last executing test programs:

13.555597645s ago: executing program 4 (id=346):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080), 0x80, 0x63c, &(0x7f0000001bc0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x80, 0x0}, 0x20)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]})

10.118063577s ago: executing program 2 (id=356):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local}, 0xc)

9.232835228s ago: executing program 4 (id=357):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f0000000280), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x2}}], 0x30)
close(r1)

9.154801983s ago: executing program 3 (id=358):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_open_dev$vbi(&(0x7f0000000540), 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmmsg(r0, 0x0, 0x0, 0x0)

8.844463091s ago: executing program 4 (id=359):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8})
socket$l2tp(0x2, 0x2, 0x73)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)

8.831890082s ago: executing program 0 (id=360):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000003c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00')
read(r5, &(0x7f0000001180)=""/4096, 0x1000)

7.870849978s ago: executing program 0 (id=362):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe08000000000000002b3c6af4a6650590000000000000000000000000bb000000006c00000000000000000000000000000000000000000000000200000000000000000000000700000000000010000000000000000000000000300000000000000000000000000000000000001000000000000000000000000000000000040000000000400000000000000000000000000000002abd7000000000000a00010600000000000000004800036b306af7a3ed98a4f4a458fd5a006465666c6174650000ef3b00"/210], 0x138}}, 0x20000000)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
setsockopt(r3, 0x4, 0x4, &(0x7f0000000840), 0x0)
syz_genetlink_get_family_id$fou(0x0, r2)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f00000000c0), 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@perf_event={0x1}}, 0x18)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

7.870297858s ago: executing program 3 (id=363):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc0541, 0x0)
r2 = fsopen(&(0x7f0000000700)='affs\x00', 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000100)={0x7, 'veth0\x00', {0xfffffff7}, 0x3})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r7], 0x38}}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0)
socket$pppoe(0x18, 0x1, 0x0)

6.856378018s ago: executing program 1 (id=365):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x4, 0xc161fa2f6813e646, <r5=>r0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x5a, [0x9, 0x8, 0x0, 0x8, 0xb, 0x4f1], 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000180)=""/90}, &(0x7f0000000340)=0x78)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x41, 0x2004, @fd, 0x2, 0x0, 0x0, 0xc})
io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
socket(0x400000000010, 0x3, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'dvmrp1\x00'}})
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lsetxattr$system_posix_acl(0x0, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x5}, [{0x2, 0x6}], {0x4, 0x3}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x4, r6}], {0x10, 0x4}, {0x20, 0x1}}, 0x3c, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

6.686426638s ago: executing program 1 (id=366):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

6.490038599s ago: executing program 1 (id=367):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000003c0), 0x0}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
fcntl$lock(r5, 0x6, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000380)={{0xa, 0x5, 0xffff, 0x10001, 'syz1\x00', 0x4}, 0x1, 0x3, 0x2, r0, 0x4, 0xffff8001, 'syz1\x00', &(0x7f0000000280)=['\x00', 'builtin_and_secondary_trusted\x00', '\x00', '\\-\x00'], 0x23})
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00')
read(r7, &(0x7f0000001180)=""/4096, 0x1000)

5.530546806s ago: executing program 1 (id=368):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
inotify_init()

4.750804172s ago: executing program 0 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f0000000280), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x2}}], 0x30)
close(r1)

4.678075975s ago: executing program 4 (id=370):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x0)

4.417008071s ago: executing program 1 (id=371):
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

4.133191117s ago: executing program 2 (id=372):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
dup2(r0, r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

3.687685544s ago: executing program 3 (id=373):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000003c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00')
read(r5, &(0x7f0000001180)=""/4096, 0x1000)

3.567251751s ago: executing program 0 (id=374):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_open_dev$vbi(&(0x7f0000000540), 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmmsg(r0, &(0x7f0000000440), 0x0, 0x0)

2.880591911s ago: executing program 2 (id=375):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$nullb(0xffffff9c, &(0x7f0000000000), 0x121501, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x100030, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x601, 0x0)
socket(0x21, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0xfdba)

2.748023509s ago: executing program 3 (id=376):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x4, 0xc161fa2f6813e646, <r5=>r0})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x5a, [0x9, 0x8, 0x0, 0x8, 0xb, 0x4f1], 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000180)=""/90}, &(0x7f0000000340)=0x78)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x41, 0x2004, @fd, 0x2, 0x0, 0x0, 0xc})
io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
socket(0x400000000010, 0x3, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'dvmrp1\x00'}})
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lsetxattr$system_posix_acl(0x0, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x5}, [{0x2, 0x6}], {0x4, 0x3}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x4, r6}], {0x10, 0x4}, {0x20, 0x1}}, 0x3c, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

2.55489741s ago: executing program 3 (id=377):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

2.309989265s ago: executing program 0 (id=378):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x4004480d, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmmsg(r3, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="f2", 0x1}], 0x1}}], 0x2, 0x80)
dup2(r0, r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.856161451s ago: executing program 3 (id=379):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17a)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)

1.795734234s ago: executing program 2 (id=380):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe08000000000000002b3c6af4a6650590000000000000000000000000bb000000006c00000000000000000000000000000000000000000000000200000000000000000000000700000000000010000000000000000000000000300000000000000000000000000000000000001000000000000000000000000000000000040000000000400000000000000000000000000000002abd7000000000000a00010600000000000000004800036b306af7a3ed98a4f4a458fd5a006465666c6174650000ef3b00"/210], 0x138}}, 0x20000000)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
setsockopt(r3, 0x4, 0x4, &(0x7f0000000840), 0x0)
syz_genetlink_get_family_id$fou(0x0, r2)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f00000000c0), 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@perf_event={0x1}}, 0x18)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.500223262s ago: executing program 2 (id=381):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x46, 0xc11, &(0x7f0000000d00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unlink(&(0x7f0000000040)='.\x02/file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)
shutdown(r0, 0x1)

1.456798874s ago: executing program 4 (id=382):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
inotify_init()

1.02650974s ago: executing program 0 (id=383):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local}, 0xc)

321.831021ms ago: executing program 2 (id=384):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
setgroups(0x0, 0x0)
setregid(0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r4})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ce407a21601faac29a5832d81cb42eb2e20559b3d51251cd080a889910e1ba5aeae19e2a6fe9d59e2a42efdd42ba111d39aa2f428359bf580183ac9e8ed27f5497", @ANYRES64=0x0], 0x20)

153.098591ms ago: executing program 4 (id=385):
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

