last executing test programs:

2m47.291640824s ago: executing program 4 (id=610):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef)
splice(r0, 0x0, r2, 0x0, 0x80, 0x4)

2m45.817638789s ago: executing program 4 (id=619):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0)
r0 = socket(0x1000000010, 0x80802, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf250000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

2m45.427129071s ago: executing program 4 (id=626):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0xfffff4f0, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x66, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x7c0d4f4d, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xce7c, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0xa, 0xc4, 0x6, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x6, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0x6, 0xf, 0x1, 0x3, 0x101, 0xfff, 0x0, 0xee3, 0x3, 0x9, 0x1, 0x3, 0x1, 0x379a, 0x8, 0x6, 0xbe, 0x3, 0x5, 0xdd1, 0x7, 0x7, 0x7de, 0x0, 0x101, 0x8, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0xfffffff8, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x7, 0x9, 0x6, 0x0, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1000001, 0x2, 0x3ff, 0xfb5, 0xb, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x3ff, 0xfff, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x1, 0xfffffffe, 0xee, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x8001, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000200), 0x0, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

2m44.217263642s ago: executing program 4 (id=630):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$eJzs3c1vXFfdB/DvHY8dT9ombpq0eR5VqtVIgIhI7FgpmA0BIWSkCqGyYG0lTmNlkhbHRW6FqMPrtov+Ad1kg1ghsWITqbBgA7vukJeVkNh0g1kNujN3XjJ+m+bF45TPJ7pzzj3nnnN/93fvnbfImgD/s5bOp34/RZbOv75Rrm/dW2hu3Vu41a0nOZZkM6knqSUp/t1qtT5OriRFb5piqNzhw9XFNz75bOvTzlq9Wtrb1/YbN6TabnOoebPbNptkoiofwQPzXX3k+Ype5FeSnKtKGLvJJK3WZFo9P/nrs72esvNkp2zsNnr68AIFnpii87pZvhjXBttnkuPVjV6+D+i+8tbGEuQIjo243fA7CAAAAHjajPIZ+OR2trNRnDiEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOALYbP/+/9FtdS69dkU3d//n6raUtWPllc+3+b3n1QcAAAAAAAAAHCIXtnOdjZyorveKtr/5/9qe+V0+/GZvJM7WclaLmQjy1nPetYyn2RmYKKpjeX19bX5EUZe2nXkpQMCPVaVjcdz3AAAAAAAAADwBfOLLPX//x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6CIpnoFCnuDjTPpFZPMp1kqmzYTP7erT/N7o87AAAAADgEJ7eznY2c6K63ipxO8mL7O4DpvJPbWc9q1tPMSq61vxfofOqvbd1baG7dW7hVLjvn/fa/HlidPiCM9ozpfPew+57Ptrdo5HpW2y0XcjVvpZlrqbVHls5W8XRnHYrrbhlT8a3KiAm6VpXlkX9QlTu8P+Jk+xv+MqWx/xcsM+2MTPYyMlfFVmbj+e6Z2f0MDZ2dgwzvaT61XmCnh/Y0FPBD5fx4VZbH85u9cj4Ww5m4NHD1vbh/zpMv//H3P56r6kfnkEYzUZWt9mNjZyYWBjLx0iiZuNG8ffPG9Tvnn7ZM7DDXzsSZ3vpSvpcf5Xxm88OsZTU/zXLWs5LZfLddW65OfjFwe++RqSudYnK33S71E9fN+1R1hU5UrZ8nplfbY09kNT/IW7mWlbzW/ncp8/l6LudyFgfO8Jn9z3D7rq89cNf3XwFaz+2axnNfqSrl095vq3JXe3Y8KWVenx/I6+Bz7ky7b7Cln6VTB2epTMsDz41/2j+U+v9XlXIfvxw49+M3nIn5gUy8sF8muhfynebtm2s3lt8ebXenPhgY/usj9ZRaXi+nypOV7gnqXx1l3wvdvqF8lX2ne321HX1nen2dO3Vzzzt1qnoPt3OmS+2+l3btW2j3nR3o2+391sHv5gAYs+NfPT7V+Gfjb42PGr9q3Gi8Pv2dY9849vJUJv88+c363MSXai8Xf8hH+Xn/8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDw7rz73s3lZnNlbajSarXe36Or2TqZ7NH1cJXanmGUlfoBoe6oZPYfz5QDui2t9Lq6P2f2GIM/qPJ/zyajj6p+gSedlvrjzfMYK/9ptVpVS7HHNr/7y85EPTdS6qZGvzYOqExXV3jlSKSuqtQPeadjekICDs3F9VtvX7zz7ntfW721/ObKmyu3Fy9fXpxbvPzawsXrq82Vuc7juKMEnoT+i/64IwEAAAAAAAAAAABGNdrfA+SR/pxg3McIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPN2Wzqd+P0Xm5y7Mletb9xaa5dKt97esJ6klKX6WFB8nV9JZMjMwXbHXfj5cXXzjk8+2Pu3PVS75/tUDxo1ms1oym2SiU959XPNdrcp9FfsdQtE7wjJh57qJg3H7bwAAAP//EOj9JQ==")
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

2m43.993375805s ago: executing program 4 (id=633):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xd, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6)

2m43.478682084s ago: executing program 4 (id=638):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa)
r0 = socket$unix(0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e)

2m42.480095252s ago: executing program 32 (id=638):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa)
r0 = socket$unix(0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e)

2m39.381601781s ago: executing program 2 (id=659):
fanotify_init(0x4, 0x2)
io_submit(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x1a, 0x2, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xdddd1000, 0xb, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406a050c0300000000000109022400010000000009040000010300000009210600000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0)

2m36.861845877s ago: executing program 2 (id=671):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x300}, 0xe)

2m36.719195645s ago: executing program 2 (id=672):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYBLOB="009a01e963dfe7a3eb78b5f65ef23b62ab923203cc3f769f2d844ae0670e8c132465fd0c06a3307fa11f360c04da0ac1d22eac6ad1fc4a28a0edbbfd06f2380762d93be8a32be88fd74c06bf5291acd1fc5f"], 0x3, 0x534, &(0x7f0000000980)="$eJzs3e9u09YbwPHHpdWvvzChaZsQqgocyiYVqQQngaCIV55zkh5w7Mh2UPsKVTRFFSlMlElrX403bJO2i+DtLmKXsDtBu4RNtpOStvlTurZh1fcTgU/sJz7PsSI/dRLbAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHKrtl2wxDN+a0UN51bDoDFieW99t/ZNRvQrYiX/ZHZWrmSzrnz1YfHl5L8Fmc+ezctsMpmV3YuXP3/w5fRU7/UjEjoT2zu7z9c6nfarSScyIXXtmygwDaeulYkCVSmX7TvLtUjVjKej1SjWDeWG2omDUC26t1ShUikpnV8NWn696ni6N/P+7aJtl9XDfFM7YRT4dx7mI3fZeJ7x62lMsjiJuZ+8ER+ZWMXaaSi1sdlpl5RSF0clmQQVxo0kCSqOCyraxWKhUCwWyvcq9+7b9vShGfYBcihi8m9aTNYJ78GB45vq1n/xxIgvLVkRNfDhSlVCCaQxZHlXr/5/c0eP7Le//veq/JUPi+ckrf/XsmfXhtX/Ibmc3WNbdmRXnsuadKQjbXk18YzO9lEXLb4YiSQQIw1x0jmqO0dJRcpSFlueyLLUJBIlNTHiiZZIViWSWHT6jnIlFC2OxBJIKEoWxZVboqQgFalISZRoycuqBNISX+pSFSddy4Zsptu9NDTD/8teUGHEQPaCiiOCqP/4905+Jw4c09+9+j/czNllAwAAAAAAToOVfvpupYf5V9NWzXjannRaAAAAAADgBKXf/M8nk/Rr/qticfwPAAAAAMB5Y6Xn2FkikpPrWat3JhQfAgAAAAAAcE6k3/9fSya5pHVdLI7/AQAAAAA4b34ee439qPk/64+/JAxnrDfNla+tLSeJc7YuZK+7cHCNcW3OutRdSTopT3efuXre6l79cu8imO+zTyDebwzL47N0rmVZJ5CA/Co3spgb69l0vbckG22uZjyddwPvQUEc59JUrFfi719s/iDp8H/xG5cs2djstPNPX3bW01zeJGt5s9W9gOLQ6ygOyOV1er2F9JyLgVt+Jj0RI+vX+jHr1+4f/1T28qmPGP9bWchiFnLZNLd//LNJn4X8sNHnsiwKB0Y+cNQjs7iZxdxcvJlNBmRRHJpF0t1mp13sz+JY2+IIWZTGbYtSL4uZD91/TBYAMCkbY6qQdbjwH2MvN7S693o5ker+VhazmMW5dMc6PTdgj26P26PbR6nrI7L4febgPZCG1dik398OVNV3yQveDe038opWsgkvvN76Ti5v7+ze3txae9Z+1n5RLJbK9l3bvleUmXQY3Qm1BwAwwPh77IyNsO6OOar+Yu8nBXl5Ki+lI+uylJ5tkP7iYOBac30/Q1gac9Sa67vDy9KYo7pc341ejh5byuIO/TECAMB/08KYOnyU+r805rh7fy0ffXTcX8sBAMDp0OF7Kxf/ZIWhaT4pVCoFJ17WKgzcRyo01bpWxo916C47fl2rZhjEgRt4SeOxqepIRa1mMwhjVQtC1Qwis5Le+V11b/0e6Ybjx8aNmp52Iq3cwI8dN1ZVE7mq2frWM9GyDtMXR03tmppxndgEvoqCVujqvFKR1n2Bpqr92NRM0vRVMzQNJ1xVjwOv1dCqqiM3NM04yFbY68v4tSBspKvNT3pjAwDwidje2X2+1um0X51iY9JjBAAA+1GlAQAAAAAAAAAAAAAAAAAAAAD49J3F+X+Tb/yZ3UVAPpV8aNA4oYZ1Wmue9J4JwGn7JwAA///kP1AE")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x100)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x10)

2m36.569189734s ago: executing program 2 (id=674):
socket(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020)

2m35.334742145s ago: executing program 2 (id=675):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

2m34.090446297s ago: executing program 2 (id=681):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)

2m34.033651941s ago: executing program 33 (id=681):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)

2m33.103656254s ago: executing program 3 (id=687):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

2m32.82230963s ago: executing program 3 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x101, 0x121000)
recvmmsg(r2, 0x0, 0x0, 0x40000002, &(0x7f0000003540))
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'team0\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x0, {0x2, @local, 'xfrm0\x00'}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80202, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x2)

2m32.664618749s ago: executing program 3 (id=689):
bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7}}], 0x70}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40020}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

2m32.258631573s ago: executing program 3 (id=692):
socket(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020)

2m31.538321555s ago: executing program 3 (id=696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0xfffffff8, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, 0x0, 0x0, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2m31.012392355s ago: executing program 3 (id=698):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0xa0, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0xf, 0x5, 0x8, 0x4, 0x3, 0xa}, [@TCA_NETEM_DELAY_DIST={0xa, 0x2, "f529ae6ceea4"}, @TCA_NETEM_RATE={0x14, 0x6, {0xc, 0x10001, 0x7, 0xf12f}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x81}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x5}}, @TCA_NETEM_CORR={0x10, 0x1, {0x7, 0x8, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x9}}]}}}]}, 0xa0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfffb}, {0xfff1, 0x2}}}, 0x24}}, 0x0)

2m30.800435807s ago: executing program 34 (id=698):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0xa0, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0xf, 0x5, 0x8, 0x4, 0x3, 0xa}, [@TCA_NETEM_DELAY_DIST={0xa, 0x2, "f529ae6ceea4"}, @TCA_NETEM_RATE={0x14, 0x6, {0xc, 0x10001, 0x7, 0xf12f}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x81}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x5}}, @TCA_NETEM_CORR={0x10, 0x1, {0x7, 0x8, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x9}}]}}}]}, 0xa0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfffb}, {0xfff1, 0x2}}}, 0x24}}, 0x0)

2m22.306490019s ago: executing program 0 (id=738):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2m22.181659516s ago: executing program 0 (id=739):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000100)="$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")
truncate(&(0x7f00000000c0)='./file1\x00', 0x3)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x646, 0x20000800, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)

2m21.856372355s ago: executing program 0 (id=740):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x2800810, &(0x7f0000000140)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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")
mkdir(&(0x7f0000000280)='./file1\x00', 0xd4c2f1e82171a1a1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
creat(&(0x7f0000001940)='./bus\x00', 0x3f7579ace6857ee3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x32600)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x29)

2m21.496328206s ago: executing program 0 (id=742):
socket(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020)

2m19.906770727s ago: executing program 0 (id=746):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
unshare(0x26000400)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

2m17.716351094s ago: executing program 0 (id=752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xb, 0xb}, {0x10, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0xb, 0x1, 0xfffffff8, 0xffff, 0x3, 0x1, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24058081}, 0xc804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m17.195370534s ago: executing program 35 (id=752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xb, 0xb}, {0x10, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0xb, 0x1, 0xfffffff8, 0xffff, 0x3, 0x1, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24058081}, 0xc804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m50.090469361s ago: executing program 8 (id=754):
socket(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020)

1m49.411484561s ago: executing program 8 (id=900):
io_setup(0xc, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1004003, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x5}}]}, 0xa, 0xbd5, &(0x7f00000001c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9001)
r4 = fspick(r3, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)

1m48.502941484s ago: executing program 8 (id=910):
socket(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020)

1m48.332706073s ago: executing program 36 (id=910):
socket(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020)

8.922888834s ago: executing program 6 (id=1524):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q\x00'], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1, 0x9f8, 0x1, 0x6, 0x1}})
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000887000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x3000)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.848615947s ago: executing program 9 (id=1525):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10802, &(0x7f0000000000), 0xbe, 0x264, &(0x7f0000000700)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
utimes(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080))

7.77091203s ago: executing program 6 (id=1534):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x5, 0xb, 0xffffffff, 0x7fffffff, 0x0, "00120e0008f500ed1d350008000000008000"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xa)

7.539136124s ago: executing program 9 (id=1537):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1)

7.335064575s ago: executing program 6 (id=1540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x29, 0x0, &(0x7f0000000100))

6.322584184s ago: executing program 9 (id=1544):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
fallocate(r0, 0x20, 0x0, 0x8000)

5.620216895s ago: executing program 9 (id=1547):
syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[], 0x1, 0x216, &(0x7f0000019200)="$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")
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
symlink(&(0x7f0000001000)='./file2\x00', &(0x7f00000000c0)='./file0\x00')

5.619699145s ago: executing program 5 (id=1548):
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0x100000000000001, 0x8000000004007, 0xac, 0x800, 0x4, {0x0, 0x4, 0x6218, 0x40000000005, 0x4000000000085, 0xd614, 0x9, 0x7fffffff, 0xfffffffa, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x8}}}, 0xa0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000000)={@remote}, 0x14)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
read$FUSE(r1, 0x0, 0x0)

4.159299959s ago: executing program 9 (id=1551):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4800)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

4.127739351s ago: executing program 7 (id=1552):
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002840), 0x0, 0x0, 0x0)

