last executing test programs:

22m19.960304353s ago: executing program 4 (id=671):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0xa}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9a1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8000000000000001, 0xdd}}, 0x30)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000000000)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0x1, 0x471c, &(0x7f0000006e40)="$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")

22m17.379793602s ago: executing program 4 (id=686):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x48000)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000017, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

22m16.71951584s ago: executing program 4 (id=688):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x1, 0x3e}, @flat=@weak_handle={0x77682a85, 0x1004, 0x1}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0})

22m16.36985398s ago: executing program 4 (id=690):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

22m15.876935569s ago: executing program 4 (id=692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

22m15.267184604s ago: executing program 4 (id=698):
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22m14.628983849s ago: executing program 32 (id=698):
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m1.159760987s ago: executing program 1 (id=2525):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000051}, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m59.918038578s ago: executing program 0 (id=2526):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
r2 = userfaultfd(0x1)
syz_open_dev$hiddev(0x0, 0x100000001, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

9m59.883922285s ago: executing program 1 (id=2528):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x23c, 0x0, 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)

9m59.679630075s ago: executing program 0 (id=2529):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, 0x0, &(0x7f0000000240))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
socket(0x3, 0xa, 0x0)

9m58.664743451s ago: executing program 1 (id=2532):
creat(0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000024c0)={0x9, 0x0})

9m55.932232142s ago: executing program 0 (id=2535):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
getrlimit(0xe, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x103200, 0x0)
close(0x3)
openat(0xffffffffffffff9c, 0x0, 0x0, 0xa)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

9m55.8903016s ago: executing program 1 (id=2536):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
r4 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000140)=@udp6, 0x1}, 0x20)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802)
ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380)

9m54.876481002s ago: executing program 0 (id=2539):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000035, 0x20000000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
socket$inet(0x2, 0x3, 0x9)
accept4$alg(r3, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c0007800800064081"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb06000440000400000500070006000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x40010)

9m54.458697651s ago: executing program 1 (id=2541):
socket$netlink(0x10, 0x3, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuseblk(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, 0x0)
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

9m52.232083062s ago: executing program 1 (id=2543):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x512f0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)

9m45.322796965s ago: executing program 0 (id=2554):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
fchdir(r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)

9m42.490865692s ago: executing program 0 (id=2558):
creat(0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000024c0)={0x9, 0x0})

9m35.999335139s ago: executing program 33 (id=2543):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x512f0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)

9m25.716326236s ago: executing program 34 (id=2558):
creat(0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000024c0)={0x9, 0x0})

1m6.689728461s ago: executing program 3 (id=3325):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
inotify_init1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
socket$tipc(0x1e, 0x2, 0x0)
socket(0x29, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffffab, &(0x7f0000000440)=@new_dev={0x4, 0x8bd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x2, 0x80, 0xfffffffa, 0x253, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3df, 0x1, 0x1000000, 0x10020d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d17, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x101f6d, 0x8000, 0x40001, 0xfffffffe, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff55, 0x400, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m3.928309794s ago: executing program 3 (id=3330):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlockall(0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_b'])
chdir(&(0x7f0000000100)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)
r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r1, 0xc)
socket(0x40000000015, 0x5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040))

1m1.047332041s ago: executing program 3 (id=3339):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}})
ioprio_set$pid(0x3, r0, 0x2007)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c696f636861727365743d69736f383835392d31352c757466383d312c646973636172642c736801000000616d653d77696e39352c73686f72746e6104000000000000002c756e695f786c6174653d302c756d61736b3d30303030303030303030303030303030303030303031312c696f636861727365743d6d616363656c7469632c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c00"], 0x7f, 0x2b8, &(0x7f0000001300)="$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")
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x4041080)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x78, 0x7800, 0xb1, 0x4, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

58.924395868s ago: executing program 3 (id=3351):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
setuid(0x0)
r4 = fsopen(0x0, 0x0)
fsmount(r4, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast2, 0x9}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x84af, 0x3f)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x1, 0x4, 0x80f, 0x1, r0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)

57.477450096s ago: executing program 3 (id=3344):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)

54.743480459s ago: executing program 3 (id=3349):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0xe)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0)
socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
socket$rds(0x15, 0x5, 0x0)

37.746011939s ago: executing program 35 (id=3349):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0xe)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0)
socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
socket$rds(0x15, 0x5, 0x0)

17.608084753s ago: executing program 2 (id=3408):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
keyctl$session_to_parent(0x12)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.943184707s ago: executing program 7 (id=3411):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})

15.799507078s ago: executing program 7 (id=3412):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x1200040, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT=0x0], 0xfe, 0x29f, &(0x7f0000000c00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c050, 0x0, 0x0, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/1826], 0xa99, &(0x7f0000001800)='GPL\x00')
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(0x0, 0x48)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)

12.473120566s ago: executing program 7 (id=3415):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40)
socket(0xa, 0x3, 0xff)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x14, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)

11.338588274s ago: executing program 7 (id=3416):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r2, 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

11.270411049s ago: executing program 2 (id=3417):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)

11.03065911s ago: executing program 6 (id=3418):
close(0x3)
r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffd, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1)
close(0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xa277)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_open_dev$video4linux(0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r3, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013})
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)

9.976822947s ago: executing program 2 (id=3419):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r3)
r4 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

9.81635348s ago: executing program 7 (id=3421):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})

8.784018653s ago: executing program 7 (id=3422):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="0001000f000080000000000004000000000000feaccd54f7", 0x18)
getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000004000080)
sched_setattr(0x0, 0x0, 0x0)

8.18409384s ago: executing program 2 (id=3423):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = creat(&(0x7f0000000040)='./file1\x00', 0x108)
r5 = fanotify_init(0xf00, 0x1)
fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0)
fallocate(r3, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)

6.970638433s ago: executing program 5 (id=3425):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
io_setup(0x7d, &(0x7f0000000600))
getgroups(0x0, &(0x7f00000001c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011)

6.751333992s ago: executing program 2 (id=3426):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})

6.544197856s ago: executing program 6 (id=3427):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

4.91432096s ago: executing program 2 (id=3428):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)

4.803265028s ago: executing program 5 (id=3429):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001540)=ANY=[], 0x0, 0x8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000180)=0x7f, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a000d0000000000000000000400008008"], 0x1c}], 0x1, 0x0, 0x0, 0x40804}, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
syz_emit_vhci(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x4070bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x17, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x61}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20002811}, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9}}}, 0x7)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)
pwrite64(r3, &(0x7f00000001c0)='\x00', 0x1, 0x8089000)
ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000040)={0x3, 0x200, 0x8})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd70400200"/22], 0x1c}}, 0x18)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000480)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

4.086466115s ago: executing program 6 (id=3430):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.647316628s ago: executing program 5 (id=3431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})

2.992686909s ago: executing program 5 (id=3432):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

1.730946224s ago: executing program 6 (id=3433):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r1, 0x9)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r2, 0x8)
landlock_restrict_self(r2, 0x8)
landlock_restrict_self(r2, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
r3 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

1.496097004s ago: executing program 5 (id=3434):
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x604a}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

1.260489826s ago: executing program 6 (id=3435):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000400)={[{@fatal_errors_bug}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@space_cache}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x0, 0x7, 0x7ffb, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000003, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0x7, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10002, 0x3, 0x1ff, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20200008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x9, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x620bb16b, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x0, 0xffff3441, 0xfff]}, 0x45c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, '\x00', @raw_data=[0x2, 0xe72, 0x7da, 0x4, 0x5, 0xfff, 0x80, 0x3, 0x6, 0x635, 0x2, 0x0, 0x5, 0x7, 0x5, 0x3, 0x8, 0x4, 0x1, 0x6b8, 0x6, 0x6, 0x3, 0x800, 0x1ff, 0x2683, 0x10, 0xe8ac, 0x7, 0xd, 0x8, 0x6]})
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f)

1.216264744s ago: executing program 5 (id=3436):
close(0x3)
r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffd, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1)
close(0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xa277)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_open_dev$video4linux(0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r3, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013})
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)

0s ago: executing program 6 (id=3437):
mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
recvmsg(r5, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x90)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x2818000, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_win95}, {@fat=@check_strict}, {@shortname_winnt}, {@fat=@debug}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@fat=@flush}, {@utf8no}]}, 0x1, 0x34a, &(0x7f0000001740)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)

kernel console output (not intermixed with test programs):

