last executing test programs:

2m39.953069227s ago: executing program 1 (id=87):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000200)=0x9, 0x4)

2m38.461297401s ago: executing program 1 (id=90):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xcc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x200000b0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x141bc2, 0xa3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000432f4a912c8ec4cdffc071b7f5dccd62685550bf2ea5108ddfb9eb05bb70a13da20abdb1bd1466adfff2dd6b817563312eb00e8165a0e0d91d6acc10000000000000005f5a60a2109b123aa6152ad188028bee55256e2117e67f9dec2de912c8c78af9216e3e7e37e7c7258878caa2baecfff849b1589c0ec9840403085a2031a111d6fbedbbfd210e00"/167], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x1513, &(0x7f0000003080)="$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")
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)

2m32.774953964s ago: executing program 1 (id=93):
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xffff, 0xfff3}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x64040021}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a010000000000000000000100"], 0x104}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="94eb010018000000000000000c0000000c00000009000000070000eabd543f7fcd470000000000000000006100"], 0x0, 0x2d}, 0x12)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280409d, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

2m31.47112497s ago: executing program 1 (id=96):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100009, 0x0, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
timer_settime(0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1)

2m28.809121854s ago: executing program 1 (id=100):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000002040)}], 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
getdents(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f00000002c0)="bd05", &(0x7f0000000240)=@tcp6=r0}, 0x20)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

2m25.62744397s ago: executing program 1 (id=110):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m24.398510262s ago: executing program 32 (id=110):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.897523245s ago: executing program 0 (id=322):
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
io_setup(0x2004, 0x0)
readv(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_bpf={0x68, 0x1, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

17.853556226s ago: executing program 5 (id=323):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000004c0)="ff9f")

16.034226074s ago: executing program 3 (id=327):
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x103000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x64000600)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0)

13.820169999s ago: executing program 0 (id=330):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000000400018008000740000004004c000e8014000180080001000a010101080002006401"], 0xc0}}, 0x200000b0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000001000370400000000000000", @ANYBLOB="830405000000000080"], 0xa0}}, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x141bc2, 0xa3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x302000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13.759202591s ago: executing program 5 (id=332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000010)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x10}, 0x0, 0x0, 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}})

13.702948014s ago: executing program 3 (id=333):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[], 0xff, 0x223, &(0x7f00000002c0)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000080000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xfff)
chdir(&(0x7f0000000140)='./bus\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)

11.802297445s ago: executing program 3 (id=336):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
utime(&(0x7f0000000200)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x74, 0x101301)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)

11.802090735s ago: executing program 0 (id=337):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x800448d4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11.754102658s ago: executing program 4 (id=338):
r0 = syz_io_uring_setup(0x5130, &(0x7f00000000c0)={0x0, 0xd5a5, 0x800, 0x3, 0x2a0}, &(0x7f0000000400), &(0x7f0000010200))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0)

11.569265435s ago: executing program 2 (id=339):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x0, 0x100201, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x40, 0x6}}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0xc084)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00')
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x217, &(0x7f0000000600), 0x1, 0x586, &(0x7f0000009ec0)="$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")
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)

8.708705087s ago: executing program 4 (id=340):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000080)={[{@errors_remount}, {@grpquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc88}}, 0x0, 0x0, 0x9, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
fanotify_init(0xf00, 0x2)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

8.575720703s ago: executing program 5 (id=341):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r2, 0x0, 0x0)

8.43690577s ago: executing program 0 (id=342):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000640)=0x1)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0)
pwritev(r0, 0x0, 0x0, 0x9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_usb_connect(0x0, 0x64, &(0x7f0000001e00)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000"], 0x0)

8.165857151s ago: executing program 2 (id=343):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

8.078542914s ago: executing program 3 (id=344):
r0 = socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
getxattr(0x0, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)

7.685953201s ago: executing program 4 (id=345):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

7.664622022s ago: executing program 5 (id=346):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001780), 0x0, &(0x7f0000000380)}, 0x80)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.791561079s ago: executing program 3 (id=347):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

6.574220699s ago: executing program 2 (id=348):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x88)
flock(r5, 0x2)

6.419358385s ago: executing program 5 (id=349):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0)

6.279854331s ago: executing program 4 (id=350):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800000, 0x28, 0x10}, 0x18)
r0 = socket$unix(0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
r8 = accept4(r0, &(0x7f00000003c0)=@x25, &(0x7f0000000240)=0x80, 0x80000)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="c8000d7f2d2eb8ec95096722645e07925a4e56b05b0e74ddc684397295b3e3485d987a63f6f8b63f2bd1780eeadaf007a8b18bd797bd3565f4574c8eb69aaefc0eb802a60f1457777471ca9e955c85398f68ab2eb9eb3d4770599de60fe7677142cc6a9dee90c7b944fb3fe4fc23969c83dbcbcd743b92093aa9c16c14ab5f0ada2a9973f2f886f1c6f5446cba76e8b85097abb88eacc9ef67e10612415c31dc6ea5ee2c7b0468d1c856f1ce120cc614642b31579402", @ANYRES16=r7], 0x1c8}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000005c0)='kvm_msi_set_irq\x00', r10, 0x0, 0x4000000002}, 0x2a88f359)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = gettid()
sendmsg$unix(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="000000003000c600600700"/20, @ANYRES32=r12, @ANYRES32=r11, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="1c00000000002000010900000010", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000e3110000", @ANYRES32=r11, @ANYRES32=r7], 0xa0}, 0x4004881)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfe8e, 0x12)

5.874008569s ago: executing program 0 (id=351):
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00000000c0)={0x40000000, 0x0, 0x0}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8000000180001007effffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141425000000000000000000000000000008ada26ebbb78d24000000000000a39b000000000000ff010000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000080018000800"/176], 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r9 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8)
close(r9)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
unshare(0x42000000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

3.607103226s ago: executing program 2 (id=352):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x101)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.397241715s ago: executing program 0 (id=353):
tkill(0x0, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$inet6(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40c0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0)

3.114282917s ago: executing program 4 (id=354):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)

3.114086057s ago: executing program 5 (id=355):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180018110000", @ANYRESHEX=0x0, @ANYRESOCT=r2], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r6, 0x111, 0x3, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000480)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nombcache}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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")

2.979429603s ago: executing program 3 (id=356):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000080)={[{@errors_remount}, {@grpquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc88}}, 0x0, 0x0, 0x9, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
fanotify_init(0xf00, 0x2)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

2.921364035s ago: executing program 2 (id=357):
r0 = socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
getxattr(0x0, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)

2.757711902s ago: executing program 4 (id=358):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', <r8=>0x0})
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001400030500008000fbdbdf250210d7ff", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x40)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x0, 0x0, 0x0, 0xf6a, 0x0, 0x0, 0x0, 0x8, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x1)

