last executing test programs:

1m38.412975528s ago: executing program 2 (id=206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001280)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x10001}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_mount_image$erofs(&(0x7f0000001200), &(0x7f0000000180)='./file1\x00', 0x1000801, &(0x7f0000000300)=ANY=[], 0xfe, 0x1d1, &(0x7f0000000400)="$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")
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000001240)='./file0\x00', 0x808082, &(0x7f0000000200), 0xfe, 0x480, &(0x7f00000004c0)="$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")
unshare(0x20000400)
r4 = socket$alg(0x26, 0x5, 0x0)
pipe2$9p(&(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x0)
tee(r4, r5, 0x80, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@auto_da_alloc}, {@resuid}, {@max_batch_time}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000e1ff00000000000000000061120400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x8, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@rand_addr=0x64010100, 0x0, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {0xffffffff}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

1m36.771286417s ago: executing program 2 (id=211):
r0 = socket$alg(0x26, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40101)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = msgget(0x0, 0x2c4)
msgctl$IPC_RMID(r3, 0x0)

1m35.822557633s ago: executing program 2 (id=213):
syz_create_resource$binfmt(&(0x7f00000011c0)='./file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000001e80)=0x6, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8}, 0x1c)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1m28.989263144s ago: executing program 2 (id=228):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x24080, &(0x7f0000000640)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x0, 0xc39, &(0x7f00000021c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x4c37e, 0xb2)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x18)
symlinkat(&(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00')
openat2(r4, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000740), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0xffffffffffffffff}}, {@shortname_lower}, {@shortname_winnt}, {@utf8}, {@fat=@errors_remount}, {@utf8no}, {@rodir}, {@fat=@errors_continue}, {@fat=@check_normal}, {@fat=@gid}, {@rodir}]}, 0x6, 0x2b3, &(0x7f0000001400)="$eJzs3T9rLFUUAPAzm93ZVYvdwkoEB7Swery81maDvICYyrCFWmgwCUh2ERII+AfXVLY2FhZ+AkHwg9j4DQRbwc4IgZGZncnuJusmK9nEP79fk5M758yce3NJJkVu3n9xdLSfxeHZZz9Hp5NEox/9OE+iF42ofRFz+l8FAPBvdp7n8Vs+sUpdEhGd9bUFAKzRyj//f1h7SwDAmu2+/c6bWzs7T9/Ksk5sj748HRS/2RcfJ9e3DuPDGMZBPI5uXESULwqtKN8WinA7z/NxMyv04pXR+HRQVI7e+7G6/9avEWX9ZnSjVw5dvm2U9W/sPN3MJmbqx0Ufz1bP7xf1T6Ibz18Wz9U/WVAfgzRefXmm/0fRjZ8+iI9iGPtlE9P6zzez7PX8698/fbdor6hPxqeDdpk3lW/c85cGAAAAAAAAAAAAAAAAAAAAAID/sEfV2TntKM/vKYaq83c2LopPWpHVevPn80zqk/pGs+cD5Xk+zuPb+nydx1mW5VXitL4ZLzSj+TCzBgAAAAAAAAAAAAAAAAAAgH+Wk48/OdobDg+O7ySoTwNoRsQfuxF/9z79mZGXYnlyu3rm3nDYqML5nObsSGzUOUnE0jaKSdzRstwUPHOt5yr47vtVb9i5Oae1+Fl3GdS762gvWbyG7ahHOtUm+SaNmOakcctnpX91KY9Vtl+68FJ35bmnz5XBeElOJMsae+2XycpVI8nVWaTlqi4sb1XBTPmVvbHSfr7+vSJxWgcAAAAAAAAAAAAAAAAAAKzV9I9+F1w8W1rayNtrawsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7tX0//+vEIyr4lskp3F88sBTBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/gzwAAAP//rUxeSQ==")

1m27.895253211s ago: executing program 2 (id=229):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
read$FUSE(r1, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0)
ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000100)=0x69)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r6, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4010}, 0x18)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc)
socket$inet(0x2, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)

1m22.595443373s ago: executing program 2 (id=239):
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x4005)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b991702030109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_disconnect(r3)
close_range(r2, 0xffffffffffffffff, 0x0)

1m22.595084103s ago: executing program 3 (id=240):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000980)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x835, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
unlink(&(0x7f0000000100)='./file1\x00')

1m19.68972834s ago: executing program 32 (id=239):
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x4005)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b991702030109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_disconnect(r3)
close_range(r2, 0xffffffffffffffff, 0x0)

1m19.68394371s ago: executing program 3 (id=243):
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = io_uring_setup(0xb3b, &(0x7f0000000240)={0x0, 0x4, 0x500, 0x3, 0x14a})
close_range(r1, 0xffffffffffffffff, 0x0)

1m13.967484995s ago: executing program 3 (id=251):
socket$inet6(0xa, 0x1, 0x8593)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x2}, 0x20)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

1m9.667484281s ago: executing program 3 (id=256):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x102020, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x499, &(0x7f0000000ac0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)

1m9.039386835s ago: executing program 3 (id=260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6ca0985e51e7993e, 0x8031, 0xffffffffffffffff, 0x2d6fe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080), 0x12)

1m7.675319123s ago: executing program 3 (id=263):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m6.348921921s ago: executing program 33 (id=263):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

21.235974252s ago: executing program 6 (id=338):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x2810000, &(0x7f0000000440)={[{@user_xattr}, {@noquota}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x84}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@errors_remount}, {@dioread_lock}, {@user_xattr}, {@quota}]}, 0x1, 0x59c, &(0x7f0000000f80)="$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")
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000100)="63925e446b7848f51279d89df6dea2b21272da684dae658e8418e821572645a1c95cb615d2181391aac5448171361f43c69c6084789e06c67b75f962418a4dc0ad718ca72dbe58512728c964f15bd1b2512f7bbdb41e545ba0b20b7bc13add393560e14740c56a3f55fd83b58513f457f14f456158c8a5b40f4c91f2708c4dbe57041231992912c0dd49efbd53c3f464b105cacd5317f52f8f8dec0de6a11432b8f526181a34418f41ece3bcc7a68db25f17d570524c6c48e21df732447b6f8735eaee8041bbbc6400"/212, 0xd4, 0x48080, &(0x7f0000000000)={0xa, 0x5, 0x56e71229, @mcast2, 0xd}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3324247, &(0x7f0000000500), 0xff, 0x57e, &(0x7f0000001ac0)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r4, r4, 0x0, 0xfffe80)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
syz_open_dev$sndpcmp(&(0x7f0000000140), 0xb, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]})
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

15.855914225s ago: executing program 5 (id=352):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000004c0)=@add_del={0x2, 0x0})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)

13.759954047s ago: executing program 6 (id=356):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804425, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4ca, &(0x7f0000001d80)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0, 0x0, 0x8000000000000000}, 0xd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r5, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x8, &(0x7f00000002c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, &(0x7f0000000800)=""/196, 0x0, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x28)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
socket$unix(0x1, 0x2, 0x0)

13.663750718s ago: executing program 1 (id=357):
r0 = epoll_create1(0x0)
r1 = socket(0x2, 0x80802, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d})
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x48}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0x9}]}}]}]}, 0x3c}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
epoll_pwait(r0, &(0x7f0000000440)=[{}], 0x1, 0x401, 0x0, 0x0)
epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0x2, 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0x20000005})

12.568257685s ago: executing program 5 (id=359):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0x0, r4, {0x0, 0x8}}, 0x20)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl'])

11.61739754s ago: executing program 4 (id=361):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9dfc36351c725cc7703c92d30e7850ec900b153738338368958399ca173314ba6094c8b88e708647e303e0388583fa21175f460778", @ANYRES16=r1, @ANYBLOB="090300000000000000000d00000018000180140002007663616e30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000814)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2101, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r7 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})

11.580381121s ago: executing program 5 (id=363):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9dfc36351c725cc7703c92d30e7850ec900b153738338368958399ca173314ba6094c8b88e708647e303e0388583fa21175f460778", @ANYRES16=r1, @ANYBLOB="090300000000000000000d00000018000180140002007663616e30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000814)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x4010, r2, 0xb1550000)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2101, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r7 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})

11.360197582s ago: executing program 0 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0xf6, 0x71, 0x9, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x40, 0x5, 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0700000000000005"], 0x310)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x15, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/../file0\x00', 0x0)
write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12)

9.410260404s ago: executing program 5 (id=365):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.405505414s ago: executing program 4 (id=366):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = fsopen(&(0x7f00000003c0)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000040)=0x5)
io_setup(0x3, &(0x7f00000000c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000700)='9', 0x1}])
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000600)=ANY=[@ANYRES32=r5], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
r9 = syz_open_pts(r6, 0x0)
r10 = dup3(r9, r6, 0x0)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000))

8.811489927s ago: executing program 6 (id=367):
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0x1, 0x2, 0x1ff)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'dvmrp1\x00', {0x2, 0x4e21, @loopback}})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2eda)
listen(r7, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r7, 0x1}, 0x20)
recvmmsg(r7, &(0x7f0000001700), 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x25, 0x8, 0x3, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1810716, &(0x7f0000000300)={[{@nodiscard}, {@block_validity}, {@usrquota}, {@prjquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@jqfmt_vfsold}, {@prjquota}, {@i_version}]}, 0xff, 0x467, &(0x7f0000000780)="$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")

7.554381255s ago: executing program 6 (id=368):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r6, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4010}, 0x18)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc)
socket$inet(0x2, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)

7.444415495s ago: executing program 0 (id=369):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = inotify_init()
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1)

6.940442459s ago: executing program 4 (id=370):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdir(0x0, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000004c0)=@add_del={0x2, 0x0})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)

6.440842092s ago: executing program 1 (id=371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100)

6.419127021s ago: executing program 0 (id=372):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)

6.182357193s ago: executing program 1 (id=373):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
close(r2)