4.054399485s ago: executing program 5 (id=1553):
socket$key(0xf, 0x3, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c00)={<r2=>0x0, "7178592b88d29739cbd3e995c1992f67"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001c00)={r2, 0x8})
keyctl$update(0x2, 0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[], 0xc2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@errors_remount}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$eJzs279vG1UcAPDv2UlKf5FQlR/9AQQKoghImrSUDixFIDGAhARDGUOSVqVuA02QaFVBQKiMqBITC2LnL2CCBQETEivsqFKEsrQwGZ19lziO7capE6fx5yOd+57vue/79d2z392LA+hZw+lDErEnIv6MiMFqdWWD4eo/txevTf67eG0yiXL57X+SSrtbi9cm86b563bnlb6IwhdJHGrQ7+yVqxcmSqXpy1l9dO7iB6OzV66+cP7ixLnpc9OXxk+dOnF87KWT4y92JM80r1sHP5k5fOD1d2+8OXnmxnu/fp/k+dfl0SHDrXY+XS53uLvu2ltTTvq6GAhtKVaHafRXxv9gFGP54A3Ga593NThgQ5XL5fJDzXfPl4FtLIluRwB0R/5Fn17/5tsmTT22hIXT1QugNO/b2Vbd0xeFrE1/3fVtJw1HxJn5/75Nt9iY+xAAACv8mM5/nm80/ytE7X2h+7M1lKGIeCAi9kXEyYjYHxEPRlTaPhwRj7TZf/0iyer5T+HmuhJbo4XTH8bL2drWyvlfPvuLoWJW21vJvz85e740fSx7T45G/460Ptaij59e/eOrZvtq53/plvafzwWzOG727Vj5mqmJuYm7ybnWwmcRB/sa5Z8srQQkEXEgIg6us4/zxTjcbN+d82+hA+tM5e8inqke//moyz+XtF6fHL0vStPHRvOzYrXffr/+VrP+7yr/DkiP/66G5/9S/kNJ7XrtbDv/+zfPpo/X//qy6TXNes//geSd5REaER9PzM1dHosYSN6oBl37/Hhdu/Hl9mn+R480Hv/7YvmdOBRROYkfjYjHIuLxLPYnIuLJiDjS4l345ZWn3l9//hsrzX+qreO/XBiI+mcaF4oXfv5hRadD7eSfHv8TldLR7Jm1fP6tJa52z2YAAAC4VxUiYk8khZGlcqEwMlL9G/79satQmpmde+7szEeXpqq/ERiK/kJ+p2uw5n7oWHZZn9fH6+rHs/vGXxd3VuojkzOlqW4nDz1ud5Pxn/q72O3ogA23eh3NyIde4fea0LuMf+hdxj/0rgbjf2c34gA2X6Pv/0+7EAew+erGv5v/0ENc/0PvWs/495kB20PLsTyweXEAm2p2Z9z5R/L3dmHH1ghjuxWisCXCUNigQrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj/wAAAP//bW3m1Q==")

3.905541844s ago: executing program 9 (id=1554):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000f00), 0x55db15c7, 0x8000)
r1 = syz_open_dev$loop(&(0x7f0000001040), 0x3, 0x8000)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500262cce440ba050700973e010203010902120001010000000904"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000011c0)={r1, 0x4, {0x0, 0x0, 0x0, 0x100000000, 0x2, 0x0, 0x2, 0x8, 0x0, "a1a32b16048fa56b546dcec2c35815cb27d99e34ee4178ca7091fe896e6501a1f27f17f546c045aec9d4b6c1586d2e44d0aa2f143583c415efe884bfffcacc17", "3731ec883b576af2e62b396cfcfb5d2978687e9ccd16670aa4c588a10843ab26c7b4f608bf43286e3c24dd049436f3c41578cea30054d666b7707f068ab71794", "eff612d1bb01f1000000000000004500000000000000030200", [0xc1a, 0x5]}})
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

3.842685267s ago: executing program 5 (id=1556):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x81)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}}], 0x1, 0x45)

3.707291365s ago: executing program 1 (id=1557):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
read$FUSE(r1, &(0x7f0000001880)={0x2020}, 0x2020)

3.707084945s ago: executing program 7 (id=1558):
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0)

3.61985415s ago: executing program 1 (id=1559):
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x7, 0xfffffffffffffffc}}, 0x400100)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@noauto_da_alloc}, {@noinit_itable}, {@nojournal_checksum}, {@grpquota}, {@errors_remount}, {@norecovery}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x62801, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000001c0)={0x19})
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0xa2b, &(0x7f0000001740)="$eJzs3c1vHGleB/BvdezE8Y6G7GwYhmh20kmUWe9scNoOkyiaA5vY7cSLX5DtSBMB2ow2CYpiMWgHpNkRh6yEODFihRAScEFz5DTScmAvKDc4cuKABPkP0IgDhANqVNXtpG33S+w4dsh+Pq1Kvf2et67qetLt7nrC/2etVquadrl+42/3s7K8fK7OPvriy8/L6ccPcjiH8n7x98lYknoy8r/VuTI6M7uyvDgko/vJrSQPkyLJkbTnfRzdtHYrxZ/mtafrD1P8dd7qkWxsh41jqBY/1w76/AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJfSzGyjMVVkYX7pxof1/qohwAfs38juZ9Wo38XPhhVbJEU5ZWxsY6jvt44/3f1m+c/pvN1ee7s98vdYPvvam8c++MZIbSP9gArti09+9Nn9j9bX7/zw6abRnoEjnXaVy0f2rXrP7vDukl1rLs2vLs8vXrnWrM+vLtcvX7zYOH99brU+N5/m6s3VteZifWaleWVteaU+MfPt+tTlyxfqzcmbyzeWrs1OLjQ3Nl76lelG42L9e5O/0byysrq8dP57k6sz1+cXFuaXrlUx5e4y5lJ5Iv76/Fp9rXllsV6/e2/9zoVhlSyDpnruKTYHTQ/LaboxPT01NT09dfH9y+9fajRGtm1obJFtEQd/0nJw/m5Pr93wnGqd/j8Lmc9SbuTD1Hs+ZjKblSxnsc/+jo3+/+z55sByu/v/jV7+rae7T6Tq/99pr71T9v8bXWh3/9+nLsMfrVY7s92m33h8kh/ls9zPR1nPeu7kh8+d47bH/+w8zWivrfXnb+32x7U0s5T5rGY581nMlWpLvbOlnsu5mItp5Pu5nrmspp65zGchzazmZlazlmZ1Rs1kJc1cyVqWs5J6JjKTb6eeqVzO5VxIPc1M5maWcyNLuZbZXKlyuZt71fN+YUAdnwRNPUvQ9ICg6Uayh/1/62X8nyAv2t5ewOE5tDr9/+G+Aa2NpYmZfasVAAAAsJd++Z/y+vE3/vHfktF8s/pcfm5+odk46GoBAAAAe6j6ut7b5Wy0XPpmCu//AQAA4FVTVL+xK5KM52R7qf1LqEPxIQAAAAC8Iqq//79TzsbLpZMpntwJ5dZB1w0AAADYG8PvsT80oji3cfvf+u32/HYnonOf3/G5+YXm5MzywgdTebe6y0D1S4NtuR1KitHq5wfv5VQ76tR4ez6+OcexMmpq8oOpvJfTnYZMnClnZyZ6RE63I7/VjvzWgMgLZSQAvOpOD+iPB/X//9VqK/v/93KuHXHuxMjhJCMnevSsDT0rALwsNo+x07v/HxJR/OrT9/+jnWw39f9v5O5/t79SMJkf5OOs53bOVb82qL5xsCnX3/pJ5zODJ19DaKQY8mnARuw/X6rl3JDPA8a7Bno5N+QTgXZsfju58OIPBADso9N9+uGd9P/nut7/Z/v7/ydDC93xk0IAeCk8GcH+BS4cdBsBgM300gAAAAAAAAAAAAAAAAAAAAAAAAAAALD39vRu/2O7TP7vnXH9XuwwBNsWjnaeg93n82dJ9q/OxR6XVduDfFpJ9ut47d9CjiW7flZ7nsaHkxx8u4YujHReEvc/Wj+oKxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7qUgO9dpeS44kaSQ5v/+1enEeHHQF9t+vda8Uj/M4n+b1g6sOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCrqXP//1ra86+1N2WklpxNcivJbx50HffS44OuwB45ust0Xff/L495WkVG2oc9xejM7MryYnn4q7Efao+++PLzcupKfuRZy6kCa1sGl+iUsDX2b17bWPp6lWp89s4n93//49+rz15NLYdzdW1uYXbx2sp3nyZ5s/hpUk972rBR3z88+w8/6dHyn5Yt7W1ruXPVkzO7vdxf6pV6cLmD3Fu/M12WtNb8cO0Pfvfep1273sip5MxEMrG5pN8ppz4lncrooNKKr4o/Ll7PX+RWdfzLZ6NoFeUh+oWq/Ufv3lu/M/mDj9dv96nTsZxMcjsZG1ynH3ftPlldT3qqzrraaFlqowoq/zk+pI0DdeU41acNX69OmfFOGw73bUO3ev82VLqe91qv/e0aXehTo2/k3eTMliSPWkeS/jV6d/CR7q34qvjX4nr+JX/UNf5HrTz+Z9P/1bk5iyqy60zpG1lrR1Ytn+7e8f2tkf/xl89U+57D1LBTf7LpxVvruv53jtUeXY9axcDrUVeJg18XQ0rcclYMeF1UPdLxLSk6V59+aTr1PN6O6lPPX8x3kpETg66K23rr7wy5ojxJ/93eu3f7+v+rYiL/mQfG/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5+RXKo1/ZacjbJsY31etLaQbZH+u2ojRc7reKeevDkn1dCbacJisd5nE/z+oupDgAAAAAAAAD77ersoy++/LyciqOdTZ2/79eTkSTHij8/mtmV5cUhGY0mt5I8LJfHeuwf8Of+Ml1ee7r+sFx7a6ctAQCe1f8FAAD//7oCZu0=")
setreuid(0xffffffffffffffff, 0xee01)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})

3.612886541s ago: executing program 5 (id=1560):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r1=>0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef)
splice(r2, 0x0, r4, 0x0, 0x80, 0x4)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3.496579007s ago: executing program 7 (id=1561):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r0, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)

3.335026217s ago: executing program 1 (id=1562):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_create1(0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x18, 0xa01, 0x0, 0x200000, {0x4}}, 0x14}}, 0x0)

3.334563327s ago: executing program 6 (id=1563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000228aeea00fbc033117a070000000000000600000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

3.159662077s ago: executing program 7 (id=1564):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fa32a328bb46f9b4ad66621684"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000)

3.083430801s ago: executing program 6 (id=1565):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4800)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

2.465729847s ago: executing program 6 (id=1566):
mmap(&(0x7f0000aa7000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0xc2b7d000)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

2.407051001s ago: executing program 5 (id=1567):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="b19ccccf84c4b5e3e168a0a28e143cecc8", 0x11)

2.333106794s ago: executing program 1 (id=1568):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@getsa={0xcc, 0x12, 0x429, 0x70bd26, 0x25dfdbfc, {@in=@remote, 0x4d2, 0xa, 0x33}, [@extra_flags={0x8, 0x18, 0x1}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@private=0xa010101, 0xa, 0xff, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x0, 0xa}}, @mark={0xc, 0x15, {0x35075d, 0x4}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd29, 0x70bd26, 0x70bd2d, 0xfffffbff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x804}, 0x0)

2.274666368s ago: executing program 7 (id=1569):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r4=>0x0}, &(0x7f0000000100)=0xc)
wait4(r4, 0x0, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
ptrace$ARCH_GET_GS(0x1e, r4, 0x0, 0x1004)
sendto$inet(r3, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002)

2.138940596s ago: executing program 1 (id=1570):
mknod$loop(0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0xffffffff, 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x48)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000000)={0x0, 0x0})

20.307419ms ago: executing program 7 (id=1571):
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0)

19.998378ms ago: executing program 5 (id=1572):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
timer_create(0x3, 0x0, &(0x7f0000044000)=<r2=>0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004)
timer_delete(r2)
dup2(r0, r1)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)