0s ago: executing program 2 (id=359):
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10006, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
readv(r1, &(0x7f0000000040)=[{0x0}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts.
[   71.846712][ T4255] cgroup: Unknown subsys name 'net'
[   71.982703][ T4255] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.463313][ T4255] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   75.695889][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.703762][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.721854][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.729331][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.737420][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.745437][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.752819][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.758413][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.761132][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.768690][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.775677][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.782241][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.790774][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.803139][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.804579][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.811407][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.825238][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.826084][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.839712][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.847368][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.854806][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.863654][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.868843][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.874715][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   75.878929][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   75.891900][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.910586][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.924750][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.932071][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.939449][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.327838][ T4265] chnl_net:caif_netlink_parms(): no params data found
[   76.418130][ T4266] chnl_net:caif_netlink_parms(): no params data found
[   76.502227][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   76.568093][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.575441][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.583630][ T4265] device bridge_slave_0 entered promiscuous mode
[   76.592088][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   76.603325][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.610944][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.619002][ T4265] device bridge_slave_1 entered promiscuous mode
[   76.630818][ T4276] chnl_net:caif_netlink_parms(): no params data found
[   76.704764][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.714013][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.721350][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.730337][ T4266] device bridge_slave_0 entered promiscuous mode
[   76.762854][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.772277][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.779601][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.787743][ T4266] device bridge_slave_1 entered promiscuous mode
[   76.836324][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.843476][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.851863][ T4277] device bridge_slave_0 entered promiscuous mode
[   76.871679][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.883663][ T4265] team0: Port device team_slave_0 added
[   76.897086][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.904649][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.912536][ T4277] device bridge_slave_1 entered promiscuous mode
[   76.924345][ T4265] team0: Port device team_slave_1 added
[   76.931787][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.020762][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.028062][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.039632][ T4274] device bridge_slave_0 entered promiscuous mode
[   77.048933][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.062084][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.071644][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.079804][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.087825][ T4276] device bridge_slave_0 entered promiscuous mode
[   77.096560][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.103685][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.112071][ T4276] device bridge_slave_1 entered promiscuous mode
[   77.119789][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.126968][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.153210][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.166960][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.173953][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.200041][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.214449][ T4266] team0: Port device team_slave_0 added
[   77.226033][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.233165][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.241845][ T4274] device bridge_slave_1 entered promiscuous mode
[   77.267249][ T4266] team0: Port device team_slave_1 added
[   77.284385][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.341174][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.360727][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.373388][ T4265] device hsr_slave_0 entered promiscuous mode
[   77.380368][ T4265] device hsr_slave_1 entered promiscuous mode
[   77.390231][ T4277] team0: Port device team_slave_0 added
[   77.412048][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.429237][ T4277] team0: Port device team_slave_1 added
[   77.444822][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.451783][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.478429][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.523198][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.530257][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.556996][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.571523][ T4276] team0: Port device team_slave_0 added
[   77.582435][ T4276] team0: Port device team_slave_1 added
[   77.590928][ T4274] team0: Port device team_slave_0 added
[   77.597572][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.604616][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.630563][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.656434][ T4274] team0: Port device team_slave_1 added
[   77.673824][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.680996][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.707585][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.780529][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.787677][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.813742][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.836966][ T4266] device hsr_slave_0 entered promiscuous mode
[   77.843678][ T4266] device hsr_slave_1 entered promiscuous mode
[   77.850854][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.858809][ T4266] Cannot create hsr debugfs directory
[   77.869701][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.876864][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.903068][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.914807][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.921783][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.947815][ T4278] Bluetooth: hci4: command 0x0409 tx timeout
[   77.948381][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.954381][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[   77.996333][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.003323][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.029483][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[   78.029637][ T4278] Bluetooth: hci1: command 0x0409 tx timeout
[   78.036213][ T4270] Bluetooth: hci0: command 0x0409 tx timeout
[   78.042235][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.070862][ T4277] device hsr_slave_0 entered promiscuous mode
[   78.077899][ T4277] device hsr_slave_1 entered promiscuous mode
[   78.084781][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.092363][ T4277] Cannot create hsr debugfs directory
[   78.143362][ T4276] device hsr_slave_0 entered promiscuous mode
[   78.150456][ T4276] device hsr_slave_1 entered promiscuous mode
[   78.157911][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.165692][ T4276] Cannot create hsr debugfs directory
[   78.217481][ T4274] device hsr_slave_0 entered promiscuous mode
[   78.224356][ T4274] device hsr_slave_1 entered promiscuous mode
[   78.230856][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.238821][ T4274] Cannot create hsr debugfs directory
[   78.498195][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.519563][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.532483][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.547629][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.570550][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.604906][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.621368][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.630770][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.693321][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.706147][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   78.741483][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   78.751541][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   78.771071][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.799585][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.830196][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.859943][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.869462][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.879506][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.890403][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   78.916369][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.947450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.956913][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.967473][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.974835][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.006198][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.018172][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.030091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.039898][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.048592][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.055744][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.071008][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.083847][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.094825][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.104006][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.145067][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.160551][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.186030][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   79.192984][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.201801][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.229474][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.239149][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.262379][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.270653][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.283189][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.292141][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.299325][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.318613][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.335601][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.343603][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.353376][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.363611][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.373083][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.381793][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.388942][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.414383][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   79.425730][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.433602][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.442279][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.463647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.473006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.482061][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.490928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.503020][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.518518][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.529937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.538861][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.546060][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.554883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.563557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.572755][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.579979][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.588097][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.603069][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.628416][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.668983][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.680000][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.689613][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.699685][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.709568][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.720113][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.738031][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.753307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.765901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.782890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.797063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.812835][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.830776][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   79.847182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.856682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.866189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.875506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.883504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.892540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.902689][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.911422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.921453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.933192][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.943053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.952149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.962430][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.969632][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.981322][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.994139][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.022524][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.030119][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[   80.036732][ T4278] Bluetooth: hci4: command 0x041b tx timeout