5.02520851s ago: executing program 6 (id=374):
fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
futex(&(0x7f00000000c0), 0x7, 0x0, 0x0, &(0x7f0000000300), 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000000)=ANY=[], 0x7, 0x7e1, &(0x7f0000001100)="$eJzs3U1oHOf5APBnFNmRlf/fhLS4xjjOxEnBBkdZyY6CyCHZrEbyJKtdsbsKNqUkppaDsZyEuIFahzq+tLS0hJ56THLopT2VXloKLbTQ9lRor70FAj0kLS300BJQmZmVJVlf/pA/SH8/Yc07M+/M+7zvrufZkTQzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABE0pis1UaTaOatuVPp5hqTnfbMFuuX9/frNZMt2o1Iin8xNBT7q0X7v7iyel/x7XAcrOYOxlAxGYrFh/Y9/NwXBgeWt98ioJ02uNHCS5cXL5xZWJh/+y4Gcgd895drZn80HDc4stNZK++285n6dJbm3XY6MT5ee/rkVDedyptZ93S3l82kjU5W77U76ZHG0XR0YuJ4mo2cbs+1pifrzSwdrBY++9RYrTaevjQym9U73Xbr6ZdGuo2TebOZt6bLDYvVRZ1nizfiy3kv7WX1mTQ9d35h/vjakPasC7KoNLpmyWdLq+cOPvnwx+989M/z82PbdXesNjY2Ojo2NjqeREStNriy4JmJZ56t1QZr14l1Ne7qm5b70A4fweHWDfTzfzQjj1bMxalIN/xqxGR0oh0zsfIGXr2+bzn/f/npv/1xq3bfW5X/qyw/cHD/yuoDUeb/Q9Xcoc3yf9X27gc3iflOfa30/1JcjsW4EGdiIRZiPt6+I+0lO7evgZ2NbDqyaEUe3WhHHjNRL5ek/SVpTMR4jEctXo2TMRXdSGMq8mhGFt04Hd3oRVa+oxrRiSzq0Yt2dCKNI9GIo5HGaEzERByPNLIYidPRjrloxXRMRr3cy7k4X4778evi2vfN137x+p8+fr98tZYrjW41xO9GlJX+sUWldclc/uemRcRvd+rwDbdlaTn/AwAAAJ9bSfnT9+L8f1c8Wpam8mb2lW22Giy+vXt3IgQAAABuV/mb/4PFZFdRejSS4vy/trbST3bdm+AAAACAHZGU19glETEcj1Wl5culavc6NgAAAGBnlL//P1RMhiOulAuc/wMAAMDnzCs/6xeuv8f+R8v32B2YfTD51d+j09mVnPjg1JPJxXpRr37xgWq7/uSVa3vsTR1Ion9DwXJf44OLDxXzg43sYLJ889zPHqymn5bfDwxe23xtHC/sqZYmSVIEcHV20wBiTQB7+724FkA5F9+Lx6s6j5+tpmeX11S9HZ7Km9lIo918bjTq9b0DvexU7503zn8jyu5/pzWzN4lz5xfmR7725sLZMparxV6uXuz3d919FLeIZak/AvHo+rsbF7vaVV6I0W93uGq3trr/A5f2FoWBm2jzW3H4/8o6h4erusNr+z9UtDk6slnvh6v+ja7r+eD6N1YVxen+3HVRPFEtfeLIE9VkgyjGtoqiGIux1VH0B+HmxmLDKOLhiHj/8Sun/vW7dpId3y6K47cZBcC9cq6860+Rhap0VGWh/yxVivzf6ezaHWvyTrXBjR7lkrKVbZ7kc+PZ/d9LWxzRj1R1jlSfJwYPbJBXahsc0d86/9bv+0f0Ez/+4QdfPfSHn95yXh9arrJnufDIbx4aiDKKPf0oFvtrOruS71/LJFVW/bBY/uGm7XabY0kxhA98/eJbse/S5cWnzl888/r86/NvjI0dH6+dqNWeSZL+i7dUfmKQewDYwOE4VCXyTZ+xs8lTeMoPAFXuPrHVWfUDkTxy7U8Kipz4ZizE2ThWXm0QEY9t3O7wqj9DOBaH+8FufNY6vOoJL8e2ObfcHdGvO7Zt3eFVj5dZ8aUf3MnXAwDuhsPb5OFN8/+qc/dj25x3r83lR6u6R5cj2DyXR8Tzd3c0AOB/Q9b5NBnufTvpdPLZV0cnJkbrvZNZ2mk3Xk47+eR0luatXtaJwXprOktnO+1eu9FuFoVX8smsm3bnZmfbnV461e6ks+1ufqp88nvaf/R7N5upt3p5ozvbzOrdLG20W716o5dO5t1GOjv3YjPvnsw65cbd2ayRT+WNei9vt9Jue67TyEbStJtlqyrmk1mrl0/lRbGVznbymXrnakQ052aydDLrNjr5bK9d7XC5rbw11e7MlLv96957PdoAcH+4dHnxwpmFhfm3b63wlxupvHnrQ24sDAD3wEqW/uT/r1/nh+8AAAAAAAAAAAAAAHB/uM3r/9YX9uzsDoe2qrN0JWL9qmRpaekmmtgT29TZ3R+qHR6ou1K4uiP7GYiNxvn+KSSbr3rt+ecvbLb5i1f2n7yxJrb9nzIYEf1LXd/9ZPfP36tWvXBL3Rm4+a3+HBG30NZSskWde3tcAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICN/DcAAP//jRtoaA==")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0x0)
r1 = fanotify_init(0x200, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x40)
fanotify_mark(r1, 0x41, 0x8000038, r2, 0x0)

4.99492586s ago: executing program 0 (id=375):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9dfc36351c725cc7703c92d30e7850ec900b153738338368958399ca173314ba6094c8b88e708647e303e0388583fa21175f460778", @ANYRES16=r1, @ANYBLOB="090300000000000000000d00000018000180140002007663616e30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000814)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x4010, r2, 0xb1550000)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2101, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r7 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})

4.945286081s ago: executing program 4 (id=376):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9dfc36351c725cc7703c92d30e7850ec900b153738338368958399ca173314ba6094c8b88e708647e303e0388583fa21175f460778", @ANYRES16=r1, @ANYBLOB="090300000000000000000d00000018000180140002007663616e30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000814)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2101, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r7 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})

4.93895243s ago: executing program 1 (id=377):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x2810000, &(0x7f0000000440)={[{@user_xattr}, {@noquota}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x84}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@errors_remount}, {@dioread_lock}, {@user_xattr}, {@quota}]}, 0x1, 0x59c, &(0x7f0000000f80)="$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")
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000100)="63925e446b7848f51279d89df6dea2b21272da684dae658e8418e821572645a1c95cb615d2181391aac5448171361f43c69c6084789e06c67b75f962418a4dc0ad718ca72dbe58512728c964f15bd1b2512f7bbdb41e545ba0b20b7bc13add393560e14740c56a3f55fd83b58513f457f14f456158c8a5b40f4c91f2708c4dbe57041231992912c0dd49efbd53c3f464b105cacd5317f52f8f8dec0de6a11432b8f526181a34418f41ece3bcc7a68db25f17d570524c6c48e21df732447b6f8735eaee8041bbbc6400"/212, 0xd4, 0x48080, &(0x7f0000000000)={0xa, 0x5, 0x56e71229, @mcast2, 0xd}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3324247, &(0x7f0000000500), 0xff, 0x57e, &(0x7f0000001ac0)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

2.855566583s ago: executing program 0 (id=378):
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0x1, 0x2, 0x1ff)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'dvmrp1\x00', {0x2, 0x4e21, @loopback}})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2eda)
listen(r7, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r7, 0x1}, 0x20)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x25, 0x8, 0x3, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1810716, &(0x7f0000000300)={[{@nodiscard}, {@block_validity}, {@usrquota}, {@prjquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@jqfmt_vfsold}, {@prjquota}, {@i_version}]}, 0xff, 0x467, &(0x7f0000000780)="$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")

2.844224713s ago: executing program 4 (id=379):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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")
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008440)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044103, &(0x7f0000000080))

1.565241851s ago: executing program 5 (id=380):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = fsopen(&(0x7f00000003c0)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000040)=0x5)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000700)='9', 0x1}])
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000600)=ANY=[@ANYRES32=r5], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
r8 = syz_open_pts(r6, 0x0)
r9 = dup3(r8, r6, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000))

1.414449851s ago: executing program 6 (id=381):
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x45f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x80000, 0xfffffffffffffffc, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x4000000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x20001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0xf4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x350, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000008, 0x40000000]})
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1f1, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fadvise64(r0, 0x8000, 0x4101, 0x3)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x12000, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
lsetxattr$security_evm(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)=@md5={0x1, "aac1d7b6ff8cb9c0adf20e77ced4628c"}, 0x11, 0x2)
socket$inet(0x2, 0x1, 0x0)
keyctl$invalidate(0x15, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev, 0x9, r3})

1.376081652s ago: executing program 0 (id=382):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = inotify_init()
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1)

1.270330233s ago: executing program 4 (id=383):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001280)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x10001}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_mount_image$erofs(&(0x7f0000001200), &(0x7f0000000180)='./file1\x00', 0x1000801, &(0x7f0000000300)=ANY=[], 0xfe, 0x1d1, &(0x7f0000000400)="$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")
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000001240)='./file0\x00', 0x808082, &(0x7f0000000200), 0xfe, 0x480, &(0x7f00000004c0)="$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")
unshare(0x20000400)
r4 = socket$alg(0x26, 0x5, 0x0)
pipe2$9p(&(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x0)
tee(r4, r5, 0x80, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@auto_da_alloc}, {@resuid}, {@max_batch_time}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@rand_addr=0x64010100, 0x0, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {0xffffffff}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0)
preadv(r7, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x5, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

1.199127033s ago: executing program 1 (id=384):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r6, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4010}, 0x18)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc)
socket$inet(0x2, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)

95.24267ms ago: executing program 5 (id=385):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x2, 0x401, 0x40, @loopback, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0x10, 0x9, 0x80}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xfffffe3b, &(0x7f0000000340)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000000080103000000000000000000000000050003003a0000000900010073797a31000000003400048008000940000000080800014000000007080001400082402f6b86d1492b00000308000840fffffff908000240000005f5060002"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x480a0)