h: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1030.805976][   T52] Bluetooth: hci5: command tx timeout
[ 1032.364889][T14676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1032.364965][T14676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.949432][   T52] Bluetooth: hci4: command tx timeout
[ 1035.166663][   T52] Bluetooth: hci4: command tx timeout
[ 1035.344763][T14676] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1035.344863][T14676] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.741567][T14831] netdevsim0 speed is unknown, defaulting to 1000
[ 1035.766950][T14831] lo speed is unknown, defaulting to 1000
[ 1035.960952][T14919] Invalid ELF header magic: != ELF
[ 1037.579989][   T52] Bluetooth: hci4: command tx timeout
[ 1038.144102][T14885] netdevsim0 speed is unknown, defaulting to 1000
[ 1038.255294][T14885] lo speed is unknown, defaulting to 1000
[ 1039.783886][   T52] Bluetooth: hci4: command tx timeout
[ 1040.100472][T14676] bridge_slave_1: left allmulticast mode
[ 1040.107223][T14676] bridge_slave_1: left promiscuous mode
[ 1040.113647][T14676] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1040.129960][T14676] bridge_slave_0: left allmulticast mode
[ 1040.138577][T14676] bridge_slave_0: left promiscuous mode
[ 1040.145352][T14676] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.984782][T14676] erspan0: left allmulticast mode
[ 1040.984836][T14676] erspan0: left promiscuous mode
[ 1040.985391][T14676] bridge1: port 1(erspan0) entered disabled state
[ 1045.467611][T14676] team0: Port device vxlan0 removed
[ 1045.606570][T14676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1045.896273][T14676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1045.928776][T14676] bond0 (unregistering): Released all slaves
[ 1046.928157][T14676] bond1 (unregistering): (slave veth5): Releasing active interface
[ 1046.928216][T14676] dummy0: entered promiscuous mode
[ 1046.998051][T14676] bond1 (unregistering): (slave dummy0): Releasing active interface
[ 1047.027454][T14676] bond1 (unregistering): Released all slaves
[ 1047.049199][T14676] bond2 (unregistering): Released all slaves
[ 1048.604750][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1048.768832][ T5767] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1048.977242][ T5767] usb 4-1: Using ep0 maxpacket: 32
[ 1049.002405][ T5767] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1049.040558][ T5767] usb 4-1: config 0 has no interfaces?
[ 1049.122567][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.131551][ T5767] usb 4-1: Product: syz
[ 1049.138472][ T5767] usb 4-1: Manufacturer: syz
[ 1049.138540][ T5767] usb 4-1: SerialNumber: syz
[ 1049.506669][ T5767] usb 4-1: config 0 descriptor??
[ 1051.693196][T15033] usb 4-1: USB disconnect, device number 12
[ 1051.724194][T14676] : left promiscuous mode
[ 1051.979247][T14831] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.979451][T14831] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1051.979974][T14831] bridge_slave_0: entered allmulticast mode
[ 1051.987574][T14831] bridge_slave_0: entered promiscuous mode
[ 1051.994577][T14831] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1051.995028][T14831] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1051.995422][T14831] bridge_slave_1: entered allmulticast mode
[ 1052.000295][T14831] bridge_slave_1: entered promiscuous mode
[ 1052.828647][T14831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1052.843808][T14831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1052.928101][T14676] tipc: Left network mode
[ 1052.935576][T14831] team0: Port device team_slave_0 added
[ 1052.944858][T14831] team0: Port device team_slave_1 added
[ 1052.999542][T14831] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1053.008728][T14831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1053.041010][T14831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1053.060475][T14831] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1053.060970][T14831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1053.061006][T14831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1054.482713][T14831] hsr_slave_0: entered promiscuous mode
[ 1054.483896][T14831] hsr_slave_1: entered promiscuous mode
[ 1054.488538][T14831] debugfs: 'hsr0' already exists in 'hsr'
[ 1054.488573][T14831] Cannot create hsr debugfs directory
[ 1055.339529][   T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1055.497813][   T43] usb 4-1: Using ep0 maxpacket: 8
[ 1055.503738][   T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1055.519793][   T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1055.519893][   T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1055.519936][   T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1055.519975][   T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1055.520004][   T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1055.520053][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.800797][   T43] usb 4-1: GET_CAPABILITIES returned 0
[ 1055.800876][   T43] usbtmc 4-1:16.0: can't read capabilities
[ 1056.783370][T14885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.783507][T14885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1056.783675][T14885] bridge_slave_0: entered allmulticast mode
[ 1056.785743][T14885] bridge_slave_0: entered promiscuous mode
[ 1056.887393][T14885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.887530][T14885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.887725][T14885] bridge_slave_1: entered allmulticast mode
[ 1058.369594][T14885] bridge_slave_1: entered promiscuous mode
[ 1058.520798][ T5757] usb 4-1: USB disconnect, device number 13
[ 1058.689398][T14885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1058.736197][T14885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1058.898253][T14885] team0: Port device team_slave_0 added
[ 1058.966265][T14885] team0: Port device team_slave_1 added
[ 1060.689537][T14885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1060.697246][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1060.758215][T14885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1063.475718][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1063.525571][T14885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1063.525613][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1063.525675][T14885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1063.920701][T14834] Bluetooth: hci1: ACL packet for unknown connection handle 200
[ 1064.627041][T14831] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1064.672134][T14831] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1064.702713][T14885] hsr_slave_0: entered promiscuous mode
[ 1064.708939][T14885] hsr_slave_1: entered promiscuous mode
[ 1064.716711][T14885] debugfs: 'hsr0' already exists in 'hsr'
[ 1064.716790][T14885] Cannot create hsr debugfs directory
[ 1064.745330][T14831] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1064.810445][T14831] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1064.940948][T14831] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1064.967507][T14831] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1064.975393][T14831] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1065.108901][T14831] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1065.331570][ T8874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[ 1065.340611][ T8874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[ 1065.349878][ T8874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[ 1065.506796][T14978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[ 1065.605091][T14676] hsr_slave_0: left promiscuous mode
[ 1065.612583][T14676] hsr_slave_1: left promiscuous mode
[ 1065.629412][T14676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1065.629467][T14676] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1065.640630][T14676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1065.640705][T14676] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1065.710532][T14676] veth0_to_team: left promiscuous mode
[ 1065.710916][T14676] veth1_macvtap: left promiscuous mode
[ 1065.737732][T14676] veth0_macvtap: left promiscuous mode
[ 1065.754999][T14676] veth1_vlan: left promiscuous mode
[ 1065.755439][T14676] veth0_vlan: left promiscuous mode
[ 1071.800397][T14676] team0 (unregistering): Port device team_slave_1 removed
[ 1072.556194][T14676] team0 (unregistering): Port device team_slave_0 removed
[ 1074.584120][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1074.757956][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2633'.
[ 1074.804480][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1074.855261][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1077.068243][T14831] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1077.273752][T15189] loop3: detected capacity change from 0 to 2048
[ 1078.349224][T14831] 8021q: adding VLAN 0 to HW filter on device team0
[ 1078.371285][T14676] IPVS: stop unused estimator thread 0...
[ 1078.527924][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.528269][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1078.638210][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1078.638373][ T8874] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1078.815366][T14885] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1079.532715][T14885] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1079.643616][T14885] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1079.683508][T14885] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1079.738507][T14885] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1079.760419][T14885] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1079.770212][T14885] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1080.018390][T14885] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1081.915351][   T30] audit: type=1326 audit(1061.516:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.5.2642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c19d9e0d9 code=0x0
[ 1082.005189][T15224] loop5: detected capacity change from 0 to 16
[ 1082.673500][ T8874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1082.722830][ T8874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1083.712339][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1084.624258][T15236] loop3: detected capacity change from 0 to 131072
[ 1084.724261][T15236] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[ 1084.724321][T15236] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1085.097415][T15236] F2FS-fs (loop3): invalid crc value
[ 1085.234235][T15236] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1085.252662][T15236] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1085.252709][T15236] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[ 1085.450464][T14834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1085.465832][T14834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1085.476558][T14834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1085.477857][T14834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1085.478672][T14834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1087.759553][   T52] Bluetooth: hci3: command tx timeout
[ 1087.862852][ T8874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.862948][ T8874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1088.362217][ T8874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1088.362287][ T8874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1088.694231][ T8874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1088.705164][ T8874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1088.803102][T14885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1088.886452][T14885] 8021q: adding VLAN 0 to HW filter on device team0
[ 1088.955944][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.956198][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.989706][T14679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.989848][T14679] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1089.037905][T15255] netdevsim0 speed is unknown, defaulting to 1000
[ 1089.088448][T15255] lo speed is unknown, defaulting to 1000
[ 1090.015644][   T52] Bluetooth: hci3: command tx timeout
[ 1090.576784][T15290] loop5: detected capacity change from 0 to 2048
[ 1090.641647][T15290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1092.292134][   T52] Bluetooth: hci3: command tx timeout
[ 1092.432744][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1092.865031][T15311] io-wq is not configured for unbound workers
[ 1092.999479][T15314] hpfs: Bad magic ... probably not HPFS
[ 1093.013427][T15314] hpfs: Bad magic ... probably not HPFS
[ 1093.717095][T14834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1093.736410][T14834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1093.767846][T14834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1093.778062][T14834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1093.779241][T14834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1093.986150][ T8874] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1094.521773][T14834] Bluetooth: hci3: command tx timeout
[ 1095.032030][T14834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1095.032083][T14834] CPU: 1 UID: 0 PID: 14834 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1095.032117][T14834] Tainted: [L]=SOFTLOCKUP
[ 1095.032127][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1095.032143][T14834] Workqueue: hci1 hci_rx_work
[ 1095.032311][T14834] Call Trace:
[ 1095.032320][T14834]  <TASK>
[ 1095.032331][T14834]  dump_stack_lvl+0xe8/0x150
[ 1095.032391][T14834]  sysfs_create_dir_ns+0x271/0x2a0
[ 1095.032447][T14834]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1095.032478][T14834]  ? do_raw_spin_unlock+0xf5/0x210
[ 1095.032535][T14834]  kobject_add_internal+0x622/0xcd0
[ 1095.032643][T14834]  kobject_add+0x163/0x240
[ 1095.032681][T14834]  ? __pfx_kobject_add+0x10/0x10
[ 1095.032719][T14834]  ? get_device_parent+0x366/0x3a0
[ 1095.032843][T14834]  device_add+0x3fa/0xb80
[ 1095.032880][T14834]  hci_conn_add_sysfs+0xd5/0x210
[ 1095.032933][T14834]  le_conn_complete_evt+0xfb7/0x1690
[ 1095.032999][T14834]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1095.033033][T14834]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1095.033133][T14834]  ? skb_pull_data+0xf0/0x200
[ 1095.033222][T14834]  hci_le_conn_complete_evt+0x187/0x470
[ 1095.033261][T14834]  hci_event_packet+0x67a/0xf10
[ 1095.033319][T14834]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1095.033348][T14834]  ? __pfx_hci_event_packet+0x10/0x10
[ 1095.033379][T14834]  ? audit_alloc_mark+0x480/0x550
[ 1095.033421][T14834]  ? hci_send_to_monitor+0xe2/0x590
[ 1095.033458][T14834]  hci_rx_work+0x3ee/0x1020
[ 1095.033492][T14834]  ? process_scheduled_works+0x97e/0x1630
[ 1095.033534][T14834]  process_scheduled_works+0xc4e/0x1630
[ 1095.033599][T14834]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1095.033636][T14834]  ? assign_work+0x3cf/0x5d0
[ 1095.033670][T14834]  worker_thread+0xa47/0xfb0
[ 1095.033716][T14834]  ? __kthread_parkme+0x71/0x1f0
[ 1095.033760][T14834]  kthread+0x388/0x470
[ 1095.033782][T14834]  ? __pfx_worker_thread+0x10/0x10
[ 1095.033809][T14834]  ? __pfx_kthread+0x10/0x10
[ 1095.033833][T14834]  ret_from_fork+0x514/0xb70
[ 1095.033884][T14834]  ? __pfx_ret_from_fork+0x10/0x10
[ 1095.033920][T14834]  ? __switch_to+0xc89/0x1420
[ 1095.033955][T14834]  ? __pfx_kthread+0x10/0x10
[ 1095.033978][T14834]  ret_from_fork_asm+0x1a/0x30
[ 1095.034032][T14834]  </TASK>
[ 1095.034124][T14834] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1095.034172][T14834] Bluetooth: hci1: failed to register connection device
[ 1095.607825][ T8874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1095.648665][ T8874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1095.661659][ T8874] bond0 (unregistering): Released all slaves
[ 1095.680639][ T8874] bond1 (unregistering): Released all slaves
[ 1096.451081][T14834] Bluetooth: hci5: command tx timeout
[ 1096.527574][ T8874] bond2 (unregistering): Released all slaves
[ 1096.743988][ T8874] : left promiscuous mode
[ 1096.879976][T15339] loop5: detected capacity change from 0 to 128
[ 1096.936390][T15339] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1098.192933][T15339] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1098.621961][T14834] Bluetooth: hci5: command tx timeout