0s ago: executing program 1 (id=1573):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
shutdown(r4, 0x2)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
[   75.275132][ T4171] cgroup: Unknown subsys name 'net'
[   75.436462][ T4171] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   76.756766][ T4171] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   78.214710][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   78.241553][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   78.265665][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   78.323080][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   78.371862][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   78.439208][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.449607][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.459333][ T4185] device bridge_slave_0 entered promiscuous mode
[   78.477351][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.485058][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.495575][ T4185] device bridge_slave_1 entered promiscuous mode
[   78.515504][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.525542][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.536154][ T4186] device bridge_slave_0 entered promiscuous mode
[   78.577581][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.588650][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.597990][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.607111][ T4186] device bridge_slave_1 entered promiscuous mode
[   78.615720][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.623445][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.632924][ T4184] device bridge_slave_0 entered promiscuous mode
[   78.651884][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.668853][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.677901][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.686432][ T4184] device bridge_slave_1 entered promiscuous mode
[   78.696525][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.706170][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.717590][ T4190] device bridge_slave_0 entered promiscuous mode
[   78.744846][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.767724][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.779730][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.791796][ T4190] device bridge_slave_1 entered promiscuous mode
[   78.828362][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.858772][ T4185] team0: Port device team_slave_0 added
[   78.869168][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.885840][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.894152][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.903402][ T4187] device bridge_slave_0 entered promiscuous mode
[   78.914193][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.926824][ T4185] team0: Port device team_slave_1 added
[   78.936441][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.952758][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.961838][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.972929][ T4187] device bridge_slave_1 entered promiscuous mode
[   78.991376][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.027462][ T4186] team0: Port device team_slave_0 added
[   79.049635][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.067850][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.076570][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.113050][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.128683][ T4186] team0: Port device team_slave_1 added
[   79.144822][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.160273][ T4190] team0: Port device team_slave_0 added
[   79.168405][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.178804][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.214609][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.239517][ T4184] team0: Port device team_slave_0 added
[   79.250172][ T4184] team0: Port device team_slave_1 added
[   79.268260][ T4190] team0: Port device team_slave_1 added
[   79.305076][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.314493][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.353729][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.391419][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.402008][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.441690][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.464294][ T4187] team0: Port device team_slave_0 added
[   79.474014][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.483266][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.522314][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.540031][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.549709][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.583823][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.599643][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.609423][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.653121][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.667683][ T4187] team0: Port device team_slave_1 added
[   79.693343][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.705171][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.746142][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.779060][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.788109][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.825854][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.851393][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.864915][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.914835][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.932495][ T4173] Bluetooth: hci4: command 0x0409 tx timeout
[   79.947292][ T4173] Bluetooth: hci3: command 0x0409 tx timeout
[   79.958253][ T4173] Bluetooth: hci2: command 0x0409 tx timeout
[   79.982249][ T4173] Bluetooth: hci0: command 0x0409 tx timeout
[   80.005280][ T4173] Bluetooth: hci1: command 0x0409 tx timeout
[   80.021552][ T4185] device hsr_slave_0 entered promiscuous mode
[   80.042811][ T4185] device hsr_slave_1 entered promiscuous mode
[   80.123602][ T4186] device hsr_slave_0 entered promiscuous mode
[   80.135417][ T4186] device hsr_slave_1 entered promiscuous mode
[   80.147344][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.163108][ T4186] Cannot create hsr debugfs directory
[   80.188601][ T4184] device hsr_slave_0 entered promiscuous mode
[   80.202225][ T4184] device hsr_slave_1 entered promiscuous mode
[   80.225658][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.237183][ T4184] Cannot create hsr debugfs directory
[   80.289527][ T4190] device hsr_slave_0 entered promiscuous mode
[   80.300953][ T4190] device hsr_slave_1 entered promiscuous mode
[   80.312201][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.325841][ T4190] Cannot create hsr debugfs directory
[   80.338815][ T4187] device hsr_slave_0 entered promiscuous mode
[   80.351306][ T4187] device hsr_slave_1 entered promiscuous mode
[   80.365522][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.381050][ T4187] Cannot create hsr debugfs directory
[   80.849388][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.870204][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.889847][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.904296][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.960877][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.974331][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.004147][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.033952][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.114510][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.131552][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.144165][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.178162][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.192735][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.256525][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.275566][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.295523][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   81.317142][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.336956][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.372205][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.387145][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.408294][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.422148][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.440330][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.471623][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.489973][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.531623][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.547388][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.564943][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.576413][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.598384][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.657941][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.700123][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.716483][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.741394][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.763120][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.777614][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.793524][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.809875][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.828126][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.874747][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.891815][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.905759][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.919425][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.933230][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.944935][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.968443][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   81.993028][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.005794][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.012363][ T4234] Bluetooth: hci0: command 0x041b tx timeout
[   82.019939][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.033122][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[   82.038198][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.044908][ T4234] Bluetooth: hci3: command 0x041b tx timeout
[   82.060315][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.062385][ T4234] Bluetooth: hci4: command 0x041b tx timeout
[   82.073843][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.091661][ T4234] Bluetooth: hci1: command 0x041b tx timeout
[   82.109496][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.126751][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.151193][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.163970][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.178432][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.190381][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.215404][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.263440][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.282901][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.304199][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.327640][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   82.363514][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   82.373366][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.386050][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.399782][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.415738][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.426197][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.436656][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.448067][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.465381][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.482170][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.501505][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.511872][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.524995][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.546966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.559546][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.569820][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.582821][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.626778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.639360][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.655385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.667848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.681871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.693857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.705326][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.715793][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.727758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.739758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.755559][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.767575][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.778890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.803668][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.819802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.836951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.854665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.868698][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.888926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.927996][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.941524][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.958537][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.975212][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.991186][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.009169][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.029069][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.042779][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.069680][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.088156][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.126986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.140311][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.153775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.169108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.183954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.195742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.208903][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.244920][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.259129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.272341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.289048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.301796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.315464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.329413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.349930][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.372604][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.394320][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.427870][ T4184] device veth0_vlan entered promiscuous mode
[   83.437441][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.448198][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.459057][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.472364][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.485120][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.497793][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.542078][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   83.571853][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.599265][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.611095][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.623522][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.638271][ T4184] device veth1_vlan entered promiscuous mode
[   83.653174][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.683871][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.712599][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.724906][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.734554][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.747791][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.767816][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.782213][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.791529][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.802125][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.839110][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.853638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.868978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.882729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.893766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.905645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.955037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.972532][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.988921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.013074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.031936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.061085][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.075471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.087478][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.100470][ T4281] Bluetooth: hci4: command 0x040f tx timeout
[   84.110101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.110364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.126350][ T4281] Bluetooth: hci3: command 0x040f tx timeout
[   84.141075][ T4185] device veth0_vlan entered promiscuous mode
[   84.151253][ T4281] Bluetooth: hci2: command 0x040f tx timeout
[   84.166866][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[   84.183584][ T4234] Bluetooth: hci1: command 0x040f tx timeout
[   84.195116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.207665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.218878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.235184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.247348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.261978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.292490][ T4185] device veth1_vlan entered promiscuous mode
[   84.309122][ T4184] device veth0_macvtap entered promiscuous mode
[   84.342310][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.354490][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.367987][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.380559][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.394487][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.415157][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.432794][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.449679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.472012][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.484629][ T4184] device veth1_macvtap entered promiscuous mode
[   84.508626][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.594932][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.618049][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.643647][ T4185] device veth0_macvtap entered promiscuous mode
[   84.673993][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.692853][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.720303][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.748809][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.782834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.816306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.857123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.875070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.891610][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.906755][ T4185] device veth1_macvtap entered promiscuous mode
[   84.932116][ T4190] device veth0_vlan entered promiscuous mode
[   84.941426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.954402][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.974474][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.993753][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.012743][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.031469][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.049400][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.172392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.188835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.236133][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.294476][ T4190] device veth1_vlan entered promiscuous mode
[   85.314704][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.331483][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.355638][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.381355][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.395805][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.417225][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.437517][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.458785][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.546700][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.559880][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.576321][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.617066][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.637159][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.651216][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.662404][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.722031][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.737905][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.749851][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.762983][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.776824][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.787544][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.796399][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.805850][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.817048][ T4187] device veth0_vlan entered promiscuous mode
[   85.846179][ T4190] device veth0_macvtap entered promiscuous mode
[   85.857338][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.867752][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.889038][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.903989][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.918570][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.930830][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.947934][ T4186] device veth0_vlan entered promiscuous mode
[   85.970194][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.983986][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.999699][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.025946][ T4190] device veth1_macvtap entered promiscuous mode
[   86.067167][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.083416][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.102500][ T4187] device veth1_vlan entered promiscuous mode
[   86.116309][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.132021][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.133044][ T4186] device veth1_vlan entered promiscuous mode
[   86.165947][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.171477][ T1111] Bluetooth: hci2: command 0x0419 tx timeout
[   86.198564][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.199540][ T1111] Bluetooth: hci3: command 0x0419 tx timeout
[   86.212312][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.220520][ T1111] Bluetooth: hci4: command 0x0419 tx timeout
[   86.254176][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[   86.301733][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[   86.333224][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.377035][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.416267][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.457654][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.485921][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.535103][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.562816][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.574763][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.587221][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.638210][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.663233][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.679566][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.698805][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.715651][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.821116][ T4187] device veth0_macvtap entered promiscuous mode
[   86.849479][ T4187] device veth1_macvtap entered promiscuous mode