0s ago: executing program 1 (id=386):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts.
[   63.877667][ T4237] cgroup: Unknown subsys name 'net'
[   63.983740][ T4237] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.272710][ T4237] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   66.617705][ T4255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.629053][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.630101][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.637940][ T4255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.644849][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.651708][ T4255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.660163][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.665802][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.672503][ T4263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.679856][ T4255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.694501][ T4255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.694542][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.701732][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.709545][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.716249][ T4255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.724913][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.730646][ T4255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.739755][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.745374][ T4255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.752305][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.758606][ T4255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.765894][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.773010][ T4255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.786598][ T4263] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   66.807326][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.817377][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.825071][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.825157][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.850642][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.858664][ T4255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.250578][ T4253] chnl_net:caif_netlink_parms(): no params data found
[   67.310783][ T4257] chnl_net:caif_netlink_parms(): no params data found
[   67.354291][ T4249] chnl_net:caif_netlink_parms(): no params data found
[   67.399087][ T4247] chnl_net:caif_netlink_parms(): no params data found
[   67.457526][ T4248] chnl_net:caif_netlink_parms(): no params data found
[   67.505075][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.513251][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.521573][ T4253] device bridge_slave_0 entered promiscuous mode
[   67.536034][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.543278][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.551734][ T4253] device bridge_slave_1 entered promiscuous mode
[   67.590315][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.600194][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.608349][ T4257] device bridge_slave_0 entered promiscuous mode
[   67.645262][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.652483][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.661118][ T4257] device bridge_slave_1 entered promiscuous mode
[   67.688507][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.700348][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.715181][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.722485][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.730379][ T4249] device bridge_slave_0 entered promiscuous mode
[   67.738328][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.745427][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.753352][ T4247] device bridge_slave_0 entered promiscuous mode
[   67.780414][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.787820][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.796085][ T4249] device bridge_slave_1 entered promiscuous mode
[   67.803412][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.810814][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.818836][ T4247] device bridge_slave_1 entered promiscuous mode
[   67.842292][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.875563][ T4253] team0: Port device team_slave_0 added
[   67.883162][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.908348][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.915466][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.923457][ T4248] device bridge_slave_0 entered promiscuous mode
[   67.932721][ T4253] team0: Port device team_slave_1 added
[   67.949404][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.960389][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.970007][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.977329][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.985697][ T4248] device bridge_slave_1 entered promiscuous mode
[   68.011054][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.022463][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.049291][ T4257] team0: Port device team_slave_0 added
[   68.055875][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.063328][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.089499][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.124630][ T4257] team0: Port device team_slave_1 added
[   68.131062][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.138569][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.164679][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.193073][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.223465][ T4249] team0: Port device team_slave_0 added
[   68.231737][ T4247] team0: Port device team_slave_0 added
[   68.239597][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.258404][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.265382][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.291515][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.305160][ T4249] team0: Port device team_slave_1 added
[   68.313111][ T4247] team0: Port device team_slave_1 added
[   68.334433][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.341513][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.368132][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.405304][ T4248] team0: Port device team_slave_0 added
[   68.422554][ T4248] team0: Port device team_slave_1 added
[   68.458827][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.465801][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.492144][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.515093][ T4253] device hsr_slave_0 entered promiscuous mode
[   68.522610][ T4253] device hsr_slave_1 entered promiscuous mode
[   68.531058][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.538294][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.564417][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.582612][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.589817][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.615893][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.639210][ T4257] device hsr_slave_0 entered promiscuous mode
[   68.646062][ T4257] device hsr_slave_1 entered promiscuous mode
[   68.652931][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.660817][ T4257] Cannot create hsr debugfs directory
[   68.667120][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.674073][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.700630][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.712312][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.719693][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.745882][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.775384][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.782465][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.808787][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.848432][ T4249] device hsr_slave_0 entered promiscuous mode
[   68.857434][ T4249] device hsr_slave_1 entered promiscuous mode
[   68.864073][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.871853][ T4249] Cannot create hsr debugfs directory
[   68.887481][ T4256] Bluetooth: hci2: command 0x0409 tx timeout
[   68.893796][ T4256] Bluetooth: hci4: command 0x0409 tx timeout
[   68.900337][ T4250] Bluetooth: hci3: command 0x0409 tx timeout
[   68.900351][ T4255] Bluetooth: hci0: command 0x0409 tx timeout
[   68.966616][ T4255] Bluetooth: hci1: command 0x0409 tx timeout
[   68.972172][ T4247] device hsr_slave_0 entered promiscuous mode
[   68.979707][ T4247] device hsr_slave_1 entered promiscuous mode
[   68.986211][ T4247] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.993983][ T4247] Cannot create hsr debugfs directory
[   69.080520][ T4248] device hsr_slave_0 entered promiscuous mode
[   69.087289][ T4248] device hsr_slave_1 entered promiscuous mode
[   69.093754][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.102424][ T4248] Cannot create hsr debugfs directory
[   69.328965][ T4257] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.342263][ T4257] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.351846][ T4257] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.362768][ T4257] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.419458][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.440220][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.464255][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.475746][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.541740][ T4247] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.571119][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.584883][ T4247] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.602873][ T4247] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.612774][ T4247] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.651987][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.663820][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.676347][ T4257] 8021q: adding VLAN 0 to HW filter on device team0
[   69.699467][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.709784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.719166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.729306][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.736600][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.751878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.773643][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.782576][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.793260][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.802550][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.811619][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.818778][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.835166][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.863742][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.894536][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.906747][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.917290][ T4248] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.942098][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.951787][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.960422][ T4248] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.975577][ T4253] 8021q: adding VLAN 0 to HW filter on device team0
[   69.985709][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.997677][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.009097][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.021522][ T4248] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.031105][ T4248] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.043534][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.053427][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.075875][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.085033][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.094111][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.101229][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.111529][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.121408][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.131769][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.138908][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.147060][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.155748][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.180728][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.191775][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.225619][ T4257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.238520][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.253260][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.262719][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.273426][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.283223][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.300280][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.313339][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.325149][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.336202][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.345635][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.360215][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.392002][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.401898][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.422786][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.433290][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.475990][ T4247] 8021q: adding VLAN 0 to HW filter on device team0
[   70.497546][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.513861][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.533106][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.549890][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.562549][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.575008][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.582295][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.620554][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.638828][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.650671][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.660201][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.669162][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.676238][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.685244][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.694103][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.702217][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.710223][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.718632][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.728815][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.748830][ T4249] 8021q: adding VLAN 0 to HW filter on device team0
[   70.777201][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.787866][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.797837][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.808177][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.817932][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.827905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.837345][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.844465][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.887724][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.899338][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.907843][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.916240][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.925627][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.934369][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.944408][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.953531][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.962719][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.969907][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.976986][ T4264] Bluetooth: hci0: command 0x041b tx timeout
[   70.983388][ T4264] Bluetooth: hci4: command 0x041b tx timeout
[   70.989717][ T4255] Bluetooth: hci3: command 0x041b tx timeout
[   70.989737][ T4256] Bluetooth: hci2: command 0x041b tx timeout
[   71.004540][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.026842][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.036282][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.045022][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.053399][ T4256] Bluetooth: hci1: command 0x041b tx timeout
[   71.062560][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.094459][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.111503][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.124701][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.135247][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.149815][ T4257] device veth0_vlan entered promiscuous mode