0s ago: executing program 1 (id=386):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}}, 0x20}}, 0x0)
dup2(r0, r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts.
[   66.048784][ T4172] cgroup: Unknown subsys name 'net'
[   66.204827][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.736782][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   69.103800][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   69.195007][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   69.209491][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   69.234554][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   69.300882][ T4195] chnl_net:caif_netlink_parms(): no params data found
[   69.379578][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.386681][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.395336][ T4185] device bridge_slave_0 entered promiscuous mode
[   69.414764][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.422067][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.430177][ T4194] device bridge_slave_0 entered promiscuous mode
[   69.441808][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.449062][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.456936][ T4194] device bridge_slave_1 entered promiscuous mode
[   69.465493][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.472788][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.480938][ T4185] device bridge_slave_1 entered promiscuous mode
[   69.527698][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.534984][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.543062][ T4184] device bridge_slave_0 entered promiscuous mode
[   69.551579][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.559082][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.566973][ T4184] device bridge_slave_1 entered promiscuous mode
[   69.597712][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.604917][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.613217][ T4195] device bridge_slave_0 entered promiscuous mode
[   69.627132][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.634389][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.642710][ T4189] device bridge_slave_0 entered promiscuous mode
[   69.653524][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.665365][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.676677][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.686268][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.693551][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.701695][ T4195] device bridge_slave_1 entered promiscuous mode
[   69.722023][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.729288][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.737332][ T4189] device bridge_slave_1 entered promiscuous mode
[   69.746029][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.769890][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.804574][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.815537][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.833511][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.844949][ T4194] team0: Port device team_slave_0 added
[   69.853813][ T4185] team0: Port device team_slave_0 added
[   69.862861][ T4185] team0: Port device team_slave_1 added
[   69.876214][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.899168][ T4194] team0: Port device team_slave_1 added
[   69.912797][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.936387][ T4195] team0: Port device team_slave_0 added
[   69.952149][ T4184] team0: Port device team_slave_0 added
[   69.965063][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.972351][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.999348][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.014087][ T4195] team0: Port device team_slave_1 added
[   70.027953][ T4184] team0: Port device team_slave_1 added
[   70.041115][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.048451][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.074496][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.091949][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.099318][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.125279][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.152595][ T4189] team0: Port device team_slave_0 added
[   70.169908][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.176967][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.203047][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.222957][ T4189] team0: Port device team_slave_1 added
[   70.243625][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.250859][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.277039][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.292808][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.303381][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.329922][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.342338][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.349833][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.376037][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.387940][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.395027][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.421065][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.437523][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.445207][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.471400][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.489759][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.496849][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.523109][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.561774][ T4185] device hsr_slave_0 entered promiscuous mode
[   70.568851][ T4185] device hsr_slave_1 entered promiscuous mode
[   70.589026][ T4194] device hsr_slave_0 entered promiscuous mode
[   70.595894][ T4194] device hsr_slave_1 entered promiscuous mode
[   70.603060][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.611320][ T4194] Cannot create hsr debugfs directory
[   70.664235][ T4184] device hsr_slave_0 entered promiscuous mode
[   70.671041][ T4184] device hsr_slave_1 entered promiscuous mode
[   70.677519][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.685596][ T4184] Cannot create hsr debugfs directory
[   70.714379][ T4195] device hsr_slave_0 entered promiscuous mode
[   70.721613][ T4195] device hsr_slave_1 entered promiscuous mode
[   70.729134][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.736723][ T4195] Cannot create hsr debugfs directory
[   70.753719][ T4189] device hsr_slave_0 entered promiscuous mode
[   70.760560][ T4189] device hsr_slave_1 entered promiscuous mode
[   70.767733][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.775394][ T4189] Cannot create hsr debugfs directory
[   70.849252][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   70.856023][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[   70.858545][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   70.878521][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   70.928603][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   71.131756][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.144224][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.165068][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.184759][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.195732][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.219611][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.239712][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.250343][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.353894][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.363896][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.379825][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.392110][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.401329][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.434107][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   71.452909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.462796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.476011][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.486126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.496341][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.503726][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.524569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.536385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.545528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.556392][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.563593][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.582741][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.589348][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.622298][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.633242][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.643388][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.667958][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.684891][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.694584][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.707396][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.719366][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.732402][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.741626][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.751522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.761163][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.775129][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.789179][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.799269][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.807703][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.816276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.853845][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.865583][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.887048][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.895689][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.921087][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.955586][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   71.969368][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.977685][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.025682][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.035175][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.044723][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.051864][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.063036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.073956][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.083257][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.091938][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.099169][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.125324][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.169492][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.181947][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.192247][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.206679][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.226072][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   72.256057][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   72.263462][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.274167][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.282644][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.291592][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.302254][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.311571][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.321050][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.330839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.339385][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.347065][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.355018][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.363090][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.383044][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.391437][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.400829][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.426962][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.441155][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   