[   86.884045][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.899431][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.915039][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.928880][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.941473][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.956030][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.978585][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.994805][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.008426][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.021858][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.034270][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.049083][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.063455][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.077945][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.089704][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.110085][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.120632][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.134420][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.145764][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.176900][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.190170][ T4186] device veth0_macvtap entered promiscuous mode
[   87.200030][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.223016][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.232910][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.242782][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.251816][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.261529][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.276791][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.290161][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.307090][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.318805][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.330924][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.342855][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.363748][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.374121][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.393580][ T4186] device veth1_macvtap entered promiscuous mode
[   87.414294][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.414312][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.433462][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.443655][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.454043][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.478853][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.568689][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.584811][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.660058][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.672788][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.683692][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.695557][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.706759][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.724227][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.735259][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.738159][ T4308] binder_alloc: 4307: binder_alloc_buf size 16384 failed, no address space
[   87.746454][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.747987][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.763698][ T4308] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[   87.780844][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.802252][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.822907][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.843326][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.860092][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.862670][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.885509][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.898947][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.902626][ T4312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.917422][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.950474][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.978454][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.998942][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.020808][ T4316] Zero length message leads to an empty skb
[   88.050397][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.070805][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.090436][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.116029][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.155861][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.181587][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.195724][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.210294][ T4310] device bridge_slave_0 left promiscuous mode
[   88.235445][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.279708][ T4310] device bridge_slave_1 left promiscuous mode
[   88.288712][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.307986][ T4310] bond0: (slave bond_slave_0): Releasing backup interface
[   88.346264][ T4310] bond0: (slave bond_slave_1): Releasing backup interface
[   88.373231][ T4324] block device autoloading is deprecated and will be removed.
[   88.417254][ T4310] team0: Port device team_slave_0 removed
[   88.455862][ T4310] team0: Port device team_slave_1 removed
[   88.465107][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.480148][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.499193][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.509568][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.528460][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.538170][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.551289][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.586149][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.597120][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.608865][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.624050][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.672139][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.690975][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.739578][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.873347][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.896348][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.948474][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.056756][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.096704][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.195815][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.274521][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.348907][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.399340][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.867095][ T4359] device syzkaller0 entered promiscuous mode
[   90.617379][ T4391] binder: BINDER_SET_CONTEXT_MGR already set
[   90.670887][ T4391] binder: 4390:4391 ioctl 4018620d 200000004a80 returned -16
[   90.807831][ T4251] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.101185][ T4251] usb 1-1: Using ep0 maxpacket: 32
[   91.236387][ T4251] usb 1-1: config 0 has no interfaces?
[   91.389176][ T4426] process 'syz.3.37' launched './file0' with NULL argv: empty string added
[   91.438543][ T4251] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   91.470168][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.521163][ T4251] usb 1-1: Product: syz
[   91.535447][ T4251] usb 1-1: Manufacturer: syz
[   91.542770][ T4251] usb 1-1: SerialNumber: syz
[   91.584562][ T4251] usb 1-1: config 0 descriptor??
[   91.761683][ T4436] binder: BINDER_SET_CONTEXT_MGR already set
[   91.782101][ T4436] binder: 4434:4436 ioctl 4018620d 200000004a80 returned -16
[   92.698705][ T4463] netlink: 'syz.4.46': attribute type 1 has an invalid length.
[   92.716237][ T4458] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.48'.
[   92.859261][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'.
[   92.938587][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'.
[   92.986040][   T21] cfg80211: failed to load regulatory.db
[   93.598049][ T4484] 9pnet_virtio: no channels available for device syz
[   93.984784][    T7] usb 1-1: USB disconnect, device number 2
[   94.419732][ T4490] kvm: pic: non byte read
[   94.461563][ T4490] kvm: pic: non byte read
[   94.502796][ T4490] kvm: pic: non byte read
[   94.527103][ T4490] kvm: pic: non byte read
[   94.575180][ T4490] kvm: pic: non byte read
[   94.621891][   T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   94.658395][ T4490] kvm: pic: non byte read
[   94.699807][ T4490] kvm: pic: non byte read
[   94.768956][ T4490] kvm: pic: non byte read
[   94.789669][ T4490] kvm: pic: non byte read
[   94.798166][ T4490] kvm: pic: non byte read
[   94.940509][ T4501] Bluetooth: hci0: service_discovery: too big uuid_count value 63764
[   95.000995][   T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   95.048491][   T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.109644][   T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   95.164296][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.511152][   T23] usb 2-1: usb_control_msg returned -32
[   95.532501][   T23] usbtmc 2-1:16.0: can't read capabilities
[   96.069334][ T4522] fuse: Bad value for 'group_id'
[   96.293159][   T23] usb 2-1: USB disconnect, device number 2
[   96.376606][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.393645][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.062085][ T4540] tmpfs: Unknown parameter 'usrquota'
[   97.116305][ T4542] binder: BINDER_SET_CONTEXT_MGR already set
[   97.116650][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.124064][ T4542] binder: 4541:4542 ioctl 4018620d 200000004a80 returned -16
[   97.186803][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.571405][ T4251] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.786423][ T4511] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.811649][ T4511] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.824743][ T4511] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.840095][ T4511] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.986893][ T4251] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   98.014637][ T4251] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.043509][ T4251] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.060614][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.219530][ T4251] usb 3-1: config 0 descriptor??
[   98.285959][ T4251] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   98.380774][ T4556] tipc: Started in network mode
[   98.390204][ T4556] tipc: Node identity d674a6a02398, cluster identity 4711
[   98.408477][ T4556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.430249][ T4558] netlink: 'syz.4.80': attribute type 1 has an invalid length.
[   98.465901][ T4561] device syzkaller0 entered promiscuous mode
[   98.579859][ T4556] tipc: Resetting bearer <eth:syzkaller0>
[   98.636973][ T4566] fuse: Bad value for 'group_id'
[   98.652053][ T4555] tipc: Resetting bearer <eth:syzkaller0>
[   98.684086][ T4555] tipc: Disabling bearer <eth:syzkaller0>
[   98.858719][ T4575] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET)
[   98.959101][ T4576] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   98.970478][ T4576] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  100.763539][ T1108] usb 3-1: USB disconnect, device number 2
[  101.181212][ T4235] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  101.508108][ T4235] usb 2-1: Using ep0 maxpacket: 8
[  101.560592][ T4583] Set syz1 is full, maxelem 65536 reached
[  101.646187][ T4235] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  101.709180][ T4235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.737137][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  101.772879][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  101.794985][ T4235] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.817956][ T4235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  101.840878][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.073854][ T4632] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  102.161311][ T4632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'.
[  102.166346][ T4235] usb 2-1: usb_control_msg returned -32
[  102.185010][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.198274][ T4235] usbtmc 2-1:16.0: can't read capabilities
[  102.611163][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.629882][ T1108] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  102.641316][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.677183][ T1108] usb 5-1: config 0 descriptor??
[  102.896974][ T4648] netlink: 'syz.3.108': attribute type 1 has an invalid length.
[  102.935011][ T4648] device bond1 entered promiscuous mode
[  102.945474][ T4648] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.051119][ T1108] usbhid 5-1:0.0: can't add hid device: -71
[  103.059970][ T1108] usbhid: probe of 5-1:0.0 failed with error -71
[  103.115282][ T1108] usb 5-1: USB disconnect, device number 2
[  103.522765][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  103.710821][ T4251] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  103.789585][ T4299] usb 2-1: USB disconnect, device number 3
[  103.852279][ T1108] usb 5-1: Using ep0 maxpacket: 32
[  103.995993][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.021232][ T1108] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  104.041828][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.064961][ T1108] usb 5-1: config 0 descriptor??
[  104.115799][ T1108] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  104.134875][ T1108] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  104.149128][ T4251] usb 4-1: config 0 has no interfaces?
[  104.157937][ T4251] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  104.181450][ T4251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.223422][ T4251] usb 4-1: config 0 descriptor??
[  104.467935][ T4234] usb 4-1: USB disconnect, device number 2
[  104.495146][ T4251] usb 5-1: USB disconnect, device number 3
[  104.536270][ T4251] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  105.214219][ T4726] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  105.637533][ T4738] device syzkaller0 entered promiscuous mode
[  106.546468][ T4728] ODEBUG: Out of memory. ODEBUG disabled
[  106.610085][ T4758] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  106.749861][ T4760] netlink: 'syz.4.134': attribute type 1 has an invalid length.
[  106.800886][ T4762] device syzkaller0 entered promiscuous mode
[  107.369536][ T4728] Set syz1 is full, maxelem 65536 reached
[  107.553684][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'.
[  107.782807][ T4792] device syzkaller0 entered promiscuous mode
[  107.991090][ T4299] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  108.236442][ T4803] device syzkaller0 entered promiscuous mode
[  108.297351][ T4299] usb 1-1: Using ep0 maxpacket: 16
[  108.431300][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.451128][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.479680][ T4299] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  108.545319][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.589459][ T4299] usb 1-1: config 0 descriptor??
[  108.632215][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  108.632957][ T4811] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  108.756333][ T4813] tipc: Started in network mode
[  108.766129][ T4813] tipc: Node identity 52453097a821, cluster identity 4711
[  108.776216][ T4813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.792763][ T4813] device syzkaller0 entered promiscuous mode
[  108.814149][ T4813] tipc: Resetting bearer <eth:syzkaller0>
[  108.823800][ T4812] tipc: Resetting bearer <eth:syzkaller0>
[  108.839487][ T4812] tipc: Disabling bearer <eth:syzkaller0>
[  109.341015][ T4299] usbhid 1-1:0.0: can't add hid device: -71
[  109.348511][ T4299] usbhid: probe of 1-1:0.0 failed with error -71
[  109.360204][ T4299] usb 1-1: USB disconnect, device number 3
[  109.740023][   T26] audit: type=1326 audit(1769447082.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.3.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6de7c4ceb9 code=0x0
[  109.932639][ T4832] input: syz1 as /devices/virtual/input/input5
[  109.957278][ T4833] device syzkaller0 entered promiscuous mode
[  110.957753][ T4849] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  110.976527][ T4851] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  111.161131][ T4856] device syzkaller0 entered promiscuous mode
[  111.410441][ T4865] binder: 4864:4865 ioctl 4018620d 0 returned -22
[  111.504914][ T4869] netlink: 'syz.4.171': attribute type 4 has an invalid length.
[  111.915837][ T4880] device syzkaller0 entered promiscuous mode
[  112.772553][ T4908] fuse: Bad value for 'fd'
[  112.851154][ T4908] capability: warning: `syz.3.187' uses 32-bit capabilities (legacy support in use)
[  112.954082][ T4913] picdev_read: 77 callbacks suppressed
[  112.954101][ T4913] kvm: pic: non byte read
[  112.972944][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  113.049702][ T4913] kvm: pic: non byte read
[  113.084534][   T26] audit: type=1326 audit(1769447085.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24fbb27eb9 code=0x0
[  113.151591][ T4913] kvm: pic: single mode not supported
[  113.151857][ T4913] kvm: pic: level sensitive irq not supported
[  113.167120][ T4919] tipc: Started in network mode
[  113.167630][ T4913] kvm: pic: non byte read
[  113.260247][ T4913] kvm: pic: non byte read
[  113.261309][ T4919] tipc: Node identity 9a494039cb76, cluster identity 4711
[  113.289058][ T4913] kvm: pic: non byte read
[  113.316354][ T4913] kvm: pic: single mode not supported
[  113.316546][ T4913] kvm: pic: non byte read
[  113.379350][ T4919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.418997][ T4922] device syzkaller0 entered promiscuous mode
[  113.431457][ T4913] kvm: pic: level sensitive irq not supported
[  113.431540][ T4913] kvm: pic: non byte read
[  113.473881][ T4913] kvm: pic: non byte read
[  113.528866][ T4913] kvm: pic: non byte read
[  113.867964][ T4935] tipc: Resetting bearer <eth:syzkaller0>
[  113.908702][ T4944] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  113.964776][ T4935] tipc: Disabling bearer <eth:syzkaller0>
[  114.660202][ T4981] fuse: Bad value for 'fd'
[  114.774373][ T4983] tipc: Started in network mode
[  114.828095][ T4983] tipc: Node identity 26c1cc6aac8f, cluster identity 4711
[  114.876742][ T4983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.915854][ T4987] device syzkaller0 entered promiscuous mode
[  114.975367][ T4990] device syzkaller0 entered promiscuous mode
[  115.141025][ T4983] tipc: Resetting bearer <eth:syzkaller0>
[  115.359428][ T4982] tipc: Resetting bearer <eth:syzkaller0>
[  115.421991][ T4982] tipc: Disabling bearer <eth:syzkaller0>
[  115.521008][ T4998] device syzkaller0 entered promiscuous mode
[  115.725737][ T5006] device syzkaller0 entered promiscuous mode
[  115.939499][   T26] audit: type=1326 audit(1769447088.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ce640ceb9 code=0x0
[  116.200882][ T5026] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  116.210916][ T5028] fuse: Invalid rootmode
[  116.636119][ T5039] netlink: 'syz.1.229': attribute type 1 has an invalid length.
[  116.726752][ T5039] device bond1 entered promiscuous mode
[  116.821614][ T5039] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.901279][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'.
[  116.960886][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'.
[  117.123716][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'.
[  117.159724][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'.
[  117.366632][   T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  117.709543][ T5082] device syzkaller0 entered promiscuous mode
[  117.741418][   T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.799228][   T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  117.852927][ T5088] fuse: Unknown parameter 'group_i00000000000000000000'
[  117.869837][   T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  117.886930][   T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.914929][ T5089] device syzkaller0 entered promiscuous mode
[  117.934821][   T21] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  118.004499][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.114809][ T5097] netlink: 'syz.1.248': attribute type 1 has an invalid length.
[  118.122201][   T21] hub 1-1:1.0: bad descriptor, ignoring hub
[  118.145763][   T21] hub: probe of 1-1:1.0 failed with error -5
[  118.181550][   T21] cdc_wdm 1-1:1.0: skipping garbage
[  118.198249][ T5097] device bond2 entered promiscuous mode
[  118.211331][ T5097] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.218665][   T21] cdc_wdm 1-1:1.0: skipping garbage
[  118.250793][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'.
[  118.314856][   T21] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  118.350711][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'.
[  118.529592][   T21] cdc_wdm 1-1:1.0: Unknown control protocol
[  118.628424][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'.
[  118.680382][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'.
[  118.786451][   T21] usb 1-1: reset full-speed USB device number 4 using dummy_hcd
[  118.968511][ T5114] fuse: Invalid rootmode
[  119.141347][   T21] usb 1-1: device firmware changed
[  119.182760][   T21] usb 1-1: USB disconnect, device number 4
[  119.192394][   T26] audit: type=1326 audit(1769447091.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5116 comm="syz.1.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab6f358eb9 code=0x0
[  119.566601][ T5134] fuse: Unknown parameter 'group_i00000000000000000000'
[  119.590871][   T21] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  119.676829][ T5136] tipc: Started in network mode
[  119.699426][ T5136] tipc: Node identity 84e, cluster identity 4711
[  119.720841][ T5136] tipc: Node number set to 2126
[  119.769838][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[  120.300840][   T21] usb 1-1: unable to read config index 0 descriptor/all
[  120.321161][   T21] usb 1-1: can't read configurations, error -71
[  120.719084][ T5173] device syzkaller0 entered promiscuous mode
[  121.576690][ T5206] fuse: Unknown parameter 'group_i00000000000000000000'
[  122.219313][ T5219] fuse: Bad value for 'rootmode'
[  123.334777][ T5244] fuse: Unknown parameter 'use00000000000000000000'
[  123.396107][ T5248] fuse: Unknown parameter 'group_id00000000000000000000'
[  123.538593][ T5252] device syzkaller0 entered promiscuous mode
[  124.321021][ T5282] device syzkaller0 entered promiscuous mode
[  125.365203][ T5319] fuse: Unknown parameter 'group_id00000000000000000000'
[  125.911865][ T5329] device syzkaller0 entered promiscuous mode
[  126.326249][ T5334] device syzkaller0 entered promiscuous mode
[  126.355334][ T5343] netlink: 'syz.4.328': attribute type 1 has an invalid length.
[  126.464568][ T5343] device bond1 entered promiscuous mode
[  126.581206][ T5343] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.609705][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'.
[  126.786971][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'.
[  127.235162][ T5375] fuse: Unknown parameter 'group_id00000000000000000000'
[  127.602213][ T5386] device syzkaller0 entered promiscuous mode
[  127.694521][ T5391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.871434][ T5391] device syzkaller0 entered promiscuous mode
[  128.141311][ T5404] tipc: Resetting bearer <eth:syzkaller0>
[  128.270907][ T5404] tipc: Disabling bearer <eth:syzkaller0>
[  128.629371][ T5432] device syzkaller0 entered promiscuous mode
[  128.869287][ T5441] fuse: Bad value for 'user_id'
[  129.132354][ T5448] device syzkaller0 entered promiscuous mode
[  129.543441][ T5467] netlink: 'syz.4.375': attribute type 1 has an invalid length.
[  129.628586][ T5467] device bond2 entered promiscuous mode
[  129.641171][ T5467] 8021q: adding VLAN 0 to HW filter on device bond2
[  129.738398][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  129.752590][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  129.853153][ T5474] device syzkaller0 entered promiscuous mode
[  130.171822][ T5491] fuse: Unknown parameter 'user_id00000000000000000000'
[  130.580239][ T5497] device syzkaller0 entered promiscuous mode
[  130.758224][ T5508] fuse: Bad value for 'user_id'
[  130.894946][ T5510] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[  130.974416][ T5510] device bond1 entered promiscuous mode
[  130.992830][ T5510] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.009861][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'.
[  131.089219][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'.
[  131.632199][ T5537] fuse: Bad value for 'fd'
[  132.589313][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.606889][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.220584][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.263156][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.612786][ T5539] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.626789][ T5539] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.639089][ T5539] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.651795][ T5539] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.752138][ T5539] device bond1 left promiscuous mode
[  133.797805][ T5566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.817696][ T5557] device syzkaller0 entered promiscuous mode
[  133.842205][ T5566] tipc: Resetting bearer <eth:syzkaller0>
[  133.912965][ T5572] fuse: Bad value for 'user_id'