[ 1100.932020][T14834] Bluetooth: hci5: command tx timeout
[ 1101.541289][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1101.608574][T15315] netdevsim0 speed is unknown, defaulting to 1000
[ 1101.696154][T15315] lo speed is unknown, defaulting to 1000
[ 1101.705611][T15255] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1101.705759][T15255] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1101.721950][T15255] bridge_slave_0: entered allmulticast mode
[ 1101.723493][T15255] bridge_slave_0: entered promiscuous mode
[ 1101.757573][T15255] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1101.761150][T15255] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1101.761645][T15255] bridge_slave_1: entered allmulticast mode
[ 1101.815968][T15255] bridge_slave_1: entered promiscuous mode
[ 1101.839445][ T8060] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1101.888879][ T8874] hsr_slave_0: left promiscuous mode
[ 1101.897135][ T8874] hsr_slave_1: left promiscuous mode
[ 1101.904419][ T8874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1101.912096][ T8874] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1101.940694][ T8874] veth1_macvtap: left promiscuous mode
[ 1101.949323][ T8874] veth0_macvtap: left promiscuous mode
[ 1101.955432][ T8874] veth1_vlan: left promiscuous mode
[ 1101.962325][ T8874] veth0_vlan: left promiscuous mode
[ 1103.154376][T14834] Bluetooth: hci5: command tx timeout
[ 1103.402386][ T8874] team0 (unregistering): Port device team_slave_1 removed
[ 1103.417533][ T8874] team0 (unregistering): Port device team_slave_0 removed
[ 1103.771449][T15255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1103.793415][T15255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1103.867868][T15255] team0: Port device team_slave_0 added
[ 1103.892983][T15255] team0: Port device team_slave_1 added
[ 1104.001899][T15415] loop5: detected capacity change from 0 to 4096
[ 1104.011968][T15415] EXT4-fs: Ignoring removed oldalloc option
[ 1104.022014][T15415] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1104.051172][T15415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1104.094234][T15255] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1104.094270][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1104.094336][T15255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1104.207218][T15255] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1104.207263][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1104.207313][T15255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1105.546495][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1105.763357][T15255] hsr_slave_0: entered promiscuous mode
[ 1105.777649][T15255] hsr_slave_1: entered promiscuous mode
[ 1105.807939][T15255] debugfs: 'hsr0' already exists in 'hsr'
[ 1105.813949][T15255] Cannot create hsr debugfs directory
[ 1108.746219][ T8874] IPVS: stop unused estimator thread 0...
[ 1108.931958][T15449] loop5: detected capacity change from 0 to 512
[ 1108.947159][T15449] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1110.541099][T15449] EXT4-fs (loop5): 1 truncate cleaned up
[ 1110.544021][T15449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1112.756141][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1112.907715][T15315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.919040][T15315] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.919240][T15315] bridge_slave_0: entered allmulticast mode
[ 1112.937274][T15315] bridge_slave_0: entered promiscuous mode
[ 1113.105883][T15315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1113.110035][T15315] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1113.115173][T15315] bridge_slave_1: entered allmulticast mode
[ 1113.135521][T15315] bridge_slave_1: entered promiscuous mode
[ 1113.806174][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1116.111534][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1116.126147][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1116.170542][T15315] team0: Port device team_slave_0 added
[ 1116.180054][T15315] team0: Port device team_slave_1 added
[ 1116.362651][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1116.370234][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1116.396462][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1117.532720][T15510] overlayfs: failed to clone upperpath
[ 1118.284768][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1118.284811][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1118.321144][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1121.180995][T15315] hsr_slave_0: entered promiscuous mode
[ 1121.184023][T15315] hsr_slave_1: entered promiscuous mode
[ 1121.189853][T15315] debugfs: 'hsr0' already exists in 'hsr'
[ 1121.189937][T15315] Cannot create hsr debugfs directory
[ 1121.309265][T15540] loop3: detected capacity change from 0 to 2048
[ 1121.449731][T15540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1121.989042][T15556] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1122.021379][T15556] overlayfs: failed to verify upper root origin
[ 1122.424488][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1122.985252][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1124.231498][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1125.346585][T15574] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present
[ 1128.420536][T15586] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1128.420893][T15586] Error validating options; rc = [-22]
[ 1128.563525][T15591] loop3: detected capacity change from 0 to 512
[ 1128.802506][T15591] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[ 1128.823664][T15591] EXT4-fs (loop3): 1 truncate cleaned up
[ 1128.831345][T15591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1129.739981][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1129.837981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1129.913438][T14979] bridge_slave_1: left allmulticast mode
[ 1129.913486][T14979] bridge_slave_1: left promiscuous mode
[ 1129.913737][T14979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.948946][T14979] bridge_slave_0: left allmulticast mode
[ 1129.949005][T14979] bridge_slave_0: left promiscuous mode
[ 1129.949626][T14979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1130.273749][T14979] bridge_slave_1: left allmulticast mode
[ 1130.273805][T14979] bridge_slave_1: left promiscuous mode
[ 1130.274399][T14979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1130.346600][T15624] Invalid source name
[ 1130.346694][T15624] UBIFS error (pid: 15624): cannot open "ubifs", error -22
[ 1131.015523][T14979] bridge_slave_0: left allmulticast mode
[ 1131.015594][T14979] bridge_slave_0: left promiscuous mode
[ 1131.020684][T14979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.598287][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1133.619613][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1133.633771][T14979] bond0 (unregistering): Released all slaves
[ 1135.586492][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1135.595741][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1135.598265][T14979] bond0 (unregistering): Released all slaves
[ 1137.119213][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1137.327953][T14979] hsr_slave_0: left promiscuous mode
[ 1137.354966][T14979] hsr_slave_1: left promiscuous mode
[ 1137.355977][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1137.356641][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1137.464213][T14682] IPVS: starting estimator thread 0...
[ 1137.496567][T14979] hsr_slave_0: left promiscuous mode
[ 1137.513891][T14979] hsr_slave_1: left promiscuous mode
[ 1137.519640][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1137.531548][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1137.773309][T15666] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1140.111974][T14979] team0 (unregistering): Port device team_slave_1 removed
[ 1141.107597][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1141.107671][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1141.341246][T14979] team0 (unregistering): Port device team_slave_0 removed
[ 1142.490893][T14979] team0 (unregistering): Port device team_slave_1 removed
[ 1142.532190][T14979] team0 (unregistering): Port device team_slave_0 removed
[ 1142.796580][T15255] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1142.854768][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1142.866311][T15255] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1142.960058][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1142.970918][T15255] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1143.015511][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1143.023745][T15255] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1143.077532][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1145.116439][T15255] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1145.277038][T15255] 8021q: adding VLAN 0 to HW filter on device team0
[ 1145.298344][T14681] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.298469][T14681] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1145.334321][T14681] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.334467][T14681] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1147.644455][   T30] audit: type=1326 audit(1123.000:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.644733][   T30] audit: type=1326 audit(1123.000:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.651025][   T30] audit: type=1326 audit(1123.019:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.651095][   T30] audit: type=1326 audit(1123.019:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.651161][   T30] audit: type=1326 audit(1123.019:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.653052][   T30] audit: type=1326 audit(1123.019:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.653295][   T30] audit: type=1326 audit(1123.019:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.653930][   T30] audit: type=1326 audit(1123.019:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.654308][   T30] audit: type=1326 audit(1123.019:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1147.658298][   T30] audit: type=1326 audit(1123.019:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15768 comm="syz.2.2746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d79e0d9 code=0x7ffc0000
[ 1148.104254][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2745'.
[ 1149.564647][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1149.575966][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1149.588688][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1149.610963][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1149.626787][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1149.727952][T15315] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1149.798982][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1149.814260][T15315] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1149.840405][T15785] loop5: detected capacity change from 0 to 512
[ 1149.848003][T15785] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1149.879482][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1149.892185][T15315] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1149.908907][T15785] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1149.941400][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1149.951245][T15315] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1150.019840][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1150.218976][T15785] EXT4-fs (loop5): 1 truncate cleaned up
[ 1150.349021][T15785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1150.871050][T15315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1151.633156][T15315] 8021q: adding VLAN 0 to HW filter on device team0
[ 1151.792125][T14682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.792324][T14682] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1151.820628][T14682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.820800][T14682] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1151.904544][   T52] Bluetooth: hci4: command tx timeout
[ 1151.916517][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1152.367052][T15817] loop5: detected capacity change from 0 to 1024
[ 1152.413031][T15817] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1154.222768][   T52] Bluetooth: hci4: command tx timeout
[ 1156.484864][   T52] Bluetooth: hci4: command tx timeout
[ 1156.527280][T15781] netdevsim0 speed is unknown, defaulting to 1000
[ 1156.603932][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2760'.
[ 1156.786441][T15781] lo speed is unknown, defaulting to 1000
[ 1158.660197][   T52] Bluetooth: hci4: command tx timeout
[ 1159.132010][T14834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1159.154364][T14834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1159.165334][T14834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1159.175998][T14834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1159.177862][T14834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1161.498750][T14834] Bluetooth: hci3: command tx timeout
[ 1163.705460][T14834] Bluetooth: hci3: command tx timeout
[ 1165.001110][T15951] trusted_key: encrypted_key: insufficient parameters specified
[ 1165.016079][T15954] loop5: detected capacity change from 0 to 128
[ 1165.034294][T15954] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1165.865649][T15954] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1165.890443][ T3342] bridge_slave_1: left allmulticast mode
[ 1165.890506][ T3342] bridge_slave_1: left promiscuous mode
[ 1165.890764][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1165.988879][T14834] Bluetooth: hci3: command tx timeout
[ 1166.168053][ T3342] bridge_slave_0: left allmulticast mode
[ 1166.168100][ T3342] bridge_slave_0: left promiscuous mode
[ 1166.169058][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1167.179071][ T8060] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1168.904123][T14834] Bluetooth: hci3: command tx timeout
[ 1168.949535][ T3342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1168.974193][ T3342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1168.989963][ T3342] bond0 (unregistering): Released all slaves
[ 1170.117242][T15781] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.119423][T15781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.355278][T15781] bridge_slave_0: entered allmulticast mode
[ 1170.363800][T15781] bridge_slave_0: entered promiscuous mode
[ 1170.378856][T15781] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.378977][T15781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.383799][T15781] bridge_slave_1: entered allmulticast mode
[ 1170.405060][T15781] bridge_slave_1: entered promiscuous mode
[ 1170.603462][T15781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1170.650925][T15781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1170.824991][T15893] netdevsim0 speed is unknown, defaulting to 1000
[ 1170.860174][T15781] team0: Port device team_slave_0 added
[ 1170.881505][T15781] team0: Port device team_slave_1 added
[ 1170.882080][T15893] lo speed is unknown, defaulting to 1000
[ 1171.161684][ T3342] hsr_slave_0: left promiscuous mode
[ 1171.178652][ T3342] hsr_slave_1: left promiscuous mode
[ 1171.186084][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1171.208025][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1172.729475][T16015] random: crng reseeded on system resumption
[ 1175.622990][ T3342] team0 (unregistering): Port device team_slave_1 removed
[ 1176.585746][ T3342] team0 (unregistering): Port device team_slave_0 removed
[ 1177.046522][T15781] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1177.054001][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1177.081160][T15781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1177.577012][T15781] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1177.577050][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1177.577309][T15781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1177.921029][T15781] hsr_slave_0: entered promiscuous mode
[ 1177.941247][T15781] hsr_slave_1: entered promiscuous mode
[ 1177.947417][T15781] debugfs: 'hsr0' already exists in 'hsr'