72.454017][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.463009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.472539][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.479672][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.487609][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.496711][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.509475][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.516534][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.526482][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.535489][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.544485][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.551634][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.561124][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.569320][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.577094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.585441][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.595008][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.604281][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.613477][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.620647][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.633171][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.654605][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.666129][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.705884][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.715113][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.724589][  T324] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.731735][  T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.739957][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.749780][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.760247][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.769890][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.780009][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.788731][  T324] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.795816][  T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.804017][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.813515][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.825030][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.841112][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.851627][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.863775][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.872214][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.880714][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.891643][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.901992][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.926160][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.934753][ T4228] Bluetooth: hci0: command 0x041b tx timeout
[   72.939629][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.944696][ T4228] Bluetooth: hci1: command 0x041b tx timeout
[   72.955451][ T4228] Bluetooth: hci3: command 0x041b tx timeout
[   72.962174][ T4228] Bluetooth: hci2: command 0x041b tx timeout
[   72.973664][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.983399][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.992512][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.001992][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.009115][ T4247] Bluetooth: hci4: command 0x041b tx timeout
[   73.022383][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.033946][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.045952][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.077636][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.097897][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.117184][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.128975][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.136989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.146399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.155747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.164492][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.174030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.187297][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.196445][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.207641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.216652][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.225528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.234096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.244036][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.266867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.287037][ T4185] device veth0_vlan entered promiscuous mode
[   73.302758][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.312120][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.322280][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.330982][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.347816][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.366900][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.389579][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.414679][ T4185] device veth1_vlan entered promiscuous mode
[   73.508646][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.534065][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.552039][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.563806][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.582331][ T4185] device veth0_macvtap entered promiscuous mode
[   73.596162][ T4185] device veth1_macvtap entered promiscuous mode
[   73.670707][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.689386][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.710611][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.730792][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.748989][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.765885][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.779680][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.786988][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.795681][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.803699][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.813532][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.840830][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.850889][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.860031][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.869239][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.889898][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.904409][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.912600][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.926687][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.934536][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.966306][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.984845][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.015729][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.025288][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.041440][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.066039][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.077932][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.133221][ T4184] device veth0_vlan entered promiscuous mode
[   74.153593][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.163158][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.173578][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.187563][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.197453][ T4195] device veth0_vlan entered promiscuous mode
[   74.212779][ T4184] device veth1_vlan entered promiscuous mode
[   74.232549][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.245815][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.255043][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.263664][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.272211][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.283608][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.294392][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.313983][ T4194] device veth0_vlan entered promiscuous mode
[   74.343796][ T4195] device veth1_vlan entered promiscuous mode
[   74.353907][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.362565][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.374925][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.383947][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.403717][ T4194] device veth1_vlan entered promiscuous mode
[   74.432259][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.441737][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.451754][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.460800][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.470927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.479400][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.499306][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.507321][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.530818][ T4189] device veth0_vlan entered promiscuous mode
[   74.552039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.561074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.570220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.583300][ T4184] device veth0_macvtap entered promiscuous mode
[   74.594592][ T4195] device veth0_macvtap entered promiscuous mode
[   74.612116][ T4184] device veth1_macvtap entered promiscuous mode
[   74.622289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.630662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.640374][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.649278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.657285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.666174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.676528][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.681366][ T4194] device veth0_macvtap entered promiscuous mode
[   74.690881][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.703183][ T4195] device veth1_macvtap entered promiscuous mode
[   74.716975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.725829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.736344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.744894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.754421][ T4189] device veth1_vlan entered promiscuous mode
[   74.771408][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.782184][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.795500][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.810164][ T4194] device veth1_macvtap entered promiscuous mode
[   74.838696][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.846800][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.865224][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.874312][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.884993][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.897572][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.908735][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.919634][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.931380][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.943901][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.954074][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.964991][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.976891][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.998686][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.007472][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.010496][ T4247] Bluetooth: hci2: command 0x040f tx timeout
[   75.022948][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.029202][ T4247] Bluetooth: hci3: command 0x040f tx timeout
[   75.037658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.060211][ T4247] Bluetooth: hci1: command 0x040f tx timeout