[  133.945701][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  133.955474][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  133.966457][ T5565] tipc: Disabling bearer <eth:syzkaller0>
[  134.098474][ T5581] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[  134.130885][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  134.198057][ T5581] device bond1 entered promiscuous mode
[  134.209556][ T5581] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.224048][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'.
[  134.286703][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'.
[  134.490996][   T23] usb 3-1: config 0 has no interfaces?
[  134.499183][   T23] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  134.535314][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.558215][   T23] usb 3-1: config 0 descriptor??
[  134.868140][ T5615] fuse: Bad value for 'fd'
[  134.880273][   T23] usb 3-1: USB disconnect, device number 3
[  134.908246][ T5611] device syzkaller0 entered promiscuous mode
[  135.182548][ T5629] device syzkaller0 entered promiscuous mode
[  135.343612][ T5637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.380434][ T5637] tipc: Resetting bearer <eth:syzkaller0>
[  135.427853][ T5636] tipc: Disabling bearer <eth:syzkaller0>
[  135.644447][ T5650] device syzkaller0 entered promiscuous mode
[  136.035226][ T5672] netlink: 'syz.4.436': attribute type 1 has an invalid length.
[  136.067844][ T5672] device bond3 entered promiscuous mode
[  136.077001][ T5672] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.093259][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'.
[  136.121719][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'.
[  136.168376][ T5670] device syzkaller0 entered promiscuous mode
[  136.218077][ T5682] device syzkaller0 entered promiscuous mode
[  136.251248][ T5687] fuse: Bad value for 'fd'
[  136.274624][ T5683] device syzkaller0 entered promiscuous mode
[  136.294174][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  136.378092][ T5689] device syzkaller0 entered promiscuous mode
[  136.841850][ T5704] syzkaller1: tun_chr_ioctl cmd 1074025681
[  137.579417][ T5718] input: syz1 as /devices/virtual/input/input6
[  137.879103][ T5721] device syzkaller0 entered promiscuous mode
[  137.929154][ T5726] device syzkaller0 entered promiscuous mode
[  137.957949][ T5727] device syzkaller0 entered promiscuous mode
[  138.254669][ T5701] Set syz1 is full, maxelem 65536 reached
[  138.386939][ T5738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'.
[  138.588937][ T5747] fuse: Bad value for 'fd'
[  138.628270][ T5756] input: syz1 as /devices/virtual/input/input7
[  138.635160][ T5757] =======================================================
[  138.635160][ T5757] WARNING: The mand mount option has been deprecated and
[  138.635160][ T5757]          and is ignored by this kernel. Remove the mand
[  138.635160][ T5757]          option from the mount to silence this warning.
[  138.635160][ T5757] =======================================================
[  138.801379][ T5765] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[  138.870424][ T5765] device bond2 entered promiscuous mode
[  138.917903][ T5765] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.933813][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'.
[  138.948088][ T5771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.470'.
[  138.976684][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'.
[  139.289572][ T5782] device syzkaller0 entered promiscuous mode
[  139.566942][ T5787] device syzkaller0 entered promiscuous mode
[  140.151940][ T5795] device syzkaller0 entered promiscuous mode
[  140.434957][ T5806] device syzkaller0 entered promiscuous mode
[  140.641288][ T5816] fuse: Bad value for 'fd'
[  140.727606][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'.
[  140.759370][ T5822] device syzkaller0 entered promiscuous mode
[  140.785947][ T5821] syzkaller1: tun_chr_ioctl cmd 1074025681
[  141.102485][ T5834] binder: 5832:5834 ioctl c0306201 0 returned -14
[  141.947660][ T5854] device syzkaller0 entered promiscuous mode
[  142.073528][ T5859] device syzkaller0 entered promiscuous mode
[  142.539796][ T5878] fuse: Bad value for 'fd'
[  143.006200][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'.
[  143.217256][ T5897] device syzkaller0 entered promiscuous mode
[  143.697867][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'.
[  143.757427][ T5920] device syzkaller0 entered promiscuous mode
[  143.980816][ T5932] fuse: Bad value for 'fd'
[  144.678413][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'.
[  145.126122][ T5982] device syzkaller0 entered promiscuous mode
[  145.720375][ T6000] fuse: Invalid rootmode
[  145.929240][ T6002] device syzkaller0 entered promiscuous mode
[  147.063667][ T5980] Set syz1 is full, maxelem 65536 reached
[  147.357347][ T6034] fuse: Invalid rootmode
[  147.627999][ T6049] device syzkaller0 entered promiscuous mode
[  147.750027][ T6057] device syzkaller0 entered promiscuous mode
[  147.937501][ T6063] loop1: detected capacity change from 0 to 512
[  147.976664][ T6063] FAT-fs (loop1): Unrecognized mount option "0000000000000000000000001777777777777777777777Vœ/ɘEÂŒB@è³�Zfƒžøëáð‰zïVA�€È“@ÅÄr·¡zå¥%áÁñLou×ðÉ]•1»ÿÿÿÿÿÿÿÿ‘Ì¿)�+YEýЪæ(°‚–À—³Ÿj®�cˆx&Þ ßdñõ
[  147.976664][ T6063] ®¤	/ë•ŒKªÄ–%…RÌÌfÉÀ§	ôõ!B}²$ðÝd'–¹G…0ú帗_§™¸A" or missing value
[  148.208438][ T6071] loop2: detected capacity change from 0 to 164
[  148.719438][ T6092] loop2: detected capacity change from 0 to 1024
[  148.761725][ T6094] device syzkaller0 entered promiscuous mode
[  148.793024][ T6098] fuse: Invalid rootmode
[  148.947464][ T6103] loop4: detected capacity change from 0 to 1024
[  148.981053][ T6100] device syzkaller0 entered promiscuous mode
[  149.185058][ T6106] loop2: detected capacity change from 0 to 1024
[  149.225465][ T6106] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  149.225465][ T6106] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  149.225465][ T6106] 
[  149.272360][ T6106] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  149.334470][ T6106] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  149.512616][ T6122] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  149.537076][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.597'.
[  149.637957][ T6128] loop0: detected capacity change from 0 to 128
[  149.953667][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'.
[  150.036819][ T6128] EXT4-fs (loop0): Test dummy encryption mode enabled
[  150.088230][ T6128] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none.
[  150.093142][ T6142] device syzkaller0 entered promiscuous mode
[  150.106723][ T4234] Bluetooth: hci0: command 0x0c1a tx timeout
[  150.134623][ T6128] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.298483][ T6128] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  150.426109][ T6162] loop2: detected capacity change from 0 to 4096
[  150.516755][ T6166] fuse: Unknown parameter '00000000000000000000'
[  150.553679][ T6162] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  150.803216][ T6170] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  150.888998][ T6175] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  151.602608][ T6178] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  151.848587][ T6187] netlink: 'syz.4.619': attribute type 1 has an invalid length.
[  151.929845][ T6187] device bond4 entered promiscuous mode
[  151.938465][ T6187] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.948740][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'.
[  151.959349][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.619'.
[  151.973210][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.619'.
[  152.170817][ T4234] Bluetooth: hci0: command 0x0406 tx timeout
[  152.828975][ T6193] device syzkaller0 entered promiscuous mode
[  152.927814][ T6215] fuse: Unknown parameter '00000000000000000000'
[  152.938407][ T6213] loop2: detected capacity change from 0 to 1024
[  153.005752][ T6213] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  153.028488][ T6200] device syzkaller0 entered promiscuous mode
[  153.036460][ T6213] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.196377][   T26] audit: type=1800 audit(1769447125.530:6): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.627" name="file1" dev="loop2" ino=15 res=0 errno=0
[  153.225128][ T6220] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.627: lblock 3 mapped to illegal pblock 3 (length 3)
[  153.267787][ T6220] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.627: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  153.339350][ T6227] loop0: detected capacity change from 0 to 256
[  153.359405][ T6225] loop4: detected capacity change from 0 to 1024
[  153.548150][ T4187] hfsplus: request for non-existent node 33554434 in B*Tree
[  153.559503][ T4187] hfsplus: request for non-existent node 33554434 in B*Tree
[  153.860045][ T6237] loop2: detected capacity change from 0 to 164
[  153.897229][ T6237] rock: corrupted directory entry. extent=32, offset=0, size=65773
[  154.720573][  T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.173318][  T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.251693][ T6257] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  155.335329][  T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.390966][ T6261] loop3: detected capacity change from 0 to 1024
[  155.430468][ T6254] device syzkaller0 entered promiscuous mode
[  155.518923][ T6263] fuse: Unknown parameter '00000000000000000000'
[  155.592876][ T6261] hfsplus: request for non-existent node 16777216 in B*Tree
[  155.606979][ T6261] hfsplus: request for non-existent node 16777216 in B*Tree
[  155.612881][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.629053][ T6261] hfsplus: request for non-existent node 16777216 in B*Tree
[  155.660800][ T6261] hfsplus: request for non-existent node 16777216 in B*Tree
[  155.668780][ T6261] hfsplus: request for non-existent node 16777216 in B*Tree
[  155.694628][ T6261] hfsplus: request for non-existent node 16777216 in B*Tree
[  156.284854][ T6273] loop0: detected capacity change from 0 to 1024
[  156.382969][ T6277] loop1: detected capacity change from 0 to 512
[  156.409884][   T26] audit: type=1800 audit(1769447128.750:7): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.644" name="file1" dev="loop3" ino=20 res=0 errno=0
[  156.428146][  T154] tipc: Left network mode
[  156.520510][ T6264] chnl_net:caif_netlink_parms(): no params data found
[  156.551213][   T26] audit: type=1800 audit(1769447128.750:8): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.644" name="file1" dev="loop3" ino=20 res=0 errno=0
[  156.640171][ T6277] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  156.660944][ T6277] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.906720][ T6290] loop2: detected capacity change from 0 to 164
[  156.919322][ T6292] loop0: detected capacity change from 0 to 1024
[  156.968096][ T6290] rock: directory entry would overflow storage
[  157.050828][ T6290] rock: sig=0x66, size=4, remaining=3
[  157.108883][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.126206][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.186844][ T6264] device bridge_slave_0 entered promiscuous mode
[  157.364004][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.382451][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.405754][ T6264] device bridge_slave_1 entered promiscuous mode
[  157.438447][ T6309] device syzkaller0 entered promiscuous mode
[  157.533780][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.552455][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.611124][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[  157.646949][ T6264] team0: Port device team_slave_0 added
[  157.679169][ T6264] team0: Port device team_slave_1 added
[  157.754784][ T6321] loop3: detected capacity change from 0 to 1024
[  157.819667][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.858708][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.969620][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.003651][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.035967][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.072567][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.143459][ T1281] hfsplus: b-tree write err: -5, ino 3
[  158.255790][ T6329] loop3: detected capacity change from 0 to 1024
[  158.290480][ T6264] device hsr_slave_0 entered promiscuous mode
[  158.335687][ T6264] device hsr_slave_1 entered promiscuous mode
[  158.353298][ T6264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.371135][ T6329] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  158.377585][ T6264] Cannot create hsr debugfs directory
[  158.389714][ T6329] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.564130][   T26] audit: type=1800 audit(1769447130.910:9): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.660" name="file1" dev="loop3" ino=15 res=0 errno=0
[  158.594994][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  158.612053][ T6333] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.660: lblock 3 mapped to illegal pblock 3 (length 3)
[  158.635347][ T6333] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.660: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  158.664693][ T6333] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.660: lblock 3 mapped to illegal pblock 3 (length 1)
[  158.831448][ T6338] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  159.011127][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.024946][ T6341] loop0: detected capacity change from 0 to 1024
[  159.032194][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.043167][ T4234] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  159.063698][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.082585][ T4234] usb 3-1: config 0 descriptor??
[  159.091391][  T154] device hsr_slave_0 left promiscuous mode
[  159.142337][  T154] device hsr_slave_1 left promiscuous mode
[  159.188377][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.197369][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.211945][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.224716][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.244554][  T154] device bridge_slave_1 left promiscuous mode
[  159.257905][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.353496][  T154] device bridge_slave_0 left promiscuous mode
[  159.393163][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.500288][  T154] device veth1_macvtap left promiscuous mode
[  159.518774][  T154] device veth0_macvtap left promiscuous mode
[  159.539190][  T154] device veth1_vlan left promiscuous mode
[  159.547519][  T154] device veth0_vlan left promiscuous mode
[  159.581780][ T4234] hid (null): nested delimiters
[  159.645646][ T4234] wacom 0003:056A:030C.0001: nested delimiters
[  159.666640][ T4234] wacom 0003:056A:030C.0001: item 0 1 2 10 parsing failed
[  159.846963][ T4234] wacom 0003:056A:030C.0001: parse failed
[  159.857521][ T4234] wacom: probe of 0003:056A:030C.0001 failed with error -22
[  159.964249][ T4234] usb 3-1: USB disconnect, device number 4
[  159.995034][ T1111] Bluetooth: hci3: command 0x041b tx timeout
[  160.063483][  T154] bond4 (unregistering): Released all slaves
[  160.108087][  T154] bond3 (unregistering): Released all slaves
[  160.129774][  T154] bond2 (unregistering): Released all slaves
[  160.147923][  T154] bond1 (unregistering): Released all slaves
[  160.411881][  T154] team0 (unregistering): Port device team_slave_1 removed
[  160.439305][  T154] team0 (unregistering): Port device team_slave_0 removed
[  160.498063][ T6377] loop0: detected capacity change from 0 to 1024
[  160.498141][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.545483][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.822920][ T6382] loop2: detected capacity change from 0 to 164
[  160.823089][  T154] bond0 (unregistering): Released all slaves
[  160.875681][ T6382] rock: corrupted directory entry. extent=32, offset=0, size=65773
[  160.898349][ T6242] hfsplus: b-tree write err: -5, ino 3
[  161.040221][ T6362] device syzkaller0 entered promiscuous mode
[  161.181952][ T6386] binder: 6385:6386 ioctl c0306201 0 returned -14
[  161.265594][ T6386] loop2: detected capacity change from 0 to 2048
[  161.964717][ T6386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.093405][   T21] Bluetooth: hci3: command 0x040f tx timeout
[  162.216312][ T4190] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  162.233081][ T4190] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  162.460986][ T6264] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  162.754318][ T6264] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.109879][ T6398] loop1: detected capacity change from 0 to 512
[  163.179229][ T6264] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.277628][ T6398] EXT4-fs (loop1): Ignoring removed oldalloc option
[  163.337707][ T6264] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.449427][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,noinit_itable,nojournal_checksum,grpquota,errors=remount-ro,oldalloc,. Quota mode: writeback.
[  163.614926][ T6417] loop3: detected capacity change from 0 to 1024
[  163.731646][ T6417] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  163.731646][ T6417] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  163.731646][ T6417] 
[  163.798602][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.806535][ T6417] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  163.908421][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  163.921007][ T6417] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  164.022691][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.075434][ T6264] 8021q: adding VLAN 0 to HW filter on device team0
[  164.168423][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.181992][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[  164.275841][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.301238][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.310011][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.320282][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.380521][ T6438] fuse: Unknown parameter 'user_i00000000000000000000'
[  164.473760][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.530558][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.577220][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.592585][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.696747][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  164.787805][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  164.903953][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  164.934731][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.048960][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.129844][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.269542][ T6264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  165.288121][ T6264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.305039][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.349165][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  165.401271][ T6454] binder: 6453:6454 ioctl c0306201 0 returned -14
[  165.415419][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.500053][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  165.539513][ T6457] loop3: detected capacity change from 0 to 2048
[  165.540320][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.595833][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.679328][ T6457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.775425][ T6463] loop0: detected capacity change from 0 to 1024
[  165.878007][ T6463] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[  165.878007][ T6463] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  165.878007][ T6463] 
[  165.973181][ T6463] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  165.996078][ T4184] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  166.043327][ T6463] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  166.059323][ T4184] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  166.185065][ T6430] chnl_net:caif_netlink_parms(): no params data found
[  166.250833][ T1111] Bluetooth: hci4: command 0x0409 tx timeout
[  166.431041][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.485278][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.570538][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.610346][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.646564][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.680877][ T6430] device bridge_slave_0 entered promiscuous mode
[  166.721675][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.807698][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.852028][ T6430] device bridge_slave_1 entered promiscuous mode
[  166.890426][ T6495] loop0: detected capacity change from 0 to 1024
[  167.005117][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.129422][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.208664][ T6499] fuse: Unknown parameter 'user_i00000000000000000000'
[  167.232028][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.283673][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.339944][ T6430] team0: Port device team_slave_0 added
[  167.354191][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.395897][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.411678][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.425032][ T6430] team0: Port device team_slave_1 added
[  167.438862][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.502148][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.556945][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.572905][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.615441][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.643200][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.678164][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.694623][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.708956][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.719291][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.731821][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.739337][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.771538][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.782163][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.794687][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.804445][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.818245][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.833534][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.845063][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.857003][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.869709][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.882521][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.893403][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.903366][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.913492][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.922161][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.931457][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  167.942773][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.009925][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.036651][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  168.056790][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.068993][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  168.086676][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.098532][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.121582][ T6430] device hsr_slave_0 entered promiscuous mode
[  168.137452][ T6430] device hsr_slave_1 entered promiscuous mode
[  168.145513][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.161219][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.169892][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.185124][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.195496][ T6430] Cannot create hsr debugfs directory
[  168.209751][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.222050][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree
[  168.230583][ T6264] device veth0_vlan entered promiscuous mode
[  168.231666][   T26] audit: type=1800 audit(1769447140.570:10): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.700" name="file1" dev="loop0" ino=20 res=0 errno=0
[  168.320435][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  168.332202][ T4251] Bluetooth: hci4: command 0x041b tx timeout
[  168.361872][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  168.379156][   T26] audit: type=1326 audit(1769447140.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6f358eb9 code=0x7ffc0000
[  168.394644][ T6264] device veth1_vlan entered promiscuous mode
[  168.468020][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  168.499309][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  168.510926][   T26] audit: type=1326 audit(1769447140.750:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab6f358eb9 code=0x7ffc0000
[  168.530219][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  168.681031][   T26] audit: type=1326 audit(1769447140.750:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6f358eb9 code=0x7ffc0000