[   80.047717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.059950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.072283][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.084927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.093625][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.100833][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.108901][ T4278] Bluetooth: hci0: command 0x041b tx timeout
[   80.115315][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[   80.121370][ T4278] Bluetooth: hci1: command 0x041b tx timeout
[   80.157887][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.180105][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   80.215700][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.238769][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.269733][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.307757][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.325228][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.338580][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.345785][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.363631][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.407479][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.437608][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.447043][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.466207][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.476119][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.483236][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.491783][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.501609][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.511537][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.521293][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.530483][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.539620][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.549527][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.569868][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.614551][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.624102][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.642883][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.661429][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.680192][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.738476][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.753116][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.762258][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.771622][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.781608][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.790548][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.800318][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.809738][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.836871][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.866373][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.875325][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.882804][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.898569][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.912140][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.958193][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.968436][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.031874][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.045281][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.065487][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.085872][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.106102][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.119706][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.143615][ T4265] device veth0_vlan entered promiscuous mode
[   81.173427][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.185311][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.219624][ T4265] device veth1_vlan entered promiscuous mode
[   81.251497][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.271126][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.297987][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.307678][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.318885][ T4266] device veth0_vlan entered promiscuous mode
[   81.337772][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.355116][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.389270][ T4266] device veth1_vlan entered promiscuous mode
[   81.401635][ T4265] device veth0_macvtap entered promiscuous mode
[   81.418028][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.435321][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.458417][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.505523][ T4265] device veth1_macvtap entered promiscuous mode
[   81.525664][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.534489][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.542842][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.555431][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.562969][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.593292][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.606362][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.614135][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.622994][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.670008][ T4266] device veth0_macvtap entered promiscuous mode
[   81.682386][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.697031][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.715875][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.732614][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.741776][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.759837][ T4266] device veth1_macvtap entered promiscuous mode
[   81.779111][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.790018][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.801339][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.811354][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.826163][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.836053][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.889532][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.900521][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.913591][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.931294][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.941764][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.969297][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.004310][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.026000][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.075611][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.086991][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.101835][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.114784][ T4270] Bluetooth: hci4: command 0x040f tx timeout
[   82.117931][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.120840][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[   82.145977][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.169520][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.184572][ T4270] Bluetooth: hci2: command 0x040f tx timeout
[   82.188049][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.190633][ T4270] Bluetooth: hci0: command 0x040f tx timeout
[   82.204051][ T4278] Bluetooth: hci1: command 0x040f tx timeout
[   82.247329][ T4277] device veth0_vlan entered promiscuous mode
[   82.260479][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.282672][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.292078][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.306727][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.319874][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.331175][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.342191][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.353559][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.378364][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.389961][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.399866][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.408961][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.449394][ T4274] device veth0_vlan entered promiscuous mode
[   82.459582][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.469090][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.478052][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.487544][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.496478][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.510707][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.518714][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.527196][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.551266][ T4276] device veth0_vlan entered promiscuous mode
[   82.558783][ T4277] device veth1_vlan entered promiscuous mode
[   82.575635][ T4274] device veth1_vlan entered promiscuous mode
[   82.598264][ T4276] device veth1_vlan entered promiscuous mode
[   82.615461][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.625153][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.644955][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.653032][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.662655][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.677024][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.685525][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.693589][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.702022][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.744982][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.753651][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.767769][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.776616][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.791948][ T4277] device veth0_macvtap entered promiscuous mode
[   82.811600][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.812087][ T4274] device veth0_macvtap entered promiscuous mode
[   82.826412][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.850128][ T4277] device veth1_macvtap entered promiscuous mode
[   82.865988][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.876423][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.884738][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.892898][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   82.907141][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.916357][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.936446][ T4274] device veth1_macvtap entered promiscuous mode
[   82.952667][ T4276] device veth0_macvtap entered promiscuous mode
[   82.963266][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.981876][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.987040][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.001263][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.011483][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.022267][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.036001][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.069915][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.080990][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.090690][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.099607][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.109306][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.122991][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.133972][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.144035][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.156164][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.168064][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.188686][ T4276] device veth1_macvtap entered promiscuous mode