[   75.068892][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.081306][ T4247] Bluetooth: hci0: command 0x040f tx timeout
[   75.089539][ T4247] Bluetooth: hci4: command 0x040f tx timeout
[   75.102162][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.112714][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.123686][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.137387][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.149603][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.164156][ T4297] loop2: detected capacity change from 0 to 256
[   75.167821][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.192241][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.204695][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.230019][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.243928][ T4297] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   75.257377][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.278447][   T26] audit: type=1800 audit(1770795905.837:2): pid=4297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="bus" dev="loop2" ino=1048582 res=0 errno=0
[   75.301171][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.317887][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.327732][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.338427][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.351879][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.363367][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.374008][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.385521][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.395769][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.406884][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.421250][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.441614][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.452776][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.463032][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.472698][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.506410][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.534047][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.555954][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.567744][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.586380][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.600554][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.614240][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.627180][ T4189] device veth0_macvtap entered promiscuous mode
[   75.655395][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.669461][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.694983][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.726075][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.736682][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.746514][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.755467][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.787441][ T4189] device veth1_macvtap entered promiscuous mode
[   75.803596][ T4302] netlink: 'syz.2.7': attribute type 12 has an invalid length.
[   75.873846][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.905988][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.917496][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.938684][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.966134][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.978459][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.990750][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.004962][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.027271][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.091191][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.106449][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.122362][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.133404][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.143560][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.154194][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.164248][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.175220][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.185378][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.196426][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.211326][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.224949][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.234084][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.242991][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.252145][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.272749][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.282528][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.300167][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.309127][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.328763][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.378994][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.386859][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.416812][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.433546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.434249][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.482315][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.485719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.494496][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.509979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.523019][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.543502][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.573931][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.603092][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.638502][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   76.662956][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.690570][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.720970][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.747916][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.903156][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.031807][ T4312] netlink: 'syz.2.8': attribute type 13 has an invalid length.
[   77.228134][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   77.252317][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   77.326821][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   77.426275][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   77.502961][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[   77.840133][ T4308] ALSA: mixer_oss: invalid OSS volume ''
[   78.177712][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.186124][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.508517][ T4246] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   78.988798][ T4246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   79.012981][ T4246] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   79.028879][ T4246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.055234][ T4246] usb 2-1: config 0 descriptor??
[   79.096830][ T4318] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   79.245974][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.274429][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.459433][ T4337] trusted_key: encrypted_key: insufficient parameters specified
[   79.759468][ T4246] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[   80.221134][ T4318] loop1: detected capacity change from 0 to 2048
[   80.270587][ T4318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.313908][ T4312] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.328316][ T4312] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.373270][ T4312] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.396134][ T4312] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.576085][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.632228][ T4312] syz.2.8 (4312) used greatest stack depth: 20432 bytes left
[   80.638757][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.654223][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.411715][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   81.421534][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   81.431992][ T4224] usb 2-1: reset full-speed USB device number 2 using dummy_hcd
[   81.718309][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!!
[   81.727771][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   82.128666][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   82.148205][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   82.157386][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   82.166448][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   82.175468][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   82.365105][ T4357] loop2: detected capacity change from 0 to 164
[   83.756274][ T4357] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   84.074684][ T4333] usb 2-1: USB disconnect, device number 2
[   86.219188][ T4386] loop4: detected capacity change from 0 to 4096
[   86.320101][ T4387] process 'syz.3.22' launched './file1' with NULL argv: empty string added
[   86.572683][ T4395] snd_dummy snd_dummy.0: control 5:65535:65537:syz1:4 is already present
[   87.375481][ T1324] cfg80211: failed to load regulatory.db
[   87.713979][ T4399] loop0: detected capacity change from 0 to 128
[   88.718183][    C0] sched: RT throttling activated
[   90.412684][ T4404] loop3: detected capacity change from 0 to 512
[   90.526433][ T4404] EXT4-fs (loop3): Ignoring removed nobh option
[   90.594749][ T4404] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.27: iget: bad i_size value: 38620345925642
[   90.712123][ T4404] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.27: couldn't read orphan inode 15 (err -117)
[   91.115296][ T4404] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[   93.445793][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.453227][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.738402][ T4409] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   94.690557][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.175767][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.597658][ T4442] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.102378][ T4406] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.111887][ T4406] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.121101][ T4406] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.130295][ T4406] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.514562][ T4474] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   98.946314][ T4482] loop3: detected capacity change from 0 to 256
[   98.957736][ T4482] =======================================================
[   98.957736][ T4482] WARNING: The mand mount option has been deprecated and
[   98.957736][ T4482]          and is ignored by this kernel. Remove the mand
[   98.957736][ T4482]          option from the mount to silence this warning.
[   98.957736][ T4482] =======================================================
[   99.124422][ T4482] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.135787][ T4482] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   99.168982][ T4482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  100.445604][ T4495] loop3: detected capacity change from 0 to 16
[  100.519933][ T4495] erofs: (device loop3): mounted with root inode @ nid 36.
[  100.567082][   T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.597145][ T4495] attempt to access beyond end of device
[  100.597145][ T4495] loop3: rw=524288, want=32, limit=16
[  100.637475][ T4501] snd_dummy snd_dummy.0: control 5:65535:65537:syz1:4 is already present
[  101.389802][ T4495] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89
[  101.478309][   T13] usb 1-1: Using ep0 maxpacket: 32
[  101.539389][ T4495] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89
[  101.668418][   T13] usb 1-1: config 0 has an invalid interface number: 254 but max is 0
[  101.676628][   T13] usb 1-1: config 0 has no interface number 0
[  101.683017][ T4495] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89
[  101.699363][ T4495] attempt to access beyond end of device
[  101.699363][ T4495] loop3: rw=524288, want=56, limit=16