[  168.744276][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  168.757333][   T26] audit: type=1326 audit(1769447140.790:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6f358eb9 code=0x7ffc0000
[  168.788548][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  168.818634][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  168.845485][ T6264] device veth0_macvtap entered promiscuous mode
[  168.944766][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  168.965193][ T6264] device veth1_macvtap entered promiscuous mode
[  169.115863][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.159341][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.193298][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.214420][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  169.255997][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  169.285416][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.313920][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.450980][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[  169.460037][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.623538][ T6544] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  169.648821][ T6544] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0
[  169.984965][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.021954][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.085103][ T6264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.135885][ T6264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.168710][ T6264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.198637][ T6264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.234133][ T6503] chnl_net:caif_netlink_parms(): no params data found
[  170.421103][ T4242] Bluetooth: hci4: command 0x040f tx timeout
[  170.576219][ T6567] loop1: detected capacity change from 0 to 4096
[  170.672350][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.682314][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.694434][ T6503] device bridge_slave_0 entered promiscuous mode
[  170.707935][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.711407][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.732411][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.745743][ T6503] device bridge_slave_1 entered promiscuous mode
[  170.795914][ T6567] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  170.847926][ T6503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.881161][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.898392][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  171.082409][ T6503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.500076][ T6503] team0: Port device team_slave_0 added
[  171.530973][ T4242] Bluetooth: hci0: command 0x041b tx timeout
[  171.621582][ T6503] team0: Port device team_slave_1 added
[  171.784590][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.808007][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.854056][ T6503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.931935][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.940272][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.986426][ T6588] loop1: detected capacity change from 0 to 128
[  171.997438][ T6503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.093817][ T6430] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  172.112466][ T6588] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.112865][ T6430] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  172.137030][ T6588] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.156588][ T6430] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  172.180269][ T6430] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  172.194984][ T5559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.209908][  T154] tipc: Left network mode
[  172.228629][ T5559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.239742][ T6588] fscrypt (loop1, inode 12): Unsupported encryption flags (0x45)
[  172.302525][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  172.469682][ T6503] device hsr_slave_0 entered promiscuous mode
[  172.514527][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[  172.524441][ T6503] device hsr_slave_1 entered promiscuous mode
[  172.566650][ T6503] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.594665][ T6503] Cannot create hsr debugfs directory
[  172.917413][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.071704][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.095887][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.126560][ T6430] 8021q: adding VLAN 0 to HW filter on device team0
[  173.207280][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.224884][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.238485][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.246215][ T5559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.269332][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  173.290083][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  173.300507][ T6630] loop0: detected capacity change from 0 to 1024
[  173.309107][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.317934][ T5559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.393452][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  173.410188][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.423136][ T6630] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[  173.423136][ T6630] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  173.423136][ T6630] 
[  173.494640][ T6630] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  173.536005][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.551648][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.568192][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.579262][ T6630] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  173.604819][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.614046][ T4242] Bluetooth: hci0: command 0x040f tx timeout
[  173.644133][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.659080][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.673694][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.689686][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.701597][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.717245][ T6430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.763808][ T6637] device syzkaller0 entered promiscuous mode
[  173.785518][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  173.903918][ T6503] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  173.983204][ T6503] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  174.097003][ T6503] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  174.166655][ T6503] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  174.222168][ T6658] loop0: detected capacity change from 0 to 8
[  174.371407][  T154] device hsr_slave_0 left promiscuous mode
[  174.399747][ T6658] SQUASHFS error: Failed to read block 0x260685: -5
[  174.432925][  T154] device hsr_slave_1 left promiscuous mode
[  174.436296][ T6658] SQUASHFS error: Unable to read metadata cache entry [260685]
[  174.453225][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.483521][ T6658] SQUASHFS error: Unable to read directory block [260685:0]
[  174.514282][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.568804][  T154] device bridge_slave_1 left promiscuous mode
[  174.606794][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.672277][  T154] device bridge_slave_0 left promiscuous mode
[  174.704193][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.869165][  T154] bond1 (unregistering): Released all slaves
[  175.282115][  T154] team0 (unregistering): Port device team_slave_1 removed
[  175.305607][  T154] team0 (unregistering): Port device team_slave_0 removed
[  175.355755][ T6705] loop0: detected capacity change from 0 to 512
[  175.366706][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.419501][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.464861][ T6705] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  175.490973][ T6705] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.634523][  T154] bond0 (unregistering): Released all slaves
[  175.727359][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  175.743397][ T6713] loop0: detected capacity change from 0 to 1024
[  175.756353][ T6692] tipc: Started in network mode
[  175.781075][ T6692] tipc: Node identity 7a9b7e36930d, cluster identity 4711
[  175.789897][ T6692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.815090][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.837837][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.857245][ T6706] tipc: Resetting bearer <eth:syzkaller0>
[  175.898058][ T6689] tipc: Disabling bearer <eth:syzkaller0>
[  175.956623][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.055615][ T6242] hfsplus: b-tree write err: -5, ino 3
[  176.218904][ T6724] binder: 6723:6724 ioctl c0306201 0 returned -14
[  176.300920][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.320849][ T6729] loop1: detected capacity change from 0 to 2048
[  176.380061][ T6503] 8021q: adding VLAN 0 to HW filter on device team0
[  176.397089][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.414949][ T6724] loop0: detected capacity change from 0 to 2048
[  176.435167][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.560526][ T6737] loop5: detected capacity change from 0 to 1024
[  177.247846][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.348237][ T6729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  177.348519][ T6724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.410148][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.590706][ T6736] hfsplus: xattr search failed
[  177.642641][ T4186] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  177.663180][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.675532][ T5559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.783218][ T4186] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  177.893381][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.960197][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.043208][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.053383][ T5559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.410003][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.697807][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.960559][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.032825][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.072737][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.153544][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.198284][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.228804][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.255792][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  179.309661][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.342978][ T6771] loop1: detected capacity change from 0 to 1024
[  179.483873][ T6769] device syzkaller0 entered promiscuous mode
[  179.558484][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.611830][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.727539][ T6503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  180.183852][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.270582][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.283841][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.316445][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.382041][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.415505][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.454253][ T6791] loop1: detected capacity change from 0 to 2048
[  180.479737][ T6430] device veth0_vlan entered promiscuous mode
[  180.579405][ T6430] device veth1_vlan entered promiscuous mode
[  180.595861][ T6791] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none.
[  181.036935][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.055686][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.141520][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.197348][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.226090][ T6430] device veth0_macvtap entered promiscuous mode
[  181.306839][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.374785][ T6430] device veth1_macvtap entered promiscuous mode
[  181.418604][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.441551][ T6819] loop5: detected capacity change from 0 to 1024
[  181.462170][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.526803][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.558041][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.574952][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.596784][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.629127][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.725097][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.781711][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.854094][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.893711][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.953052][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.999586][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.107793][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.198915][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.227316][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.326669][ T6833] device syzkaller0 entered promiscuous mode
[  182.404568][ T6430] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.454820][ T6838] loop5: detected capacity change from 0 to 1024
[  182.456747][ T6430] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.581171][ T6430] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.617687][ T6430] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.730980][ T4234] Bluetooth: hci2: command 0x0409 tx timeout
[  182.779463][ T6242] hfsplus: b-tree write err: -5, ino 3
[  182.807653][ T6799] chnl_net:caif_netlink_parms(): no params data found
[  183.080224][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.201983][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.488667][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.549873][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.648404][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.680404][ T6865] loop1: detected capacity change from 0 to 1024
[  183.714772][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.825980][ T6503] device veth0_vlan entered promiscuous mode
[  183.926041][ T6503] device veth1_vlan entered promiscuous mode
[  184.013860][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.028296][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.043275][ T6799] device bridge_slave_0 entered promiscuous mode
[  184.128085][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.138689][ T6242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.143590][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.153603][ T6242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.184488][ T6799] device bridge_slave_1 entered promiscuous mode
[  184.275983][ T6879] loop5: detected capacity change from 0 to 1024
[  184.293934][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  184.416534][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.467933][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.490509][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.500340][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.546918][ T6503] device veth0_macvtap entered promiscuous mode
[  184.680308][ T6876] device syzkaller0 entered promiscuous mode
[  184.734753][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  184.773540][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  184.811458][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[  184.832674][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  184.851767][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  184.983855][ T6799] team0: Port device team_slave_0 added
[  185.029400][ T6503] device veth1_macvtap entered promiscuous mode
[  185.087384][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  185.145215][ T6799] team0: Port device team_slave_1 added
[  185.341444][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.408402][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.490782][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.583664][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.610048][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.650752][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.704060][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.757938][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.795691][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.872361][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.932817][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.992674][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.041685][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.092282][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.138557][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  186.184116][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  186.220510][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  186.276129][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  186.297662][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.331248][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.388362][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.613483][ T6503] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.644313][ T6503] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.680836][ T6503] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.718671][ T6503] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.748358][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.766964][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.848427][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.890272][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'.
[  186.892469][   T23] Bluetooth: hci2: command 0x040f tx timeout
[  187.084628][ T6932] loop1: detected capacity change from 0 to 16
[  187.093212][  T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.146338][ T6932] erofs: (device loop1): mounted with root inode @ nid 36.
[  187.167175][ T6799] device hsr_slave_0 entered promiscuous mode
[  187.208411][ T6799] device hsr_slave_1 entered promiscuous mode
[  187.232687][ T6799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.249585][ T6932] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89
[  187.280067][ T6799] Cannot create hsr debugfs directory
[  187.293304][ T6932] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  187.342975][  T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.370356][ T6932] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89
[  187.416065][ T4202] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[3072, 1024] out[7168]
[  187.515489][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.574571][ T6932] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  187.605583][ T6932] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[3072, 1024] out[3072]
[  187.630874][  T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.637368][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.676501][ T6950] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  187.737284][  T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.772045][ T6932] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  187.793080][   T26] audit: type=1800 audit(1769447160.130:15): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.780" name="file3" dev="loop1" ino=89 res=0 errno=0
[  187.818131][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  187.923883][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.954600][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.022596][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  188.506238][ T6970] loop6: detected capacity change from 0 to 128
[  188.603748][ T6970] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  188.643309][ T6970] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.816643][ T6799] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  188.896760][ T6799] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  188.925043][  T154] tipc: Left network mode
[  188.925566][ T6799] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  188.986030][ T4300] Bluetooth: hci2: command 0x0419 tx timeout
[  189.023332][ T6799] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  190.306502][ T7020] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  193.247498][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.377348][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.409501][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.066797][ T7034] sched: RT throttling activated
[  194.162734][ T6799] 8021q: adding VLAN 0 to HW filter on device team0
[  194.507319][ T7034] Set syz1 is full, maxelem 65536 reached
[  194.528201][ T7081] fuse: Bad value for 'fd'
[  194.652665][ T7068] device syzkaller0 entered promiscuous mode
[  194.683187][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.747978][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.783081][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.793913][ T7004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.967034][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.007148][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.031586][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.053198][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.062665][ T7004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.121072][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.233804][ T7106] device syzkaller0 entered promiscuous mode
[  195.391198][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  195.399508][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  195.476223][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.507416][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.619787][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.718334][ T7128] loop6: detected capacity change from 0 to 512
[  195.837715][ T7128] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.886782][ T7128] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.192223][ T7111] Set syz1 is full, maxelem 65536 reached
[  197.362272][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  197.396097][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  197.472272][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  197.661281][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  197.683863][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  197.705136][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  197.717408][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  197.762813][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  197.787265][ T7176] device syzkaller0 entered promiscuous mode
[  198.100256][  T154] device hsr_slave_0 left promiscuous mode
[  198.128422][  T154] device hsr_slave_1 left promiscuous mode
[  198.138192][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.160072][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.172732][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.181419][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.190275][  T154] device bridge_slave_1 left promiscuous mode
[  198.208473][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.261870][  T154] device bridge_slave_0 left promiscuous mode
[  198.268925][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.296012][  T154] device veth1_macvtap left promiscuous mode
[  198.309366][  T154] device veth0_macvtap left promiscuous mode
[  198.318459][  T154] device veth1_vlan left promiscuous mode
[  198.325619][  T154] device veth0_vlan left promiscuous mode
[  198.667259][  T154] bond1 (unregistering): Released all slaves
[  198.898118][ T7218] loop1: detected capacity change from 0 to 1024
[  199.304388][ T7218] hfsplus: xattr search failed
[  199.647039][  T154] team0 (unregistering): Port device team_slave_1 removed
[  199.674515][  T154] team0 (unregistering): Port device team_slave_0 removed
[  199.697050][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.729446][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.835638][  T154] bond0 (unregistering): Released all slaves
[  200.020185][ T7200] device syzkaller0 entered promiscuous mode
[  200.169715][ T7232] loop6: detected capacity change from 0 to 128
[  200.272016][ T7232] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  200.353391][ T7232] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.397028][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  200.451249][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  200.485407][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.953766][ T7262] loop7: detected capacity change from 0 to 1024
[  201.241454][ T7262] hfsplus: xattr search failed
[  201.833440][ T7269] loop1: detected capacity change from 0 to 512
[  201.946796][ T7271] device syzkaller0 entered promiscuous mode
[  202.048165][ T7269] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  202.115014][ T7269] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.219531][ T7285] device syzkaller0 entered promiscuous mode