[   83.204117][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.212714][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.227099][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.261119][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.264531][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.288934][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.297761][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.311579][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.320529][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.342747][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.357128][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.367216][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.377821][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.388574][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.399718][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.411842][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.422834][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.434462][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.444931][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.455758][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.467336][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.478171][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.489339][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.505940][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.518120][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.533178][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.542420][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.553140][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.566094][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.575774][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.601983][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.613838][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.627187][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.638047][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.648190][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.659062][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.671384][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.686474][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.703441][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.714572][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.725384][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.735805][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.749427][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.759655][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.771333][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.796848][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.816268][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.832103][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.842446][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.846485][ T4389] loop3: detected capacity change from 0 to 40427
[   83.860267][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.879388][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.888814][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.898180][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.903211][ T4389] F2FS-fs (loop3): invalid crc value
[   83.912129][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.930324][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.940905][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.975755][ T4389] F2FS-fs (loop3): Found nat_bits in checkpoint
[   83.980371][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.006494][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.112284][ T4395] loop1: detected capacity change from 0 to 1024
[   84.195354][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[   84.195385][ T4270] Bluetooth: hci4: command 0x0419 tx timeout
[   84.224010][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.243825][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.246101][ T4389] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   84.265059][ T4270] Bluetooth: hci0: command 0x0419 tx timeout
[   84.271145][ T4270] Bluetooth: hci2: command 0x0419 tx timeout
[   84.278252][ T4285] Bluetooth: hci1: command 0x0419 tx timeout
[   84.285641][ T4395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   84.374592][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.382980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   84.391325][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[   84.399642][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   84.407969][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   84.416286][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   84.425221][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   84.434213][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   84.444199][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   84.454205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   84.533843][ T4402] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.2: reserved inode found cleared - inode=2
[   84.648728][ T4402] EXT4-fs (loop1): Remounting filesystem read-only
[   85.087711][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.235902][ T4266] EXT4-fs (loop1): unmounting filesystem.
[   85.268231][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.279607][ T4265] syz-executor: attempt to access beyond end of device
[   85.279607][ T4265] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.324715][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.374658][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.414561][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.415756][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.422586][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.438699][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.503981][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.530233][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.561294][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.595233][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.599173][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.616604][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.664218][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.673065][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.161633][ T4418] loop2: detected capacity change from 0 to 1024
[   86.254373][    T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   86.376410][ T4418] EXT4-fs (loop2): orphan cleanup on readonly fs
[   86.399038][ T4418] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   86.410099][ T4418] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   86.419705][ T4418] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.3: Failed to acquire dquot type 0
[   86.472863][ T4418] EXT4-fs (loop2): 1 truncate cleaned up
[   86.514602][ T4418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   87.892207][  T129] cfg80211: failed to load regulatory.db
[   87.912767][ T4277] EXT4-fs (loop2): unmounting filesystem.
[   88.434615][    T7] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   88.470403][    T7] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   88.482675][    T7] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   88.493307][    T7] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   88.515235][ T4429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.576310][    T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.605981][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   88.614055][    T7] usb 2-1: SerialNumber: syz
[   89.607916][ T4387] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   89.673507][    T7] rndis_wlan: probe of 2-1:253.0 failed with error -22
[   89.712026][    T7] rndis_host: probe of 2-1:253.0 failed with error -22
[   89.786064][    T7] usb 2-1: USB disconnect, device number 2
[   90.362308][ T4444] xt_socket: unknown flags 0x4c
[   91.344369][ T4387] usb 5-1: Using ep0 maxpacket: 16
[   91.843027][ T4448] xt_socket: unknown flags 0x4c
[   92.679403][ T4387] usb 5-1: unable to read config index 0 descriptor/start: -71
[   92.701595][ T4387] usb 5-1: can't read configurations, error -71
[   93.224039][ T4456] loop1: detected capacity change from 0 to 4096
[   93.290254][ T4456] ntfs3: loop1: ino=3, Correct links count -> 2.
[   93.431360][ T4456] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   93.737831][   T27] audit: type=1800 audit(1764849589.691:2): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="file1" dev="loop1" ino=37 res=0 errno=0
[   93.817393][ T4465] loop0: detected capacity change from 0 to 164
[   95.140540][ T4481] loop1: detected capacity change from 0 to 128
[   95.209063][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   95.243796][ T4481] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.307794][ T4487] loop2: detected capacity change from 0 to 128
[   95.315788][ T4487] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.327951][ T4487] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   95.594471][ T4473] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   96.011182][ T4495] fscrypt: Error allocating hmac(sha512): -2
[   96.296271][ T4503] loop4: detected capacity change from 0 to 1024
[   96.370618][ T4266] EXT4-fs (loop1): unmounting filesystem.
[   96.749067][ T4503] EXT4-fs (loop4): orphan cleanup on readonly fs
[   97.012390][ T4503] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   97.093593][ T4503] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   97.103372][ T4503] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.30: Failed to acquire dquot type 0
[   97.141652][ T4503] EXT4-fs (loop4): 1 truncate cleaned up
[   97.152414][ T4503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   97.252849][ T4514] loop0: detected capacity change from 0 to 256
[   97.295288][ T4514] =======================================================
[   97.295288][ T4514] WARNING: The mand mount option has been deprecated and
[   97.295288][ T4514]          and is ignored by this kernel. Remove the mand
[   97.295288][ T4514]          option from the mount to silence this warning.
[   97.295288][ T4514] =======================================================
[   97.398308][ T4276] EXT4-fs (loop4): unmounting filesystem.
[   97.492293][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'.
[   98.501456][ T4530] loop2: detected capacity change from 0 to 512
[   98.539503][ T4530] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   98.625281][ T4530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   98.666513][ T4530] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.37: inode has both inline data and extents flags
[   98.686853][ T4530] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.37: couldn't read orphan inode 15 (err -117)
[   98.694408][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   98.714918][ T4530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   98.893923][ T4537] loop3: detected capacity change from 0 to 512
[   99.504880][    T7] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.513998][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.552013][ T4277] EXT4-fs (loop2): unmounting filesystem.
[   99.611122][    T7] usb 2-1: config 0 descriptor??
[   99.617333][ T4537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   99.651017][    T7] cp210x 2-1:0.0: cp210x converter detected
[   99.713574][ T4537] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   99.775666][ T4537] EXT4-fs (loop3): corrupt root inode, run e2fsck
[   99.786850][ T4537] EXT4-fs (loop3): mount failed
[  100.094973][    T7] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  100.157719][    T7] usb 2-1: cp210x converter now attached to ttyUSB0
[  100.260624][ T4552] loop3: detected capacity change from 0 to 1024
[  100.352857][ T4552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  100.539559][ T4561] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.42: reserved inode found cleared - inode=2
[  100.638528][ T4561] EXT4-fs (loop3): Remounting filesystem read-only
[  101.153136][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  101.274425][  T129] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  101.502455][  T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  101.530794][  T129] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  102.593076][  T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.607365][  T129] usb 1-1: config 0 descriptor??
[  102.613785][ T4557] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  102.700043][ T4611] loop4: detected capacity change from 0 to 1024
[  102.786458][ T4615] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[  103.040589][  T129] usbhid 1-1:0.0: can't add hid device: -71
[  103.064523][  T129] usbhid: probe of 1-1:0.0 failed with error -71
[  103.233866][  T129] usb 1-1: USB disconnect, device number 2
[  103.545657][ T4611] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[  103.552404][ T4611] hfsplus: failed to load root directory
[  106.691399][ T4671] loop0: detected capacity change from 0 to 512
[  106.857764][ T4671] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.53: corrupted inode contents
[  106.872105][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  106.878750][ T4671] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #16: comm syz.0.53: mark_inode_dirty error