[ 1177.947443][T15781] Cannot create hsr debugfs directory
[ 1178.087126][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1180.320655][T16061] loop5: detected capacity change from 0 to 32768
[ 1180.443827][T16061] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1180.487722][T16061] XFS (loop5): Ending clean mount
[ 1180.509766][T16061] XFS (loop5): Quotacheck needed: Please wait.
[ 1180.958501][T16061] XFS (loop5): Quotacheck: Done.
[ 1182.016926][ T8060] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1187.031619][T16132] loop3: detected capacity change from 0 to 512
[ 1187.045488][T16132] ext4: Bad value for 'sb'
[ 1187.189203][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1187.306212][T15893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1187.378357][T15893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1187.378925][T15893] bridge_slave_0: entered allmulticast mode
[ 1187.442199][T15893] bridge_slave_0: entered promiscuous mode
[ 1187.707303][T15893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1187.716634][T15893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.725480][T15893] bridge_slave_1: entered allmulticast mode
[ 1187.801728][T15893] bridge_slave_1: entered promiscuous mode
[ 1188.202596][T16141] loop5: detected capacity change from 0 to 512
[ 1190.697155][T15893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1190.721014][T15893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1191.004091][T16157] loop5: detected capacity change from 0 to 64
[ 1193.591392][T15893] team0: Port device team_slave_0 added
[ 1193.949219][T15893] team0: Port device team_slave_1 added
[ 1194.403350][T16192] netlink: 'syz.2.2825': attribute type 30 has an invalid length.
[ 1194.969654][T16191] loop5: detected capacity change from 0 to 512
[ 1194.989254][T16191] EXT4-fs: Ignoring removed i_version option
[ 1195.009751][T16191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1195.152336][T16191] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem
[ 1195.166778][T16191] loop5: lost filesystem error report for type 5 error -117
[ 1195.170117][    C1] EXT4-fs (loop5): initial error at time 1167: ext4_process_orphan:346
[ 1195.170293][    C1] EXT4-fs (loop5): last error at time 1167: ext4_process_orphan:346
[ 1195.212923][T16191] EXT4-fs (loop5): 2 truncates cleaned up
[ 1195.225747][T16191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1195.310313][T16191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1195.450878][T16185] bridge0: port 1(erspan0) entered blocking state
[ 1195.463558][T16185] bridge0: port 1(erspan0) entered disabled state
[ 1195.464110][T16185] erspan0: entered allmulticast mode
[ 1195.590916][T16185] erspan0: entered promiscuous mode
[ 1195.677531][T15893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1195.677578][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1195.677610][T15893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1195.731397][T15893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1195.731473][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1195.731502][T15893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1196.007149][T16207] loop5: detected capacity change from 0 to 4096
[ 1196.106076][T16207] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1196.118777][T16207] ntfs3(loop5): Failed to load root (-22).
[ 1196.170799][T15893] hsr_slave_0: entered promiscuous mode
[ 1196.217115][T15893] hsr_slave_1: entered promiscuous mode
[ 1196.233053][T15893] debugfs: 'hsr0' already exists in 'hsr'
[ 1196.233101][T15893] Cannot create hsr debugfs directory
[ 1198.597454][T16220] Can't find ip_set type hash:ip,port,
[ 1203.121856][T16239] 9p: Bad value for 'rfdno'
[ 1203.262918][ T3342] bridge_slave_1: left allmulticast mode
[ 1203.268866][ T3342] bridge_slave_1: left promiscuous mode
[ 1203.276058][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.288376][ T3342] bridge_slave_0: left allmulticast mode
[ 1203.294349][ T3342] bridge_slave_0: left promiscuous mode
[ 1203.300418][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.830687][ T3342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1203.951867][ T3342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1203.984336][ T3342] bond0 (unregistering): Released all slaves
[ 1204.562164][T15781] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1205.021918][T16246] loop5: detected capacity change from 0 to 4096
[ 1205.222879][T16246] NILFS (loop5): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0
[ 1205.224680][T16246] NILFS (loop5): error -5 getting root inode
[ 1205.337486][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1205.349797][T15781] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1205.409800][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1205.413066][T15781] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1205.441043][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1206.048320][T16260] random: crng reseeded on system resumption
[ 1206.560376][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1206.560485][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1206.793103][ T3342] hsr_slave_0: left promiscuous mode
[ 1206.810814][ T3342] hsr_slave_1: left promiscuous mode
[ 1206.818664][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1206.842858][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1209.095286][ T3342] team0 (unregistering): Port device team_slave_1 removed
[ 1209.197782][ T3342] team0 (unregistering): Port device team_slave_0 removed
[ 1211.047219][T15781] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1211.062379][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1212.675967][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1212.687321][T15781] kthread_run failed with err -4
[ 1213.194284][T16305] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[ 1213.335543][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1213.360284][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1213.372109][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1213.396265][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1213.416205][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1214.836810][T16326] Can't find ip_set type hash:ip,port,
[ 1216.815398][T14834] Bluetooth: hci5: command tx timeout
[ 1217.301989][T16337] loop5: detected capacity change from 0 to 32768
[ 1217.310717][T16337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2851 (16337)
[ 1217.336686][T16337] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1217.336753][T16337] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1217.599831][T16337] BTRFS info (device loop5): enabling ssd optimizations
[ 1217.599892][T16337] BTRFS info (device loop5): turning on sync discard
[ 1217.599931][T16337] BTRFS info (device loop5): enabling free space tree
[ 1218.716433][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1218.716491][   T30] audit: type=1800 audit(1189.442:1080): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2851" name="file1" dev="loop5" ino=260 res=0 errno=0
[ 1219.090542][T14834] Bluetooth: hci5: command tx timeout
[ 1220.009270][ T8060] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1220.346449][T16375] Invalid ELF header magic: != ELF
[ 1221.359864][T14834] Bluetooth: hci5: command tx timeout
[ 1222.215031][T15740] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1222.278657][T16389] netlink: 'syz.2.2857': attribute type 17 has an invalid length.
[ 1222.278729][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'.
[ 1222.367723][T16308] netdevsim0 speed is unknown, defaulting to 1000
[ 1222.389530][T15740] usb 6-1: Using ep0 maxpacket: 8
[ 1222.392944][T15740] usb 6-1: New USB device found, idVendor=0025, idProduct=0000, bcdDevice= 0.00
[ 1222.393140][T15740] usb 6-1: no configurations
[ 1222.393180][T15740] usb 6-1: can't read configurations, error -22
[ 1222.610611][T15740] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1222.696968][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1222.710657][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1222.724692][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1222.740720][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1222.794767][T15740] usb 6-1: Using ep0 maxpacket: 8
[ 1222.802158][T15740] usb 6-1: New USB device found, idVendor=0025, idProduct=0000, bcdDevice= 0.00
[ 1222.866222][T15740] usb 6-1: no configurations
[ 1222.884589][T15740] usb 6-1: can't read configurations, error -22
[ 1222.885963][T15740] usb usb6-port1: attempt power cycle
[ 1223.030206][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1223.564548][T16389] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1223.608075][T16308] lo speed is unknown, defaulting to 1000
[ 1223.702794][T15740] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1223.723986][T15740] usb 6-1: Using ep0 maxpacket: 8
[ 1223.730051][T15740] usb 6-1: New USB device found, idVendor=0025, idProduct=0000, bcdDevice= 0.00
[ 1223.740001][T15740] usb 6-1: no configurations
[ 1223.745053][T15740] usb 6-1: can't read configurations, error -22
[ 1223.893529][T15740] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1223.915664][T15740] usb 6-1: Using ep0 maxpacket: 8
[ 1223.921637][T15740] usb 6-1: New USB device found, idVendor=0025, idProduct=0000, bcdDevice= 0.00
[ 1223.931439][T15740] usb 6-1: no configurations
[ 1223.936365][T15740] usb 6-1: can't read configurations, error -22
[ 1223.943478][T15740] usb usb6-port1: unable to enumerate USB device
[ 1223.971769][T16400] loop3: detected capacity change from 0 to 1024
[ 1224.001031][   T52] Bluetooth: hci5: command tx timeout
[ 1224.031439][T16400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1224.241793][T16400] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2846: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1225.796589][   T52] Bluetooth: hci4: command tx timeout
[ 1227.614554][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1228.030925][   T52] Bluetooth: hci4: command tx timeout
[ 1228.391999][T16390] netdevsim0 speed is unknown, defaulting to 1000
[ 1228.424196][T16390] lo speed is unknown, defaulting to 1000
[ 1230.447018][   T52] Bluetooth: hci4: command tx timeout
[ 1231.098353][T16308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1231.098489][T16308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1231.098703][T16308] bridge_slave_0: entered allmulticast mode
[ 1231.101230][T16308] bridge_slave_0: entered promiscuous mode
[ 1231.103958][T16308] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1231.104095][T16308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1231.104254][T16308] bridge_slave_1: entered allmulticast mode
[ 1231.106253][T16308] bridge_slave_1: entered promiscuous mode
[ 1232.638498][   T52] Bluetooth: hci4: command tx timeout
[ 1232.886793][T16308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1232.922649][T16308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1233.240352][ T3342] bridge_slave_1: left allmulticast mode
[ 1233.240409][ T3342] bridge_slave_1: left promiscuous mode
[ 1233.241097][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1233.282125][ T3342] bridge_slave_0: left allmulticast mode
[ 1233.282183][ T3342] bridge_slave_0: left promiscuous mode
[ 1233.289593][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1237.979818][ T3342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1238.000123][ T3342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1238.015524][ T3342] bond0 (unregistering): Released all slaves
[ 1239.196033][T16308] team0: Port device team_slave_0 added
[ 1239.219451][T16308] team0: Port device team_slave_1 added
[ 1239.482071][ T3342] hsr_slave_0: left promiscuous mode
[ 1239.503152][ T3342] hsr_slave_1: left promiscuous mode
[ 1239.504173][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1239.524577][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1240.537709][ T3342] team0 (unregistering): Port device team_slave_1 removed
[ 1240.568258][ T3342] team0 (unregistering): Port device team_slave_0 removed
[ 1241.122013][T16308] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1241.122064][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1241.129631][T16308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1241.205870][T16308] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1241.205910][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1241.242814][T16308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1243.441879][T16308] hsr_slave_0: entered promiscuous mode
[ 1243.492074][T16308] hsr_slave_1: entered promiscuous mode
[ 1243.494708][T16308] debugfs: 'hsr0' already exists in 'hsr'
[ 1243.494736][T16308] Cannot create hsr debugfs directory
[ 1243.873213][T16578] loop5: detected capacity change from 0 to 2048
[ 1243.973444][T16390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1243.973602][T16390] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1243.974337][T16390] bridge_slave_0: entered allmulticast mode
[ 1243.994034][T16390] bridge_slave_0: entered promiscuous mode
[ 1244.176127][T16390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1244.183562][T16390] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1244.192009][T16390] bridge_slave_1: entered allmulticast mode
[ 1244.204297][T16390] bridge_slave_1: entered promiscuous mode
[ 1246.793477][T16591] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1246.793549][T16591] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1246.793668][T16591] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1247.232413][T16390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1247.284810][T16390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1249.302320][T16390] team0: Port device team_slave_0 added
[ 1250.721560][T16390] team0: Port device team_slave_1 added
[ 1251.718408][T16390] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1251.728819][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1251.728885][T16390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1251.884077][T16390] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1251.891385][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1251.891461][T16390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1252.083825][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1252.253714][T16390] hsr_slave_0: entered promiscuous mode
[ 1252.262368][T16390] hsr_slave_1: entered promiscuous mode
[ 1252.267913][T16390] debugfs: 'hsr0' already exists in 'hsr'
[ 1252.267995][T16390] Cannot create hsr debugfs directory
[ 1252.840081][T16640] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2899'.
[ 1254.773243][T16650] loop3: detected capacity change from 0 to 512
[ 1255.744962][T16650] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 1255.794612][T16650] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.2894: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[ 1255.794697][T16650] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1255.813816][    C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1255.813839][    C0] EXT4-fs (loop3): initial error at time 1224: ext4_iget_extra_inode:5210: inode 15
[ 1255.813863][    C0] EXT4-fs (loop3): last error at time 1224: ext4_iget_extra_inode:5210: inode 15
[ 1255.813993][T16650] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2894: couldn't read orphan inode 15 (err -117)
[ 1255.814044][T16650] loop3: lost filesystem error report for type 5 error -117
[ 1255.828817][T16650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1257.110386][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1259.138018][ T3342] bridge_slave_1: left allmulticast mode
[ 1259.144775][ T3342] bridge_slave_1: left promiscuous mode
[ 1259.151556][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1259.173292][ T3342] bridge_slave_0: left allmulticast mode
[ 1259.179130][ T3342] bridge_slave_0: left promiscuous mode
[ 1259.203616][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1260.592220][ T3342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1260.613457][ T3342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1260.630325][ T3342] bond0 (unregistering): Released all slaves
[ 1265.270482][ T3342] hsr_slave_0: left promiscuous mode
[ 1265.279465][ T3342] hsr_slave_1: left promiscuous mode