[  202.481152][ T7291] loop1: detected capacity change from 0 to 1024
[  202.580763][ T4250] Bluetooth: hci1: command 0x0406 tx timeout
[  202.621876][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.679779][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.897693][ T7295] device syzkaller0 entered promiscuous mode
[  202.930360][ T7302] loop6: detected capacity change from 0 to 128
[  202.940418][ T4304] hfsplus: bad catalog file entry
[  202.966104][ T4304] hfsplus: b-tree write err: -5, ino 3
[  202.993838][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  203.054186][ T7302] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  203.071191][ T7302] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.131726][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  203.355193][ T6799] device veth0_vlan entered promiscuous mode
[  203.373939][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  203.392835][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  203.436325][ T6799] device veth1_vlan entered promiscuous mode
[  203.540018][ T7324] loop6: detected capacity change from 0 to 1024
[  204.286933][ T7323] hfsplus: xattr search failed
[  204.628042][ T7339] loop6: detected capacity change from 0 to 512
[  204.796392][ T7339] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  204.941375][ T7339] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.121676][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  205.181630][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  205.277065][ T6799] device veth0_macvtap entered promiscuous mode
[  205.338741][ T6799] device veth1_macvtap entered promiscuous mode
[  205.429003][ T7354] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  205.456941][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.488812][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.7.880'.
[  205.520741][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.564194][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.586239][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.618860][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.671831][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.702920][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.751834][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  205.797129][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  205.878321][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  205.926762][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.007927][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.073003][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.160683][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.203491][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.235251][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.301004][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.327433][ T7380] loop7: detected capacity change from 0 to 512
[  206.336620][ T6799] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.382038][ T6799] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.402456][ T6799] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.451140][ T6799] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.481629][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  206.507687][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  206.539291][ T7380] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  206.603040][ T7384] loop6: detected capacity change from 0 to 1024
[  206.620935][ T7380] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.855897][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.891364][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.006220][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.023720][ T1281] hfsplus: b-tree write err: -5, ino 3
[  207.053023][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  207.062927][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.198821][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  207.338529][ T7412] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  207.354753][ T7400] device syzkaller0 entered promiscuous mode
[  207.385684][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.6.894'.
[  207.514085][ T7418] binder: 7417:7418 ioctl c0306201 0 returned -14
[  207.733329][ T7424] loop1: detected capacity change from 0 to 1024
[  207.744556][ T7420] loop8: detected capacity change from 0 to 2048
[  207.918276][ T7420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.946026][ T7430] loop7: detected capacity change from 0 to 512
[  207.967685][ T7424] hfsplus: request for non-existent node 16777216 in B*Tree
[  208.038139][ T7424] hfsplus: request for non-existent node 16777216 in B*Tree
[  208.142531][ T7430] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5
[  208.142531][ T7430] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  208.142531][ T7430] 
[  208.222300][ T6799] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh
[  208.301293][ T6799] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh
[  208.308854][ T7430] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  208.462524][ T7430] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  208.564023][ T7430] EXT4-fs (loop7): 1 truncate cleaned up
[  208.575721][ T7430] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,noacl,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none.
[  208.683151][   T26] audit: type=1800 audit(1769447181.030:16): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.896" name="file1" dev="loop1" ino=20 res=0 errno=0
[  209.112418][ T7471] fuse: Unknown parameter '0x0000000000000007'
[  209.333003][  T144] tipc: Left network mode
[  209.619247][ T7488] loop1: detected capacity change from 0 to 1024
[  209.796872][ T7487] loop6: detected capacity change from 0 to 512
[  209.963784][ T7487] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.916: inode has both inline data and extents flags
[  210.067488][ T7487] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.916: couldn't read orphan inode 15 (err -117)
[  210.132095][ T7004] hfsplus: b-tree write err: -5, ino 3
[  210.139302][ T7487] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  210.184968][ T7487] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  210.249119][ T7487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  210.336830][ T7504] device syzkaller0 entered promiscuous mode
[  210.687411][ T7524] loop6: detected capacity change from 0 to 512
[  210.898482][ T7524] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  211.025412][ T7524] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.103925][ T7542] fuse: Unknown parameter '0x0000000000000007'
[  211.190092][  T144] device hsr_slave_0 left promiscuous mode
[  211.303947][  T144] device hsr_slave_1 left promiscuous mode
[  211.346810][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.417399][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.587404][ T7550] loop7: detected capacity change from 0 to 1024
[  211.911480][  T144] device bridge_slave_1 left promiscuous mode
[  212.179558][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.382324][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[  212.496462][  T144] device bridge_slave_0 left promiscuous mode
[  212.532262][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.628823][ T1281] hfsplus: b-tree write err: -5, ino 3
[  212.685010][  T144] bond2 (unregistering): Released all slaves
[  212.730387][  T144] bond1 (unregistering): Released all slaves
[  213.036168][  T144] team0 (unregistering): Port device team_slave_1 removed
[  213.062416][  T144] team0 (unregistering): Port device team_slave_0 removed
[  213.081162][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.145162][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.284024][  T144] bond0 (unregistering): Released all slaves
[  213.376272][ T7491] chnl_net:caif_netlink_parms(): no params data found
[  213.644755][ T7575] device syzkaller0 entered promiscuous mode
[  213.661028][ T7589] loop7: detected capacity change from 0 to 1024
[  213.668178][ T7590] loop1: detected capacity change from 0 to 512
[  213.831864][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.870736][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.895813][ T7590] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  213.942681][ T7491] device bridge_slave_0 entered promiscuous mode
[  213.954268][ T7590] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.060230][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.140813][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.181173][ T7491] device bridge_slave_1 entered promiscuous mode
[  214.294230][ T7609] fuse: Unknown parameter '0x0000000000000007'
[  214.423869][ T7491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.477932][ T7491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.501224][    T7] Bluetooth: hci2: command 0x041b tx timeout
[  214.681183][ T7616] loop1: detected capacity change from 0 to 1024
[  214.897593][ T7491] team0: Port device team_slave_0 added
[  214.914019][ T7616] hfsplus: request for non-existent node 16777216 in B*Tree
[  214.959284][ T7491] team0: Port device team_slave_1 added
[  214.960808][ T7616] hfsplus: request for non-existent node 16777216 in B*Tree
[  215.062107][ T7616] hfsplus: request for non-existent node 16777216 in B*Tree
[  215.127388][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.140749][ T7616] hfsplus: request for non-existent node 16777216 in B*Tree
[  215.156788][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.204192][ T7616] hfsplus: request for non-existent node 16777216 in B*Tree
[  215.246140][ T7616] hfsplus: request for non-existent node 16777216 in B*Tree
[  215.279177][ T7491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.389707][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.435584][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.488469][ T7491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.535352][   T26] audit: type=1800 audit(1769447187.880:17): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.945" name="file1" dev="loop1" ino=20 res=0 errno=0
[  215.646920][   T26] audit: type=1800 audit(1769447187.910:18): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.945" name="file1" dev="loop1" ino=20 res=0 errno=0
[  215.705104][ T7491] device hsr_slave_0 entered promiscuous mode
[  215.767321][ T7491] device hsr_slave_1 entered promiscuous mode
[  215.795688][ T7491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.826753][ T7491] Cannot create hsr debugfs directory
[  216.166258][ T7652] loop6: detected capacity change from 0 to 1024
[  216.309116][ T7652] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[  216.309116][ T7652] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  216.309116][ T7652] 
[  216.410188][ T7658] fuse: Unknown parameter '0x0000000000000007'
[  216.419297][ T7652] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  216.529237][ T7652] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  216.558975][ T7657] device syzkaller0 entered promiscuous mode
[  216.581015][    T7] Bluetooth: hci2: command 0x040f tx timeout
[  216.676182][ T7491] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  216.771798][ T7491] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  216.918302][ T7491] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  217.008886][ T7491] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  217.454537][ T7692] loop1: detected capacity change from 0 to 128
[  217.525531][ T7695] loop6: detected capacity change from 0 to 1024
[  217.556926][ T7692] EXT4-fs (loop1): Ignoring removed nobh option
[  217.661534][ T7692] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[  217.793435][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.837274][ T7695] hfsplus: request for non-existent node 16777216 in B*Tree
[  217.861505][ T7692] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  217.981731][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  218.000426][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  218.048990][ T7695] hfsplus: request for non-existent node 16777216 in B*Tree
[  218.104483][ T7491] 8021q: adding VLAN 0 to HW filter on device team0
[  218.131578][ T7695] hfsplus: request for non-existent node 16777216 in B*Tree
[  218.167166][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  218.180822][ T7695] hfsplus: request for non-existent node 16777216 in B*Tree
[  218.191589][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  218.258847][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.269365][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.376944][   T26] audit: type=1800 audit(1769447190.720:19): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.961" name="file1" dev="loop6" ino=20 res=0 errno=0
[  218.379182][ T7715] loop1: detected capacity change from 0 to 1024
[  218.419028][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  218.507605][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  218.523539][   T26] audit: type=1800 audit(1769447190.750:20): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.961" name="file1" dev="loop6" ino=20 res=0 errno=0
[  218.551671][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  218.635189][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.647442][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.673700][ T1108] Bluetooth: hci2: command 0x0419 tx timeout
[  218.735537][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  219.019391][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  219.551208][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  219.582273][ T5559] hfsplus: b-tree write err: -5, ino 3
[  219.700540][ T7731] fuse: Unknown parameter '0x0000000000000007'
[  219.723533][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  219.822431][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  220.070264][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  220.102005][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  220.197375][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  220.254911][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  220.305045][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  220.343207][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  220.390791][ T4300] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  220.456498][ T7740] device syzkaller0 entered promiscuous mode
[  220.494128][ T7491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  220.801397][ T4300] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  220.831022][ T4300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.893112][ T4300] usb 7-1: config 0 descriptor??
[  220.962236][ T4300] cp210x 7-1:0.0: cp210x converter detected
[  221.545982][ T4300] usb 7-1: cp210x converter now attached to ttyUSB0
[  221.646221][ T4300] usb 7-1: USB disconnect, device number 2
[  221.756351][ T4300] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  221.759405][ T7785] loop1: detected capacity change from 0 to 1024
[  221.803542][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  221.834440][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  221.894364][ T7785] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  221.894364][ T7785] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  221.894364][ T7785] 
[  221.899315][ T4300] cp210x 7-1:0.0: device disconnected
[  221.937203][ T7491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.970953][ T7785] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  222.010109][ T7791] fuse: Unknown parameter '0x0000000000000007'
[  222.143886][ T7785] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  222.153107][  T144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.352346][  T144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.654172][  T144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.057173][  T144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.124714][ T7832] loop1: detected capacity change from 0 to 1024
[  223.287354][ T7838] device syzkaller0 entered promiscuous mode
[  223.346911][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.362904][ T7832] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  223.377714][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.415843][   T26] audit: type=1800 audit(1769447195.760:21): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.990" name="file1" dev="loop1" ino=15 res=0 errno=0
[  223.865459][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  223.883002][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  223.908271][ T7491] device veth0_vlan entered promiscuous mode
[  223.998567][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.027409][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.066751][ T7868] fuse: Unknown parameter 'fd0x0000000000000007'
[  224.123665][ T7491] device veth1_vlan entered promiscuous mode
[  224.216456][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.249555][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.289795][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.337478][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.384037][ T7491] device veth0_macvtap entered promiscuous mode
[  224.494821][ T7879] loop1: detected capacity change from 0 to 1024
[  224.903206][ T7491] device veth1_macvtap entered promiscuous mode
[  225.358515][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.410439][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  225.692392][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.721002][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.741370][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.794199][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.859174][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.051121][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.070719][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.106995][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.338448][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.495226][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.620640][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.662087][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.695585][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.731192][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.780647][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.815730][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.856148][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.902412][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1011'.
[  226.922306][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.967251][ T7491] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.003087][ T7491] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.051818][ T7491] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.070727][ T7491] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.102904][ T7903] device syzkaller0 entered promiscuous mode
[  227.127355][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  227.148824][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  227.179003][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  227.193314][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  227.419976][ T7935] fuse: Unknown parameter 'fd0x0000000000000007'
[  227.595844][ T7941] loop6: detected capacity change from 0 to 1024
[  228.689456][ T7004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.710184][ T5559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.793788][ T7004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.810748][ T5559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.849795][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  228.879552][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  232.614266][ T7998] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  232.862561][ T8002] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  233.093273][ T4251] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  233.319479][ T8006] fuse: Unknown parameter 'fd0x0000000000000007'
[  233.343627][ T7959] Set syz1 is full, maxelem 65536 reached
[  233.601414][ T4251] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.664116][ T4251] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.756524][ T8015] loop1: detected capacity change from 0 to 1024
[  233.917397][ T4251] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  233.936095][ T8015] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  233.936095][ T8015] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  233.936095][ T8015] 
[  233.951893][ T4251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.001042][ T8015] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  234.038268][ T4251] usb 7-1: Product: syz
[  234.073833][ T8015] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  234.128991][ T4251] usb 7-1: Manufacturer: syz
[  234.158504][ T4251] usb 7-1: SerialNumber: syz
[  234.197602][  T144] device hsr_slave_0 left promiscuous mode
[  234.210948][  T144] device hsr_slave_1 left promiscuous mode
[  234.225073][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.283448][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.318406][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.357302][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.422456][  T144] device bridge_slave_1 left promiscuous mode
[  234.454873][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.495110][ T8033] loop1: detected capacity change from 0 to 1024
[  234.555100][ T4251] usb 7-1: 0:2 : does not exist
[  234.806142][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  234.951772][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.029607][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.091760][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.122535][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.151052][ T4251] usb 7-1: USB disconnect, device number 3
[  235.170541][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.244180][  T144] device bridge_slave_0 left promiscuous mode
[  235.277433][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.491141][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.503646][  T144] device veth1_macvtap left promiscuous mode
[  235.532787][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.553273][  T144] device veth0_macvtap left promiscuous mode
[  235.571565][  T144] device veth1_vlan left promiscuous mode
[  235.592071][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.609223][  T144] device veth0_vlan left promiscuous mode
[  235.714872][ T4467] udevd[4467]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.740938][ T8033] hfsplus: request for non-existent node 16777216 in B*Tree
[  235.828173][   T26] audit: type=1800 audit(1769447208.150:22): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1038" name="file1" dev="loop1" ino=20 res=0 errno=0
[  236.793146][ T8065] loop1: detected capacity change from 0 to 1024
[  236.859611][ T8065] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  236.859611][ T8065] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  236.859611][ T8065] 
[  236.964053][ T8065] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  237.042899][ T8065] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  237.148085][  T144] team0 (unregistering): Port device team_slave_1 removed
[  237.183079][  T144] team0 (unregistering): Port device team_slave_0 removed
[  237.212074][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.300031][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.405330][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'.
[  237.591783][  T144] bond0 (unregistering): Released all slaves
[  237.719889][ T8019] device syzkaller0 entered promiscuous mode
[  237.754673][ T8027] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1036'.
[  238.418941][ T8091] loop9: detected capacity change from 0 to 1024
[  238.640939][ T8091] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5
[  238.640939][ T8091] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  238.640939][ T8091] 
[  238.741062][ T8091] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  238.821771][ T8091] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  238.906594][ T8106] loop6: detected capacity change from 0 to 256
[  239.127481][ T8110] loop9: detected capacity change from 0 to 128
[  240.222493][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1068'.
[  240.259022][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1069'.
[  240.309793][ T8123] loop6: detected capacity change from 0 to 1024
[  240.474923][ T8123] hfsplus: request for non-existent node 16777216 in B*Tree
[  240.527650][ T8123] hfsplus: request for non-existent node 16777216 in B*Tree
[  241.147422][   T26] audit: type=1800 audit(1769447213.490:23): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1070" name="file1" dev="loop6" ino=20 res=0 errno=0
[  241.533144][ T8150] loop9: detected capacity change from 0 to 16
[  241.628769][ T8150] erofs: (device loop9): mounted with root inode @ nid 36.
[  241.727674][ T8145] attempt to access beyond end of device
[  241.727674][ T8145] loop9: rw=524288, want=1342177304, limit=16
[  241.963581][ T8145] attempt to access beyond end of device