[  106.894662][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  106.901363][ T4671] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.53: corrupted inode contents
[  106.946290][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  106.952868][ T4671] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.53: mark_inode_dirty error
[  106.994663][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  107.001347][ T4671] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.53: corrupted inode contents
[  107.054793][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  107.061438][ T4671] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  107.070896][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  107.077532][ T4671] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.53: corrupted inode contents
[  107.103518][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  107.110233][ T4671] EXT4-fs error (device loop0): ext4_truncate:4318: inode #16: comm syz.0.53: mark_inode_dirty error
[  107.123305][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  107.129915][ T4671] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  107.139436][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  107.146962][ T4671] EXT4-fs (loop0): 1 truncate cleaned up
[  107.150996][ T4327] usb 2-1: USB disconnect, device number 3
[  107.152737][ T4671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  107.168112][ T4671] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.173672][ T4468] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  107.221214][ T4671] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 13: comm syz.0.53: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  107.254293][ T4468] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:9: Failed to release dquot type 1
[  107.254670][ T4327] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  107.284777][ T4671] EXT4-fs (loop0): Remounting filesystem read-only
[  107.295124][ T4468] EXT4-fs (loop0): Remounting filesystem read-only
[  107.415423][ T4327] cp210x 2-1:0.0: device disconnected
[  107.461704][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  107.647223][ T4686] loop0: detected capacity change from 0 to 512
[  107.725795][ T4686] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.917968][ T4686] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  108.028328][ T4692] input: syz0 as /devices/virtual/input/input6
[  108.396926][ T4686] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.59: inode has both inline data and extents flags
[  108.509525][ T4686] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.59: couldn't read orphan inode 15 (err -117)
[  108.576512][ T4686] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  108.691318][ T4686] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  108.701513][ T4698] loop2: detected capacity change from 0 to 512
[  108.718413][ T4686] EXT4-fs error (device loop0): __ext4_new_inode:1350: inode #18: comm syz.0.59: mark_inode_dirty error
[  108.838086][ T4686] EXT4-fs error (device loop0) in __ext4_new_inode:1352: Corrupt filesystem
[  108.894946][ T4686] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  108.925409][ T4686] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #18: comm syz.0.59: mark_inode_dirty error
[  108.982891][ T4686] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  109.173079][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  109.231018][ T4698] EXT4-fs (loop2): Test dummy encryption mode enabled
[  109.249383][ T4698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.302872][ T4698] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.61: bad orphan inode 131083
[  109.363270][ T4711] loop4: detected capacity change from 0 to 1024
[  109.398599][ T4711] EXT4-fs (loop4): unsupported inode size: 4096
[  109.419632][ T4684] loop1: detected capacity change from 0 to 40427
[  109.436287][ T4698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  109.446210][ T4684] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  109.470593][ T4684] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  109.482919][ T4684] F2FS-fs (loop1): invalid crc value
[  109.491953][ T4684] F2FS-fs (loop1): Found nat_bits in checkpoint
[  109.621800][ T4711] EXT4-fs (loop4): blocksize: 1024
[  109.897178][ T4684] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  109.926916][ T4684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.187362][ T4723] loop4: detected capacity change from 0 to 16
[  110.412535][ T4723] erofs: (device loop4): mounted with root inode @ nid 36.
[  110.782579][ T4717] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  113.197419][ T4594] Bluetooth: hci5: Frame reassembly failed (-84)
[  113.347452][ T4765] loop1: detected capacity change from 0 to 128
[  113.473024][   T27] audit: type=1800 audit(1764849609.421:3): pid=4765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.74" name="file1" dev="loop1" ino=1048600 res=0 errno=0
[  113.574226][   T27] audit: type=1800 audit(1764849609.461:4): pid=4765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.74" name="file1" dev="loop1" ino=1048600 res=0 errno=0
[  113.764333][ T4327] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  113.968704][ T4327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.990326][ T4327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.033064][ T4327] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  114.052802][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.097392][ T4327] usb 1-1: config 0 descriptor??
[  114.322649][   T27] audit: type=1800 audit(1764849610.271:5): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.75" name="file0" dev="fuse" ino=0 res=0 errno=0
[  114.733423][ T4327] usbhid 1-1:0.0: can't add hid device: -71
[  114.741719][ T4327] usbhid: probe of 1-1:0.0 failed with error -71
[  114.758779][ T4327] usb 1-1: USB disconnect, device number 3
[  115.094355][  T129] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  115.230470][ T4278] Bluetooth: hci5: command 0x1003 tx timeout
[  115.234433][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  115.306646][  T129] usb 4-1: config 7 has an invalid interface number: 227 but max is 0
[  115.328214][  T129] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  115.395997][  T129] usb 4-1: config 7 has no interface number 0
[  115.402130][  T129] usb 4-1: config 7 interface 227 has no altsetting 0
[  115.447049][  T129] usb 4-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44
[  115.479484][  T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.499548][  T129] usb 4-1: Product: syz
[  115.503862][  T129] usb 4-1: Manufacturer: syz
[  115.514299][  T129] usb 4-1: SerialNumber: syz
[  115.743056][  T129] cdc_wdm 4-1:7.227: invalid descriptor buffer length
[  115.770090][  T129] cdc_wdm: probe of 4-1:7.227 failed with error -22
[  116.676093][  T129] usb 4-1: USB disconnect, device number 2
[  116.916950][ T4791] loop4: detected capacity change from 0 to 512
[  116.959811][ T4791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.786849][ T4791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  117.921348][ T4791] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.290840][ T4805] loop0: detected capacity change from 0 to 512
[  119.280224][ T4803] sched: RT throttling activated
[  119.302649][ T4805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.413247][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  121.330219][ T4805] EXT4-fs (loop0): 1 truncate cleaned up
[  121.330259][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  121.335993][ T4805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  121.495771][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  121.854383][ T4815] Zero length message leads to an empty skb
[  121.884483][ T4820] loop1: detected capacity change from 0 to 256
[  123.327753][ T4820] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.338982][ T4820] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  125.000892][ T4820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d)
[  128.350882][ T4850] loop1: detected capacity change from 0 to 1024
[  128.380353][ T4850] EXT4-fs: Ignoring removed bh option
[  128.491659][ T4850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  128.715705][ T4850] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.96: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  128.777956][ T4850] EXT4-fs (loop1): Remounting filesystem read-only
[  128.810774][ T4850] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  129.169191][ T4266] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /18/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  129.211163][ T4857] futex_wake_op: syz.4.99 tries to shift op by -1; fix this program
[  129.261870][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  129.326118][ T4266] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /18/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  129.552014][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  129.773591][ T4266] EXT4-fs error (device loop1): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  130.020143][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  130.059468][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  130.178806][ T4266] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /18/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  130.264523][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  130.282490][ T4266] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /18/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  130.339528][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  130.376326][ T4266] EXT4-fs error (device loop1): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  130.421574][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  130.434327][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  130.466312][ T4266] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /18/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  130.504600][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  130.570168][ T4266] EXT4-fs error (device loop1): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /18/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  130.674743][ T4266] EXT4-fs (loop1): Remounting filesystem read-only
[  130.681540][ T4266] EXT4-fs error (device loop1): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  130.728789][ T4872] loop3: detected capacity change from 0 to 512
[  130.765163][ T4872] EXT4-fs: Ignoring removed orlov option
[  130.775649][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  130.792850][ T4872] EXT4-fs: Ignoring removed i_version option
[  130.847515][ T4872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.103: inode #1: comm syz.3.103: iget: illegal inode #
[  130.877678][ T4872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.103: error while reading EA inode 1 err=-117
[  130.895311][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  130.955777][ T4872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.103: inode #1: comm syz.3.103: iget: illegal inode #
[  130.956555][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  130.991954][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  131.006589][ T4872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.103: error while reading EA inode 1 err=-117
[  131.017502][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  131.053887][ T4872] EXT4-fs (loop3): 1 orphan inode deleted
[  131.061038][ T4872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  131.111094][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  131.141567][ T4266] EXT4-fs warning (device loop1): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  131.166514][  T129] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  131.369918][  T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.426436][  T129] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  131.464730][  T129] usb 1-1: too many endpoints for config 1 interface 1 altsetting 138: 250, using maximum allowed: 30
[  131.476143][  T129] usb 1-1: config 1 interface 1 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 250
[  131.490625][  T129] usb 1-1: config 1 interface 1 has no altsetting 0
[  131.523985][  T129] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.547389][  T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.565893][  T129] usb 1-1: Product: syz
[  131.573034][  T129] usb 1-1: Manufacturer: syz
[  131.577991][  T129] usb 1-1: SerialNumber: syz
[  131.610383][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  131.652777][  T129] usb 1-1: selecting invalid altsetting 0
[  131.692970][  T129] cdc_ether: probe of 1-1:1.0 failed with error -22
[  131.747744][  T129] usb 1-1: selecting invalid altsetting 0
[  131.775841][  T129] usbtest: probe of 1-1:1.1 failed with error -22
[  131.800939][ T4885] loop3: detected capacity change from 0 to 1024
[  131.829275][  T129] usb 1-1: USB disconnect, device number 4
[  131.922993][ T4885] EXT4-fs (loop3): unsupported inode size: 4096
[  131.965964][ T4885] EXT4-fs (loop3): blocksize: 1024
[  132.233690][ T4631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.462914][ T4888] process 'syz.4.109' launched '/dev/fd/4' with NULL argv: empty string added