[  101.723162][ T4495] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  101.828833][   T26] audit: type=1800 audit(1770795932.397:3): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.49" name="file2" dev="loop3" ino=89 res=0 errno=0
[  101.888564][   T13] usb 1-1: New USB device found, idVendor=5215, idProduct=1103, bcdDevice=e3.da
[  101.925655][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.973517][   T13] usb 1-1: Product: syz
[  101.988207][   T13] usb 1-1: Manufacturer: syz
[  101.992832][   T13] usb 1-1: SerialNumber: syz
[  102.044071][   T13] usb 1-1: config 0 descriptor??
[  102.099799][   T13] usb-storage 1-1:0.254: USB Mass Storage device detected
[  102.478772][ T4495] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  102.583003][   T26] audit: type=1800 audit(1770795933.147:4): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.49" name="file2" dev="loop3" ino=89 res=0 errno=0
[  102.698863][ T4519] team0 (unregistering): Port device team_slave_0 removed
[  102.713076][ T4495] attempt to access beyond end of device
[  102.713076][ T4495] loop3: rw=0, want=24, limit=16
[  102.740507][ T4495] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  102.783413][ T4519] team0 (unregistering): Port device team_slave_1 removed
[  103.860046][ T4331] usb 1-1: USB disconnect, device number 2
[  104.686979][ T4532] loop3: detected capacity change from 0 to 512
[  104.853521][ T4532] FAT-fs (loop3): Unrecognized mount option "dmask=00000â½ÒHo±?0000000062" or missing value
[  106.350630][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.358049][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.290839][ T4561] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  108.365001][ T4561] overlayfs: failed to look up (tracing) for ino (-66)
[  110.018726][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.077069][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.099965][ T4541] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.122129][ T4541] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.143428][ T4541] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.161412][ T4541] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.038441][ T4599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.629910][ T4599] netlink: 44 bytes leftover after parsing attributes in process `syz.4.83'.
[  115.783314][ T4634] loop2: detected capacity change from 0 to 2048
[  115.980386][ T4634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.019563][ T4639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'.
[  116.044215][ T4639] device veth1_macvtap left promiscuous mode
[  118.988607][ T4677] xt_CT: You must specify a L4 protocol and not use inversions on it
[  119.603175][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  119.878304][   T13] usb 4-1: Using ep0 maxpacket: 8
[  119.889561][ T4679] loop2: detected capacity change from 0 to 256
[  119.998395][   T13] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e6
[  120.032400][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.050840][ T4679] FAT-fs (loop2): Directory bread(block 64) failed
[  120.150890][ T4679] FAT-fs (loop2): Directory bread(block 65) failed
[  120.190721][   T13] usb 4-1: config 0 descriptor??
[  120.203354][ T4679] FAT-fs (loop2): Directory bread(block 66) failed
[  120.226035][ T4679] FAT-fs (loop2): Directory bread(block 67) failed
[  120.250095][   T13] pcwd_usb: The device isn't a Human Interface Device
[  120.274363][ T4679] FAT-fs (loop2): Directory bread(block 68) failed
[  120.311573][ T4679] FAT-fs (loop2): Directory bread(block 69) failed
[  120.327998][ T4679] FAT-fs (loop2): Directory bread(block 70) failed
[  120.338877][ T4679] FAT-fs (loop2): Directory bread(block 71) failed
[  120.345978][ T4679] FAT-fs (loop2): Directory bread(block 72) failed
[  120.352833][ T4679] FAT-fs (loop2): Directory bread(block 73) failed
[  120.609395][ T4298] usb 4-1: USB disconnect, device number 2
[  121.527542][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'.
[  122.828126][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  123.739590][ T4707] snd_dummy snd_dummy.0: control 5:65535:65537:syz1:4 is already present
[  124.107896][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.490207][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  125.258432][ T4239] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  126.038566][ T4239] usb 2-1: Using ep0 maxpacket: 32
[  126.238403][ T4239] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  127.147756][ T4239] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  127.218472][ T4239] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  127.289167][ T4239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.358521][ T4239] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  127.440586][ T4239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.476177][ T4239] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  127.487975][ T4239] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  127.507680][ T4239] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  127.517881][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.713963][ T4239] usb 2-1: config 0 descriptor??
[  127.746951][ T4739] loop4: detected capacity change from 0 to 256
[  127.852325][ T4740] loop2: detected capacity change from 0 to 512
[  127.915155][ T4740] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  128.400272][ T4739] FAT-fs (loop4): Directory bread(block 64) failed
[  128.526358][ T4739] FAT-fs (loop4): Directory bread(block 65) failed
[  128.548631][ T4739] FAT-fs (loop4): Directory bread(block 66) failed
[  128.554267][ T4239] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  128.556086][ T4739] FAT-fs (loop4): Directory bread(block 67) failed
[  128.618022][ T4742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.122'.
[  128.629223][ T4739] FAT-fs (loop4): Directory bread(block 68) failed
[  128.635801][ T4739] FAT-fs (loop4): Directory bread(block 69) failed
[  128.646787][ T4239] usb 2-1: USB disconnect, device number 3
[  128.678390][ T4239] usblp0: removed
[  128.687973][ T4739] FAT-fs (loop4): Directory bread(block 70) failed
[  128.718341][ T4739] FAT-fs (loop4): Directory bread(block 71) failed
[  128.728857][   T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  128.736059][ T4739] FAT-fs (loop4): Directory bread(block 72) failed
[  128.747119][ T4739] FAT-fs (loop4): Directory bread(block 73) failed
[  129.058398][   T13] usb 1-1: Using ep0 maxpacket: 32
[  129.178479][   T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.268361][   T13] usb 1-1: string descriptor 0 read error: -71
[  130.054863][ T4754] tipc: Started in network mode
[  130.056012][   T13] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  130.069316][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.119105][ T4754] tipc: Node identity dec4d54d284f, cluster identity 4711
[  130.134096][   T13] usb 1-1: config 0 descriptor??
[  130.139608][ T4754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.183995][ T4756] device syzkaller0 entered promiscuous mode
[  130.190300][   T13] usb 1-1: can't set config #0, error -71
[  130.204680][   T13] usb 1-1: USB disconnect, device number 3
[  130.512758][ T4756] tipc: Resetting bearer <eth:syzkaller0>
[  130.979196][ T4756] tipc: Disabling bearer <eth:syzkaller0>
[  132.206588][ T4782] loop3: detected capacity change from 0 to 4096
[  132.259772][ T4782] ntfs3: Unknown parameter 'hide_dot_files'
[  132.268248][   T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  132.608214][   T13] usb 3-1: Using ep0 maxpacket: 32
[  132.948972][   T13] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  132.995736][   T13] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  133.011435][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  133.017778][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.025795][   T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  133.050007][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.063724][   T13] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  133.075871][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  133.091529][   T13] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  133.103863][   T13] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  133.119378][   T13] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  133.133040][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.183112][   T13] usb 3-1: config 0 descriptor??
[  133.601345][ T4806] xt_CT: You must specify a L4 protocol and not use inversions on it
[  133.991668][   T13] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  134.233933][ T4811] tipc: Started in network mode
[  134.247126][ T4811] tipc: Node identity 9a12776403cc, cluster identity 4711
[  134.252076][   T13] usb 3-1: USB disconnect, device number 2
[  134.256107][ T4811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.268870][ T4811] device syzkaller0 entered promiscuous mode
[  134.289367][ T4811] netlink: 44 bytes leftover after parsing attributes in process `syz.3.141'.
[  134.308497][ T4811] tipc: Resetting bearer <eth:syzkaller0>
[  134.315350][   T13] usblp0: removed
[  134.332575][ T4810] tipc: Resetting bearer <eth:syzkaller0>
[  134.381681][ T4816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.142'.
[  134.496094][ T4810] tipc: Disabling bearer <eth:syzkaller0>
[  134.657128][ T4822] xt_TCPMSS: Only works on TCP SYN packets
[  136.600162][ T4842] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.725750][ T4855] loop4: detected capacity change from 0 to 128
[  137.820107][   T26] audit: type=1800 audit(1770795968.387:5): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.153" name="file1" dev="loop4" ino=1048593 res=0 errno=0
[  138.127210][ T4860] tipc: Started in network mode
[  138.147636][ T4860] tipc: Node identity a2a50460396, cluster identity 4711
[  138.166351][ T4860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.239526][ T4864] device syzkaller0 entered promiscuous mode
[  138.387755][ T4860] netlink: 44 bytes leftover after parsing attributes in process `syz.4.155'.
[  138.450467][ T4860] tipc: Resetting bearer <eth:syzkaller0>
[  138.652591][ T4859] tipc: Resetting bearer <eth:syzkaller0>
[  138.674257][ T4859] tipc: Disabling bearer <eth:syzkaller0>
[  139.440893][ T4330] tipc: Node number set to 2613380192
[  139.616705][ T4879] xt_CT: You must specify a L4 protocol and not use inversions on it
[  139.679072][ T4881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.686541][ T4881] device syzkaller0 entered promiscuous mode
[  139.980997][ T4239] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  140.680525][ T4881] tipc: Resetting bearer <eth:syzkaller0>
[  140.734145][ T4880] tipc: Resetting bearer <eth:syzkaller0>
[  141.455620][ T4880] tipc: Disabling bearer <eth:syzkaller0>
[  141.676149][ T4330] tipc: Node number set to 2581493604
[  141.738687][ T4239] usb 2-1: Using ep0 maxpacket: 32
[  142.639006][ T4239] usb 2-1: device descriptor read/all, error -71
[  144.180747][ T4920] tipc: Started in network mode
[  144.206318][ T4920] tipc: Node identity 2e164c9946ca, cluster identity 4711
[  144.219398][ T4920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.253403][ T4920] device syzkaller0 entered promiscuous mode
[  144.344895][ T4920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.172'.
[  144.420777][ T4925] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.568362][ T4239] tipc: Node number set to 1759267993
[  145.588054][ T4920] tipc: Resetting bearer <eth:syzkaller0>
[  145.595791][ T4919] tipc: Resetting bearer <eth:syzkaller0>
[  145.626494][ T4919] tipc: Disabling bearer <eth:syzkaller0>
[  145.644153][ T4929] loop2: detected capacity change from 0 to 128
[  145.799186][ T4929] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.850097][ T4929] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.036695][ T4946] device syzkaller0 entered promiscuous mode
[  147.328648][ T4569] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  147.578646][ T4569] usb 3-1: Using ep0 maxpacket: 32
