[  233.526364][ T4986] usb 5-1: can't set config #1, error -71
[  233.551281][ T4317] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  233.570817][ T4986] usb 5-1: USB disconnect, device number 3
[  233.587743][ T4476] device hsr_slave_1 left promiscuous mode
[  233.603889][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.621492][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.643200][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.650833][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.741377][ T4476] device bridge_slave_1 left promiscuous mode
[  233.761844][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.895445][ T4476] device bridge_slave_0 left promiscuous mode
[  233.911397][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.031362][ T4317] usb 4-1: device not accepting address 5, error -71
[  237.372203][ T4476] device veth1_macvtap left promiscuous mode
[  237.380584][ T4476] device veth0_macvtap left promiscuous mode
[  237.417904][ T4476] device veth1_vlan left promiscuous mode
[  237.450923][ T4476] device veth0_vlan left promiscuous mode
[  238.329903][ T5529] loop4: detected capacity change from 0 to 512
[  238.626790][ T5529] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal
[  238.705986][ T4267] libceph: connect (1)[c::]:6789 error -101
[  238.718277][ T4267] libceph: mon0 (1)[c::]:6789 connect error
[  239.403494][ T4267] libceph: connect (1)[c::]:6789 error -101
[  239.413682][ T4267] libceph: mon0 (1)[c::]:6789 connect error
[  239.504402][ T5531] ceph: No mds server is up or the cluster is laggy
[  243.062438][ T5557] Option '    ' to dns_resolver key: bad/missing value
[  243.381153][ T4267] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  243.865596][ T4267] usb 3-1: Using ep0 maxpacket: 16
[  243.880612][ T4267] usb 3-1: unable to get BOS descriptor or descriptor too short
[  243.906668][ T4267] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  243.936907][ T4267] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.990795][ T4267] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.082867][ T4267] usb 3-1: config 1 interface 0 has no altsetting 0
[  244.104901][ T4267] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  244.123318][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15
[  244.155782][ T4267] usb 3-1: Product: syz
[  244.160135][ T4267] usb 3-1: Manufacturer: syz
[  244.173494][ T4267] usb 3-1: SerialNumber: syz
[  244.437441][ T5562] loop0: detected capacity change from 0 to 512
[  244.461813][ T5562] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  244.483878][ T5562] EXT4-fs (loop0): invalid journal inode
[  244.491703][ T5562] EXT4-fs (loop0): can't get journal size
[  246.954921][ T4267] usb 3-1: skipping empty audio interface (v1)
[  246.983709][ T5562] EXT4-fs (loop0): 1 truncate cleaned up
[  246.989445][ T5562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  247.358576][ T4476] team0 (unregistering): Port device team_slave_1 removed
[  248.583078][ T4267] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  248.634105][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  248.648823][ T5366] udevd[5366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.672894][ T4267] usb 3-1: USB disconnect, device number 3
[  248.787112][ T4476] team0 (unregistering): Port device team_slave_0 removed
[  249.722449][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.282208][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.485472][ T5581] loop0: detected capacity change from 0 to 16
[  251.502958][ T5581] erofs: (device loop0): mounted with root inode @ nid 36.