[  133.160747][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.167656][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.300109][ T4631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.460934][ T4631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.598530][ T4631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.276540][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.287510][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.299700][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.318481][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.328910][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  135.336676][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.531239][ T4918] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  136.310360][ T4906] fuse: Unknown parameter '0x0000000000000003'
[  136.869387][ T4921] device syzkaller0 entered promiscuous mode
[  137.163061][ T4946] loop3: detected capacity change from 0 to 2048
[  137.233660][ T4946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  137.384345][ T4278] Bluetooth: hci1: command 0x0409 tx timeout
[  137.499676][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  137.781868][ T4914] chnl_net:caif_netlink_parms(): no params data found
[  138.227783][ T4914] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.251219][ T4914] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.283501][ T4914] device bridge_slave_0 entered promiscuous mode
[  138.512636][ T4914] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.552879][ T4914] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.578336][ T4914] device bridge_slave_1 entered promiscuous mode
[  139.107353][ T4914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.438156][ T4984] loop3: detected capacity change from 0 to 128
[  139.464457][ T4278] Bluetooth: hci1: command 0x041b tx timeout
[  139.504296][   T27] audit: type=1804 audit(1764849635.441:6): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.129" name="/newroot/27/file0/bus" dev="loop3" ino=1048601 res=1 errno=0
[  139.710679][ T4631] device hsr_slave_0 left promiscuous mode
[  139.795053][ T4631] device hsr_slave_1 left promiscuous mode
[  139.850781][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.884488][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.907662][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.932912][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.971883][ T4631] device bridge_slave_1 left promiscuous mode
[  140.022451][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.234617][ T4631] device bridge_slave_0 left promiscuous mode
[  140.251301][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.427671][ T4631] device veth1_macvtap left promiscuous mode
[  140.438218][ T4631] device veth0_macvtap left promiscuous mode
[  140.451906][ T4631] device veth1_vlan left promiscuous mode
[  140.464683][ T4631] device veth0_vlan left promiscuous mode
[  141.544360][ T4285] Bluetooth: hci1: command 0x040f tx timeout
[  142.390838][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[  142.415952][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[  143.319741][ T4631] team0 (unregistering): Port device team_slave_1 removed
[  143.469392][ T5018] loop0: detected capacity change from 0 to 128
[  144.326091][ T4285] Bluetooth: hci1: command 0x0419 tx timeout
[  144.703241][ T4631] team0 (unregistering): Port device team_slave_0 removed
[  145.448941][ T4473] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  145.467438][ T4631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.904721][ T4631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.743019][ T4631] bond0 (unregistering): Released all slaves
[  147.862777][ T4914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.091749][ T4914] team0: Port device team_slave_0 added
[  148.111392][ T4914] team0: Port device team_slave_1 added
[  148.405275][ T4914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.528094][ T5033] loop3: detected capacity change from 0 to 1024
[  148.539686][ T5033] EXT4-fs: Ignoring removed orlov option
[  148.812074][ T5033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  148.889406][ T4914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.253831][ T5042] loop2: detected capacity change from 0 to 256
[  150.399997][ T4914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.671187][ T5033] tipc: Started in network mode
[  150.676506][ T5033] tipc: Node identity , cluster identity 4711
[  150.682663][ T5033] tipc: Failed to obtain node identity
[  150.688213][ T5033] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  150.898194][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  150.977036][ T4914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.004225][ T4914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.266612][ T4914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.645557][ T5050] loop3: detected capacity change from 0 to 512
[  151.659486][ T5050] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.666195][ T5050] EXT4-fs: inline encryption not supported
[  151.672411][ T5050] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.306626][ T5050] EXT4-fs (loop3): Test dummy encryption mode enabled
[  152.313492][ T5050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  154.328509][ T5050] EXT4-fs: error -4 creating inode table initialization thread
[  154.336923][ T5050] EXT4-fs (loop3): mount failed
[  154.688566][ T4914] device hsr_slave_0 entered promiscuous mode
[  154.753723][ T4914] device hsr_slave_1 entered promiscuous mode
[  154.760188][   T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  154.776870][ T4914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.801676][ T4914] Cannot create hsr debugfs directory
[  155.076005][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.104200][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.114029][   T22] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  155.177991][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.225725][ T4328] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  155.377505][ T5069] loop3: detected capacity change from 0 to 1024
[  155.432522][ T5069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.502667][ T4328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.687875][ T5069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  156.093813][ T5068] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.148: missing EA_INODE flag
[  156.115289][ T5068] EXT4-fs (loop3): Remounting filesystem read-only
[  156.123442][ T5068] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.148: error while reading EA inode 11 err=-117
[  156.140670][ T5068] EXT4-fs (loop3): Remounting filesystem read-only
[  156.420315][ T5068] syz.3.148 (5068) used greatest stack depth: 17480 bytes left
[  156.429885][ T4328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.451529][ T4328] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  156.460726][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  156.469586][ T4328] usb 3-1: SerialNumber: syz
[  156.485735][   T22] usb 5-1: config 0 descriptor??
[  156.519222][ T4328] usb 3-1: 0:2 : does not exist
[  156.919167][   T22] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  156.984250][   T22] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  157.059081][   T22] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  157.134338][   T22] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  157.206595][   T22] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  157.273558][ T5075] loop0: detected capacity change from 0 to 1024
[  157.285061][   T22] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving
[  157.296272][ T4914] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  157.345313][ T5075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  157.370445][   T22] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  157.422629][   T22] usb 5-1: USB disconnect, device number 4
[  157.461881][ T4349] usb 3-1: USB disconnect, device number 2
[  157.487586][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  157.704855][ T4914] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  157.785579][ T4914] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  157.880056][ T5080] fido_id[5080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  157.900584][ T5087] loop2: detected capacity change from 0 to 512
[  157.909782][ T4914] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  158.000995][ T5087] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  158.311486][ T5100] overlayfs: overlapping lowerdir path
[  158.376396][ T5087] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.151: invalid indirect mapped block 83886080 (level 1)
[  158.470178][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'.
[  158.486817][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'.
[  158.683442][ T5087] EXT4-fs (loop2): Remounting filesystem read-only
[  158.769459][ T5087] EXT4-fs (loop2): 1 orphan inode deleted
[  158.996929][ T5087] EXT4-fs (loop2): 1 truncate cleaned up
[  159.002758][ T5087] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  159.313678][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  159.382541][ T4914] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.409558][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.441910][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.502359][ T5108] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.149: reserved inode found cleared - inode=2
[  160.716978][ T5108] EXT4-fs (loop0): Remounting filesystem read-only
[  161.345669][ T5113] xt_socket: unknown flags 0x4c
[  162.281347][ T4914] 8021q: adding VLAN 0 to HW filter on device team0
[  162.329543][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.364987][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.421600][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.428800][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.639076][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.653513][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  162.663426][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.717288][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.765867][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.772995][ T4627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.816351][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.839451][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.978049][ T5128] loop0: detected capacity change from 0 to 512
[  163.015621][ T5128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.161466][ T5128] EXT4-fs (loop0): orphan cleanup on readonly fs
[  163.187040][ T5128] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.159: bg 0: block 248: padding at end of block bitmap is not set
[  163.207775][ T5128] Quota error (device loop0): write_blk: dquota write failed
[  163.215899][ T5128] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  163.226346][ T5128] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.159: Failed to acquire dquot type 1
[  163.252436][ T5128] EXT4-fs (loop0): 1 truncate cleaned up
[  163.273587][ T5128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  163.505499][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.584490][ T4320] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  163.683684][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.834270][ T4320] usb 1-1: Using ep0 maxpacket: 32
[  163.851225][ T4320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.958043][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.117431][ T4320] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  164.190021][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  164.297477][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  164.347911][ T4320] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  164.569147][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.725966][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  164.815694][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  164.883694][ T4320] usb 1-1: config 0 descriptor??
[  165.191322][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  165.246560][ T4320] hub 1-1:0.0: bad descriptor, ignoring hub
[  165.295509][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.307246][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.338080][ T4320] hub: probe of 1-1:0.0 failed with error -5
[  165.550937][ T4320] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  166.660408][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.680825][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.712558][ T4914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.176938][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  167.279413][ T5156] loop3: detected capacity change from 0 to 256
[  167.396096][ T5156] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  167.512727][   T27] audit: type=1800 audit(1764849663.431:7): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.158" name="file1" dev="loop3" ino=1048603 res=0 errno=0
[  168.302909][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  168.311278][   T14] usb 1-1: USB disconnect, device number 5
[  169.033211][ T5165] IPv6: NLM_F_REPLACE set, but no existing node found!
[  169.366544][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.388303][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.418741][    T7] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  169.449133][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.480217][    T7] usb 5-1: config 0 descriptor??
[  170.531593][    T7] usbhid 5-1:0.0: can't add hid device: -71
[  170.539098][    T7] usbhid: probe of 5-1:0.0 failed with error -71
[  170.580410][    T7] usb 5-1: USB disconnect, device number 5
[  170.606634][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.635396][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.647656][ T5185] loop3: detected capacity change from 0 to 1024