[   71.166276][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.179766][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.191309][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.200270][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.209467][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.218904][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.229590][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.238884][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.255013][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.264682][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.273745][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.302450][ T4257] device veth1_vlan entered promiscuous mode
[   71.329727][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.352272][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.362792][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.372244][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.381196][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.393108][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.402895][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.421770][ T4248] 8021q: adding VLAN 0 to HW filter on device team0
[   71.458520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.466071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.494821][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.510665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.526959][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.552756][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.559958][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.573714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.584775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.599921][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.607095][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.621893][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.651488][ T4257] device veth0_macvtap entered promiscuous mode
[   71.667974][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.678516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.696182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.747628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.763178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.782003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.792362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.802547][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.811745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.821139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.830062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.840823][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.849681][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.858306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.870197][ T4257] device veth1_macvtap entered promiscuous mode
[   71.890871][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.899606][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.910629][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.943137][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.969544][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.977428][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.984882][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.994236][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.003099][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.012521][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.021680][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.029811][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.038778][ T4247] device veth0_vlan entered promiscuous mode
[   72.049122][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.062698][ T4253] device veth0_vlan entered promiscuous mode
[   72.075768][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.088937][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.098827][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.108102][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.117370][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.135312][ T4253] device veth1_vlan entered promiscuous mode
[   72.146349][ T4247] device veth1_vlan entered promiscuous mode
[   72.158587][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.187497][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.196325][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.204576][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.214312][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.222484][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.231565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.240976][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.250979][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.270147][ T4257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.281190][ T4257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.290154][ T4257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.300484][ T4257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.358636][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.372437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.381317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.395793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.406298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.426669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.435154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.443736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.452925][ T4253] device veth0_macvtap entered promiscuous mode
[   72.462273][ T4249] device veth0_vlan entered promiscuous mode
[   72.486215][ T4247] device veth0_macvtap entered promiscuous mode
[   72.494566][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.504984][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.518076][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.527633][ T4253] device veth1_macvtap entered promiscuous mode
[   72.558155][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.573349][ T4249] device veth1_vlan entered promiscuous mode
[   72.602788][ T4247] device veth1_macvtap entered promiscuous mode
[   72.637362][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.650353][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.663621][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.679143][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.709454][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.718222][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.725703][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.735636][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.744633][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.753889][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.763086][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.780139][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.791322][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.802940][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.813383][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[   72.820201][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[   72.821555][ T4249] device veth0_macvtap entered promiscuous mode
[   72.841304][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.852336][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.862498][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.873866][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.885338][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.895761][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.906321][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.916785][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.927991][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.940156][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.950660][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.959013][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.969030][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.977959][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.986667][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.995640][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.004459][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.016381][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.017399][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.025186][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.033543][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.048679][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.058009][ T4250] Bluetooth: hci2: command 0x040f tx timeout
[   73.064227][ T4250] Bluetooth: hci4: command 0x040f tx timeout
[   73.064874][ T4256] Bluetooth: hci3: command 0x040f tx timeout
[   73.070877][ T4250] Bluetooth: hci0: command 0x040f tx timeout
[   73.079484][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.097091][ T4249] device veth1_macvtap entered promiscuous mode
[   73.111084][ T4247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.120788][ T4247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.127666][ T4256] Bluetooth: hci1: command 0x040f tx timeout
[   73.134981][ T4247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.144450][ T4247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.163476][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.172423][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.180733][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.190790][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.216069][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.227052][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.237100][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.248125][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.258446][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.269202][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.280442][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.319232][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.328166][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.337474][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.345856][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.355051][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.363323][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.381548][ T4248] device veth0_vlan entered promiscuous mode
[   73.395956][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.408365][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.419814][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.430552][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.441038][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.452207][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.463386][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.475954][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.490017][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.499635][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.509023][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.529780][ T4248] device veth1_vlan entered promiscuous mode
[   73.550919][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.559976][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.571292][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.580060][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.626921][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.751727][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.777358][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.796062][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.798401][ T4248] device veth0_macvtap entered promiscuous mode
[   73.823402][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.828085][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.837490][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.853866][ T4248] device veth1_macvtap entered promiscuous mode
[   73.876900][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.886352][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.894854][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.902932][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.941524][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.980128][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.991633][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.999245][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.002990][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.030700][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.041917][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.052109][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.062756][ T4333] loop2: detected capacity change from 0 to 256
[   74.063410][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.082695][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.100577][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.109472][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.127679][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.141587][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.151862][   T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.180497][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.198941][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.213790][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.215234][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.223965][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.241899][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.252557][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.263075][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.273439][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.284614][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.297760][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.322442][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.331732][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.341516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.357959][ T4248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.367629][ T4248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.378947][ T4248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.388025][ T4248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.448720][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.476889][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.500246][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.520731][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.577693][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.585674][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.675952][ T4342] netlink: 'syz.4.5': attribute type 29 has an invalid length.
[   74.740624][ T4344] loop4: detected capacity change from 0 to 512
[   74.991673][ T4344] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.5: invalid block
[   75.005861][ T4344] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5: invalid indirect mapped block 1024 (level 0)
[   75.026933][ T4344] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5: bg 0: block 35: padding at end of block bitmap is not set
[   75.044478][ T4344] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   75.064629][ T4344] EXT4-fs (loop4): 1 truncate cleaned up
[   75.070523][ T4344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   75.156904][ T4256] Bluetooth: hci3: command 0x0419 tx timeout
[   75.163666][ T4256] Bluetooth: hci2: command 0x0419 tx timeout
[   75.326913][ T4250] Bluetooth: hci0: command 0x0419 tx timeout
[   75.332179][ T4256] Bluetooth: hci1: command 0x0419 tx timeout
[   75.502343][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.513951][ T4253] EXT4-fs (loop4): unmounting filesystem.
[   75.537169][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.537364][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.545645][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.605029][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.617245][   T27] audit: type=1326 audit(1741248596.935:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   75.655143][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.681308][   T27] audit: type=1326 audit(1741248596.965:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   75.801945][   T27] audit: type=1326 audit(1741248596.965:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   75.926762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.935110][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.943365][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   75.951565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   75.959756][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   75.967953][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   75.976139][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   75.984517][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   75.992763][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   76.001050][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   76.291649][ T4360] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.491000][   T27] audit: type=1326 audit(1741248596.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   78.448534][   T27] audit: type=1326 audit(1741248596.965:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   78.537654][ T4369] loop1: detected capacity change from 0 to 2048