[  147.698825][ T4569] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  147.721051][ T4569] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  147.820190][ T4569] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  147.895580][ T4569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  148.089956][ T4927] loop0: detected capacity change from 0 to 32768
[  148.122719][ T4569] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  148.143310][ T4569] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  148.157201][ T4569] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  148.166533][ T4569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.177320][ T4569] usb 3-1: config 0 descriptor??
[  148.337288][ T4927] XFS (loop0): Mounting V5 Filesystem
[  149.179418][ T4569] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.272611][ T4967] xt_CT: You must specify a L4 protocol and not use inversions on it
[  150.409372][ T4569] usb 3-1: USB disconnect, device number 3
[  150.439096][ T4569] usblp0: removed
[  150.463616][ T4927] XFS (loop0): log mount failed
[  151.882210][ T4975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.059689][ T4977] device syzkaller0 entered promiscuous mode
[  152.093344][ T4975] Zero length message leads to an empty skb
[  152.134925][ T4975] netlink: 44 bytes leftover after parsing attributes in process `syz.3.188'.
[  152.183888][ T4975] tipc: Resetting bearer <eth:syzkaller0>
[  152.247689][ T4974] tipc: Resetting bearer <eth:syzkaller0>
[  152.336007][ T4974] tipc: Disabling bearer <eth:syzkaller0>
[  153.345331][ T4992] device syzkaller0 entered promiscuous mode
[  154.223034][ T4997] netlink: 173 bytes leftover after parsing attributes in process `syz.3.197'.
[  155.577649][ T4995] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.585626][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.506284][ T4264] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  156.834472][ T5012] loop3: detected capacity change from 0 to 32768
[  156.841223][ T4264] usb 5-1: Using ep0 maxpacket: 32
[  156.945606][   T26] audit: type=1800 audit(1770795987.507:6): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.201" name="file1" dev="loop3" ino=4 res=0 errno=0
[  156.971582][ T4264] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  156.986774][ T4264] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  156.988672][ T4995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.006852][ T4264] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  157.024922][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  157.040571][ T4264] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  157.061129][ T4264] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  157.080553][ T4264] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  157.104711][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.123402][ T4264] usb 5-1: config 0 descriptor??
[  157.126943][ T4995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.416307][ T4264] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  157.551199][ T5014] loop3: detected capacity change from 0 to 32768
[  157.643737][ T5014] JBD2: Ignoring recovery information on journal
[  157.735352][ T4995] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.744400][ T4995] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.752567][ T5014] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.753511][ T4995] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.771755][ T4995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.922717][ T4195] ocfs2: Unmounting device (7,3) on (node local)
[  158.361174][ T5027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.183880][ T4328] usb 5-1: USB disconnect, device number 2
[  159.203897][ T4328] usblp0: removed
[  159.220795][ T5033] tipc: Started in network mode
[  159.266433][ T5033] tipc: Node identity 2ed62ce79e99, cluster identity 4711
[  159.325991][ T5033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.337972][ T5036] device syzkaller0 entered promiscuous mode
[  159.348327][ T5033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.207'.
[  159.367328][ T5033] tipc: Resetting bearer <eth:syzkaller0>
[  159.375209][ T5032] tipc: Resetting bearer <eth:syzkaller0>
[  159.390430][ T5032] tipc: Disabling bearer <eth:syzkaller0>
[  159.778304][ T4330] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  160.198996][ T4330] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  160.214653][ T5024] tipc: Disabling bearer <eth:syzkaller0>
[  160.224282][ T5049] loop0: detected capacity change from 0 to 128
[  160.230699][ T4330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.262601][ T4330] usb 5-1: config 0 has no interface number 0
[  161.097826][ T4330] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  161.107059][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.209501][ T4330] usb 5-1: Product: syz
[  161.367320][ T4330] usb 5-1: Manufacturer: syz
[  161.372086][ T4330] usb 5-1: SerialNumber: syz
[  161.406777][ T4330] usb 5-1: config 0 descriptor??
[  161.470846][ T4330] CoreChips: probe of 5-1:0.41 failed with error -22
[  161.609639][ T5063] device syzkaller0 entered promiscuous mode
[  162.039046][ T4321] usb 5-1: USB disconnect, device number 3
[  162.498365][ T4328] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  162.748323][ T4328] usb 4-1: Using ep0 maxpacket: 32
[  162.868367][ T4328] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  162.884445][ T4328] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  162.904980][ T4328] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  162.916222][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  162.926895][ T4328] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  162.937284][ T4328] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  162.951102][ T4328] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  162.960575][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.979907][ T4328] usb 4-1: config 0 descriptor??
[  163.279579][ T4328] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  163.575541][ T5086] loop2: detected capacity change from 0 to 4096
[  164.159005][ T5086] ntfs3: Unknown parameter 'windows_names'
[  164.317214][ T5088] loop0: detected capacity change from 0 to 40427
[  164.331333][ T5088] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  165.588275][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  165.730533][ T4328] usb 4-1: USB disconnect, device number 3
[  165.762747][ T4328] usblp0: removed
[  167.407804][ T4321] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  168.428400][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -71
[  168.436014][ T4321] usb 1-1: can't read configurations, error -71
[  169.626823][ T5141] loop1: detected capacity change from 0 to 128
[  169.734278][ T5141] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.755434][ T5141] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  172.389049][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  172.414938][ T5165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'.
[  172.668503][ T4264] usb 3-1: Using ep0 maxpacket: 32
[  172.799593][ T4264] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  172.873662][ T4264] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  173.034380][ T4264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  173.235225][ T4264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  173.255222][ T4264] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  173.277108][ T5173] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  173.308988][ T4264] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  173.358218][ T4264] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  173.388177][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.416164][ T4264] usb 3-1: config 0 descriptor??
[  173.746350][ T4264] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  174.244809][ T4328] usb 3-1: USB disconnect, device number 4
[  174.274599][ T4328] usblp0: removed
[  175.493742][ T5203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.501138][ T5203] device syzkaller0 entered promiscuous mode
[  175.510541][ T5203] netlink: 44 bytes leftover after parsing attributes in process `syz.4.256'.
[  175.551730][ T5203] tipc: Resetting bearer <eth:syzkaller0>
[  175.559699][ T5205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.258'.
[  175.618699][ T5202] tipc: Resetting bearer <eth:syzkaller0>
[  175.656151][ T5202] tipc: Disabling bearer <eth:syzkaller0>
[  175.768891][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'.
[  175.799066][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'.
[  175.981660][ T5207] loop2: detected capacity change from 0 to 32768
[  176.072725][ T5207] 
[  176.072725][ T5207]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  176.072725][ T5207] 
[  177.258647][ T5207] 
[  177.258647][ T5207]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.258647][ T5207] 
[  177.310584][ T5207] 
[  177.310584][ T5207]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.310584][ T5207] 
[  177.341510][ T5207] 
[  177.341510][ T5207]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.341510][ T5207] 
[  177.394644][ T5207] 
[  177.394644][ T5207]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.394644][ T5207] 
[  177.442223][ T5207] 
[  177.442223][ T5207]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.442223][ T5207] 
[  177.475391][ T5207] 
[  177.475391][ T5207]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.475391][ T5207] 
[  177.513782][ T5233] netlink: 'syz.3.266': attribute type 13 has an invalid length.
[  177.529775][  T276] 
[  177.529775][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.529775][  T276] 
[  177.585867][ T4185] 
[  177.585867][ T4185]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.585867][ T4185] 
[  177.597319][ T5233] netlink: 'syz.3.266': attribute type 17 has an invalid length.
[  177.624901][ T4185] 
[  177.624901][ T4185]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.624901][ T4185] 
[  177.888429][ T4328] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  177.906648][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  177.943439][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  178.029300][ T5233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.138356][ T4328] usb 5-1: Using ep0 maxpacket: 32
[  178.269136][ T4328] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  178.899407][ T4328] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  178.944579][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  179.046216][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  179.202874][ T4328] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  179.252873][ T4328] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  179.285048][ T5241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.269'.
[  179.329688][ T4328] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  179.384167][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.450885][ T4328] usb 5-1: config 0 descriptor??
[  179.859978][ T4328] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  180.178530][ T5277] netlink: 52 bytes leftover after parsing attributes in process `syz.1.282'.
[  181.088409][ T4298] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  181.100127][ T4328] usb 5-1: USB disconnect, device number 4
[  181.128787][ T4328] usblp0: removed
[  181.214318][ T5283] syz.4.284 uses obsolete (PF_INET,SOCK_PACKET)
[  181.269744][ T5283] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  181.358227][ T4298] usb 3-1: Using ep0 maxpacket: 32
[  181.638305][ T4298] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  181.657675][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.699965][ T4298] usb 3-1: Product: syz
[  181.707177][ T4298] usb 3-1: Manufacturer: syz
[  181.730216][ T4298] usb 3-1: SerialNumber: syz
[  181.794079][ T4298] usb 3-1: config 0 descriptor??
[  181.859595][ T4298] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  181.902186][ T4298] dvb-usb: bulk message failed: -22 (2/0)
[  181.974547][ T4298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.048692][ T4298] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  182.080700][ T4298] usb 3-1: media controller created