[  170.705331][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.723825][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.734283][ T5185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  170.745853][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.757022][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.766137][ T4914] device veth0_vlan entered promiscuous mode
[  170.924764][ T5195] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.168: reserved inode found cleared - inode=2
[  171.117017][ T5195] EXT4-fs (loop3): Remounting filesystem read-only
[  171.661898][ T4914] device veth1_vlan entered promiscuous mode
[  171.670851][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  171.693404][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  171.725436][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.798791][ T4914] device veth0_macvtap entered promiscuous mode
[  171.829708][ T4914] device veth1_macvtap entered promiscuous mode
[  172.066671][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.102578][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.133297][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.164541][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.204342][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.273077][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.303798][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.326944][ T5204] loop3: detected capacity change from 0 to 8192
[  172.513015][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.069777][ T4914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.085681][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.114407][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.154329][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.221240][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.248276][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.260200][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.299829][ T4914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.334240][ T4914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.368972][ T4914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.492135][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.505104][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  173.580146][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  173.607963][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  173.635512][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  173.680692][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  173.715465][ T4914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.764915][ T4914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.774188][ T4914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.814314][ T4914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.234977][ T4623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.243305][ T4623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.254942][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.274067][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.288505][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.330534][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  174.729620][ T5212] loop4: detected capacity change from 0 to 40427
[  174.764043][ T5212] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  174.806135][ T5212] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  174.851802][ T5212] F2FS-fs (loop4): invalid crc value
[  174.866236][ T5228] loop0: detected capacity change from 0 to 128
[  174.890653][ T5228] EXT4-fs: Ignoring removed mblk_io_submit option
[  174.899329][ T5212] F2FS-fs (loop4): Found nat_bits in checkpoint
[  174.939141][ T5228] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  174.940402][ T4386] udevd[4386]: incorrect ext4 checksum on /dev/loop0
[  174.960868][ T5234] netlink: 'syz.5.177': attribute type 27 has an invalid length.
[  175.114259][ T5212] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  175.138871][ T5212] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  175.829320][ T5248] loop0: detected capacity change from 0 to 1024
[  177.008820][ T5248] EXT4-fs (loop0): orphan cleanup on readonly fs
[  177.076645][ T5248] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  177.087200][ T5248] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  177.096698][ T5248] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.178: Failed to acquire dquot type 0
[  177.135365][ T5248] EXT4-fs (loop0): 1 truncate cleaned up
[  177.210649][ T5248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  177.754622][ T5253] loop2: detected capacity change from 0 to 1024
[  177.942657][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  178.295534][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  179.205816][ T5264] loop0: detected capacity change from 0 to 131072
[  179.286943][ T5264] F2FS-fs (loop0): Found nat_bits in checkpoint
[  179.425043][ T5264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  179.652796][ T5272] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.179: reserved inode found cleared - inode=2
[  179.783042][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.791861][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.457766][ T5272] EXT4-fs (loop2): Remounting filesystem read-only
[  183.975365][ T5234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.065437][ T5234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.192810][ T5290] loop0: detected capacity change from 0 to 256
[  184.218429][ T5290] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.236476][ T5290] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  184.286186][ T5290] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d)
[  184.618404][   T27] audit: type=1800 audit(1764849680.571:8): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.185" name="file1" dev="loop0" ino=1048607 res=0 errno=0
[  185.409135][ T5294] loop0: detected capacity change from 0 to 4096
[  185.469860][ T5234] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.478975][ T5234] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.488028][ T5234] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.497540][ T5234] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.778520][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  185.788113][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.797077][ T5236] 8021q: adding VLAN 0 to HW filter on device team0
[  185.807317][ T5236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.918974][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  186.134760][ T5307] loop3: detected capacity change from 0 to 512
[  186.234236][ T5307] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.189: bad orphan inode 11862016
[  186.313089][ T5312] loop4: detected capacity change from 0 to 512
[  186.331634][ T5307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  186.350720][ T5307] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.354475][ T5312] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  186.455277][ T5312] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.190: invalid indirect mapped block 4294967295 (level 0)
[  186.534737][ T5312] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.190: invalid indirect mapped block 4294967295 (level 1)
[  186.555553][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  187.775283][ T5312] EXT4-fs (loop4): 1 orphan inode deleted
[  187.791373][ T5312] EXT4-fs (loop4): 1 truncate cleaned up
[  187.862328][ T5312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  188.246090][ T5327] loop0: detected capacity change from 0 to 1024
[  188.253394][ T5327] EXT4-fs: Ignoring removed orlov option
[  188.368820][ T5338] loop3: detected capacity change from 0 to 512
[  188.376126][ T5338] EXT4-fs: Ignoring removed orlov option
[  188.383118][ T5338] EXT4-fs: Ignoring removed i_version option
[  188.494613][ T5332] loop2: detected capacity change from 0 to 512
[  188.505552][ T5327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  188.518455][ T5327] tipc: Started in network mode
[  188.523398][ T5327] tipc: Node identity , cluster identity 4711
[  188.529566][ T5327] tipc: Failed to obtain node identity
[  188.535097][ T5327] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  188.601410][ T5338] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.194: inode #1: comm syz.3.194: iget: illegal inode #
[  188.625551][ T5332] EXT4-fs: Ignoring removed bh option
[  188.794258][ T5332] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  188.931709][ T5332] EXT4-fs (loop2): 1 truncate cleaned up
[  188.966505][ T5338] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.194: error while reading EA inode 1 err=-117
[  188.985172][ T5338] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.194: inode #1: comm syz.3.194: iget: illegal inode #
[  189.002450][ T5338] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.194: error while reading EA inode 1 err=-117
[  189.021297][ T5338] EXT4-fs (loop3): 1 orphan inode deleted
[  189.027241][ T5338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  189.054265][ T5332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  189.145685][ T5312] xt_CT: No such helper "netbios-ns"
[  189.393455][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  190.058425][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  190.148169][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  190.270642][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  190.555853][ T5357] loop2: detected capacity change from 0 to 1024
[  190.926378][ T5363] loop5: detected capacity change from 0 to 4096
[  190.976118][ T5363] EXT4-fs (loop5): Test dummy encryption mode enabled
[  191.067120][ T5363] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  191.079798][ T5363] System zones: 0-5
[  191.160196][ T5363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  192.044905][ T5357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  192.325017][ T5379] syz.0.200[5379] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  192.325137][ T5379] syz.0.200[5379] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  192.948016][ T4914] EXT4-fs (loop5): unmounting filesystem.
[  194.269960][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.277455][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.535386][ T5392] syz.5.204[5392] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  194.535489][ T5392] syz.5.204[5392] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  197.305429][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  197.731855][ T5401] loop2: detected capacity change from 0 to 16
[  197.807365][ T5401] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832
[  198.178457][ T5398] loop0: detected capacity change from 0 to 128
[  198.799236][ T5398] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.905005][ T5398] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  198.978981][ T4400] udevd[4400]: incorrect ext4 checksum on /dev/loop0
[  199.861640][ T5410] loop0: detected capacity change from 0 to 512
[  199.935976][ T5410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  200.247196][ T5410] EXT4-fs (loop0): 1 truncate cleaned up
[  200.278609][ T5410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  200.313029][ T5419] netlink: 104 bytes leftover after parsing attributes in process `syz.4.213'.
[  200.514358][ T5422] loop3: detected capacity change from 0 to 4096
[  200.671188][ T5422] EXT4-fs (loop3): Test dummy encryption mode enabled
[  200.819677][ T5422] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  200.828410][ T5422] System zones: 0-5
[  200.843732][ T5422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  201.255890][ T5422] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  201.267777][ T5426] overlayfs: failed to resolve './bus': -2
[  201.474537][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  201.480675][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[  201.486754][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  202.294366][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  202.989857][ T5446] overlayfs: overlapping lowerdir path
[  203.100697][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[  203.110243][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[  205.517342][ T5458] device veth0_to_team entered promiscuous mode
[  205.655094][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  206.362145][ T5467] xt_socket: unknown flags 0x4c
[  207.313077][ T5469] loop0: detected capacity change from 0 to 512
[  207.335146][ T5469] EXT4-fs: Ignoring removed i_version option
[  207.413393][ T5469] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  207.506941][ T5469] EXT4-fs (loop0): 1 truncate cleaned up
[  207.512782][ T5469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  207.994407][ T4828] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  208.010833][ T5480] loop5: detected capacity change from 0 to 512
[  208.018174][ T5480] EXT4-fs: Ignoring removed orlov option
[  208.023876][ T5480] EXT4-fs: Ignoring removed i_version option
[  209.324538][ T5480] EXT4-fs (loop5): corrupt root inode, run e2fsck
[  209.331375][ T5480] EXT4-fs (loop5): mount failed
[  211.107765][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  213.285474][ T5496] loop0: detected capacity change from 0 to 512
[  213.368342][ T5496] EXT4-fs: Ignoring removed i_version option
[  213.465285][ T5496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  213.605496][   T27] audit: type=1800 audit(1764849709.561:9): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.230" name="bus" dev="loop0" ino=18 res=0 errno=0