[ 1265.288738][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1265.510201][ T3342] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1267.330140][T16716] syz.2.2909 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1268.965188][T16727] syz.5.2911: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1268.981715][T16727] CPU: 0 UID: 0 PID: 16727 Comm: syz.5.2911 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1268.981753][T16727] Tainted: [L]=SOFTLOCKUP
[ 1268.981762][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1268.981776][T16727] Call Trace:
[ 1268.981785][T16727]  <TASK>
[ 1268.981795][T16727]  dump_stack_lvl+0xe8/0x150
[ 1268.981838][T16727]  warn_alloc+0x24d/0x270
[ 1268.981916][T16727]  ? stack_depot_save_flags+0x33/0x800
[ 1268.982039][T16727]  ? __pfx_warn_alloc+0x10/0x10
[ 1268.982063][T16727]  ? kasan_save_track+0x4f/0x80
[ 1268.982102][T16727]  ? __kasan_kmalloc+0x93/0xb0
[ 1268.982132][T16727]  ? xsk_init_queue+0x8a/0xe0
[ 1268.982187][T16727]  ? xsk_setsockopt+0x52a/0x960
[ 1268.982246][T16727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.982332][T16727]  __vmalloc_node_range_noprof+0x127/0x1540
[ 1268.982388][T16727]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1268.982415][T16727]  ? __kasan_kmalloc+0x93/0xb0
[ 1268.982445][T16727]  ? __kmalloc_cache_noprof+0x31d/0x600
[ 1268.982478][T16727]  vmalloc_user_noprof+0xad/0xe0
[ 1268.982501][T16727]  ? xskq_create+0xbf/0x170
[ 1268.982526][T16727]  xskq_create+0xbf/0x170
[ 1268.982552][T16727]  xsk_init_queue+0x8a/0xe0
[ 1268.982578][T16727]  xsk_setsockopt+0x52a/0x960
[ 1268.982617][T16727]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1268.982653][T16727]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1268.982749][T16727]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1268.982779][T16727]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1268.982827][T16727]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1268.982864][T16727]  do_sock_setsockopt+0x17c/0x1b0
[ 1268.982951][T16727]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1268.982993][T16727]  do_syscall_64+0x166/0x510
[ 1268.983050][T16727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.983075][T16727]  ? clear_bhb_loop+0x40/0x90
[ 1268.983104][T16727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.983128][T16727] RIP: 0033:0x7f1c19d9e0d9
[ 1268.983151][T16727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1268.983173][T16727] RSP: 002b:00007f1c1abf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1268.983200][T16727] RAX: ffffffffffffffda RBX: 00007f1c1a025fa0 RCX: 00007f1c19d9e0d9
[ 1268.983218][T16727] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[ 1268.983233][T16727] RBP: 00007f1c19e35024 R08: 0000000000000029 R09: 0000000000000000
[ 1268.983249][T16727] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1268.983265][T16727] R13: 00007f1c1a026038 R14: 00007f1c1a025fa0 R15: 00007ffd57d3b208
[ 1268.983304][T16727]  </TASK>
[ 1268.988898][T16727] Mem-Info:
[ 1268.988951][T16727] active_anon:64126 inactive_anon:0 isolated_anon:0
[ 1268.988951][T16727]  active_file:0 inactive_file:62282 isolated_file:0
[ 1268.988951][T16727]  unevictable:0 dirty:258 writeback:0
[ 1268.988951][T16727]  slab_reclaimable:11876 slab_unreclaimable:99882
[ 1268.988951][T16727]  mapped:32878 shmem:57747 pagetables:1584
[ 1268.988951][T16727]  sec_pagetables:0 bounce:0
[ 1268.988951][T16727]  kernel_misc_reclaimable:0
[ 1268.988951][T16727]  free:1216645 free_pcp:18193 free_cma:0
[ 1268.989160][T16727] Node 0 active_anon:256504kB inactive_anon:0kB active_file:0kB inactive_file:248928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131512kB dirty:1032kB writeback:0kB shmem:230988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12864kB pagetables:6200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1268.989337][T16727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1268.989501][T16727] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1268.989673][T16727] lowmem_reserve[]: 0 2488 2488 2488 2488
[ 1268.989781][T16727] Node 0 DMA32 free:910944kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256504kB inactive_anon:0kB active_file:0kB inactive_file:248928kB unevictable:0kB writepending:1032kB zspages:0kB present:3129332kB managed:2547732kB mlocked:0kB bounce:0kB free_pcp:72772kB local_pcp:53212kB free_cma:0kB
[ 1268.989984][T16727] lowmem_reserve[]: 0 0 0 0 0
[ 1268.990093][T16727] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:248kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1268.990265][T16727] lowmem_reserve[]: 0 0 0 0 0
[ 1268.993681][T16727] Node 1 Normal free:3940276kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1268.993876][T16727] lowmem_reserve[]: 0 0 0 0 0
[ 1268.994023][T16727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1268.994409][T16727] Node 0 DMA32: 2*4kB (UM) 3*8kB (UE) 6*16kB (UE) 1169*32kB (UME) 429*64kB (UME) 345*128kB (UME) 244*256kB (UME) 102*512kB (UME) 47*1024kB (UME) 22*2048kB (UM) 145*4096kB (UM) = 910944kB
[ 1268.994898][T16727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1268.998619][T16727] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 12*16kB (UM) 10*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (UM) 960*4096kB (M) = 3940276kB
[ 1268.999144][T16727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1268.999184][T16727] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1268.999239][T16727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1268.999298][T16727] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1268.999358][T16727] 120011 total pagecache pages
[ 1268.999392][T16727] 0 pages in swap cache
[ 1268.999418][T16727] Free swap  = 124996kB
[ 1268.999440][T16727] Total swap = 124996kB
[ 1268.999451][T16727] 2097051 pages RAM
[ 1268.999461][T16727] 0 pages HighMem/MovableOnly
[ 1268.999471][T16727] 428440 pages reserved
[ 1268.999481][T16727] 0 pages cma reserved
[ 1271.072748][ T3342] team0 (unregistering): Port device team_slave_1 removed
[ 1271.159004][ T3342] team0 (unregistering): Port device team_slave_0 removed
[ 1271.830766][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1271.830859][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1272.374966][T16308] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1272.379939][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1272.381021][T16308] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1272.385080][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1272.515980][T16308] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1272.537329][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1272.545609][T16308] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1273.334361][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1274.759907][T16760] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1274.759977][T16760] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1274.760022][T16760] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1278.045292][T16787] loop5: detected capacity change from 0 to 256
[ 1278.054069][T16787] vfat: Unknown parameter 'ute'
[ 1282.120874][T16801] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1282.120943][T16801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1282.120984][T16801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1282.133615][T14834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1282.187095][T14834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1282.193367][T14834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1282.213821][T14834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1282.225444][T14834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1283.413821][T16824] overlayfs: missing 'lowerdir'
[ 1284.468395][   T52] Bluetooth: hci3: command tx timeout
[ 1287.116302][   T52] Bluetooth: hci3: command tx timeout
[ 1289.343900][   T52] Bluetooth: hci3: command tx timeout
[ 1291.917787][   T52] Bluetooth: hci3: command tx timeout
[ 1292.271618][T14834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1292.308070][T14834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1292.329902][T14834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1292.357528][T14834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1292.568796][T14834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1294.825681][T14834] Bluetooth: hci5: command tx timeout
[ 1296.329702][T16907] loop5: detected capacity change from 0 to 32768
[ 1296.358457][T16907] (syz.5.2947,16907,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1296.373870][T16907] (syz.5.2947,16907,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1296.428643][T16907] JBD2: Ignoring recovery information on journal
[ 1296.497326][T16907] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1296.632943][   T30] audit: type=1800 audit(1262.365:1081): pid=16907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2947" name="file1" dev="loop5" ino=16978 res=0 errno=0
[ 1297.045216][T14834] Bluetooth: hci5: command tx timeout
[ 1297.268367][T16917] Set syz0 is full, maxelem 0 reached
[ 1299.264962][T14834] Bluetooth: hci5: command tx timeout
[ 1299.560909][T16805] netdevsim0 speed is unknown, defaulting to 1000
[ 1299.575075][T16805] lo speed is unknown, defaulting to 1000
[ 1300.875086][ T8060] ocfs2: Unmounting device (7,5) on (node local)
[ 1301.485986][T14834] Bluetooth: hci5: command tx timeout
[ 1301.629895][T16958] futex_wake_op: syz.3.2957 tries to shift op by 144; fix this program
[ 1302.807887][T16962] netlink: 'syz.3.2958': attribute type 12 has an invalid length.
[ 1305.109279][T16880] netdevsim0 speed is unknown, defaulting to 1000
[ 1305.111754][T16880] lo speed is unknown, defaulting to 1000
[ 1316.128378][T16805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1316.136086][T16805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1316.144098][T16805] bridge_slave_0: entered allmulticast mode
[ 1316.171138][T16805] bridge_slave_0: entered promiscuous mode
[ 1316.405780][T16805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1316.406023][T16805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1316.406449][T16805] bridge_slave_1: entered allmulticast mode
[ 1316.429967][T16805] bridge_slave_1: entered promiscuous mode
[ 1316.454593][T17045] bond0: entered promiscuous mode
[ 1316.460416][T17045] bond_slave_0: entered promiscuous mode
[ 1316.466866][T17045] bond_slave_1: entered promiscuous mode
[ 1316.481630][T17045] batadv0: entered promiscuous mode
[ 1316.669167][T14681] bridge_slave_1: left allmulticast mode
[ 1316.669227][T14681] bridge_slave_1: left promiscuous mode
[ 1316.669817][T14681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1316.695399][T14681] bridge_slave_0: left allmulticast mode
[ 1316.695466][T14681] bridge_slave_0: left promiscuous mode
[ 1316.696256][T14681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1317.204033][T14681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1317.483448][T14681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1317.504834][T14681] bond0 (unregistering): Released all slaves
[ 1318.534126][T17065] loop3: detected capacity change from 0 to 256
[ 1318.544746][T16805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1318.575702][T16805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1319.350680][T17065] vfat: Deprecated parameter 'posix'
[ 1319.350738][T17065] FAT-fs: "posix" option is obsolete, not supported now
[ 1319.498359][T16805] team0: Port device team_slave_0 added
[ 1319.502323][T16805] team0: Port device team_slave_1 added
[ 1322.491311][T17085] hfsplus: unable to find HFS+ superblock
[ 1323.288979][T14681] hsr_slave_0: left promiscuous mode
[ 1323.295989][T14681] hsr_slave_1: left promiscuous mode
[ 1323.300869][T14681] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1323.310351][T14681] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1323.574017][T17092] overlayfs: failed to clone upperpath
[ 1324.926399][T17114] overlayfs: failed to clone upperpath
[ 1326.414310][T14681] team0 (unregistering): Port device team_slave_1 removed
[ 1327.562947][T14681] team0 (unregistering): Port device team_slave_0 removed
[ 1328.679923][T17122] loop3: detected capacity change from 0 to 256
[ 1329.146730][T16805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1329.155943][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1329.177366][T16805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1329.184194][T16880] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1329.184317][T16880] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1329.184875][T16880] bridge_slave_0: entered allmulticast mode
[ 1329.230624][T16880] bridge_slave_0: entered promiscuous mode
[ 1329.273667][T16880] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1329.281880][T16880] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1329.290746][T16880] bridge_slave_1: entered allmulticast mode
[ 1329.311951][T16880] bridge_slave_1: entered promiscuous mode
[ 1329.741842][T16880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1329.777761][T16880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1330.114769][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1330.191885][T16805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1330.191934][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1330.191964][T16805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1330.320768][T16880] team0: Port device team_slave_0 added
[ 1330.336585][T16880] team0: Port device team_slave_1 added
[ 1332.035057][T16880] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1332.035111][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1332.071423][T16880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1332.085092][T16880] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1332.092478][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1332.119102][T16880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1332.192223][T16880] hsr_slave_0: entered promiscuous mode
[ 1332.200661][T16880] hsr_slave_1: entered promiscuous mode
[ 1332.207736][T16880] debugfs: 'hsr0' already exists in 'hsr'
[ 1332.213952][T16880] Cannot create hsr debugfs directory
[ 1332.356459][T17151] loop5: detected capacity change from 0 to 128
[ 1334.108123][T16805] hsr_slave_0: entered promiscuous mode
[ 1334.119977][T16805] hsr_slave_1: entered promiscuous mode
[ 1334.612828][T16805] debugfs: 'hsr0' already exists in 'hsr'
[ 1334.612878][T16805] Cannot create hsr debugfs directory
[ 1334.754492][T17170] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[ 1338.278038][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1338.278134][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1341.410945][T14681] bridge_slave_1: left allmulticast mode
[ 1341.410997][T14681] bridge_slave_1: left promiscuous mode
[ 1341.411546][T14681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1341.452988][T14681] bridge_slave_0: left allmulticast mode
[ 1341.453147][T14681] bridge_slave_0: left promiscuous mode
[ 1341.453398][T14681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1341.671737][T14681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1341.689839][T14681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1341.703221][T14681] bond0 (unregistering): Released all slaves
[ 1342.150886][T14681] hsr_slave_0: left promiscuous mode
[ 1342.157720][T14681] hsr_slave_1: left promiscuous mode
[ 1342.174126][T14681] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.183397][T14681] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.930253][T14681] team0 (unregistering): Port device team_slave_1 removed
[ 1342.959391][T14681] team0 (unregistering): Port device team_slave_0 removed
[ 1347.763872][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1348.125477][T17267] NILFS (nullb0): couldn't find nilfs on the device
[ 1348.605938][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1348.636367][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1348.662102][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1348.699284][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1348.718057][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1351.096185][   T52] Bluetooth: hci4: command tx timeout
[ 1352.073885][T15078] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1352.287677][T15078] usb 6-1: Using ep0 maxpacket: 16
[ 1352.289443][T15078] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1352.292345][T15078] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1352.303756][T15078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.303787][T15078] usb 6-1: Product: syz