[  241.963581][ T8145] loop9: rw=0, want=1342177280, limit=16
[  242.088577][   T26] audit: type=1800 audit(1769447214.430:24): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1077" name="file1" dev="loop9" ino=86 res=0 errno=0
[  242.700312][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1084'.
[  243.621499][ T8191] capability: warning: `syz.6.1090' uses deprecated v2 capabilities in a way that may be insecure
[  243.814035][ T8197] loop9: detected capacity change from 0 to 128
[  243.916937][ T8197] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  244.448422][ T8218] loop1: detected capacity change from 0 to 1024
[  244.795941][ T8218] EXT4-fs (loop1): Ignoring removed orlov option
[  244.916581][ T8218] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  244.996802][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1100'.
[  245.498314][ T8258] loop9: detected capacity change from 0 to 128
[  245.941643][ T8269] loop9: detected capacity change from 0 to 1024
[  246.051577][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1112'.
[  246.097855][ T8269] hfsplus: request for non-existent node 16777216 in B*Tree
[  246.185316][ T8269] hfsplus: request for non-existent node 16777216 in B*Tree
[  246.303971][ T8269] hfsplus: request for non-existent node 16777216 in B*Tree
[  246.391639][ T8269] hfsplus: request for non-existent node 16777216 in B*Tree
[  246.490797][ T8269] hfsplus: request for non-existent node 16777216 in B*Tree
[  246.559494][ T8269] hfsplus: request for non-existent node 16777216 in B*Tree
[  246.773755][   T26] audit: type=1800 audit(1769447219.120:25): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1111" name="file1" dev="loop9" ino=20 res=0 errno=0
[  247.188545][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1118'.
[  248.075345][ T8324] device syzkaller0 entered promiscuous mode
[  248.565669][ T8355] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  248.585675][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1132'.
[  249.254632][ T8377] loop1: detected capacity change from 0 to 164
[  249.486029][ T8377] rock: directory entry would overflow storage
[  249.552124][ T8377] rock: sig=0x4f50, size=4, remaining=3
[  249.638576][ T8377] iso9660: Corrupted directory entry in block 4 of inode 1792
[  250.100681][ T8397] loop1: detected capacity change from 0 to 1024
[  250.315724][ T8407] loop9: detected capacity change from 0 to 1024
[  250.394436][ T8407] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5
[  250.394436][ T8407] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  250.394436][ T8407] 
[  250.522524][ T8407] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  250.654521][ T8407] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  250.782689][ T8416] loop6: detected capacity change from 0 to 1024
[  251.011675][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.061809][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.159746][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.242294][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.258120][ T8426] device syzkaller0 entered promiscuous mode
[  251.296133][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.304258][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.367342][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'.
[  251.405772][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.478283][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.517921][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.537154][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.599948][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.669375][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.708345][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.741310][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.775570][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.824272][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.881384][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.906492][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.933617][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.974841][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.031651][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.078393][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.098714][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.152950][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.199026][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.238097][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.304069][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.391058][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.483901][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.547981][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.618657][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.651588][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.803382][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.888779][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  252.947859][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  253.025217][ T8416] hfsplus: request for non-existent node 16777216 in B*Tree
[  253.101753][   T26] audit: type=1800 audit(1769447225.106:26): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1149" name="file1" dev="loop6" ino=20 res=0 errno=0
[  253.975675][ T8485] netlink: 'syz.9.1162': attribute type 4 has an invalid length.
[  256.084734][ T8515] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  256.259645][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1169'.
[  257.487073][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  257.504637][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  258.033170][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1188'.
[  258.791403][ T8591] loop6: detected capacity change from 0 to 512
[  258.921949][ T8591] EXT4-fs (loop6): Ignoring removed bh option
[  259.010708][ T8591] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  259.162547][ T8591] EXT4-fs (loop6): 1 truncate cleaned up
[  259.169378][ T8591] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  259.833454][ T1108] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  260.150882][ T1108] usb 10-1: Using ep0 maxpacket: 16
[  260.240984][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1207'.
[  260.345866][ T1108] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  260.381364][ T1108] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  260.414435][ T1108] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  260.427462][ T8652] loop6: detected capacity change from 0 to 512
[  260.532460][ T8652] EXT4-fs error (device loop6): ext4_quota_enable:6442: inode #3: comm syz.6.1209: inode has both inline data and extents flags
[  260.562927][ T8652] EXT4-fs error (device loop6): ext4_quota_enable:6445: comm syz.6.1209: Bad quota inode: 3, type: 0
[  260.582912][ T8652] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  260.637974][ T8652] EXT4-fs (loop6): mount failed
[  260.684737][ T1108] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  260.730839][ T1108] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.775222][ T1108] usb 10-1: Product: syz
[  260.791304][ T1108] usb 10-1: Manufacturer: syz
[  260.829890][ T1108] usb 10-1: SerialNumber: syz
[  260.933171][ T8652] netlink: 'syz.6.1209': attribute type 298 has an invalid length.
[  261.166253][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1215'.
[  261.400979][ T1108] usb 10-1: 0:2 : does not exist
[  261.628820][ T8700] loop6: detected capacity change from 0 to 512
[  261.680428][ T8700] EXT4-fs (loop6): Ignoring removed bh option
[  261.805011][ T8700] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  261.837979][ T8700] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  262.118857][ T4250] usb 10-1: USB disconnect, device number 2
[  262.462513][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1226'.
[  264.938794][ T8726] Set syz1 is full, maxelem 65536 reached
[  265.698698][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1240'.
[  265.883003][ T8785] loop9: detected capacity change from 0 to 256
[  266.103387][ T8785] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104fe, chksum : 0xb0a4e674, utbl_chksum : 0xe619d30d)
[  266.132064][ T8785] exFAT-fs (loop9): error, invalid access to FAT bad cluster (entry 0x00000005)
[  266.141789][ T8785] exFAT-fs (loop9): Filesystem has been set read-only
[  266.149289][ T8785] exFAT-fs (loop9): failed to initialize root inode
[  266.412444][ T8791] loop6: detected capacity change from 0 to 1024
[  266.919041][   T23] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  267.749649][   T23] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  267.758896][   T23] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  267.769605][   T23] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  267.781595][   T23] usb 10-1: config 220 has no interface number 2
[  267.789023][   T23] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  267.823197][   T23] usb 10-1: config 220 interface 0 has no altsetting 0
[  267.839116][   T23] usb 10-1: config 220 interface 76 has no altsetting 0
[  267.858490][   T23] usb 10-1: config 220 interface 1 has no altsetting 0
[  268.045955][   T23] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  268.059613][ T8850] netlink: 'syz.5.1262': attribute type 298 has an invalid length.
[  268.078623][   T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.089494][   T23] usb 10-1: Product: syz
[  268.094261][   T23] usb 10-1: Manufacturer: syz
[  268.131577][   T23] usb 10-1: SerialNumber: syz
[  269.284891][   T23] usb 10-1: selecting invalid altsetting 0
[  269.348796][   T23] usb 10-1: Found UVC 7.01 device syz (8086:0b07)
[  269.387105][   T23] usb 10-1: No valid video chain found.
[  269.527614][ T8873] loop6: detected capacity change from 0 to 512
[  269.538982][ T8870] device syzkaller0 entered promiscuous mode
[  269.562059][ T8875] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1267'.
[  269.795722][ T8873] EXT4-fs (loop6): Ignoring removed bh option
[  270.318129][   T23] usb 10-1: selecting invalid altsetting 0
[  270.332467][   T23] usbtest: probe of 10-1:220.1 failed with error -22
[  270.367957][   T23] usb 10-1: USB disconnect, device number 3
[  270.392960][ T8873] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  270.433808][ T8873] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  271.614464][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1274'.
[  272.083147][ T8927] loop6: detected capacity change from 0 to 512
[  272.230397][ T8927] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  272.309689][ T8927] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.422497][ T8932] trusted_key: encrypted_key: master key parameter 's' is invalid
[  272.496685][ T8936] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 4: comm syz.6.1277: bad entry in directory: inode out of bounds - offset=0, inode=3936930, rec_len=12, size=1024 fake=1
[  272.582858][ T8936] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem
[  272.733853][ T8942] 9pnet: p9_fd_create_tcp (8942): problem connecting socket to 127.0.0.1
[  273.592237][ T8947] device syzkaller0 entered promiscuous mode
[  273.807666][ T8964] loop9: detected capacity change from 0 to 512
[  274.100426][ T8964] EXT4-fs (loop9): Ignoring removed bh option
[  274.132622][ T8964] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  274.901516][ T8964] EXT4-fs (loop9): 1 truncate cleaned up
[  274.929810][ T8964] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  275.095131][ T8996] loop6: detected capacity change from 0 to 128
[  275.137547][ T8996] EXT4-fs (loop6): Test dummy encryption mode enabled
[  275.188045][ T8996] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none.
[  275.208486][ T8996] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.398328][   T26] audit: type=1800 audit(1769447245.689:27): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1299" name="file1" dev="loop6" ino=12 res=0 errno=0
[  275.636272][ T9014] loop9: detected capacity change from 0 to 512
[  275.811384][ T9014] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  275.890500][ T9026] loop6: detected capacity change from 0 to 1764
[  275.958700][ T9014] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.125765][ T9014] EXT4-fs error (device loop9): ext4_generic_delete_entry:2729: inode #2: block 4: comm syz.9.1305: bad entry in directory: inode out of bounds - offset=0, inode=3936930, rec_len=12, size=1024 fake=1
[  276.208179][ T9014] EXT4-fs error (device loop9) in ext4_delete_entry:2800: Corrupt filesystem
[  276.338494][ T9044] loop6: detected capacity change from 0 to 512
[  276.411622][ T9044] EXT4-fs (loop6): Ignoring removed bh option
[  276.440865][ T9044] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  276.562509][ T9044] EXT4-fs (loop6): 1 truncate cleaned up
[  276.571050][ T9044] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  277.157160][ T9107] fuse: Bad value for 'fd'
[  278.951994][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1332'.
[  279.180991][ T9206] loop6: detected capacity change from 0 to 1024
[  279.370612][ T9206] EXT4-fs (loop6): inline encryption not supported
[  279.444863][ T9206] EXT4-fs (loop6): Ignoring removed bh option
[  279.522330][ T9206] EXT4-fs (loop6): Unrecognized mount option "seclabel" or missing value
[  279.560492][ T9206] 9pnet: Insufficient options for proto=fd
[  280.332988][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1347'.
[  280.372010][ T9232] loop9: detected capacity change from 0 to 1764
[  280.425805][ T9238] loop6: detected capacity change from 0 to 512
[  280.591449][ T9238] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  280.624672][ T9238] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.837889][ T9247] netlink: 176 bytes leftover after parsing attributes in process `syz.9.1345'.
[  281.547010][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'.
[  282.298403][ T4234] Bluetooth: hci3: command 0x0406 tx timeout
[  282.797601][ T9286] loop9: detected capacity change from 0 to 4096
[  283.003472][ T9286] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  284.052436][ T9334] EXT4-fs warning (device loop9): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  286.094167][ T9410] loop9: detected capacity change from 0 to 4096
[  286.194689][ T9410] EXT4-fs (loop9): Test dummy encryption mode enabled
[  286.233078][ T9410] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  286.280750][ T9410] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  286.428640][ T9410] System zones: 0-5
[  286.525442][ T9410] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  289.929282][ T9517] loop6: detected capacity change from 0 to 256
[  290.664040][ T9517] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d)
[  290.862076][ T9517] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000005)
[  290.921803][ T9517] exFAT-fs (loop6): Filesystem has been set read-only
[  290.936378][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1418'.
[  290.977328][ T9517] exFAT-fs (loop6): failed to initialize root inode
[  291.222392][ T9534] team0 (unregistering): Port device team_slave_0 removed
[  291.465190][ T9534] team0 (unregistering): Port device team_slave_1 removed
[  292.654509][ T9552] loop6: detected capacity change from 0 to 512
[  292.876789][ T9552] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  293.018666][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  293.052861][ T9552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  293.057666][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  293.157839][ T9552] System zones: 1-12
[  293.164366][ T9566] loop9: detected capacity change from 0 to 128
[  293.176431][ T9552] EXT4-fs (loop6): orphan cleanup on readonly fs
[  293.236135][ T9552] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1425: bg 0: block 361: padding at end of block bitmap is not set
[  293.305457][ T9566] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  293.551541][ T9552] EXT4-fs (loop6): Remounting filesystem read-only
[  293.613874][ T9552] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  293.707004][ T9552] EXT4-fs (loop6): Remounting filesystem read-only
[  293.762734][ T9552] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1425: invalid indirect mapped block 12 (level 1)
[  293.893801][ T9552] EXT4-fs (loop6): Remounting filesystem read-only
[  293.956662][ T9552] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1425: invalid indirect mapped block 2 (level 2)
[  294.015764][ T4250] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  294.035150][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1437'.
[  294.060029][ T9552] EXT4-fs (loop6): Remounting filesystem read-only
[  294.099868][ T9552] EXT4-fs (loop6): 1 truncate cleaned up
[  294.135978][ T9552] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,acl,inode_readahead_blks=0x0000000000000040,errors=remount-ro,init_itable. Quota mode: none.
[  294.427438][ T4250] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  294.471746][ T9552] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #2: block 5: comm syz.6.1425: lblock 0 mapped to illegal pblock 5 (length 1)
[  294.519036][ T4250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.611422][ T4250] usb 10-1: config 0 descriptor??
[  294.683686][ T9552] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1425: error -117 reading directory block
[  294.702364][ T4250] cp210x 10-1:0.0: cp210x converter detected
[  295.298373][ T4250] usb 10-1: cp210x converter now attached to ttyUSB0
[  295.938223][ T4250] usb 10-1: USB disconnect, device number 4
[  296.049178][ T4250] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  296.165324][ T4250] cp210x 10-1:0.0: device disconnected
Stopping sshd: stopped /usr/sbin/sshd (pid 3943)
OK
[  297.004341][ T9644] fuse: Bad value for 'fd'
Stopping crond: [  297.722285][ T9653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1450'.
[  297.859900][ T9659] loop9: detected capacity change from 0 to 128
[  297.938371][ T9663] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
stopped /usr/sbin/crond (pid 3927)
OK
[  298.097638][ T9659] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  298.445109][ T9659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
Stopping dhcpcd...
[  299.795115][ T9718] loop9: detected capacity change from 0 to 512
stopped /sbin/dhcpcd (pid 3852)
[  299.913530][ T9718] EXT4-fs (loop9): Ignoring removed bh option
[  299.949692][ T9718] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  300.016618][ T9718] EXT4-fs (loop9): 1 truncate cleaned up
[  300.066619][ T9718] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
Stopping network: [  300.437494][ T9746] loop6: detected capacity change from 0 to 128
[  300.608518][ T9746] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  300.681998][ T9746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.239561][ T9760] device syzkaller0 entered promiscuous mode
[  302.048669][ T9802] bridge0: port 3(ip6gretap0) entered blocking state
[  302.063408][ T9802] bridge0: port 3(ip6gretap0) entered disabled state
[  302.099347][ T9802] device ip6gretap0 entered promiscuous mode
[  302.106154][ T9802] bridge0: port 3(ip6gretap0) entered blocking state
[  302.113137][ T9802] bridge0: port 3(ip6gretap0) entered forwarding state
[  302.173658][ T4235] usb 10-1: new high-speed USB device number 5 using dummy_hcd
OK
Stopping iptables: OK
[  302.588209][ T4235] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  302.704010][ T4235] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  303.073767][ T4235] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  303.135375][ T4235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Stopping system message bus: [  303.277864][ T4235] usb 10-1: Product: syz
[  303.288829][ T4235] usb 10-1: Manufacturer: syz
[  303.294585][ T4235] usb 10-1: SerialNumber: syz
[  303.320306][ T4235] usb 10-1: config 0 descriptor??
[  303.482937][ T9793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  303.502493][ T9793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  304.258753][ T9793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  304.270365][ T9793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
done
[  305.250443][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1509'.
[  307.288138][ T9913] loop9: detected capacity change from 0 to 2048
[  307.352519][ T4235] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  307.449813][ T4235] dm9601 10-1:0.0 eth21: register 'dm9601' at usb-dummy_hcd.9-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[  307.466367][ T9924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  307.501233][ T9913] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  307.521554][ T4235] usb 10-1: USB disconnect, device number 5
[  307.542237][ T4235] dm9601 10-1:0.0 eth21: unregister 'dm9601' usb-dummy_hcd.9-1, Davicom DM96xx USB 10/100 Ethernet
[  307.596939][ T9924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  307.896446][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1521'.
[  308.684611][ T9939] loop6: detected capacity change from 0 to 128
[  308.867437][ T9949] loop9: detected capacity change from 0 to 128
[  308.885467][ T9939] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  308.922502][ T9939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.162777][ T9949] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  309.218463][ T9949] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
Stopping klogd: OK
Stopping acpid: [  311.201209][T10008] loop9: detected capacity change from 0 to 1024
[  311.357517][T10008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  311.369461][T10008] System zones: 0-1, 3-8
[  311.437338][T10008] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,init_itable,,errors=continue. Quota mode: none.
[  311.508616][T10008] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.597459][   T26] audit: type=1800 audit(1769447279.102:28): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1544" name="file1" dev="loop9" ino=15 res=0 errno=0
[  311.650619][T10008] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1544: bg 0: block 112: padding at end of block bitmap is not set
[  311.728826][T10008] EXT4-fs error (device loop9): ext4_free_blocks:6234: comm syz.9.1544: Freeing blocks not in datazone - block = 0, count = 16
[  311.985497][T10035] loop9: detected capacity change from 0 to 16
OK
[  312.093308][T10035] erofs: (device loop9): mounted with root inode @ nid 36.
Stopping syslogd: [  312.131354][T10035] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  312.194651][T10035] erofs: (device loop9): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851]
[  312.271348][T10035] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117]
[  312.297931][T10040] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36
stopped /sbin/syslogd (pid 3542)
OK
[  312.347496][T10040] erofs: (device loop9): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851]
[  312.431951][T10040] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117]
umount: can't remount debugfs read-only
[  313.939750][ T4235] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  314.281085][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1563'.
[  314.394799][ T4235] usb 10-1: unable to get BOS descriptor or descriptor too short
[  314.690345][ T4235] usb 10-1: New USB device found, idVendor=05ba, idProduct=0007, bcdDevice=3e.97
[  314.795954][ T4235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.010876][ T4235] usb 10-1: Product: syz
[  315.038490][ T4235] usb 10-1: Manufacturer: syz
[  315.058591][ T4235] usb 10-1: SerialNumber: syz
[  315.116799][T10093] loop6: detected capacity change from 0 to 1024
[  315.291675][T10093] EXT4-fs (loop6): Ignoring removed bh option
[  315.312289][T10093] EXT4-fs (loop6): inline encryption not supported
[  315.395462][T10093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  315.422475][T10093] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.1566: lblock 2 mapped to illegal pblock 2 (length 1)
[  315.460642][ T4235] usb 10-1: USB disconnect, device number 6
[  315.491072][T10093] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  315.539799][T10093] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.1566: lblock 0 mapped to illegal pblock 48 (length 1)
[  317.322122][T10093] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  317.363486][T10093] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.1566: Failed to acquire dquot type 0
[  317.458840][T10093] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  317.572034][T10093] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.1566: mark_inode_dirty error
[  317.691383][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  317.700519][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  317.709843][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  317.719393][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[  317.728534][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[  317.737820][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[  317.746937][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
serialport: VM disconnected.