[   78.558752][   T27] audit: type=1326 audit(1741248596.965:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   78.603805][ T4369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   78.641739][   T27] audit: type=1326 audit(1741248596.965:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   78.718773][ T4367] loop3: detected capacity change from 0 to 8192
[   78.757247][   T27] audit: type=1326 audit(1741248596.965:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   79.316692][   T27] audit: type=1326 audit(1741248596.965:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   79.339100][   T27] audit: type=1326 audit(1741248596.965:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3e78d169 code=0x7ffc0000
[   80.200926][ T4383] Bluetooth: MGMT ver 1.22
[   81.311577][ T4395] loop3: detected capacity change from 0 to 8
[   81.343739][ T4395] SQUASHFS error: Failed to read block 0x1ec: -5
[   81.352435][ T4395] SQUASHFS error: Unable to read metadata cache entry [1ea]
[   81.354283][ T4396] 9pnet_fd: Insufficient options for proto=fd
[   81.370699][ T4395] SQUASHFS error: Unable to read metadata cache entry [1ea]
[   81.438558][ T4395] syz.3.17 (4395) used greatest stack depth: 20144 bytes left
[   81.691223][ T4256] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   81.701533][ T4256] Bluetooth: hci1: Injecting HCI hardware error event
[   81.710710][ T4264] Bluetooth: hci1: hardware error 0x00
[   82.376624][ T4406] fuse: root generation should be zero
[   82.897319][   T27] kauditd_printk_skb: 60 callbacks suppressed
[   82.897334][   T27] audit: type=1326 audit(1741248604.215:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   83.051610][   T14] cfg80211: failed to load regulatory.db
[   84.201507][ T4264] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   84.624051][ T4427] tty tty25: ldisc open failed (-12), clearing slot 24
[   84.692409][ T4422] loop0: detected capacity change from 0 to 764
[   84.738372][   T27] audit: type=1326 audit(1741248604.245:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   84.761522][   T27] audit: type=1326 audit(1741248604.245:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   84.792236][   T27] audit: type=1326 audit(1741248604.245:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   84.815570][   T27] audit: type=1326 audit(1741248604.245:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   84.837792][ T4422] rock: directory entry would overflow storage
[   84.844221][ T4422] rock: sig=0x4654, size=5, remaining=4
[   85.416813][   T27] audit: type=1326 audit(1741248604.245:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   85.883986][   T27] audit: type=1326 audit(1741248604.245:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   85.999579][   T27] audit: type=1326 audit(1741248604.395:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   86.033239][   T27] audit: type=1326 audit(1741248604.395:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   86.069165][   T27] audit: type=1326 audit(1741248604.395:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c178d169 code=0x7ffc0000
[   86.120220][ T4440] loop4: detected capacity change from 0 to 2048
[   86.208324][ T4440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.689607][ T4452] loop0: detected capacity change from 0 to 16
[   88.118876][ T4452] erofs: (device loop0): mounted with root inode @ nid 36.
[   88.460654][ T4447] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   91.166226][ T4476] device veth0_to_team entered promiscuous mode
[   91.515745][ T4487] loop3: detected capacity change from 0 to 16
[   91.598406][ T4487] erofs: (device loop3): mounted with root inode @ nid 36.
[   91.664447][ T4487] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[   91.695710][ T4487] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[   92.217667][ T4417] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.334926][ T4487] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[   92.345469][ T4487] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[   92.387611][ T4491] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[   92.406679][ T4487] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[   92.466664][ T4491] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[   92.520247][ T4487] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   92.568828][ T4417] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   92.596853][ T4496] loop4: detected capacity change from 0 to 16
[   92.615131][ T4496] erofs: (device loop4): mounted with root inode @ nid 36.
[   93.336738][ T4417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.381501][ T4491] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[   93.388671][ T4417] usb 2-1: config 0 descriptor??
[   93.399374][ T4498] loop2: detected capacity change from 0 to 1024
[   93.406482][ T4491] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[   93.432496][ T4417] cp210x 2-1:0.0: cp210x converter detected
[   93.440023][ T4491] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[   93.478641][ T4498] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f01cc01c, mo2=0002]
[   93.508438][ T4498] System zones: 0-1, 3-36
[   93.548147][ T4498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   93.700166][ T4502] loop4: detected capacity change from 0 to 1024
[   93.760153][ T4502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.831701][   T27] kauditd_printk_skb: 15 callbacks suppressed
[   93.831717][   T27] audit: type=1800 audit(1741248615.145:97): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.50" name="file1" dev="loop4" ino=839 res=0 errno=0
[   93.888645][ T4504] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   93.900739][ T4257] EXT4-fs (loop2): unmounting filesystem.
[   94.062751][ T4417] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[   94.080439][ T4417] cp210x 2-1:0.0: GPIO initialisation failed: -71
[   94.131376][ T4417] usb 2-1: cp210x converter now attached to ttyUSB0
[   94.235234][ T4510] loop0: detected capacity change from 0 to 4096
[   94.274473][ T4510] EXT4-fs: Ignoring removed orlov option
[   94.320984][ T4417] usb 2-1: USB disconnect, device number 2
[   94.347763][ T4417] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   94.367249][ T4417] cp210x 2-1:0.0: device disconnected
[   95.071602][   T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   95.286705][   T14] usb 5-1: Using ep0 maxpacket: 16
[   95.293644][   T14] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[   95.340008][   T14] usb 5-1: config 0 has no interface number 0
[   95.373589][   T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[   95.403306][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.476836][   T14] usb 5-1: Product: syz
[   95.481110][   T14] usb 5-1: Manufacturer: syz
[   95.576623][   T14] usb 5-1: SerialNumber: syz
[   96.039133][   T14] usb 5-1: config 0 descriptor??
[   96.064539][ T4510] EXT4-fs: Ignoring removed nobh option
[   96.102161][   T14] hub 5-1:0.132: bad descriptor, ignoring hub
[   96.121072][ T4510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   96.125737][   T14] hub: probe of 5-1:0.132 failed with error -5
[   96.507698][ T4510] EXT4-fs (loop0): Test dummy encryption mode enabled
[   96.535923][   T14] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input5
[   96.757664][   T14] usb 5-1: USB disconnect, device number 2
[   96.770363][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   96.800198][ T4524] device veth0_to_team entered promiscuous mode
[   97.262247][ T4549] loop3: detected capacity change from 0 to 16
[   97.269856][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'.
[   97.291946][ T4549] erofs: (device loop3): mounted with root inode @ nid 36.
[   97.387936][ T4549] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36
[   97.412732][ T4247] EXT4-fs (loop0): unmounting filesystem.
[   97.443098][ T4549] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36
[   97.490175][ T4549] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[   97.516472][ T4549] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[   97.528233][ T4549] syz.3.62: attempt to access beyond end of device
[   97.528233][ T4549] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[   97.585128][ T4549] syz.3.62: attempt to access beyond end of device
[   97.585128][ T4549] loop3: rw=524288, sector=720, nr_sectors = 8 limit=16
[   97.680278][ T4559] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -32 in[46, 4050] out[4096]
[   97.843399][ T4566] loop2: detected capacity change from 0 to 2048
[   97.864001][ T4566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.068575][ T4570] netlink: 156 bytes leftover after parsing attributes in process `syz.1.67'.
[   99.286594][ T4578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.70'.
[  100.312053][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'.
[  101.386013][ T4613] loop3: detected capacity change from 0 to 1024
[  101.457812][ T4618] loop1: detected capacity change from 0 to 128
[  101.496751][ T4618] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  101.506254][ T4618] FAT-fs (loop1): bogus number of directory entries (203)
[  101.564853][ T4618] FAT-fs (loop1): Can't find a valid FAT filesystem
[  101.651104][ T4304] hfsplus: b-tree write err: -5, ino 4
[  101.733516][ T4623] netlink: 172 bytes leftover after parsing attributes in process `syz.2.89'.
[  101.786487][ T4623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'.
[  101.847681][ T4623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'.
[  102.142937][ T4637] 9pnet_fd: p9_fd_create_unix (4637): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  102.627367][ T4631] loop4: detected capacity change from 0 to 1024
[  102.628038][ T4631] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  102.901017][ T4239] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.966217][ T4645] loop1: detected capacity change from 0 to 2048
[  103.152131][ T4636] tty tty4: ldisc open failed (-12), clearing slot 3
[  103.512085][ T4645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.586662][   T27] audit: type=1326 audit(1741248624.905:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  103.775542][ T4631] loop4: detected capacity change from 0 to 1024
[  103.797611][   T27] audit: type=1326 audit(1741248624.985:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  103.856210][   T27] audit: type=1326 audit(1741248624.985:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  103.905956][   T27] audit: type=1326 audit(1741248624.985:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  103.929208][   T27] audit: type=1326 audit(1741248624.985:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  104.076559][   T27] audit: type=1326 audit(1741248624.985:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  104.160008][   T27] audit: type=1326 audit(1741248624.985:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  104.278947][   T27] audit: type=1326 audit(1741248625.005:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  104.278986][   T27] audit: type=1326 audit(1741248625.005:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  104.279014][   T27] audit: type=1326 audit(1741248625.005:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd49a78d169 code=0x7ffc0000
[  104.536785][ T4339] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.738411][ T4339] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  104.738471][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.810237][ T4339] usb 3-1: config 0 descriptor??
[  105.026499][ T4339] usbhid 3-1:0.0: can't add hid device: -71
[  105.032546][ T4339] usbhid: probe of 3-1:0.0 failed with error -71
[  105.092008][ T4339] usb 3-1: USB disconnect, device number 2
[  105.115756][ T4670] loop4: detected capacity change from 0 to 512
[  105.123632][ T4670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  105.272971][ T4670] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  105.297154][ T4670] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.106: invalid indirect mapped block 2683928664 (level 1)
[  105.313583][ T4670] EXT4-fs (loop4): 1 truncate cleaned up
[  105.319358][ T4670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  106.189311][ T4678] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  106.637639][ T4689] loop0: detected capacity change from 0 to 1024
[  106.657813][ T4689] EXT4-fs (loop0): inodes count not valid: 1 vs 32
[  106.714819][ T4695] loop2: detected capacity change from 0 to 128
[  106.901658][ T4239] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  106.964056][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  106.987466][ T4686] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.030379][ T4698] syz.2.113: attempt to access beyond end of device
[  107.030379][ T4698] loop2: rw=2049, sector=145, nr_sectors = 224 limit=128
[  107.104208][ T4693] syz.2.113: attempt to access beyond end of device
[  107.104208][ T4693] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128
[  107.122606][ T4693] syz.2.113: attempt to access beyond end of device
[  107.122606][ T4693] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[  107.148058][ T4693] syz.2.113: attempt to access beyond end of device
[  107.148058][ T4693] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[  107.170368][ T4695] syz.2.113: attempt to access beyond end of device
[  107.170368][ T4695] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[  107.206643][ T4686] usb 4-1: Using ep0 maxpacket: 16
[  107.215501][ T4686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.237020][ T4686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.237359][ T4695] syz.2.113: attempt to access beyond end of device
[  107.237359][ T4695] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[  107.256492][ T4686] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.280778][ T4686] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  107.304567][ T4702] loop4: detected capacity change from 0 to 2048
[  107.312856][ T4686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.335108][ T4686] usb 4-1: config 0 descriptor??
[  107.384216][ T4702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.457347][ T4705] loop0: detected capacity change from 0 to 2048
[  107.476252][ T4705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.569806][ T4707] loop2: detected capacity change from 0 to 1024
[  107.627427][ T4707] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  107.799012][ T4686] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.820264][ T4707] loop2: detected capacity change from 0 to 1024
[  107.822985][ T4709] kvm [4708]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000
[  107.845470][ T4686] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input6
[  107.868487][ T4686] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  108.070371][ T4717] loop4: detected capacity change from 0 to 16
[  108.436786][ T4717] erofs: (device loop4): mounted with root inode @ nid 36.
[  108.722994][ T4298] usb 4-1: USB disconnect, device number 2
[  108.953867][ T4729] loop4: detected capacity change from 0 to 8
[  109.316623][ T4298] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.593638][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.671513][ T4729] SQUASHFS error: Failed to read block 0x4de: -5
[  109.706481][ T4298] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  109.875446][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.885675][ T4298] usb 2-1: config 0 descriptor??
[  109.895238][ T4729] SQUASHFS error: Failed to read block 0x4de: -5
[  109.903969][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  109.903984][   T27] audit: type=1800 audit(1741248631.215:111): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.123" name="file1" dev="loop4" ino=5 res=0 errno=0
[  110.600803][ T4298] lg-g15 0003:046D:C222.0002: item fetching failed at offset 6/7
[  110.624728][ T4298] lg-g15: probe of 0003:046D:C222.0002 failed with error -22
[  110.699227][ T4750] syz.0.129[4750] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.699356][ T4750] syz.0.129[4750] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.854017][ T4686] usb 2-1: USB disconnect, device number 3
[  110.986494][ T4298] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  111.190570][ T4298] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  111.200835][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.217271][ T4298] usb 5-1: config 0 descriptor??