[ 1352.303803][T15078] usb 6-1: Manufacturer: syz
[ 1352.303818][T15078] usb 6-1: SerialNumber: syz
[ 1352.348800][T15078] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1352.348853][T15078] r8152-cfgselector 6-1: config 0 descriptor??
[ 1352.837177][T17304] netlink: 'syz.2.3015': attribute type 2 has an invalid length.
[ 1353.272031][T14834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1353.333731][T14834] Bluetooth: hci4: command tx timeout
[ 1353.454986][T17313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1353.467046][T17313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1353.502055][T17313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1353.515380][T17313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1354.339784][T15078] r8152-cfgselector 6-1: USB disconnect, device number 12
[ 1355.254073][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1355.316472][T14680] bridge_slave_1: left allmulticast mode
[ 1355.316548][T14680] bridge_slave_1: left promiscuous mode
[ 1355.316773][T14680] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1355.353646][T14680] bridge_slave_0: left allmulticast mode
[ 1355.353720][T14680] bridge_slave_0: left promiscuous mode
[ 1355.369751][T14680] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.533675][T14680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1355.545716][T14680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1355.557356][T14680] bond0 (unregistering): Released all slaves
[ 1355.572229][T17268] netdevsim0 speed is unknown, defaulting to 1000
[ 1355.627083][T17313] Bluetooth: hci4: command tx timeout
[ 1355.785596][T17268] lo speed is unknown, defaulting to 1000
[ 1355.797103][T17313] Bluetooth: hci5: command tx timeout
[ 1355.834842][T14680] hsr_slave_0: left promiscuous mode
[ 1355.843679][T14680] hsr_slave_1: left promiscuous mode
[ 1355.850574][T14680] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1355.859738][T14680] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1356.012312][T14680] team0 (unregistering): Port device team_slave_1 removed
[ 1356.033310][T14680] team0 (unregistering): Port device team_slave_0 removed
[ 1356.384870][T17310] netdevsim0 speed is unknown, defaulting to 1000
[ 1356.409184][T17310] lo speed is unknown, defaulting to 1000
[ 1357.210506][T14978] bridge_slave_1: left allmulticast mode
[ 1357.210564][T14978] bridge_slave_1: left promiscuous mode
[ 1357.211175][T14978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1357.233958][T14978] bridge_slave_0: left allmulticast mode
[ 1357.234021][T14978] bridge_slave_0: left promiscuous mode
[ 1357.248203][T14978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1357.385018][T14978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1357.409742][T14978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1357.421104][T14978] bond0 (unregistering): Released all slaves
[ 1357.432938][T17268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1357.433197][T17268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1357.433718][T17268] bridge_slave_0: entered allmulticast mode
[ 1357.449446][T17268] bridge_slave_0: entered promiscuous mode
[ 1357.478969][T17268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1357.479417][T17268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1357.479897][T17268] bridge_slave_1: entered allmulticast mode
[ 1357.512851][T17268] bridge_slave_1: entered promiscuous mode
[ 1357.667163][T14978] hsr_slave_0: left promiscuous mode
[ 1357.672862][T14978] hsr_slave_1: left promiscuous mode
[ 1357.680097][T14978] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1357.688416][T14978] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1357.850089][T17313] Bluetooth: hci4: command tx timeout
[ 1357.908052][T14978] team0 (unregistering): Port device team_slave_1 removed
[ 1357.929681][T14978] team0 (unregistering): Port device team_slave_0 removed
[ 1358.017028][T17313] Bluetooth: hci5: command tx timeout
[ 1358.158233][T17268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1358.216021][T17268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1358.344729][T17268] team0: Port device team_slave_0 added
[ 1358.345477][T17310] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1358.345971][T17310] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1358.346416][T17310] bridge_slave_0: entered allmulticast mode
[ 1358.361632][T17310] bridge_slave_0: entered promiscuous mode
[ 1358.378552][T17268] team0: Port device team_slave_1 added
[ 1358.385880][T17310] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1358.412114][T17310] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1358.412311][T17310] bridge_slave_1: entered allmulticast mode
[ 1358.428132][T17310] bridge_slave_1: entered promiscuous mode
[ 1358.518486][T17310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1358.519216][T17268] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1358.519553][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.519782][T17268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1358.585459][T17268] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.585554][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.585584][T17268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1358.639650][T17310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1358.730142][T17310] team0: Port device team_slave_0 added
[ 1358.738176][T17310] team0: Port device team_slave_1 added
[ 1358.790510][T17268] hsr_slave_0: entered promiscuous mode
[ 1358.793511][T17268] hsr_slave_1: entered promiscuous mode
[ 1358.795525][T17268] debugfs: 'hsr0' already exists in 'hsr'
[ 1358.802092][T17268] Cannot create hsr debugfs directory
[ 1358.813175][T17310] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1358.813230][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.813304][T17310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1358.838934][T17310] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.838987][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.839058][T17310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1358.987798][T17310] hsr_slave_0: entered promiscuous mode
[ 1358.991246][T17310] hsr_slave_1: entered promiscuous mode
[ 1358.993485][T17310] debugfs: 'hsr0' already exists in 'hsr'
[ 1358.993508][T17310] Cannot create hsr debugfs directory
[ 1359.264750][T17268] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1359.290627][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1359.291841][T17268] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1359.314423][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1359.326065][T17268] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1359.343378][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1359.352025][T17268] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1359.365602][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1359.489792][T17310] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1359.502295][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1359.510783][T17310] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1359.520337][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1359.523488][T17310] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1359.539228][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1359.548082][T17310] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1359.558644][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1359.653769][T17268] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1359.692325][T17268] 8021q: adding VLAN 0 to HW filter on device team0
[ 1359.713332][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.713585][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1359.754364][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.754480][ T8874] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1359.797429][T17310] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1359.836531][T17310] 8021q: adding VLAN 0 to HW filter on device team0
[ 1359.849973][T14978] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.850246][T14978] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1359.883972][T14680] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.884209][T14680] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1360.238780][T17313] Bluetooth: hci5: command tx timeout
[ 1360.444806][T17268] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1360.589281][T17310] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1360.833458][T17268] veth0_vlan: entered promiscuous mode
[ 1360.852261][T17268] veth1_vlan: entered promiscuous mode
[ 1360.897906][T17268] veth0_macvtap: entered promiscuous mode
[ 1360.908910][T17268] veth1_macvtap: entered promiscuous mode
[ 1360.948382][T17268] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1360.972951][T17268] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1361.025453][T17310] veth0_vlan: entered promiscuous mode
[ 1361.128116][T14680] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.128217][T14680] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.128352][T14680] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.128452][T14680] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.165574][T17310] veth1_vlan: entered promiscuous mode
[ 1361.284613][T14681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1361.284659][T14681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1361.361892][T14978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1361.369916][T14978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1361.386464][T17310] veth0_macvtap: entered promiscuous mode
[ 1361.415931][T17310] veth1_macvtap: entered promiscuous mode
[ 1361.464829][T17310] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1361.480810][T17310] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1361.599482][T14681] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.642159][ T8874] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.642874][ T8874] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.642999][ T8874] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.821743][T17420] overlayfs: failed to clone lowerpath
[ 1361.881081][T17422] overlayfs: failed to clone lowerpath
[ 1362.742848][T17313] Bluetooth: hci5: command tx timeout
[ 1363.847350][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3032'.
[ 1363.878918][T14979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1363.878974][T14979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1364.053407][T14977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1364.053463][T14977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1374.002040][T17501] loop7: detected capacity change from 0 to 512
[ 1374.003615][T17495] loop5: detected capacity change from 0 to 4096
[ 1374.095381][T17495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1376.827003][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1376.890422][T17501] EXT4-fs error (device loop7): __ext4_fill_super:5621: inode #2: comm syz.7.3043: inode has both inline data and extents flags
[ 1376.890501][T17501] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1376.898015][    C0] EXT4-fs (loop7): error count since last fsck: 1
[ 1376.898101][    C0] EXT4-fs (loop7): initial error at time 1337: __ext4_fill_super:5621: inode 2
[ 1376.898223][    C0] EXT4-fs (loop7): last error at time 1337: __ext4_fill_super:5621: inode 2
[ 1376.898673][T17501] EXT4-fs (loop7): get root inode failed
[ 1376.898719][T17501] EXT4-fs (loop7): mount failed
[ 1378.054862][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'.
[ 1379.874168][T17543] loop7: detected capacity change from 0 to 128
[ 1380.241875][T17543] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[ 1380.312116][T17543] FAT-fs (loop7): Filesystem has been set read-only
[ 1381.624130][T17562] loop6: detected capacity change from 0 to 4096
[ 1382.301578][T17572] overlayfs: missing 'lowerdir'
[ 1383.479146][T17562] ntfs3(loop6): Failed to load $Extend (-22).
[ 1383.496804][T17562] ntfs3(loop6): Failed to initialize $Extend.
[ 1386.698111][T17605] loop3: detected capacity change from 0 to 256
[ 1386.700408][T17605] vfat: Unknown parameter 'shobtname'
[ 1388.394150][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3065'.
[ 1388.394258][T17607] openvswitch: netlink: Message has 8 unknown bytes.
[ 1388.498457][T15078] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1388.696397][T15078] usb 4-1: Using ep0 maxpacket: 32
[ 1388.705479][T15078] usb 4-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40
[ 1388.716381][T15078] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 131, changing to 11
[ 1388.716446][T15078] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1388.750889][T15078] usb 4-1: string descriptor 0 read error: -22
[ 1388.751224][T15078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.158483][T17612] loop6: detected capacity change from 0 to 512
[ 1389.799562][T17612] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1390.696901][T15078] usb 4-1: can't set config #1, error -71
[ 1390.715799][T15078] usb 4-1: USB disconnect, device number 14
[ 1390.736366][T17612] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.3067: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[ 1390.736472][T17612] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1390.740109][T17612] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3067: couldn't read orphan inode 15 (err -117)
[ 1390.740222][T17612] loop6: lost filesystem error report for type 5 error -117
[ 1390.788356][T17612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1391.432220][T17268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1391.776789][T17629] loop3: detected capacity change from 0 to 512
[ 1391.788104][T17629] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1391.796339][T17629] ext4: Unknown parameter 'fscontext'
[ 1397.985134][T17665] loop3: detected capacity change from 0 to 512
[ 1398.045766][T17665] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[ 1398.045808][T17665] UDF-fs: Scanning with blocksize 512 failed
[ 1398.099778][T17665] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[ 1398.099821][T17665] UDF-fs: Scanning with blocksize 1024 failed
[ 1398.126692][T17665] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[ 1398.126739][T17665] UDF-fs: Scanning with blocksize 2048 failed
[ 1398.145254][T17665] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 1398.177608][T17665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1398.958253][   T12] IPVS: starting estimator thread 0...
[ 1399.090571][T17684] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1399.647016][   T30] audit: type=1326 audit(1358.740:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1399.673058][   T30] audit: type=1326 audit(1358.740:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.281859][   T30] audit: type=1326 audit(1358.768:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.281944][   T30] audit: type=1326 audit(1358.777:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.281998][   T30] audit: type=1326 audit(1358.768:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.282049][   T30] audit: type=1326 audit(1358.777:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.315709][   T30] audit: type=1326 audit(1359.348:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.350980][   T30] audit: type=1326 audit(1359.395:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.363286][   T30] audit: type=1326 audit(1359.413:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.363465][   T30] audit: type=1326 audit(1359.413:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.6.3072" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa4d9e0d9 code=0x7ffc0000
[ 1400.825550][T17710] futex_wake_op: syz.2.3092 tries to shift op by 144; fix this program
[ 1403.560133][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1403.560218][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1403.856672][T17735] loop5: detected capacity change from 0 to 1024
[ 1403.868519][T17735] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1403.922288][T17735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102]
[ 1403.922583][T17735] System zones: 0-1, 3-12
[ 1403.943112][T17735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1405.168801][   T30] kauditd_printk_skb: 81 callbacks suppressed