[  252.971528][ T4476] bond0 (unregistering): Released all slaves
[  254.132153][ T5600] loop3: detected capacity change from 0 to 1024
[  254.365950][ T5600] EXT4-fs: Ignoring removed oldalloc option
[  254.500342][ T5600] EXT4-fs: Ignoring removed orlov option
[  254.837930][ T5600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  255.030744][ T5600] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.304: Freeing blocks not in datazone - block = 0, count = 0
[  256.297339][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  256.309959][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  256.328092][ T5600] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.304: Freeing blocks not in datazone - block = 69831873329536, count = 16
[  256.633477][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  256.647226][ T5600] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.304: Freeing blocks not in datazone - block = 69831873298403, count = 31148
[  256.669160][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  256.792299][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  257.318045][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  257.345233][ T5316] device veth0_vlan entered promiscuous mode
[  257.385227][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  257.400876][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  257.422547][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  257.457982][ T5316] device veth1_vlan entered promiscuous mode
[  257.750202][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  257.781475][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  257.948315][ T5316] device veth0_macvtap entered promiscuous mode
[  258.204721][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.221971][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.290649][ T5316] device veth1_macvtap entered promiscuous mode
[  258.324281][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  258.375927][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.502477][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.558599][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.606204][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.616085][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.624555][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.632805][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.640529][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  258.641690][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.687211][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.901308][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.948391][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.999941][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.054709][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.121148][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.332750][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.421722][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  260.432152][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  260.515240][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.557118][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.628303][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.720515][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.761188][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[  260.831793][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.877747][ T5642] loop0: detected capacity change from 0 to 131072
[  260.891221][ T5642] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  260.899503][ T5642] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  260.902784][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.915110][ T5642] F2FS-fs (loop0): invalid crc value
[  261.019424][ T5642] F2FS-fs (loop0): Found nat_bits in checkpoint
[  261.024796][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.079582][ T5642] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  261.086861][ T5642] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  261.138229][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.221410][   T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  261.235043][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.271148][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  261.317999][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  261.382524][ T5316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.417755][ T5316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.426914][   T27] usb 4-1: Using ep0 maxpacket: 32