[  182.115458][ T4298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.197783][ T4298] usb 3-1: selecting invalid altsetting 7
[  182.218097][ T4298] cxusb: set interface failed
[  182.264421][ T4298] dvb-usb: bulk message failed: -22 (1/0)
[  183.244670][ T4298] DVB: Unable to find symbol lgdt330x_attach()
[  183.251794][ T4298] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  183.398243][ T4298] rc_core: IR keymap rc-dvico-portable not found
[  183.414950][ T4298] Registered IR keymap rc-empty
[  183.455878][ T4298] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  183.500687][ T4298] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6
[  183.569638][ T4298] dvb-usb: schedule remote query interval to 100 msecs.
[  183.596983][ T4298] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  183.700054][ T4298] dvb-usb: bulk message failed: -22 (1/0)
[  183.818283][ T4298] dvb-usb: bulk message failed: -22 (1/0)
[  183.938242][ T4298] dvb-usb: bulk message failed: -22 (1/0)
[  183.952096][ T5287] loop0: detected capacity change from 0 to 40427
[  184.053706][ T4298] dvb-usb: bulk message failed: -22 (1/0)
[  184.103284][ T5287] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x1ffff
[  184.173743][ T4298] dvb-usb: bulk message failed: -22 (1/0)
[  184.288229][ T4298] dvb-usb: bulk message failed: -22 (1/0)
[  184.355973][ T4298] usb 3-1: USB disconnect, device number 5
[  184.511096][ T4298] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  185.812977][ T5320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.855087][ T5320] device syzkaller0 entered promiscuous mode
[  185.913625][ T5320] tipc: Resetting bearer <eth:syzkaller0>
[  185.945413][ T5319] tipc: Resetting bearer <eth:syzkaller0>
[  185.993916][ T5319] tipc: Disabling bearer <eth:syzkaller0>
[  186.158231][ T4328] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  186.596592][ T4328] usb 3-1: Using ep0 maxpacket: 32
[  186.740728][ T4328] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  186.749379][ T4328] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  186.758063][ T4328] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  186.778920][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.488384][ T4328] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.501752][ T4328] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.515207][ T4328] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.524500][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.550356][ T4328] usb 3-1: config 0 descriptor??
[  187.857535][ T5340] loop1: detected capacity change from 0 to 1024
[  187.992111][ T4328] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  188.303400][ T5349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.304'.
[  188.772792][ T4298] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  190.791652][ T4298] usb 4-1: Using ep0 maxpacket: 32
[  191.150785][ T4324] usb 3-1: USB disconnect, device number 6
[  191.190612][ T4324] usblp0: removed
[  191.707665][ T5383] loop0: detected capacity change from 0 to 512
[  191.728235][ T4328] Bluetooth: hci1: command 0x0406 tx timeout
[  191.728719][ T4330] Bluetooth: hci3: command 0x0406 tx timeout
[  191.758346][ T4330] Bluetooth: hci0: command 0x0406 tx timeout
[  191.764835][ T4330] Bluetooth: hci4: command 0x0406 tx timeout
[  191.808302][ T4330] Bluetooth: hci2: command 0x0406 tx timeout
[  191.819777][ T5383] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.313: inode has both inline data and extents flags
[  191.846747][ T5383] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.313: couldn't read orphan inode 15 (err -117)
[  191.865802][ T5383] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  192.125820][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'.
[  194.498631][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.504961][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.523898][ T4298] usb 4-1: device descriptor read/all, error -71
[  195.359030][ T4330] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  195.698227][ T4330] usb 2-1: Using ep0 maxpacket: 32
[  195.756471][ T5423] loop0: detected capacity change from 0 to 256
[  195.808850][ T5423] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  195.888466][ T4330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  195.904499][ T4330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  195.936849][ T4330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  195.960831][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  195.973901][ T4330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  195.983741][ T4330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  195.996960][ T4330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  196.006139][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.019184][ T4330] usb 2-1: config 0 descriptor??
[  196.176306][ T5433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.183560][ T5433] device syzkaller0 entered promiscuous mode
[  196.230218][ T5433] tipc: Resetting bearer <eth:syzkaller0>
[  196.239963][ T5432] tipc: Resetting bearer <eth:syzkaller0>
[  196.350219][ T4330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  196.420221][ T5432] tipc: Disabling bearer <eth:syzkaller0>
[  198.220626][ T4330] usb 2-1: USB disconnect, device number 6
[  198.229841][ T4330] usblp0: removed
[  198.978216][ T4324] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  199.071131][ T5444] loop3: detected capacity change from 0 to 40427
[  199.105012][ T5444] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  199.133748][ T5444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  199.191808][ T5444] F2FS-fs (loop3): invalid crc value
[  199.237159][ T5444] F2FS-fs (loop3): Found nat_bits in checkpoint
[  199.243626][ T4324] usb 2-1: Using ep0 maxpacket: 32
[  199.393115][ T5444] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  199.413013][ T5444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  199.532455][ T4324] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  199.563546][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.607026][ T4324] usb 2-1: Product: syz
[  199.635556][ T4324] usb 2-1: Manufacturer: syz
[  199.654162][ T4324] usb 2-1: SerialNumber: syz
[  199.676937][ T4324] usb 2-1: config 0 descriptor??
[  199.730885][ T4324] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  199.748813][ T4324] dvb-usb: bulk message failed: -22 (2/0)
[  199.770692][ T4324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.798476][ T4324] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  199.815261][ T4324] usb 2-1: media controller created
[  199.857443][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.900530][ T4324] usb 2-1: selecting invalid altsetting 7
[  199.916524][ T4324] cxusb: set interface failed
[  199.933675][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  199.940706][ T4195] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  199.940761][ T4195] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  199.979676][ T4195] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  200.029094][ T4195] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  200.069274][ T4324] DVB: Unable to find symbol lgdt330x_attach()
[  200.098514][ T4195] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  200.098537][ T4195] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  200.117097][ T4324] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  200.142433][ T4195] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  200.328345][ T4324] rc_core: IR keymap rc-dvico-portable not found
[  200.386245][ T4324] Registered IR keymap rc-empty
[  200.410418][ T4324] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  200.466559][ T4324] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7
[  200.507986][ T4324] dvb-usb: schedule remote query interval to 100 msecs.
[  200.524026][ T4324] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  200.628229][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  200.738330][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  200.866032][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  200.979187][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  201.095067][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  201.228214][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  201.295353][ T5478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.315680][ T5478] device syzkaller0 entered promiscuous mode
[  201.343383][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  201.372351][ T5478] tipc: Resetting bearer <eth:syzkaller0>
[  201.392650][ T5477] tipc: Resetting bearer <eth:syzkaller0>
[  201.421837][ T5477] tipc: Disabling bearer <eth:syzkaller0>
[  201.458256][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  201.676715][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  202.426422][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  202.547704][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  202.796204][ T5492] loop4: detected capacity change from 0 to 512
[  202.838272][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  202.912385][ T5492] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  203.633656][ T5492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  203.678417][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  203.690257][ T5492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  203.961075][ T4328] dvb-usb: bulk message failed: -22 (1/0)
[  204.040922][ T5492] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.346: Invalid block bitmap block 0 in block_group 0
[  204.055979][ T5474] ODEBUG: Out of memory. ODEBUG disabled
[  204.068534][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  204.108222][ T5492] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  204.148640][ T5492] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.346: attempt to clear invalid blocks 983261 len 1
[  204.178356][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  204.209406][ T5492] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.346: Invalid inode table block 0 in block_group 0
[  204.232253][ T5492] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  204.242979][ T5492] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  204.255986][ T5492] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.346: Invalid inode table block 0 in block_group 0
[  204.298324][ T4324] dvb-usb: bulk message failed: -22 (1/0)
[  204.309804][ T4324] usb 2-1: USB disconnect, device number 7
[  204.331198][ T5492] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  204.360182][ T5492] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.346: mark_inode_dirty error
[  204.400098][ T4324] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  204.479845][ T5492] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  204.506913][ T5515] debugfs: File 'dropped' in directory 'loop4' already present!
[  204.518410][ T5492] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.346: Invalid inode table block 0 in block_group 0
[  204.551654][ T5515] debugfs: File 'msg' in directory 'loop4' already present!
[  204.589216][ T5515] debugfs: File 'trace0' in directory 'loop4' already present!
[  204.607837][ T5492] EXT4-fs (loop4): 1 truncate cleaned up
[  204.619538][ T5492] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,,errors=continue. Quota mode: none.
[  209.648231][ T4330] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  209.908191][ T4330] usb 4-1: Using ep0 maxpacket: 32
[  210.921766][ T5566] xt_CT: You must specify a L4 protocol and not use inversions on it
[  210.934408][ T5566] loop1: detected capacity change from 0 to 512
[  211.087010][ T5566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.368: bg 0: block 393: padding at end of block bitmap is not set
[  211.102421][ T5566] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  211.118904][ T5566] EXT4-fs (loop1): 2 truncates cleaned up
[  211.124660][ T5566] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  211.138271][ T4330] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  211.147502][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.156195][ T4330] usb 4-1: Product: syz