[ 1405.168892][   T30] audit: type=1107 audit(1363.241:1173): pid=17736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1405.692120][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1406.708811][T17759] loop5: detected capacity change from 0 to 512
[ 1406.718416][T17759] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1406.718499][T17759] ext4: Unknown parameter 'fscontext'
[ 1409.189320][T17781] input: syz0 as /devices/virtual/input/input12
[ 1409.343059][T17784] loop3: detected capacity change from 0 to 16
[ 1409.350147][T17784] erofs: Unknown parameter ''
[ 1412.229666][T17804] kvm [17802]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffffffff00000000
[ 1414.005306][T17817] loop6: detected capacity change from 0 to 512
[ 1414.017733][T17817] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1414.017815][T17817] ext4: Unknown parameter 'fscontext'
[ 1416.178461][T17831] loop6: detected capacity change from 0 to 40427
[ 1416.192739][T17831] F2FS-fs (loop6): invalid crc value
[ 1416.705450][T17831] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1417.083493][T17831] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[ 1417.083559][T17831] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1417.083603][T17831] F2FS-fs (loop6): Start checkpoint disabled!
[ 1417.149865][T17831] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[ 1417.159716][T17831] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 1418.636842][T17852] syz.6.3129: attempt to access beyond end of device
[ 1418.636842][T17852] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[ 1419.463846][T17703] kworker/u8:1: attempt to access beyond end of device
[ 1419.463846][T17703] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1419.464025][T17703] CPU: 1 UID: 0 PID: 17703 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1419.464119][T17703] Tainted: [L]=SOFTLOCKUP
[ 1419.464159][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1419.464232][T17703] Workqueue: writeback wb_workfn (flush-7:6)
[ 1419.464414][T17703] Call Trace:
[ 1419.464438][T17703]  <TASK>
[ 1419.464462][T17703]  dump_stack_lvl+0xe8/0x150
[ 1419.464586][T17703]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1419.464770][T17703]  f2fs_write_end_io+0x1215/0x16f0
[ 1419.464913][T17703]  ? blkg_put+0x22/0x240
[ 1419.465118][T17703]  __submit_merged_bio+0x258/0x6a0
[ 1419.465186][T17703]  ? rcu_is_watching+0x15/0xb0
[ 1419.465288][T17703]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1419.465725][T17703]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1419.466304][T17703]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1419.466566][T17703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1419.466693][T17703]  ? filemap_get_entry+0xcd/0x3f0
[ 1419.467089][T17703]  ? __lock_acquire+0x6df/0x2e50
[ 1419.467251][T17703]  ? __lock_acquire+0x6df/0x2e50
[ 1419.467347][T17703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1419.467458][T17703]  do_writepages+0x338/0x560
[ 1419.467556][T17703]  ? reacquire_held_locks+0x117/0x1a0
[ 1419.467622][T17703]  ? writeback_sb_inodes+0x450/0x1b00
[ 1419.467726][T17703]  __writeback_single_inode+0x136/0x1220
[ 1419.467824][T17703]  ? do_raw_spin_unlock+0xf5/0x210
[ 1419.467928][T17703]  writeback_sb_inodes+0x9de/0x1b00
[ 1419.468016][T17703]  ? __lock_acquire+0x6df/0x2e50
[ 1419.468174][T17703]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1419.468410][T17703]  ? rcu_is_watching+0x15/0xb0
[ 1419.468476][T17703]  ? queue_io+0x2d3/0x470
[ 1419.468572][T17703]  wb_writeback+0x41c/0xad0
[ 1419.468668][T17703]  ? queue_io+0x2a1/0x470
[ 1419.468772][T17703]  ? __pfx_wb_writeback+0x10/0x10
[ 1419.468849][T17703]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1419.468976][T17703]  wb_workfn+0x431/0x10f0
[ 1419.469101][T17703]  ? __pfx_wb_workfn+0x10/0x10
[ 1419.469287][T17703]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1419.469435][T17703]  ? lock_acquire+0x115/0x350
[ 1419.469552][T17703]  ? rcu_is_watching+0x15/0xb0
[ 1419.469637][T17703]  ? process_scheduled_works+0x97e/0x1630
[ 1419.469726][T17703]  process_scheduled_works+0xc4e/0x1630
[ 1419.469921][T17703]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1419.470044][T17703]  ? assign_work+0x3cf/0x5d0
[ 1419.470140][T17703]  worker_thread+0xa47/0xfb0
[ 1419.470259][T17703]  ? __kthread_parkme+0x71/0x1f0
[ 1419.470371][T17703]  kthread+0x388/0x470
[ 1419.470426][T17703]  ? __pfx_worker_thread+0x10/0x10
[ 1419.470499][T17703]  ? __pfx_kthread+0x10/0x10
[ 1419.470561][T17703]  ret_from_fork+0x514/0xb70
[ 1419.470669][T17703]  ? __pfx_ret_from_fork+0x10/0x10
[ 1419.470763][T17703]  ? __switch_to+0xc89/0x1420
[ 1419.470857][T17703]  ? __pfx_kthread+0x10/0x10
[ 1419.470922][T17703]  ret_from_fork_asm+0x1a/0x30
[ 1419.471060][T17703]  </TASK>
[ 1419.557172][T17703] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1419.836176][T15033] loop6: lost filesystem error report for type 5 error -108
[ 1426.255871][T17899] loop3: detected capacity change from 0 to 256
[ 1428.163820][T17899] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1431.101828][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'.
[ 1431.118312][T14676] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.135571][T14676] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.135645][T14676] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.135704][T14676] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1431.157220][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'.
[ 1431.163090][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'.
[ 1438.633294][T17986] loop3: detected capacity change from 0 to 32768
[ 1438.660451][T17986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3170 (17986)
[ 1438.972711][T17985] loop5: detected capacity change from 0 to 32768
[ 1439.244961][T17986] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1439.245064][T17986] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1440.711713][T17986] BTRFS info (device loop3): enabling ssd optimizations
[ 1440.711766][T17986] BTRFS info (device loop3): turning on sync discard
[ 1440.711806][T17986] BTRFS info (device loop3): enabling free space tree
[ 1440.711831][T17986] BTRFS info (device loop3): use zlib compression, level 3
[ 1442.788468][ T5628] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1444.668048][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3169'.
[ 1444.668109][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3169'.
[ 1444.668304][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3169'.
[ 1445.086404][T18042] loop5: detected capacity change from 0 to 2048
[ 1445.186800][T18042] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1445.231713][T18042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1446.578364][T18037] loop3: detected capacity change from 0 to 1024
[ 1446.644988][T18037] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1446.645164][T18037] ext4: Unknown parameter 'euid'
[ 1447.812324][T18037] loop3: detected capacity change from 0 to 1024
[ 1447.828386][T18037] hfsplus: Unknown parameter 'ext4'
[ 1447.950014][T18048] loop6: detected capacity change from 0 to 256
[ 1448.426814][T18055] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3184'.
[ 1450.264868][T18062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3186'.
[ 1450.287353][T18064] loop3: detected capacity change from 0 to 1024
[ 1450.303099][T18064] hfsplus: failed to load extents file
[ 1450.701226][T17313] Bluetooth: hci5: link tx timeout
[ 1450.713366][T17313] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1453.080351][T18085] snd_dummy snd_dummy.0: control 1:9:195:�� :53367 is already present
[ 1454.114513][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[ 1455.575333][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3194'.
[ 1455.584824][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3194'.
[ 1455.594722][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3194'.
[ 1460.588687][T18109] syz.5.3200 (18109): drop_caches: 2
[ 1460.794354][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3208'.
[ 1460.794413][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3208'.
[ 1460.794504][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3208'.
[ 1465.636237][T18165] fuse: fd is not a fuse device
[ 1466.266354][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3219'.
[ 1466.266405][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3219'.
[ 1466.266507][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3219'.
[ 1466.410141][T18173] loop5: detected capacity change from 0 to 128
[ 1468.272500][   T30] audit: type=1326 audit(1422.963:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.292996][   T30] audit: type=1326 audit(1422.982:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.293157][   T30] audit: type=1326 audit(1422.982:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.300477][   T30] audit: type=1326 audit(1422.963:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.303828][   T30] audit: type=1326 audit(1422.992:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.345381][   T30] audit: type=1326 audit(1423.038:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.345545][   T30] audit: type=1326 audit(1423.038:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2514f9de42 code=0x7ffc0000
[ 1468.348803][   T30] audit: type=1326 audit(1423.038:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.348884][   T30] audit: type=1326 audit(1423.038:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1468.395540][   T30] audit: type=1326 audit(1423.038:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.3.3222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2514f9ded7 code=0x7ffc0000
[ 1469.606454][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1469.606592][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1470.501398][T18187] erofs (device loop6): cannot find valid erofs superblock
[ 1470.932645][T18193] overlayfs: failed to clone upperpath
[ 1476.931607][T18238] loop6: detected capacity change from 0 to 8
[ 1476.944472][T18238] MTD: Attempt to mount non-MTD device "/dev/loop6"
[ 1478.671299][T15265] udevd[15265]: incorrect cramfs checksum on /dev/loop6
[ 1479.067314][   T29] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 1035 jiffies old.
[ 1480.051793][T18248] loop5: detected capacity change from 0 to 256
[ 1480.053435][T18248] vfat: Deprecated parameter 'posix'
[ 1480.054078][T18248] FAT-fs: "posix" option is obsolete, not supported now
[ 1482.334466][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[ 1482.913621][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3246'.
[ 1483.583635][T18277] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3248'.
[ 1490.932149][T15015] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1491.902552][T18329] loop6: detected capacity change from 0 to 40427
[ 1491.922689][T18329] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1491.922735][T18329] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1491.941096][T18329] F2FS-fs (loop6): invalid crc value
[ 1492.026926][T18329] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1492.050275][T18329] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1492.050327][T18329] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1493.216831][T18340] loop5: detected capacity change from 0 to 512
[ 1493.475636][T18340] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[ 1493.489547][T18340] EXT4-fs (loop5): 1 truncate cleaned up
[ 1493.522026][T18340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1494.572402][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1498.768705][T18380] loop6: detected capacity change from 0 to 512
[ 1498.778456][T18380] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1498.792348][T18380] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3264: bad orphan inode 131083
[ 1498.794164][T18380] loop6: lost filesystem error report for type 5 error -117
[ 1499.115971][T18380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1499.486790][T18389] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3274'.
[ 1500.544450][T17268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1500.821322][T18391] tipc: Started in network mode
[ 1500.821389][T18391] tipc: Node identity 2007ff, cluster identity 4711
[ 1500.821453][T18391] tipc: Node number set to 2099199
[ 1505.164056][T18428] loop5: detected capacity change from 0 to 4096
[ 1505.190368][T18428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1505.207245][T18428] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002]
[ 1505.207409][T18428] System zones: 0-5
[ 1505.232617][T18428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1507.894940][ T8060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1511.190814][T18457] loop5: detected capacity change from 0 to 32768
[ 1511.254945][T18457] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1511.444509][T18457] XFS (loop5): Ending clean mount
[ 1511.479405][T18457] XFS (loop5): Quotacheck needed: Please wait.
[ 1511.696927][T18445] syz.3.3291 (18445): drop_caches: 2
[ 1512.745967][T18457] XFS (loop5): Quotacheck: Done.
[ 1514.511681][T18481] loop3: detected capacity change from 0 to 256
[ 1514.539459][T18481] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1514.846160][ T8060] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1517.403513][T18501] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3304'.
[ 1517.403818][T18501] unsupported nlmsg_type 40
[ 1517.541880][T18500] loop6: detected capacity change from 0 to 4096
[ 1519.657689][T18500] ntfs3(loop6): Failed to load $Extend (-22).
[ 1519.657753][T18500] ntfs3(loop6): Failed to initialize $Extend.
[ 1522.023895][T18532] futex_wake_op: syz.3.3313 tries to shift op by 144; fix this program
[ 1523.504068][T18537] overlayfs: failed to clone lowerpath
[ 1524.407793][T18546] overlayfs: failed to clone lowerpath
[ 1526.756264][T18573] netlink: 'syz.7.3323': attribute type 1 has an invalid length.
[ 1526.889395][T18569] Cannot find add_set index 0 as target
[ 1526.933247][T18581] loop5: detected capacity change from 0 to 256
[ 1526.936315][T18581] vfat: Bad value for 'shortname'
[ 1526.962700][T18581] loop5: detected capacity change from 0 to 1024
[ 1526.965410][T18581] ext4: Unknown parameter 'nouser_xattr'
[ 1527.183638][T18586] futex_wake_op: syz.6.3326 tries to shift op by 144; fix this program
[ 1532.740470][T18639] loop3: detected capacity change from 0 to 256
[ 1532.747671][T18639] vfat: Unknown parameter 'sh
'
[ 1533.484880][T18641] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1533.485093][T18641] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1533.491683][T18641] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1534.465963][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1534.466045][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1536.487992][T18666] loop3: detected capacity change from 0 to 256
[ 1536.501251][T18666] vfat: Deprecated parameter 'posix'
[ 1536.632730][T18668] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3345'.
[ 1536.658620][T18666] FAT-fs: "posix" option is obsolete, not supported now
[ 1540.217543][   T30] kauditd_printk_skb: 93 callbacks suppressed
[ 1540.218965][   T30] audit: type=1326 audit(1490.294:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.269362][   T30] audit: type=1326 audit(1490.332:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.269480][   T30] audit: type=1326 audit(1490.332:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.269628][   T30] audit: type=1326 audit(1490.332:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.350685][   T30] audit: type=1326 audit(1490.341:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.350770][   T30] audit: type=1326 audit(1490.416:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.350836][   T30] audit: type=1326 audit(1490.416:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.350872][   T30] audit: type=1326 audit(1490.416:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1540.653206][   T30] audit: type=1326 audit(1490.697:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1541.381279][   T30] audit: type=1326 audit(1491.380:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.3.3349" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2514f9e0d9 code=0x7ffc0000
[ 1542.568705][T18709] loop6: detected capacity change from 0 to 1024