[  261.440993][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.463509][ T5316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.480899][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  261.505898][ T5316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.562837][   T27] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd
[  261.637526][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.666290][   T27] usb 4-1: Product: syz
[  261.706994][   T27] usb 4-1: Manufacturer: syz
[  261.721739][   T27] usb 4-1: SerialNumber: syz
[  261.741858][   T27] usb 4-1: config 0 descriptor??
[  261.780112][   T27] rndis_wlan 4-1:0.0: skipping garbage
[  261.811881][   T27] usb 4-1: bad CDC descriptors
[  261.823233][   T27] rndis_host 4-1:0.0: skipping garbage
[  261.828860][   T27] usb 4-1: bad CDC descriptors
[  261.834649][   T27] cdc_acm 4-1:0.0: skipping garbage
[  261.839988][   T27] cdc_acm 4-1:0.0: Control and data interfaces are not separated!
[  261.848250][   T27] cdc_acm 4-1:0.0: This needs exactly 3 endpoints
[  261.855735][   T27] cdc_acm: probe of 4-1:0.0 failed with error -22
[  262.005266][ T4267] usb 4-1: USB disconnect, device number 7
[  262.060587][ T5668] Option '    ' to dns_resolver key: bad/missing value
[  262.841175][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[  263.731342][ T4343] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  263.765030][   T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.931210][ T4343] usb 1-1: Using ep0 maxpacket: 16
[  263.956794][ T4343] usb 1-1: unable to get BOS descriptor or descriptor too short
[  264.162628][ T4343] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  264.171884][ T4343] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.182567][ T4343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  264.191875][ T4343] usb 1-1: config 1 interface 0 has no altsetting 0
[  264.212565][ T4343] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  264.231084][ T4343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15
[  264.239416][ T4343] usb 1-1: Product: syz
[  264.511274][ T4343] usb 1-1: Manufacturer: syz
[  264.516659][ T4343] usb 1-1: SerialNumber: syz
[  264.936448][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[  265.845044][ T4343] usb 1-1: skipping empty audio interface (v1)
[  265.913134][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  265.924020][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  265.937888][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  265.947681][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  265.957970][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  265.966192][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  265.998871][ T4343] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  266.007659][ T4343] usb 1-1: USB disconnect, device number 2
[  267.328988][ T4279] Bluetooth: hci3: command 0x0419 tx timeout
[  267.376835][   T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.443510][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  267.954652][   T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.041289][ T4279] Bluetooth: hci1: command 0x0409 tx timeout
[  268.193327][ T5698] loop0: detected capacity change from 0 to 1024
[  268.224226][ T5698] EXT4-fs: Ignoring removed oldalloc option
[  268.230251][ T5698] EXT4-fs: Ignoring removed orlov option
[  268.362573][ T5698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  268.405342][ T5632] chnl_net:caif_netlink_parms(): no params data found
[  268.498095][ T5705] ==================================================================
[  268.506234][ T5705] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x33ef/0x44c0
[  268.514875][ T5705] Read of size 4 at addr ffff88804fdb1c18 by task syz.0.323/5705
[  268.522622][ T5705] 
[  268.524965][ T5705] CPU: 0 PID: 5705 Comm: syz.0.323 Not tainted syzkaller #0
[  268.532441][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  268.542692][ T5705] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  268.546086][ T5705]  <TASK>