[  211.160864][ T4330] usb 4-1: Manufacturer: syz
[  211.165464][ T4330] usb 4-1: SerialNumber: syz
[  211.177031][ T4330] usb 4-1: config 0 descriptor??
[  211.301334][ T4330] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  211.340535][ T4330] dvb-usb: bulk message failed: -22 (2/0)
[  211.386507][ T4330] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  211.489220][ T4330] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  211.497242][ T4330] usb 4-1: media controller created
[  211.732615][ T4330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  211.865334][ T4330] usb 4-1: selecting invalid altsetting 7
[  211.871291][ T4330] cxusb: set interface failed
[  211.888179][ T4330] dvb-usb: bulk message failed: -22 (1/0)
[  212.006693][ T4330] DVB: Unable to find symbol lgdt330x_attach()
[  212.014019][ T4330] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  212.258285][ T4330] rc_core: IR keymap rc-dvico-portable not found
[  212.264664][ T4330] Registered IR keymap rc-empty
[  212.287389][ T4330] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  212.331828][ T4330] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8
[  212.373975][ T4330] dvb-usb: schedule remote query interval to 100 msecs.
[  212.400031][ T4330] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  212.523072][ T4330] dvb-usb: bulk message failed: -22 (1/0)
[  212.562761][ T4330] usb 4-1: USB disconnect, device number 6
[  212.657831][ T4330] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  214.857115][ T5610] loop2: detected capacity change from 0 to 2048
[  214.978332][ T5610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.061805][ T5613] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.074951][ T5613] loop4: detected capacity change from 0 to 512
[  215.202400][ T5613] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.382: bg 0: block 393: padding at end of block bitmap is not set
[  215.218980][ T5613] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  215.785056][ T5604] loop3: detected capacity change from 0 to 32768
[  215.850741][ T5604] (syz.3.379,5604,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  215.913842][ T5613] EXT4-fs (loop4): 2 truncates cleaned up
[  215.919630][ T5613] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  215.935272][ T5604] (syz.3.379,5604,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  216.025479][ T5604] JBD2: Ignoring recovery information on journal
[  216.247645][ T5604] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  216.463538][ T5604] 
[  216.465919][ T5604] ======================================================
[  216.472948][ T5604] WARNING: possible circular locking dependency detected
[  216.480005][ T5604] syzkaller #0 Not tainted
[  216.484441][ T5604] ------------------------------------------------------
[  216.491469][ T5604] syz.3.379/5604 is trying to acquire lock:
[  216.497364][ T5604] ffff88805c489538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770
[  216.506715][ T5604] 
[  216.506715][ T5604] but task is already holding lock:
[  216.514085][ T5604] ffff88805fc45ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  216.524373][ T5604] 
[  216.524373][ T5604] which lock already depends on the new lock.
[  216.524373][ T5604] 
[  216.534782][ T5604] 
[  216.534782][ T5604] the existing dependency chain (in reverse order) is:
[  216.543793][ T5604] 
[  216.543793][ T5604] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  216.552311][ T5604]        down_read+0x44/0x2e0
[  216.557013][ T5604]        ocfs2_start_trans+0x3a6/0x6f0
[  216.562478][ T5604]        ocfs2_mknod+0xf5a/0x2510
[  216.567504][ T5604]        ocfs2_create+0x192/0x420
[  216.572535][ T5604]        path_openat+0x11db/0x2fa0
[  216.577656][ T5604]        do_filp_open+0x1e2/0x410
[  216.582687][ T5604]        do_sys_openat2+0x150/0x4b0
[  216.587905][ T5604]        __x64_sys_openat+0x135/0x160
[  216.593288][ T5604]        do_syscall_64+0x4c/0xa0
[  216.598237][ T5604]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.604670][ T5604] 
[  216.604670][ T5604] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  216.612168][ T5604]        ocfs2_start_trans+0x2a7/0x6f0
[  216.617645][ T5604]        ocfs2_setattr+0xbc2/0x1ad0
[  216.622850][ T5604]        notify_change+0xbcd/0xee0
[  216.628145][ T5604]        do_truncate+0x1ac/0x240
[  216.633099][ T5604]        vfs_truncate+0x262/0x2f0
[  216.638136][ T5604]        do_sys_truncate+0xf2/0x1c0
[  216.643353][ T5604]        do_syscall_64+0x4c/0xa0
[  216.648300][ T5604]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.654732][ T5604] 
[  216.654732][ T5604] -> #1 (&oi->ip_alloc_sem){+.+.}-{3:3}:
[  216.662644][ T5604]        down_write+0x38/0x60
[  216.667338][ T5604]        ocfs2_try_remove_refcount_tree+0xb3/0x340
[  216.673847][ T5604]        ocfs2_truncate_file+0xe03/0x1460
[  216.679580][ T5604]        ocfs2_setattr+0x14dd/0x1ad0
[  216.684869][ T5604]        notify_change+0xbcd/0xee0
[  216.689989][ T5604]        do_truncate+0x1ac/0x240
[  216.694931][ T5604]        do_sys_ftruncate+0x31b/0x3d0
[  216.700317][ T5604]        do_syscall_64+0x4c/0xa0
[  216.705253][ T5604]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.711669][ T5604] 
[  216.711669][ T5604] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  216.719494][ T5604]        __lock_acquire+0x2c42/0x7d10
[  216.724873][ T5604]        lock_acquire+0x19e/0x400
[  216.729901][ T5604]        down_read+0x44/0x2e0
[  216.734576][ T5604]        ocfs2_init_acl+0x307/0x770
[  216.739771][ T5604]        ocfs2_mknod+0x15cb/0x2510
[  216.744877][ T5604]        ocfs2_create+0x192/0x420
[  216.749893][ T5604]        path_openat+0x11db/0x2fa0
[  216.755001][ T5604]        do_filp_open+0x1e2/0x410
[  216.760022][ T5604]        do_sys_openat2+0x150/0x4b0
[  216.765220][ T5604]        __x64_sys_openat+0x135/0x160
[  216.770590][ T5604]        do_syscall_64+0x4c/0xa0
[  216.775519][ T5604]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.781925][ T5604] 
[  216.781925][ T5604] other info that might help us debug this:
[  216.781925][ T5604] 
[  216.792160][ T5604] Chain exists of:
[  216.792160][ T5604]   &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier
[  216.792160][ T5604] 
[  216.806063][ T5604]  Possible unsafe locking scenario:
[  216.806063][ T5604] 
[  216.813504][ T5604]        CPU0                    CPU1
[  216.818862][ T5604]        ----                    ----
[  216.824230][ T5604]   lock(&journal->j_trans_barrier);
[  216.829510][ T5604]                                lock(sb_internal#2);
[  216.836285][ T5604]                                lock(&journal->j_trans_barrier);
[  216.844081][ T5604]   lock(&oi->ip_xattr_sem);
[  216.848673][ T5604] 
[  216.848673][ T5604]  *** DEADLOCK ***
[  216.848673][ T5604] 
[  216.856819][ T5604] 8 locks held by syz.3.379/5604:
[  216.861834][ T5604]  #0: ffff88807b23a460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  216.871059][ T5604]  #1: ffff88805c489808 (&type->i_mutex_dir_key#11){+.+.}-{3:3}, at: path_openat+0x803/0x2fa0
[  216.881322][ T5604]  #2: ffff88805fb06d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  216.894974][ T5604]  #3: ffff88805f8eed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  216.908626][ T5604]  #4: ffff88805fb009c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11c/0x25f0
[  216.922552][ T5604]  #5: ffff88807b23a650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf5a/0x2510
[  216.931772][ T5604]  #6: ffff88805fc45ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  216.942460][ T5604]  #7: ffff88807bf84990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x134c/0x15c0
[  216.952105][ T5604] 
[  216.952105][ T5604] stack backtrace:
[  216.957999][ T5604] CPU: 1 PID: 5604 Comm: syz.3.379 Not tainted syzkaller #0
[  216.965286][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  216.975342][ T5604] Call Trace:
[  216.978627][ T5604]  <TASK>
[  216.981563][ T5604]  dump_stack_lvl+0x188/0x250
[  216.986248][ T5604]  ? load_image+0x400/0x400
[  216.990758][ T5604]  ? show_regs_print_info+0x20/0x20
[  216.995958][ T5604]  ? print_circular_bug+0x12b/0x1a0
[  217.001151][ T5604]  check_noncircular+0x296/0x330
[  217.006093][ T5604]  ? add_chain_block+0x940/0x940
[  217.011033][ T5604]  ? _find_first_zero_bit+0xce/0xf0
[  217.016232][ T5604]  ? add_lock_to_list+0x18d/0x280
[  217.021252][ T5604]  __lock_acquire+0x2c42/0x7d10
[  217.026121][ T5604]  ? verify_lock_unused+0x140/0x140
[  217.031326][ T5604]  ? __lock_acquire+0x7d10/0x7d10
[  217.036345][ T5604]  ? do_raw_spin_lock+0x128/0x2f0
[  217.041370][ T5604]  lock_acquire+0x19e/0x400
[  217.045872][ T5604]  ? ocfs2_init_acl+0x307/0x770
[  217.050721][ T5604]  ? __might_sleep+0xf0/0xf0
[  217.055303][ T5604]  ? read_lock_is_recursive+0x10/0x10
[  217.060677][ T5604]  ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0
[  217.067259][ T5604]  ? rcu_lock_release+0x5/0x20
[  217.072035][ T5604]  down_read+0x44/0x2e0
[  217.076273][ T5604]  ? ocfs2_init_acl+0x307/0x770
[  217.081170][ T5604]  ocfs2_init_acl+0x307/0x770
[  217.085849][ T5604]  ? ocfs2_mknod_locked+0x155/0x290
[  217.091045][ T5604]  ? ocfs2_acl_chmod+0x330/0x330
[  217.095999][ T5604]  ? dquot_alloc_inode+0x82e/0x9c0
[  217.101112][ T5604]  ? ocfs2_block_signals+0x97/0xe0
[  217.106229][ T5604]  ? ocfs2_init_security_get+0x135/0x1a0
[  217.111869][ T5604]  ocfs2_mknod+0x15cb/0x2510
[  217.116465][ T5604]  ? ocfs2_mkdir+0x420/0x420
[  217.121157][ T5604]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  217.127072][ T5604]  ? __wake_up_common+0x5b/0x4e0
[  217.132040][ T5604]  ? ocfs2_inode_unlock+0xa1/0x140
[  217.137150][ T5604]  ? __lock_acquire+0x7d10/0x7d10
[  217.142188][ T5604]  ? __rwlock_init+0x140/0x140
[  217.146951][ T5604]  ? _raw_spin_unlock+0x24/0x40
[  217.151804][ T5604]  ? do_raw_spin_unlock+0x11d/0x230
[  217.157009][ T5604]  ? rcu_is_watching+0x11/0xa0
[  217.161775][ T5604]  ? ocfs2_lookup+0x490/0x950
[  217.166467][ T5604]  ocfs2_create+0x192/0x420
[  217.170978][ T5604]  ? ocfs2_update_inode_fsync_trans+0x200/0x200
[  217.177405][ T5604]  ? ocfs2_lookup+0x950/0x950
[  217.182085][ T5604]  ? inode_permission+0xef/0x480
[  217.187021][ T5604]  ? bpf_lsm_inode_create+0x5/0x10
[  217.192138][ T5604]  ? security_inode_create+0xb3/0x100
[  217.197509][ T5604]  ? ocfs2_lookup+0x950/0x950
[  217.202194][ T5604]  path_openat+0x11db/0x2fa0
[  217.206797][ T5604]  ? do_filp_open+0x410/0x410
[  217.211484][ T5604]  do_filp_open+0x1e2/0x410
[  217.215985][ T5604]  ? vfs_tmpfile+0x300/0x300
[  217.220581][ T5604]  ? _raw_spin_unlock+0x24/0x40
[  217.225515][ T5604]  ? alloc_fd+0x598/0x630
[  217.229848][ T5604]  do_sys_openat2+0x150/0x4b0
[  217.234526][ T5604]  ? __lock_acquire+0x7d10/0x7d10
[  217.239556][ T5604]  ? do_sys_open+0xe0/0xe0
[  217.243968][ T5604]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  217.249958][ T5604]  ? lock_chain_count+0x20/0x20
[  217.254817][ T5604]  ? vtime_user_exit+0x2c8/0x3e0
[  217.259767][ T5604]  __x64_sys_openat+0x135/0x160
[  217.264623][ T5604]  do_syscall_64+0x4c/0xa0
[  217.269051][ T5604]  ? clear_bhb_loop+0x30/0x80
[  217.273725][ T5604]  ? clear_bhb_loop+0x30/0x80
[  217.278408][ T5604]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  217.284321][ T5604] RIP: 0033:0x7fdaa0c61f79
[  217.288739][ T5604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.308364][ T5604] RSP: 002b:00007fda9eebc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  217.316788][ T5604] RAX: ffffffffffffffda RBX: 00007fdaa0edbfa0 RCX: 00007fdaa0c61f79
[  217.324758][ T5604] RDX: 00000000000c4042 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  217.332823][ T5604] RBP: 00007fdaa0cf87e0 R08: 0000000000000000 R09: 0000000000000000
[  217.340795][ T5604] R10: 000000000000017a R11: 0000000000000246 R12: 0000000000000000
[  217.348771][ T5604] R13: 00007fdaa0edc038 R14: 00007fdaa0edbfa0 R15: 00007ffc97974ec8
[  217.356751][ T5604]  </TASK>
[  217.361558][   T26] audit: type=1800 audit(1770796047.927:7): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.379" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  217.602748][ T4195] ocfs2: Unmounting device (7,3) on (node local)