[ 1543.437231][T18709] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1546.257011][T17313] Bluetooth: hci4: Unable to find connection for big 0x00
[ 1548.689131][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1548.689178][   T30] audit: type=1107 audit(1498.220:1288): pid=18761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1���[��Po�
[ 1548.689178][   T30] �/v,��L�9���2���MeX�7xW�Ϩ���	fXKSRU�r�j�[j�ט���\�ȩ�(,����%�����9�0��.:� �����sϨ��-I�
!>g&�"��/���\Y=L3�{!҃�2�Ԧpj���>�;���ۺ�/��ٴ����ف�]�a���'v-���<�$��%�Q���5���l���eFr�=���/�a���#
[ 1548.689178][   T30] ���h��0�V��Z�2�'
[ 1553.627453][T18782] netlink: 'syz.6.3373': attribute type 2 has an invalid length.
[ 1553.635521][T18782] netlink: 'syz.6.3373': attribute type 2 has an invalid length.
[ 1560.496809][T17313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1560.525131][T17313] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1560.533073][T17313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1560.546218][T17313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1560.564498][T17313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1562.760768][T17313] Bluetooth: hci3: command tx timeout
[ 1563.630580][T18808] netdevsim0 speed is unknown, defaulting to 1000
[ 1563.638084][T18808] lo speed is unknown, defaulting to 1000
[ 1565.402659][T17313] Bluetooth: hci3: command tx timeout
[ 1566.471174][T18808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1566.478815][T18808] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1566.488466][T18808] bridge_slave_0: entered allmulticast mode
[ 1566.498945][T18808] bridge_slave_0: entered promiscuous mode
[ 1566.725491][T18808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1566.727357][T18808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1566.727554][T18808] bridge_slave_1: entered allmulticast mode
[ 1567.492527][T18808] bridge_slave_1: entered promiscuous mode
[ 1567.547944][   T52] Bluetooth: hci3: command tx timeout
[ 1569.486246][T18808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1569.691957][T18808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1569.770536][   T52] Bluetooth: hci3: command tx timeout
[ 1571.549727][T18808] team0: Port device team_slave_0 added
[ 1571.586487][T18808] team0: Port device team_slave_1 added
[ 1571.767165][T18808] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1571.767219][T18808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1571.767253][T18808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1571.838649][T18808] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1571.838707][T18808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1571.838762][T18808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1571.922828][T18893] loop6: detected capacity change from 0 to 4096
[ 1573.239408][T18893] ntfs3(loop6): Failed to load $Extend (-22).
[ 1573.239473][T18893] ntfs3(loop6): Failed to initialize $Extend.
[ 1573.304467][T18808] hsr_slave_0: entered promiscuous mode
[ 1573.329425][T18808] hsr_slave_1: entered promiscuous mode
[ 1573.496559][T18808] debugfs: 'hsr0' already exists in 'hsr'
[ 1573.496627][T18808] Cannot create hsr debugfs directory
[ 1578.653424][T18808] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1580.014432][T18952] loop6: detected capacity change from 0 to 1024
[ 1580.021036][T18952] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1580.111024][T18955] Invalid ELF header type: 3 != 1
[ 1580.338943][T18952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102]
[ 1580.355085][T18952] System zones: 0-1, 3-12
[ 1580.891578][T18952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1582.127441][T18808] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1582.128420][T18808] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1582.158103][T18808] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1582.181700][T18808] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1582.222216][T18808] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1582.237713][T18808] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1582.278516][T18808] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1582.512660][T17268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1583.372801][T18808] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1583.425119][T18808] 8021q: adding VLAN 0 to HW filter on device team0
[ 1583.494589][T14679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1583.495119][T14679] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1583.527318][T14679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1583.527561][T14679] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1585.667116][T18999] overlayfs: missing 'lowerdir'
[ 1586.782622][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[ 1586.875889][T19007] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1588.505473][T19012] loop6: detected capacity change from 0 to 1024
[ 1588.516276][T19012] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1588.541522][T19012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102]
[ 1588.541673][T19012] System zones: 0-1, 3-12
[ 1588.594214][T19012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1589.355110][T17268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1591.160044][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'.
[ 1591.160107][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'.
[ 1591.971464][T18808] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1592.447412][T19056] loop6: detected capacity change from 0 to 32768
[ 1592.450683][T19056] btrfs: Unknown parameter 'usebackuproot'
[ 1593.722356][T19071] loop6: detected capacity change from 0 to 512
[ 1593.779603][T19071] ------------[ cut here ]------------
[ 1593.779645][T19071] EA inode 11 i_nlink=0
[ 1593.779676][T19071] WARNING: fs/ext4/xattr.c:1055 at ext4_xattr_inode_update_ref+0x4cc/0x590, CPU#1: syz.6.3437/19071
[ 1593.800841][T19071] Modules linked in:
[ 1593.804835][T19071] CPU: 1 UID: 0 PID: 19071 Comm: syz.6.3437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1593.818661][T19071] Tainted: [L]=SOFTLOCKUP
[ 1593.823170][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1593.833492][T19071] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[ 1593.840291][T19071] Code: 08 4c 89 e7 e8 b5 d5 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 45 6f 37 09 44 89 e9 80 e1 07 80
[ 1593.860492][T19071] RSP: 0018:ffffc90004607340 EFLAGS: 00010246
[ 1593.866797][T19071] RAX: 0000000000000000 RBX: ffffffff905f47b0 RCX: dffffc0000000000
[ 1593.876398][T19071] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905f47b0
[ 1593.884678][T19071] RBP: ffffc90004607430 R08: ffff88807649ccaf R09: 1ffff1100ec93995
[ 1593.892773][T19071] R10: dffffc0000000000 R11: ffffed100ec93996 R12: 000000000000000b
[ 1593.900858][T19071] R13: ffff88807649cb08 R14: 0000000000000000 R15: 1ffff1100ec93961
[ 1593.908927][T19071] FS:  00007fefa5ca56c0(0000) GS:ffff888125018000(0000) knlGS:0000000000000000
[ 1593.918009][T19071] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1593.924856][T19071] CR2: 00007feff8005dc8 CR3: 000000007f328000 CR4: 00000000003526f0
[ 1593.933142][T19071] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1593.941248][T19071] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1593.949695][T19071] Call Trace:
[ 1593.953083][T19071]  <TASK>
[ 1593.956052][T19071]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 1593.961917][T19071]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 1593.968510][T19071]  ? ext4_xattr_inode_iget+0x3eb/0x600
[ 1593.974019][T19071]  ext4_xattr_inode_dec_ref_all+0x606/0xb50
[ 1593.980137][T19071]  ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 1593.987663][T19071]  ? _raw_spin_unlock+0x28/0x50
[ 1593.992566][T19071]  ? ext4_get_inode_loc+0xc5/0xf0
[ 1593.997724][T19071]  ext4_xattr_delete_inode+0xb7c/0xd60
[ 1594.003233][T19071]  ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 1594.009408][T19071]  ? __ext4_mark_inode_dirty+0x554/0x7b0
[ 1594.015364][T19071]  ext4_evict_inode+0xb53/0xfe0
[ 1594.020435][T19071]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1594.025949][T19071]  evict+0x624/0xb50
[ 1594.030147][T19071]  ? __pfx_evict+0x10/0x10
[ 1594.034630][T19071]  ? do_raw_spin_unlock+0xf5/0x210
[ 1594.039947][T19071]  ? _raw_spin_unlock+0x28/0x50
[ 1594.044945][T19071]  ? iput+0xb84/0xf00
[ 1594.049973][T19071]  ext4_orphan_cleanup+0xc7a/0x14c0
[ 1594.055340][T19071]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1594.062636][T19071]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 1594.068361][T19071]  ? ext4_register_li_request+0x640/0x720
[ 1594.074397][T19071]  ? errseq_check_and_advance+0x66/0x120
[ 1594.080351][T19071]  ext4_fill_super+0x5cde/0x6600
[ 1594.085418][T19071]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1594.091293][T19071]  ? snprintf+0xe8/0x140
[ 1594.099473][T19071]  ? __pfx_snprintf+0x10/0x10
[ 1594.105507][T19071]  ? set_blocksize+0x1c9/0x440
[ 1594.111018][T19071]  ? sb_set_blocksize+0x155/0x240
[ 1594.116685][T19071]  ? setup_bdev_super+0x586/0x680
[ 1594.122145][T19071]  get_tree_bdev_flags+0x430/0x4f0
[ 1594.127679][T19071]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1594.133312][T19071]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1594.139336][T19071]  vfs_get_tree+0x92/0x2a0
[ 1594.144327][T19071]  do_new_mount+0x319/0xdc0
[ 1594.149229][T19071]  ? __pfx_do_new_mount+0x10/0x10
[ 1594.154590][T19071]  ? ns_capable+0x89/0xe0
[ 1594.159094][T19071]  ? path_mount+0x647/0x1050
[ 1594.164610][T19071]  ? user_path_at+0xd4/0x160
[ 1594.170164][T19071]  __se_sys_mount+0x31d/0x420
[ 1594.175220][T19071]  ? __pfx___se_sys_mount+0x10/0x10
[ 1594.182265][T19071]  ? __x64_sys_mount+0x20/0xc0
[ 1594.189928][T19071]  do_syscall_64+0x166/0x510
[ 1594.195353][T19071]  ? trace_irq_disable+0x3b/0x140
[ 1594.202536][T19071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1594.210226][T19071]  ? clear_bhb_loop+0x40/0x90
[ 1594.215864][T19071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1594.222364][T19071] RIP: 0033:0x7fefa4d9f34a
[ 1594.226820][T19071] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1594.246988][T19071] RSP: 002b:00007fefa5ca4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1594.255583][T19071] RAX: ffffffffffffffda RBX: 00007fefa5ca4ee0 RCX: 00007fefa4d9f34a
[ 1594.263816][T19071] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fefa5ca4ea0
[ 1594.272073][T19071] RBP: 0000200000000180 R08: 00007fefa5ca4ee0 R09: 0000000000000000
[ 1594.280368][T19071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[ 1594.288533][T19071] R13: 00007fefa5ca4ea0 R14: 000000000000048d R15: 000000000000002c
[ 1594.297178][T19071]  </TASK>
[ 1594.300538][T19071] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1594.309875][T19071] CPU: 1 UID: 0 PID: 19071 Comm: syz.6.3437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1594.322299][T19071] Tainted: [L]=SOFTLOCKUP
[ 1594.327616][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1594.339475][T19071] Call Trace:
[ 1594.343069][T19071]  <TASK>
[ 1594.346022][T19071]  vpanic+0x56c/0xa60
[ 1594.351669][T19071]  ? __pfx__printk+0x10/0x10
[ 1594.357273][T19071]  ? __pfx_vpanic+0x10/0x10
[ 1594.362342][T19071]  ? is_bpf_text_address+0x292/0x2b0
[ 1594.367873][T19071]  ? is_bpf_text_address+0x26/0x2b0
[ 1594.373427][T19071]  panic+0xc5/0xd0
[ 1594.377372][T19071]  ? __pfx_panic+0x10/0x10
[ 1594.382082][T19071]  __warn+0x315/0x4c0
[ 1594.386197][T19071]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[ 1594.392246][T19071]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[ 1594.398279][T19071]  __report_bug+0x276/0x570
[ 1594.402900][T19071]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[ 1594.408940][T19071]  ? __pfx___report_bug+0x10/0x10
[ 1594.414034][T19071]  ? __ext4_get_inode_loc+0x6b4/0xf40
[ 1594.420051][T19071]  ? set_normalized_timespec64+0xf0/0x1a0
[ 1594.425927][T19071]  report_bug_entry+0x19a/0x290
[ 1594.430913][T19071]  ? ext4_xattr_inode_update_ref+0x50c/0x590
[ 1594.437203][T19071]  ? ext4_xattr_inode_update_ref+0x511/0x590
[ 1594.443242][T19071]  handle_bug+0xce/0x200
[ 1594.447521][T19071]  exc_invalid_op+0x1a/0x50
[ 1594.452073][T19071]  asm_exc_invalid_op+0x1a/0x20
[ 1594.456956][T19071] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[ 1594.463711][T19071] Code: 08 4c 89 e7 e8 b5 d5 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 45 6f 37 09 44 89 e9 80 e1 07 80
[ 1594.483442][T19071] RSP: 0018:ffffc90004607340 EFLAGS: 00010246
[ 1594.489544][T19071] RAX: 0000000000000000 RBX: ffffffff905f47b0 RCX: dffffc0000000000
[ 1594.497732][T19071] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905f47b0
[ 1594.505753][T19071] RBP: ffffc90004607430 R08: ffff88807649ccaf R09: 1ffff1100ec93995
[ 1594.513851][T19071] R10: dffffc0000000000 R11: ffffed100ec93996 R12: 000000000000000b
[ 1594.521964][T19071] R13: ffff88807649cb08 R14: 0000000000000000 R15: 1ffff1100ec93961
[ 1594.529991][T19071]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 1594.535948][T19071]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 1594.542328][T19071]  ? ext4_xattr_inode_iget+0x3eb/0x600
[ 1594.548346][T19071]  ext4_xattr_inode_dec_ref_all+0x606/0xb50
[ 1594.554280][T19071]  ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 1594.560742][T19071]  ? _raw_spin_unlock+0x28/0x50
[ 1594.565709][T19071]  ? ext4_get_inode_loc+0xc5/0xf0
[ 1594.570827][T19071]  ext4_xattr_delete_inode+0xb7c/0xd60
[ 1594.576337][T19071]  ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 1594.582340][T19071]  ? __ext4_mark_inode_dirty+0x554/0x7b0
[ 1594.588015][T19071]  ext4_evict_inode+0xb53/0xfe0
[ 1594.592919][T19071]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1594.598410][T19071]  evict+0x624/0xb50
[ 1594.602446][T19071]  ? __pfx_evict+0x10/0x10
[ 1594.606910][T19071]  ? do_raw_spin_unlock+0xf5/0x210
[ 1594.612228][T19071]  ? _raw_spin_unlock+0x28/0x50
[ 1594.617185][T19071]  ? iput+0xb84/0xf00
[ 1594.621223][T19071]  ext4_orphan_cleanup+0xc7a/0x14c0
[ 1594.626448][T19071]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1594.632558][T19071]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 1594.638407][T19071]  ? ext4_register_li_request+0x640/0x720
[ 1594.644159][T19071]  ? errseq_check_and_advance+0x66/0x120
[ 1594.649817][T19071]  ext4_fill_super+0x5cde/0x6600
[ 1594.654877][T19071]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1594.660180][T19071]  ? snprintf+0xe8/0x140
[ 1594.664461][T19071]  ? __pfx_snprintf+0x10/0x10
[ 1594.669264][T19071]  ? set_blocksize+0x1c9/0x440
[ 1594.674345][T19071]  ? sb_set_blocksize+0x155/0x240
[ 1594.679425][T19071]  ? setup_bdev_super+0x586/0x680
[ 1594.684688][T19071]  get_tree_bdev_flags+0x430/0x4f0
[ 1594.690109][T19071]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1594.695467][T19071]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1594.701132][T19071]  vfs_get_tree+0x92/0x2a0
[ 1594.705800][T19071]  do_new_mount+0x319/0xdc0
[ 1594.710351][T19071]  ? __pfx_do_new_mount+0x10/0x10
[ 1594.715411][T19071]  ? ns_capable+0x89/0xe0
[ 1594.719765][T19071]  ? path_mount+0x647/0x1050
[ 1594.724479][T19071]  ? user_path_at+0xd4/0x160
[ 1594.729123][T19071]  __se_sys_mount+0x31d/0x420
[ 1594.733856][T19071]  ? __pfx___se_sys_mount+0x10/0x10
[ 1594.739283][T19071]  ? __x64_sys_mount+0x20/0xc0
[ 1594.744178][T19071]  do_syscall_64+0x166/0x510
[ 1594.748809][T19071]  ? trace_irq_disable+0x3b/0x140
[ 1594.753907][T19071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1594.760049][T19071]  ? clear_bhb_loop+0x40/0x90
[ 1594.764851][T19071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1594.770783][T19071] RIP: 0033:0x7fefa4d9f34a
[ 1594.775234][T19071] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1594.794860][T19071] RSP: 002b:00007fefa5ca4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1594.803316][T19071] RAX: ffffffffffffffda RBX: 00007fefa5ca4ee0 RCX: 00007fefa4d9f34a
[ 1594.811306][T19071] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fefa5ca4ea0
[ 1594.819930][T19071] RBP: 0000200000000180 R08: 00007fefa5ca4ee0 R09: 0000000000000000
[ 1594.828316][T19071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[ 1594.836410][T19071] R13: 00007fefa5ca4ea0 R14: 000000000000048d R15: 000000000000002c
[ 1594.844896][T19071]  </TASK>
[ 1594.848986][T19071] Kernel Offset: disabled
[ 1594.853407][T19071] Rebooting in 86400 seconds..