[  111.463325][ T4763] loop3: detected capacity change from 0 to 16
[  111.476777][ T4763] erofs: (device loop3): mounted with root inode @ nid 36.
[  112.131597][ T4298] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  112.140734][ T4298] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  112.347677][ T4298] [drm:udl_init] *ERROR* Selecting channel failed
[  112.373306][ T4298] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  112.401580][ T4298] [drm] Initialized udl on minor 2
[  112.423689][ T4298] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  112.461554][ T4770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'.
[  112.498116][ T4298] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  113.307363][ T4298] usb 5-1: USB disconnect, device number 3
[  113.314779][   T26] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  113.325886][   T26] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  113.339287][   T26] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  113.857099][ T4792] loop3: detected capacity change from 0 to 512
[  113.903402][ T4792] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.974703][ T4792] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  113.998963][ T4792] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.144: invalid indirect mapped block 2683928664 (level 1)
[  114.061566][ T4802] loop0: detected capacity change from 0 to 16
[  114.405642][ T4802] erofs: (device loop0): mounted with root inode @ nid 36.
[  114.748017][ T4792] EXT4-fs (loop3): 1 truncate cleaned up
[  114.753732][ T4792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  116.676053][ T4810] input: syz1 as /devices/virtual/input/input7
[  116.964749][ T4249] EXT4-fs (loop3): unmounting filesystem.
[  117.610673][ T4828] Bluetooth: MGMT ver 1.22
[  118.772306][ T4838] loop0: detected capacity change from 0 to 256
[  118.977441][ T4842] loop3: detected capacity change from 0 to 16
[  118.994119][ T4842] erofs: (device loop3): mounted with root inode @ nid 36.
[  123.931772][ T4887] loop1: detected capacity change from 0 to 16
[  123.982768][ T4887] erofs: (device loop1): mounted with root inode @ nid 36.
[  125.588985][ T4898] loop1: detected capacity change from 0 to 128
[  125.603379][ T4898] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  126.319665][ T4898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.453457][ T4898] kvm: pic: single mode not supported
[  126.455231][ T4898] kvm: pic: single mode not supported
[  126.461459][ T4898] kvm: pic: level sensitive irq not supported
[  126.467024][ T4898] kvm: pic: single mode not supported
[  126.473091][ T4898] kvm: pic: level sensitive irq not supported
[  126.478634][ T4898] kvm: pic: single mode not supported
[  126.484690][ T4898] kvm: pic: level sensitive irq not supported
[  126.490551][ T4898] kvm: pic: single mode not supported
[  126.496692][ T4898] kvm: pic: level sensitive irq not supported
[  126.502195][ T4898] kvm: pic: single mode not supported
[  126.508445][ T4898] kvm: pic: level sensitive irq not supported
[  126.513926][ T4898] kvm: pic: single mode not supported
[  126.520085][ T4898] kvm: pic: level sensitive irq not supported
[  126.525576][ T4898] kvm: pic: single mode not supported
[  126.531882][ T4898] kvm: pic: level sensitive irq not supported
[  126.538820][ T4898] kvm: pic: single mode not supported
[  126.544972][ T4898] kvm: pic: level sensitive irq not supported
[  126.551062][ T4898] kvm: pic: single mode not supported
[  126.557261][ T4898] kvm: pic: level sensitive irq not supported
[  126.563175][ T4898] kvm: pic: level sensitive irq not supported
[  126.626349][ T4910] Illegal XDP return value 1994575242 on prog  (id 33) dev N/A, expect packet loss!
[  127.125013][ T4919] loop2: detected capacity change from 0 to 512
[  127.215312][ T4919] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  127.238679][ T4919] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  127.261973][ T4919] System zones: 0-1, 15-15, 18-18, 34-34
[  127.270906][ T4919] EXT4-fs (loop2): orphan cleanup on readonly fs
[  127.279117][ T4919] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  127.289635][ T4919] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  127.431929][ T4919] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  127.456076][ T4919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.185: bg 0: block 40: padding at end of block bitmap is not set
[  128.337767][ T4919] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  128.499563][ T4919] EXT4-fs (loop2): 1 truncate cleaned up
[  128.576665][ T4919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  128.603610][ T4919] EXT4-fs (loop2): shut down requested (1)
[  129.570252][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  129.665429][ T4938] syz.0.178[4938] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.665529][ T4938] syz.0.178[4938] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.957175][ T4949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'.
[  132.989347][ T4961] loop1: detected capacity change from 0 to 8
[  133.059071][ T4961] squashfs: Unknown parameter ''
[  134.535415][ T4961] sched: RT throttling activated
[  134.545247][ T4963] loop1: detected capacity change from 0 to 1024
[  134.552140][ T4963] =======================================================
[  134.552140][ T4963] WARNING: The mand mount option has been deprecated and
[  134.552140][ T4963]          and is ignored by this kernel. Remove the mand
[  134.552140][ T4963]          option from the mount to silence this warning.
[  134.552140][ T4963] =======================================================
[  134.617945][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  134.624428][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  135.896988][ T4963] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  137.069940][ T4988] loop3: detected capacity change from 0 to 128
[  139.229794][ T5010] loop2: detected capacity change from 0 to 16
[  139.480128][ T5010] erofs: (device loop2): mounted with root inode @ nid 36.
[  141.254499][ T5028] loop0: detected capacity change from 0 to 1024
[  144.481129][ T5056] capability: warning: `syz.0.220' uses deprecated v2 capabilities in a way that may be insecure
[  144.584996][ T5059] loop1: detected capacity change from 0 to 16
[  144.610800][ T5059] erofs: (device loop1): mounted with root inode @ nid 36.
[  145.008958][ T4816] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  145.227104][ T4816] usb 5-1: Using ep0 maxpacket: 8
[  145.263142][ T4816] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  145.326263][ T4816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.454811][ T4816] usb 5-1: config 0 descriptor??
[  146.395085][ T4816] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  147.921661][ T5077] loop2: detected capacity change from 0 to 2048
[  148.654252][ T5077] loop2: detected capacity change from 0 to 256
[  148.810196][ T4257] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  148.854344][ T4257] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  149.194533][ T4816] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  149.233003][ T4816] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  149.245979][ T4816] asix: probe of 5-1:0.0 failed with error -71
[  149.980592][ T4816] usb 5-1: USB disconnect, device number 4
[  152.227862][ T5102] loop0: detected capacity change from 0 to 16
[  153.777223][ T5102] erofs: (device loop0): mounted with root inode @ nid 36.
[  154.089646][ T4257] syz-executor (4257) used greatest stack depth: 19512 bytes left
[  154.245497][ T5110] loop3: detected capacity change from 0 to 256
[  159.767706][ T4391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.360711][ T5145] loop1: detected capacity change from 0 to 512
[  161.520772][ T4256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  161.554360][ T4391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.565083][ T4256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.577076][ T4256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.585555][ T4256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.598275][ T4256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  161.605692][ T4256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.873374][ T4391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.056091][ T4391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.889081][ T5142] chnl_net:caif_netlink_parms(): no params data found
[  163.036515][ T4816] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  163.240582][ T4816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.263111][ T4816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.358318][ T5164] loop4: detected capacity change from 0 to 16
[  163.697550][ T4264] Bluetooth: hci4: command 0x0409 tx timeout
[  163.720272][ T5164] erofs: (device loop4): mounted with root inode @ nid 36.
[  164.100760][ T4816] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  164.116605][ T4816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  164.128549][ T4816] usb 4-1: SerialNumber: syz
[  165.220243][ T4816] usb 4-1: 0:2 : does not exist
[  165.230436][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.249336][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.350746][ T4816] usb 4-1: USB disconnect, device number 3
[  165.582423][ T5178] loop1: detected capacity change from 0 to 512
[  165.593259][ T5178] EXT4-fs: Ignoring removed i_version option
[  165.768071][ T4256] Bluetooth: hci4: command 0x041b tx timeout
[  166.107913][ T5142] device bridge_slave_0 entered promiscuous mode
[  166.132237][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.633867][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.060927][ T5142] device bridge_slave_1 entered promiscuous mode
[  167.063503][ T5178] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  167.164850][ T5190] loop3: detected capacity change from 0 to 512
[  167.232700][ T5178] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  167.241409][ T5178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  167.467736][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  167.501548][ T4241] udevd[4241]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.846863][ T4256] Bluetooth: hci4: command 0x040f tx timeout
[  167.915401][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.782483][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.043659][ T5206] loop4: detected capacity change from 0 to 512
[  169.161572][ T5208] loop0: detected capacity change from 0 to 128
[  169.193612][ T5208] EXT4-fs: Ignoring removed nobh option
[  169.219855][ T5142] team0: Port device team_slave_0 added
[  170.295034][ T4256] Bluetooth: hci4: command 0x0419 tx timeout
[  170.338233][ T5142] team0: Port device team_slave_1 added
[  170.357664][ T5208] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  170.396812][ T5208] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.775375][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.852365][ T5217] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz.0.262: No space for directory leaf checksum. Please run e2fsck -D.
[  170.868632][ T5217] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #11: comm syz.0.262: checksumming directory block 0
[  171.367664][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.526179][ T5142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.551997][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  171.664735][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.710275][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.783594][ T5142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.129714][ T5142] device hsr_slave_0 entered promiscuous mode
[  172.234400][ T5142] device hsr_slave_1 entered promiscuous mode
[  172.253552][ T5142] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.289353][ T5142] Cannot create hsr debugfs directory
[  172.466229][ T5230] loop0: detected capacity change from 0 to 512
[  172.477560][ T5230] EXT4-fs: Ignoring removed i_version option
[  172.718035][ T5230] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  172.745284][ T5230] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  172.753096][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  173.088825][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  173.797662][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.809183][ T4250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.817616][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.825477][ T4250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.841238][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  173.852274][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.750631][ T4391] device hsr_slave_0 left promiscuous mode
[  174.883513][ T4391] device hsr_slave_1 left promiscuous mode
[  175.127098][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.134614][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.201818][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.216544][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.230321][ T4391] device bridge_slave_1 left promiscuous mode
[  175.258447][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.279565][ T4264] Bluetooth: hci2: command 0x0409 tx timeout
[  176.331369][ T4391] device bridge_slave_0 left promiscuous mode
[  176.361193][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.893648][ T4391] device veth1_macvtap left promiscuous mode
[  176.909772][ T4391] device veth0_macvtap left promiscuous mode
[  176.920111][ T4391] device veth1_vlan left promiscuous mode
[  176.926193][ T4391] device veth0_vlan left promiscuous mode
[  177.825914][ T4391] team0 (unregistering): Port device team_slave_1 removed
[  177.866659][ T4391] team0 (unregistering): Port device team_slave_0 removed
[  177.916961][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.985817][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.200434][ T5277] loop1: detected capacity change from 0 to 1024
[  178.207658][ T5277] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  178.230620][ T5277] loop1: detected capacity change from 0 to 1024
[  178.271819][ T4241] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  178.327141][ T4264] Bluetooth: hci2: command 0x041b tx timeout
[  178.511237][ T5280] loop0: detected capacity change from 0 to 512
[  178.582836][ T4241] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  178.793340][ T5284] loop1: detected capacity change from 0 to 512
[  178.805258][ T5284] EXT4-fs: Ignoring removed i_version option
[  178.993948][ T5284] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  179.050753][ T5284] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  179.058551][ T5284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  179.192878][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  179.994351][ T4391] bond0 (unregistering): Released all slaves
[  180.424962][ T4256] Bluetooth: hci2: command 0x040f tx timeout
[  181.385789][ T5142] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  181.477926][ T5238] chnl_net:caif_netlink_parms(): no params data found
[  181.523209][ T5142] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.535369][ T5142] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  182.024243][ T5142] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  183.371646][ T4264] Bluetooth: hci2: command 0x0419 tx timeout
[  183.380570][ T4256] Bluetooth: hci0: unknown advertising packet type: 0x63
[  183.849385][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.863855][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.877087][ T5238] device bridge_slave_0 entered promiscuous mode
[  183.935447][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.048089][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.105367][ T5331] loop4: detected capacity change from 0 to 1024
[  184.139806][ T5238] device bridge_slave_1 entered promiscuous mode
[  184.160337][ T5331] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  184.412064][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.432906][ T5331] loop4: detected capacity change from 0 to 1024
[  184.481515][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.492561][ T4241] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  184.817103][ T5238] team0: Port device team_slave_0 added
[  184.830773][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.864457][ T5238] team0: Port device team_slave_1 added
[  185.118441][ T5341] loop4: detected capacity change from 0 to 512
[  185.128899][ T5341] EXT4-fs: Ignoring removed i_version option
[  185.283330][ T5341] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  185.325049][ T5341] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  185.332982][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  185.487973][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  185.611320][ T4391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.781880][ T5142] 8021q: adding VLAN 0 to HW filter on device team0