[  268.549036][ T5705]  dump_stack_lvl+0x188/0x24e
[  268.553831][ T5705]  ? __lock_acquire+0x7d10/0x7d10
[  268.558980][ T5705]  ? show_regs_print_info+0x12/0x12
[  268.564227][ T5705]  ? load_image+0x400/0x400
[  268.568862][ T5705]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  268.574434][ T5705]  ? __virt_addr_valid+0x188/0x540
[  268.579749][ T5705]  ? __virt_addr_valid+0x465/0x540
[  268.584890][ T5705]  ? ext4_ext_remove_space+0x33ef/0x44c0
[  268.590552][ T5705]  print_report+0xa8/0x210
[  268.595010][ T5705]  kasan_report+0x10b/0x140
[  268.599570][ T5705]  ? ext4_ext_remove_space+0x33ef/0x44c0
[  268.605242][ T5705]  ext4_ext_remove_space+0x33ef/0x44c0
[  268.610750][ T5705]  ? __es_remove_extent+0xe01/0x1770
[  268.616079][ T5705]  ? __lock_acquire+0x7d10/0x7d10
[  268.621147][ T5705]  ? ext4_da_release_space+0x133/0x5d0
[  268.626804][ T5705]  ? ext4_ext_index_trans_blocks+0xf0/0xf0
[  268.632679][ T5705]  ext4_ext_truncate+0x211/0x370
[  268.637665][ T5705]  ext4_truncate+0xa23/0x1240
[  268.642647][ T5705]  ? __ext4_mark_inode_dirty+0x770/0x770
[  268.648320][ T5705]  ? unmap_mapping_range+0x91/0x100
[  268.653784][ T5705]  ext4_setattr+0x10cb/0x19f0
[  268.658497][ T5705]  ? ext4_write_inode+0x5e0/0x5e0
[  268.663723][ T5705]  notify_change+0xc74/0xf40
[  268.668521][ T5705]  do_truncate+0x1ac/0x240
[  268.673162][ T5705]  ? put_page_bootmem+0x2c0/0x2c0
[  268.678223][ T5705]  ? bpf_lsm_path_truncate+0x5/0x10
[  268.683476][ T5705]  vfs_truncate+0x262/0x2f0
[  268.688022][ T5705]  do_sys_truncate+0xf2/0x1c0
[  268.692730][ T5705]  ? lock_chain_count+0x20/0x20
[  268.697623][ T5705]  ? break_lease+0xd0/0xd0
[  268.702069][ T5705]  ? lockdep_hardirqs_on+0x94/0x140
[  268.707313][ T5705]  do_syscall_64+0x4c/0xa0
[  268.711803][ T5705]  ? clear_bhb_loop+0x60/0xb0
[  268.716534][ T5705]  ? clear_bhb_loop+0x60/0xb0
[  268.721339][ T5705]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.727266][ T5705] RIP: 0033:0x7fa48879c629
[  268.731714][ T5705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.751621][ T5705] RSP: 002b:00007fa4869f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  268.760130][ T5705] RAX: ffffffffffffffda RBX: 00007fa488a16090 RCX: 00007fa48879c629
[  268.768226][ T5705] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000180
[  268.776334][ T5705] RBP: 00007fa488832b39 R08: 0000000000000000 R09: 0000000000000000
[  268.784343][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.792346][ T5705] R13: 00007fa488a16128 R14: 00007fa488a16090 R15: 00007ffdb3a44d68
[  268.800361][ T5705]  </TASK>
[  268.803435][ T5705] 
[  268.805801][ T5705] The buggy address belongs to the physical page:
[  268.812315][ T5705] page:ffffea00013f6c40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4fdb1
[  268.822765][ T5705] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  268.829927][ T5705] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[  268.838716][ T5705] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  268.847602][ T5705] page dumped because: kasan: bad access detected
[  268.854221][ T5705] page_owner tracks the page as freed
[  268.859790][ T5705] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5671, tgid 5671 (syz.2.311), ts 263092615690, free_ts 267856415022
[  268.878504][ T5705]  post_alloc_hook+0x173/0x1a0
[  268.883400][ T5705]  get_page_from_freelist+0x1a1e/0x1ab0
[  268.888990][ T5705]  __alloc_pages+0x1ec/0x4f0
[  268.893709][ T5705]  __folio_alloc+0xe/0x30
[  268.898246][ T5705]  vma_alloc_folio+0x4a3/0x900
[  268.903125][ T5705]  shmem_alloc_and_acct_folio+0x463/0xbc0
[  268.908972][ T5705]  shmem_get_folio_gfp+0x1361/0x3400
[  268.914380][ T5705]  shmem_write_begin+0xee/0x3f0
[  268.919358][ T5705]  generic_perform_write+0x2fa/0x5c0
[  268.924765][ T5705]  __generic_file_write_iter+0x148/0x2a0
[  268.930436][ T5705]  generic_file_write_iter+0xab/0x2e0
[  268.935990][ T5705]  __kernel_write_iter+0x285/0x650
[  268.941138][ T5705]  dump_user_range+0x412/0x850
[  268.946030][ T5705]  elf_core_dump+0x30a6/0x35d0
[  268.950906][ T5705]  do_coredump+0x165b/0x22f0
[  268.955536][ T5705]  get_signal+0x10aa/0x1350
[  268.960166][ T5705] page last free stack trace:
[  268.964944][ T5705]  free_unref_page_prepare+0x8b4/0x9a0
[  268.970520][ T5705]  free_unref_page_list+0xbb/0x8e0
[  268.975776][ T5705]  release_pages+0x1fa6/0x2220
[  268.980743][ T5705]  __pagevec_release+0x6d/0xe0
[  268.985543][ T5705]  shmem_undo_range+0x7c2/0x20c0
[  268.990523][ T5705]  shmem_evict_inode+0x25b/0xa80
[  268.995588][ T5705]  evict+0x4c9/0x8d0
[  268.999522][ T5705]  do_unlinkat+0x388/0x580
[  269.004055][ T5705]  __x64_sys_unlink+0x45/0x50
[  269.008945][ T5705]  do_syscall_64+0x4c/0xa0
[  269.013391][ T5705]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.019410][ T5705] 
[  269.021839][ T5705] Memory state around the buggy address:
[  269.027671][ T5705]  ffff88804fdb1b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  269.035841][ T5705]  ffff88804fdb1b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  269.044100][ T5705] >ffff88804fdb1c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  269.052271][ T5705]                             ^
[  269.057486][ T5705]  ffff88804fdb1c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  269.065802][ T5705]  ffff88804fdb1d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  269.074081][ T5705] ==================================================================
[  269.082481][    C0] vkms_vblank_simulate: vblank timer overrun
[  269.092641][   T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.241434][ T5705] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  269.248810][ T5705] CPU: 1 PID: 5705 Comm: syz.0.323 Not tainted syzkaller #0
[  269.256132][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  269.266404][ T5705] Call Trace:
[  269.269810][ T5705]  <TASK>
[  269.272789][ T5705]  dump_stack_lvl+0x188/0x24e
[  269.277736][ T5705]  ? memcpy+0x3c/0x60
[  269.281911][ T5705]  ? show_regs_print_info+0x12/0x12
[  269.287162][ T5705]  ? load_image+0x400/0x400
[  269.291986][ T5705]  panic+0x2e5/0x730
[  269.296002][ T5705]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  269.302194][ T5705]  ? bpf_jit_dump+0xd0/0xd0
[  269.306737][ T5705]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  269.312926][ T5705]  ? _raw_spin_unlock+0x40/0x40
[  269.317810][ T5705]  check_panic_on_warn+0x80/0xa0
[  269.322792][ T5705]  ? ext4_ext_remove_space+0x33ef/0x44c0
[  269.328807][ T5705]  end_report+0x66/0x110
[  269.333093][ T5705]  kasan_report+0x118/0x140
[  269.337637][ T5705]  ? ext4_ext_remove_space+0x33ef/0x44c0
[  269.343309][ T5705]  ext4_ext_remove_space+0x33ef/0x44c0
[  269.348905][ T5705]  ? __es_remove_extent+0xe01/0x1770
[  269.354243][ T5705]  ? __lock_acquire+0x7d10/0x7d10
[  269.359309][ T5705]  ? ext4_da_release_space+0x133/0x5d0
[  269.364894][ T5705]  ? ext4_ext_index_trans_blocks+0xf0/0xf0
[  269.370744][ T5705]  ext4_ext_truncate+0x211/0x370
[  269.375733][ T5705]  ext4_truncate+0xa23/0x1240
[  269.380570][ T5705]  ? __ext4_mark_inode_dirty+0x770/0x770
[  269.386267][ T5705]  ? unmap_mapping_range+0x91/0x100
[  269.391734][ T5705]  ext4_setattr+0x10cb/0x19f0
[  269.396447][ T5705]  ? ext4_write_inode+0x5e0/0x5e0
[  269.401511][ T5705]  notify_change+0xc74/0xf40
[  269.406148][ T5705]  do_truncate+0x1ac/0x240
[  269.410684][ T5705]  ? put_page_bootmem+0x2c0/0x2c0
[  269.415751][ T5705]  ? bpf_lsm_path_truncate+0x5/0x10
[  269.421072][ T5705]  vfs_truncate+0x262/0x2f0
[  269.425874][ T5705]  do_sys_truncate+0xf2/0x1c0
[  269.430605][ T5705]  ? lock_chain_count+0x20/0x20
[  269.435475][ T5705]  ? break_lease+0xd0/0xd0
[  269.440431][ T5705]  ? lockdep_hardirqs_on+0x94/0x140
[  269.445680][ T5705]  do_syscall_64+0x4c/0xa0
[  269.450364][ T5705]  ? clear_bhb_loop+0x60/0xb0
[  269.455308][ T5705]  ? clear_bhb_loop+0x60/0xb0
[  269.459991][ T5705]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.466147][ T5705] RIP: 0033:0x7fa48879c629
[  269.470681][ T5705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.490465][ T5705] RSP: 002b:00007fa4869f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  269.499086][ T5705] RAX: ffffffffffffffda RBX: 00007fa488a16090 RCX: 00007fa48879c629
[  269.507246][ T5705] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000180
[  269.515219][ T5705] RBP: 00007fa488832b39 R08: 0000000000000000 R09: 0000000000000000
[  269.523189][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.531161][ T5705] R13: 00007fa488a16128 R14: 00007fa488a16090 R15: 00007ffdb3a44d68
[  269.539750][ T5705]  </TASK>
[  269.543281][ T5705] Kernel Offset: disabled
[  269.547601][ T5705] Rebooting in 86400 seconds..