[  186.898009][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.957208][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  187.036464][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.053775][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.261953][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.373750][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.396660][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.467624][ T5355] 9pnet_fd: Insufficient options for proto=fd
[  187.512290][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.568310][ T4391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.600732][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  187.649659][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  187.662596][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.669815][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.813375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.017283][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.036806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.457340][ T4264] Bluetooth: hci0: unknown advertising packet type: 0x63
[  188.599632][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.615029][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.818637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.863537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.008697][ T5375] loop4: detected capacity change from 0 to 512
[  189.017556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.057697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.058011][ T5378] loop0: detected capacity change from 0 to 1024
[  189.078565][ T4241] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  189.111097][ T5378] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  189.140575][ T4391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.193337][ T5378] loop0: detected capacity change from 0 to 1024
[  189.264143][ T5142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.313595][ T5142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.386695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.395114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.474649][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.484733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.527920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.560489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.610286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.076802][ T5384] loop0: detected capacity change from 0 to 512
[  190.083933][ T5384] EXT4-fs: Ignoring removed i_version option
[  190.255865][ T5238] device hsr_slave_0 entered promiscuous mode
[  190.302091][ T5238] device hsr_slave_1 entered promiscuous mode
[  190.323725][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.347167][ T5238] Cannot create hsr debugfs directory
[  190.399883][ T4391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.608970][ T5384] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  190.876879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.885764][ T5384] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  190.893407][ T5384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  190.959407][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  191.202570][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.221490][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.357681][ T5142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.722532][ T5238] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  192.775956][ T5238] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  192.887356][ T4256] Bluetooth: hci3: command 0x0406 tx timeout
[  193.100874][ T5238] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  193.142804][ T5238] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  194.236709][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.933666][ T4264] Bluetooth: hci3: unknown advertising packet type: 0x63
[  195.014714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  195.291315][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  195.325234][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  195.707447][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  195.714244][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  196.017053][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  196.028201][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  196.041960][ T5142] device veth0_vlan entered promiscuous mode
[  196.125670][ T5142] device veth1_vlan entered promiscuous mode
[  196.250893][ T5449] loop4: detected capacity change from 0 to 1024
[  196.260352][ T5449] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  196.343213][ T5449] loop4: detected capacity change from 0 to 1024
[  196.420871][ T5142] device veth0_macvtap entered promiscuous mode
[  196.490751][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  196.531562][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  196.602025][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.711225][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  196.732217][ T5142] device veth1_macvtap entered promiscuous mode
[  196.755929][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  196.783889][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.829718][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.943672][ T5238] 8021q: adding VLAN 0 to HW filter on device team0
[  197.113891][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.146521][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.702489][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.001035][ T5456] loop1: detected capacity change from 0 to 512
[  198.009543][ T5456] EXT4-fs: Ignoring removed i_version option
[  198.070755][ T5456] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  198.122166][ T5456] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  198.129924][ T5456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  198.156438][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.193579][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.204754][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.214779][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.236431][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.265584][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.284492][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  198.357637][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.385915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.655545][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  198.689236][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  198.699980][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.707160][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.727845][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.756501][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.770033][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.782784][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.794914][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.807456][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.823286][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.848415][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.865806][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.876226][ T5466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'.
[  198.892436][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  198.910258][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  198.935725][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.957296][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  198.974484][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  198.993716][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.000911][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.025193][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  199.053057][ T5142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.070748][ T5468] loop0: detected capacity change from 0 to 512
[  199.074274][ T5142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.117677][ T5142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.134280][ T5142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.186454][ T4241] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  199.256768][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  199.283601][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  199.310611][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  199.319586][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  199.329810][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  199.383099][ T4391] device hsr_slave_0 left promiscuous mode
[  199.393459][ T4391] device hsr_slave_1 left promiscuous mode
[  199.409085][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.428274][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.443705][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.469154][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.501713][ T4391] device bridge_slave_1 left promiscuous mode
[  199.514493][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.551628][ T4391] device bridge_slave_0 left promiscuous mode
[  199.576150][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.620451][ T4391] device veth1_macvtap left promiscuous mode
[  199.690202][ T4391] device veth0_macvtap left promiscuous mode
[  199.710558][ T4391] device veth1_vlan left promiscuous mode
[  199.738043][ T4391] device veth0_vlan left promiscuous mode
[  201.335233][ T4391] team0 (unregistering): Port device team_slave_1 removed
[  201.422765][ T4391] team0 (unregistering): Port device team_slave_0 removed
[  201.490084][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.564738][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.757320][ T4264] Bluetooth: hci0: unknown advertising packet type: 0x63
[  203.331484][ T4391] bond0 (unregistering): Released all slaves
[  203.415393][ T5238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  203.426601][ T5238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.444375][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.472396][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.481283][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.492383][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.501220][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.510158][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.954546][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.000048][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.024286][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  204.426996][ T5500] loop0: detected capacity change from 0 to 1024
[  204.701709][ T5500] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  204.841804][ T5500] loop0: detected capacity change from 0 to 1024
[  204.878234][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.957378][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.020826][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  205.347125][ T5521] loop4: detected capacity change from 0 to 512
[  205.357705][ T5521] EXT4-fs: Ignoring removed i_version option
[  205.476544][ T5521] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  205.590763][ T5521] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  205.598635][ T5521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  205.756868][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  206.529986][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.606630][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.622678][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.125478][ T4264] Bluetooth: hci4: unknown advertising packet type: 0x63
[  209.086588][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  209.177451][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.283369][ T5561] loop0: detected capacity change from 0 to 1024
[  209.396563][ T5238] device veth0_vlan entered promiscuous mode
[  209.410489][ T5238] device veth1_vlan entered promiscuous mode
[  209.588377][ T5561] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  210.048693][ T5563] input input8: cannot allocate more than FF_MAX_EFFECTS effects
[  210.597816][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.617103][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.649898][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  210.680096][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  210.715682][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  210.734219][ T5561] loop0: detected capacity change from 0 to 1024
[  210.737516][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  210.992415][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  211.189220][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  211.248105][ T5238] device veth0_macvtap entered promiscuous mode
[  211.286242][ T5238] device veth1_macvtap entered promiscuous mode
[  211.511018][ T5580] loop0: detected capacity change from 0 to 512
[  211.521827][ T5580] EXT4-fs: Ignoring removed i_version option
[  211.680856][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  211.780352][ T5580] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  211.873411][ T5580] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  211.881403][ T5580] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  211.927315][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.014735][ T5585] loop4: detected capacity change from 0 to 512
[  212.027176][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.087436][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.176199][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.208405][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.291052][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.338497][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.378334][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.422662][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  212.439027][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.480934][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  212.502934][ T4241] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  212.577304][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  212.607412][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.639831][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.671017][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.708132][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.740474][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.766274][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.796803][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.830650][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.872045][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.906200][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.935500][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  212.971278][ T5238] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.990605][ T5238] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.026641][ T5238] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.055783][ T5238] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.787865][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.980265][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.091997][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  214.133244][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.158341][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.234183][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  215.601008][ T5623] input: syz1 as /devices/virtual/input/input9
[  215.653609][ T5628] loop6: detected capacity change from 0 to 1024
[  215.684598][ T5628] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  215.784043][ T4241] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  215.832436][ T5628] loop6: detected capacity change from 0 to 1024
[  216.376438][ T5642] loop0: detected capacity change from 0 to 512
[  216.392658][ T5642] EXT4-fs: Ignoring removed i_version option
[  216.672863][ T5642] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  216.695592][ T5642] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  216.703342][ T5642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  216.815371][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  217.406917][ T4264] Bluetooth: hci4: unknown advertising packet type: 0x63
[  218.116495][   T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  218.307579][ T5661] netlink: 'syz.5.345': attribute type 29 has an invalid length.
[  218.342643][ T5661] loop5: detected capacity change from 0 to 512
[  218.465132][ T5661] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.345: invalid block
[  218.481174][ T5661] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.345: invalid indirect mapped block 1024 (level 0)
[  218.499319][ T5661] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.345: bg 0: block 35: padding at end of block bitmap is not set
[  218.524768][ T5661] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  218.538167][ T5661] EXT4-fs (loop5): 1 truncate cleaned up
[  218.543958][ T5661] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  219.094412][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.109553][ T5142] EXT4-fs (loop5): unmounting filesystem.
[  219.126430][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.178219][   T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  219.210241][   T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  219.226459][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.253336][   T26] usb 2-1: config 0 descriptor??
[  219.906909][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.035809][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.326760][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.396557][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.439942][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.556793][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.727818][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.806549][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.889098][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.926474][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.933939][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  220.980655][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  221.161838][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  221.169953][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  221.184384][   T26] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  221.192752][   T26] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  222.765485][ T5702] loop1: detected capacity change from 0 to 512
[  222.777118][ T5702] EXT4-fs: Ignoring removed i_version option
[  222.951238][   T26] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  223.008562][ T5702] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  223.024109][   T26] usb 2-1: USB disconnect, device number 4
[  223.038364][ T5702] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  223.046075][ T5702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  223.112910][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  223.339771][ T5711] 9pnet_fd: Insufficient options for proto=fd
[  223.392445][ T5709] loop6: detected capacity change from 0 to 512
[  223.509031][ T4264] Bluetooth: hci3: unknown advertising packet type: 0x63
[  228.137403][ T5755] loop6: detected capacity change from 0 to 512
[  228.155505][ T5755] EXT4-fs: Ignoring removed i_version option
[  229.130206][ T5755] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  229.151594][ T5755] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  229.159322][ T5755] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  229.210433][ T5238] EXT4-fs (loop6): unmounting filesystem.
[  229.286650][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  229.536452][ T4294] usb 6-1: Using ep0 maxpacket: 16
[  229.690751][ T4294] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.724462][ T4294] usb 6-1: config 0 interface 0 has no altsetting 0
[  229.745832][ T4294] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  229.761134][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.794365][ T4294] usb 6-1: config 0 descriptor??
[  230.680773][ T4294] usbhid 6-1:0.0: can't add hid device: -71
[  230.793445][ T4294] usbhid: probe of 6-1:0.0 failed with error -71
[  230.825616][ T4294] usb 6-1: USB disconnect, device number 2
[  230.964805][ T4264] Bluetooth: hci2: unknown advertising packet type: 0x63
[  231.892115][ T5793] loop6: detected capacity change from 0 to 764
[  232.042096][ T5793] rock: directory entry would overflow storage
[  232.058847][ T5793] rock: sig=0x4654, size=5, remaining=4
[  235.009715][ T5813] loop0: detected capacity change from 0 to 512
[  235.017524][ T5813] EXT4-fs: Ignoring removed i_version option
[  235.043593][ T5813] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  235.060766][ T5813] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  235.068630][ T5813] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  235.315620][ T5806] loop4: detected capacity change from 0 to 512
[  235.348320][ T5806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  235.363840][ T5806] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.387961][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  235.461998][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  235.474050][ T5820] loop6: detected capacity change from 0 to 16
[  235.574655][ T5820] erofs: (device loop6): mounted with root inode @ nid 36.
[  235.675162][ T5820] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36
[  235.976570][ T5827] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  235.987922][ T5826] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  236.051451][ T5820] erofs: (device loop6): z_erofs_readahead: readahead error at page 9 @ nid 36
[  236.173044][ T5820] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 36
[  236.286824][ T5820] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[  236.375458][ T5820] syz.6.381: attempt to access beyond end of device
[  236.375458][ T5820] loop6: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  236.627900][ T5834] loop4: detected capacity change from 0 to 16
[  236.649220][ T5834] erofs: (device loop4): mounted with root inode @ nid 36.
[  236.691747][ T5820] syz.6.381: attempt to access beyond end of device
[  236.691747][ T5820] loop6: rw=524288, sector=720, nr_sectors = 8 limit=16
[  236.746378][ T5820] ==================================================================
[  236.754502][ T5820] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x394/0x4a0
[  236.762541][ T5820] Read of size 4095 at addr ffff88806625a400 by task syz.6.381/5820
[  236.762562][ T5820] 
[  236.762581][ T5820] CPU: 1 PID: 5820 Comm: syz.6.381 Not tainted 6.1.129-syzkaller #0
[  236.780892][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  236.780909][ T5820] Call Trace:
[  236.780927][ T5820]  <TASK>
[  236.780933][ T5820]  dump_stack_lvl+0x1e3/0x2cb
[  236.780974][ T5820]  ? nf_tcp_handle_invalid+0x647/0x647
[  236.807405][ T5820]  ? panic+0x764/0x764
[  236.807443][ T5820]  ? _printk+0xd1/0x111
[  236.815777][ T5820]  ? __virt_addr_valid+0x17f/0x530
[  236.815809][ T5820]  ? __virt_addr_valid+0x17f/0x530
[  236.826038][ T5820]  print_report+0x15f/0x4f0
[  236.826063][ T5820]  ? __virt_addr_valid+0x17f/0x530
[  236.826083][ T5820]  ? __virt_addr_valid+0x17f/0x530
[  236.826102][ T5820]  ? __virt_addr_valid+0x45b/0x530
[  236.826121][ T5820]  ? __phys_addr+0xb6/0x170
[  236.826140][ T5820]  ? z_erofs_transform_plain+0x394/0x4a0
[  236.826162][ T5820]  kasan_report+0x136/0x160
[  236.826201][ T5820]  ? z_erofs_transform_plain+0x394/0x4a0
[  236.826225][ T5820]  kasan_check_range+0x27f/0x290
[  236.826241][ T5820]  ? z_erofs_transform_plain+0x394/0x4a0
[  236.826263][ T5820]  memcpy+0x25/0x60
[  236.826281][ T5820]  z_erofs_transform_plain+0x394/0x4a0
[  236.826320][ T5820]  z_erofs_decompress_queue+0x1aad/0x2d80
[  236.826362][ T5820]  ? z_erofs_onlinepage_endio+0x280/0x280
[  236.826386][ T5820]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  236.826417][ T5820]  ? print_irqtrace_events+0x210/0x210
[  236.826449][ T5820]  ? z_erofs_decompressqueue_endio+0x570/0x570
[  236.826463][ T5820]  ? virt_to_slab+0x5/0xa0
[  236.826481][ T5820]  z_erofs_runqueue+0x1bfe/0x1e10
[  236.826514][ T5820]  ? z_erofs_do_read_page+0x3ce0/0x3ce0
[  236.826536][ T5820]  ? print_irqtrace_events+0x210/0x210
[  236.826567][ T5820]  ? put_page+0xe0/0x250
[  236.826588][ T5820]  ? z_erofs_pcluster_readmore+0x41a/0x450
[  236.826617][ T5820]  z_erofs_readahead+0xc26/0x1030
[  236.826645][ T5820]  ? z_erofs_read_folio+0x760/0x760
[  236.826672][ T5820]  ? __lock_acquire+0x1f80/0x1f80
[  236.826695][ T5820]  ? blk_start_plug+0x95/0x110
[  236.826715][ T5820]  read_pages+0x17f/0x830
[  236.826731][ T5820]  ? folio_add_lru+0x34d/0xd70
[  236.826746][ T5820]  ? folio_add_lru+0x34d/0xd70
[  236.826763][ T5820]  ? page_cache_ra_unbounded+0x7b0/0x7b0
[  236.826778][ T5820]  ? __lock_acquire+0x125b/0x1f80
[  236.826800][ T5820]  ? __filemap_add_folio+0x1b00/0x1b00
[  236.826815][ T5820]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  236.826838][ T5820]  ? print_irqtrace_events+0x210/0x210
[  236.826860][ T5820]  page_cache_ra_unbounded+0x68b/0x7b0
[  236.826880][ T5820]  force_page_cache_ra+0x2a3/0x300
[  236.826897][ T5820]  generic_fadvise+0x553/0x7b0
[  236.826918][ T5820]  ? dump_task+0x620/0x620
[  236.826939][ T5820]  ? __fget_files+0x28/0x4a0
[  236.826958][ T5820]  ? __fdget+0x182/0x210
[  236.826975][ T5820]  __x64_sys_fadvise64+0x138/0x180
[  236.826997][ T5820]  do_syscall_64+0x3b/0xb0
[  236.827019][ T5820]  ? clear_bhb_loop+0x45/0xa0
[  236.827038][ T5820]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.827055][ T5820] RIP: 0033:0x7f0fbc78d169
[  236.827144][ T5820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.827157][ T5820] RSP: 002b:00007f0fbd5db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  236.827176][ T5820] RAX: ffffffffffffffda RBX: 00007f0fbc9a5fa0 RCX: 00007f0fbc78d169
[  236.827187][ T5820] RDX: 0000000000004101 RSI: 0000000000008000 RDI: 0000000000000004
[  236.827197][ T5820] RBP: 00007f0fbc80e2a0 R08: 0000000000000000 R09: 0000000000000000
[  236.827207][ T5820] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  236.827216][ T5820] R13: 0000000000000000 R14: 00007f0fbc9a5fa0 R15: 00007ffed30c1f08
[  236.827232][ T5820]  </TASK>
[  236.827238][ T5820] 
[  236.827241][ T5820] The buggy address belongs to the physical page:
[  236.827279][ T5820] page:ffffea0001989680 refcount:2 mapcount:0 mapping:ffff8880702db288 index:0x1 pfn:0x6625a
[  236.827303][ T5820] memcg:ffff88801e376000
[  236.827311][ T5820] aops:managed_cache_aops ino:0
[  236.827332][ T5820] flags: 0xfff40000002014(uptodate|lru|private|node=0|zone=1|lastcpupid=0x7ff)
[  236.827359][ T5820] raw: 00fff40000002014 ffffea00007fe648 ffffea0001ce3448 ffff8880702db288
[  236.827372][ T5820] raw: 0000000000000001 ffff888055335000 00000002ffffffff ffff88801e376000
[  236.827379][ T5820] page dumped because: kasan: bad access detected
[  236.827421][ T5820] page_owner tracks the page as allocated
[  236.827427][ T5820] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5827, tgid 5819 (syz.6.381), ts 235967376229, free_ts 235334743046
[  236.827455][ T5820]  post_alloc_hook+0x18d/0x1b0
[  236.827472][ T5820]  get_page_from_freelist+0x3731/0x38d0
[  236.827489][ T5820]  __alloc_pages+0x28d/0x770
[  236.827503][ T5820]  z_erofs_do_read_page+0x19df/0x3ce0
[  236.827528][ T5820]  z_erofs_read_folio+0x31a/0x760
[  236.827548][ T5820]  filemap_read_folio+0x199/0x780
[  236.827562][ T5820]  do_read_cache_folio+0x2ee/0x810
[  236.827577][ T5820]  erofs_bread+0x19d/0x6b0
[  236.827594][ T5820]  erofs_namei+0x278/0xef0
[  236.827611][ T5820]  erofs_lookup+0x1d6/0x4d0
[  236.827628][ T5820]  path_openat+0x10fb/0x2e60
[  236.827647][ T5820]  do_filp_open+0x230/0x480
[  236.827664][ T5820]  do_sys_openat2+0x13b/0x4f0
[  236.827677][ T5820]  __x64_sys_openat+0x243/0x290
[  236.827690][ T5820]  do_syscall_64+0x3b/0xb0
[  236.827709][ T5820]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.827725][ T5820] page last free stack trace:
[  236.827730][ T5820]  free_unref_page_prepare+0x12a6/0x15b0
[  236.827745][ T5820]  free_unref_page_list+0x663/0x900
[  236.827760][ T5820]  release_pages+0x24c4/0x27a0
[  236.827774][ T5820]  tlb_flush_mmu+0xfc/0x210
[  236.827790][ T5820]  tlb_finish_mmu+0xce/0x1f0
[  236.827804][ T5820]  exit_mmap+0x3b3/0x980
[  236.827817][ T5820]  __mmput+0x115/0x3c0
[  236.827830][ T5820]  exit_mm+0x226/0x300
[  236.827847][ T5820]  do_exit+0x9f1/0x26a0
[  236.827866][ T5820]  do_group_exit+0x202/0x2b0
[  236.827884][ T5820]  get_signal+0x16cb/0x17a0
[  236.827903][ T5820]  arch_do_signal_or_restart+0xb0/0x1a10
[  236.827921][ T5820]  exit_to_user_mode_loop+0x6a/0x100
[  236.827936][ T5820]  exit_to_user_mode_prepare+0xb1/0x140
[  236.827951][ T5820]  syscall_exit_to_user_mode+0x60/0x270
[  236.827967][ T5820]  do_syscall_64+0x47/0xb0
[  236.827987][ T5820] 
[  236.827989][ T5820] Memory state around the buggy address:
[  236.827998][ T5820]  ffff88806625af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  236.828007][ T5820]  ffff88806625af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  236.828017][ T5820] >ffff88806625b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.828024][ T5820]                    ^
[  236.828032][ T5820]  ffff88806625b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  236.828041][ T5820]  ffff88806625b100: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb
[  236.828048][ T5820] ==================================================================
[  236.872818][ T5820] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.872834][ T5820] CPU: 1 PID: 5820 Comm: syz.6.381 Not tainted 6.1.129-syzkaller #0
[  236.872854][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  236.872865][ T5820] Call Trace:
[  236.872871][ T5820]  <TASK>
[  236.872877][ T5820]  dump_stack_lvl+0x1e3/0x2cb
[  236.872912][ T5820]  ? nf_tcp_handle_invalid+0x647/0x647
[  236.872940][ T5820]  ? panic+0x764/0x764
[  236.872959][ T5820]  ? preempt_schedule_common+0xa6/0xd0
[  236.872997][ T5820]  ? vscnprintf+0x59/0x80
[  236.873019][ T5820]  panic+0x318/0x764
[  236.873038][ T5820]  ? check_panic_on_warn+0x1d/0xa0
[  236.873060][ T5820]  ? memcpy_page_flushcache+0xfc/0xfc
[  236.873082][ T5820]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  236.873101][ T5820]  ? _raw_spin_unlock+0x40/0x40
[  236.873117][ T5820]  ? print_report+0x4a3/0x4f0
[  236.873139][ T5820]  check_panic_on_warn+0x7e/0xa0
[  236.873159][ T5820]  ? z_erofs_transform_plain+0x394/0x4a0
[  236.873191][ T5820]  end_report+0x66/0x110
[  236.873209][ T5820]  kasan_report+0x143/0x160
[  236.873230][ T5820]  ? z_erofs_transform_plain+0x394/0x4a0
[  236.873259][ T5820]  kasan_check_range+0x27f/0x290
[  236.873278][ T5820]  ? z_erofs_transform_plain+0x394/0x4a0
[  236.873305][ T5820]  memcpy+0x25/0x60
[  236.873326][ T5820]  z_erofs_transform_plain+0x394/0x4a0
[  236.873358][ T5820]  z_erofs_decompress_queue+0x1aad/0x2d80
[  236.873400][ T5820]  ? z_erofs_onlinepage_endio+0x280/0x280
[  236.873434][ T5820]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  236.873467][ T5820]  ? print_irqtrace_events+0x210/0x210
[  236.873506][ T5820]  ? z_erofs_decompressqueue_endio+0x570/0x570
[  236.873524][ T5820]  ? virt_to_slab+0x5/0xa0
[  236.873547][ T5820]  z_erofs_runqueue+0x1bfe/0x1e10
[  236.873587][ T5820]  ? z_erofs_do_read_page+0x3ce0/0x3ce0
[  236.873615][ T5820]  ? print_irqtrace_events+0x210/0x210
[  236.873652][ T5820]  ? put_page+0xe0/0x250
[  236.873678][ T5820]  ? z_erofs_pcluster_readmore+0x41a/0x450
[  236.873709][ T5820]  z_erofs_readahead+0xc26/0x1030
[  236.873743][ T5820]  ? z_erofs_read_folio+0x760/0x760
[  236.873777][ T5820]  ? __lock_acquire+0x1f80/0x1f80
[  236.873806][ T5820]  ? blk_start_plug+0x95/0x110
[  236.873829][ T5820]  read_pages+0x17f/0x830
[  236.873846][ T5820]  ? folio_add_lru+0x34d/0xd70
[  236.873864][ T5820]  ? folio_add_lru+0x34d/0xd70
[  236.873884][ T5820]  ? page_cache_ra_unbounded+0x7b0/0x7b0
[  236.873902][ T5820]  ? __lock_acquire+0x125b/0x1f80
[  236.873929][ T5820]  ? __filemap_add_folio+0x1b00/0x1b00
[  236.873946][ T5820]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  236.873975][ T5820]  ? print_irqtrace_events+0x210/0x210
[  236.874004][ T5820]  page_cache_ra_unbounded+0x68b/0x7b0
[  236.874027][ T5820]  force_page_cache_ra+0x2a3/0x300
[  236.874048][ T5820]  generic_fadvise+0x553/0x7b0
[  236.874075][ T5820]  ? dump_task+0x620/0x620
[  236.874100][ T5820]  ? __fget_files+0x28/0x4a0
[  236.874123][ T5820]  ? __fdget+0x182/0x210
[  236.874143][ T5820]  __x64_sys_fadvise64+0x138/0x180
[  236.874175][ T5820]  do_syscall_64+0x3b/0xb0
[  236.874200][ T5820]  ? clear_bhb_loop+0x45/0xa0
[  236.874220][ T5820]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.874240][ T5820] RIP: 0033:0x7f0fbc78d169
[  236.874255][ T5820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.874272][ T5820] RSP: 002b:00007f0fbd5db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  236.874292][ T5820] RAX: ffffffffffffffda RBX: 00007f0fbc9a5fa0 RCX: 00007f0fbc78d169
[  236.874306][ T5820] RDX: 0000000000004101 RSI: 0000000000008000 RDI: 0000000000000004
[  236.874318][ T5820] RBP: 00007f0fbc80e2a0 R08: 0000000000000000 R09: 0000000000000000
[  236.874329][ T5820] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  236.874340][ T5820] R13: 0000000000000000 R14: 00007f0fbc9a5fa0 R15: 00007ffed30c1f08
[  236.874360][ T5820]  </TASK>
[  236.876437][ T5820] Kernel Offset: disabled
[  237.827222][ T5820] Rebooting in 86400 seconds..