[  213.857106][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  215.016464][ T4334] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  215.065227][   T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  215.214633][ T4334] usb 4-1: Using ep0 maxpacket: 32
[  215.222277][ T4334] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  215.274188][ T4334] usb 4-1: config 0 has no interface number 0
[  215.276759][   T26] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  215.297414][ T4334] usb 4-1: config 0 interface 2 has no altsetting 0
[  215.314209][   T26] usb 1-1: config 0 has no interface number 0
[  215.326858][ T4334] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  215.349765][   T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.371106][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.382670][   T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.390546][ T4334] usb 4-1: Product: syz
[  215.397095][ T4334] usb 4-1: Manufacturer: syz
[  215.401866][ T4334] usb 4-1: SerialNumber: syz
[  215.422907][ T4334] usb 4-1: config 0 descriptor??
[  215.444310][   T26] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  215.484625][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.527918][   T26] usb 1-1: config 0 descriptor??
[  215.729242][ T4334] snd-usb-audio: probe of 4-1:0.2 failed with error -2
[  215.756096][ T4334] usb 4-1: USB disconnect, device number 3
[  215.766035][ T4386] udevd[4386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.943659][ T5530] xt_hashlimit: size too large, truncated to 1048576
[  215.947936][ T5531] loop4: detected capacity change from 0 to 128
[  215.967931][   T26] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1
[  216.003598][   T26] hid_prodikeys: hid-prodikeys: failed to find output report
[  216.003598][   T26] 
[  216.047390][ T5531] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.224751][ T5531] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  216.241707][ T4386] udevd[4386]: incorrect ext4 checksum on /dev/loop4
[  216.422644][   T26] usb 1-1: USB disconnect, device number 7
[  217.503997][ T5540] fido_id[5540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  217.709839][ T5551] netlink: 277 bytes leftover after parsing attributes in process `syz.0.238'.
[  219.931354][ T5563] loop0: detected capacity change from 0 to 512
[  220.086889][ T5563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  220.110198][ T5567] loop5: detected capacity change from 0 to 512
[  220.240304][ T5563] EXT4-fs (loop0): orphan cleanup on readonly fs
[  220.371610][ T5563] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.242: bg 0: block 248: padding at end of block bitmap is not set
[  220.539435][ T5563] Quota error (device loop0): write_blk: dquota write failed
[  221.301865][ T5563] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  221.451671][ T5563] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.242: Failed to acquire dquot type 1
[  221.654992][ T5563] EXT4-fs (loop0): 1 truncate cleaned up
[  221.730999][ T5563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  221.773098][ T5582] loop3: detected capacity change from 0 to 16
[  221.863624][ T5582] erofs: (device loop3): mounted with root inode @ nid 36.
[  222.120268][ T5583] erofs: (device loop3): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  222.740172][ T5589] loop5: detected capacity change from 0 to 128
[  222.839273][ T5589] EXT4-fs: Ignoring removed mblk_io_submit option
[  222.874521][ T5589] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  222.924712][ T4473] udevd[4473]: incorrect ext4 checksum on /dev/loop5
[  223.308234][ T5597] loop3: detected capacity change from 0 to 1024
[  223.430569][ T5602] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  223.638251][ T5597] EXT4-fs: Ignoring removed nobh option
[  224.290040][ T5597] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.252: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  224.311360][ T5597] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.252: couldn't read orphan inode 11 (err -117)
[  224.384359][ T5597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  224.450757][ T5610] syz.5.255[5610] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.450866][ T5610] syz.5.255[5610] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  225.307511][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  225.680770][ T5626] loop5: detected capacity change from 0 to 256
[  225.734331][ T5626] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  225.791293][ T5626] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  225.866274][ T5626] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d)
[  228.987909][ T5646] loop2: detected capacity change from 0 to 128
[  229.013278][ T5646] EXT4-fs: Ignoring removed mblk_io_submit option
[  229.037641][ T5646] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  229.051540][ T4473] udevd[4473]: incorrect ext4 checksum on /dev/loop2
[  229.941617][ T5662] overlayfs: failed to get inode (-116)
[  229.977702][ T5662] overlayfs: failed to look up (file0) for ino (-116)
[  231.886526][ T5680] loop3: detected capacity change from 0 to 512
[  231.907218][ T5680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  231.923115][ T5680] EXT4-fs (loop3): orphan cleanup on readonly fs
[  231.931173][ T5680] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.272: bg 0: block 248: padding at end of block bitmap is not set
[  231.947444][ T5680] Quota error (device loop3): write_blk: dquota write failed
[  231.955188][ T5680] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  231.965225][ T5680] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.272: Failed to acquire dquot type 1
[  231.985898][ T5680] EXT4-fs (loop3): 1 truncate cleaned up
[  231.999984][ T5680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  232.300342][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  232.381947][ T5666] loop4: detected capacity change from 0 to 40427
[  232.437952][ T5666] F2FS-fs (loop4): invalid crc value
[  232.477124][ T5666] F2FS-fs (loop4): Found nat_bits in checkpoint
[  232.608970][ T5687] loop5: detected capacity change from 0 to 256
[  232.622873][ T5689] device pim6reg1 entered promiscuous mode
[  232.649578][ T5687] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.670796][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  232.710084][   T27] audit: type=1800 audit(1764849728.661:10): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.271" name="file1" dev="loop5" ino=1048609 res=0 errno=0
[  232.731198][ T5666] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  232.744009][ T5687] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264)
[  232.780266][ T5687] FAT-fs (loop5): Filesystem has been set read-only
[  232.905859][ T4276] syz-executor: attempt to access beyond end of device
[  232.905859][ T4276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.184396][   T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  233.386400][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.414345][   T26] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  233.433739][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.461339][   T26] usb 4-1: config 0 descriptor??
[  233.999438][   T26] zeroplus 0003:0C12:0005.0003: unknown main item tag 0x0
[  234.119703][   T26] zeroplus 0003:0C12:0005.0003: unknown main item tag 0x0
[  234.618704][   T26] zeroplus 0003:0C12:0005.0003: unknown main item tag 0x0
[  234.686492][   T26] zeroplus 0003:0C12:0005.0003: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0
[  234.769161][   T26] zeroplus 0003:0C12:0005.0003: no inputs found
[  234.789360][ T5708] loop0: detected capacity change from 0 to 512
[  234.855648][   T26] usb 4-1: USB disconnect, device number 4
[  234.914937][ T5708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  235.041398][ T5709] fido_id[5709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  235.074469][ T5708] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.280: corrupted in-inode xattr
[  235.124801][ T5708] EXT4-fs (loop0): 1 orphan inode deleted
[  236.463227][ T5708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  236.596962][ T5723] loop4: detected capacity change from 0 to 128
[  236.615263][ T5723] EXT4-fs: Ignoring removed mblk_io_submit option
[  236.659865][ T5723] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  236.716477][ T4400] udevd[4400]: incorrect ext4 checksum on /dev/loop4
[  237.253374][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  241.035215][ T5757] loop3: detected capacity change from 0 to 512
[  242.445083][ T5757] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  242.475472][ T5757] EXT4-fs (loop3): orphan cleanup on readonly fs
[  242.562843][ T5757] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.291: corrupted inode contents
[  242.599857][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  242.634269][ T5757] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.291: mark_inode_dirty error
[  242.694008][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  242.709454][ T5769] loop4: detected capacity change from 0 to 128
[  242.750129][ T5757] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.291: corrupted inode contents
[  242.775357][ T5769] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.897469][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  242.938583][ T5757] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.291: mark_inode_dirty error
[  243.053272][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  243.073434][ T5769] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  243.191937][ T5757] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.291: corrupted inode contents
[  243.516013][ T4386] udevd[4386]: incorrect ext4 checksum on /dev/loop4
[  243.574753][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  243.581340][ T5757] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  243.628015][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  243.634838][ T5757] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.291: corrupted inode contents
[  243.654178][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  243.660763][ T5757] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.291: mark_inode_dirty error
[  243.682457][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  243.694379][ T4386] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  243.728709][ T5757] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  243.818485][ T5757] EXT4-fs (loop3): Remounting filesystem read-only
[  243.870022][ T5757] EXT4-fs (loop3): 1 truncate cleaned up
[  243.880428][ T4625] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  243.919747][ T4625] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:20: Failed to release dquot type 1
[  243.963306][ T4625] EXT4-fs (loop3): Remounting filesystem read-only
[  244.004173][ T5757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  244.976243][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  245.083850][ T5782] loop4: detected capacity change from 0 to 4096
[  245.233444][ T5782] EXT4-fs (loop4): Test dummy encryption mode enabled
[  245.294239][ T5789] loop3: detected capacity change from 0 to 512
[  245.319224][ T5782] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  245.327705][ T5782] System zones: 0-5
[  245.336368][ T5782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  245.550956][ T5789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  245.697523][ T5789] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.199537][ T5786] loop2: detected capacity change from 0 to 2048
[  246.353861][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  246.421556][ T5786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  247.529325][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'.
[  249.253829][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  249.457205][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  249.945583][ T5845] loop2: detected capacity change from 0 to 256
[  251.943781][ T5845] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  253.304306][ T4278] Bluetooth: hci4: command 0x0406 tx timeout
[  253.917342][ T5868] device syzkaller0 entered promiscuous mode
[  255.351848][ T5875] loop4: detected capacity change from 0 to 512
[  255.538551][ T5875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  255.581351][ T5875] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.734749][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.741175][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.925464][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.314'.
[  257.289007][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  259.077954][ T4285] Bluetooth: hci1: command 0x0406 tx timeout
[  259.340725][ T5907] loop5: detected capacity change from 0 to 128
[  259.401746][ T5907] EXT4-fs: Ignoring removed mblk_io_submit option
[  259.617586][ T5907] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  259.898787][ T4473] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  260.210419][ T5915] loop2: detected capacity change from 0 to 16
[  260.341514][ T5915] erofs: (device loop2): mounted with root inode @ nid 36.
[  261.054826][ T4565] Bluetooth: hci5: Frame reassembly failed (-84)
[  263.102143][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  263.112375][ T4278] Bluetooth: hci5: command 0x1003 tx timeout
[  265.374187][ T5979] loop3: detected capacity change from 0 to 16
[  265.392781][ T5979] erofs: (device loop3): mounted with root inode @ nid 36.
[  265.426708][ T5979] syz.3.333: attempt to access beyond end of device
[  265.426708][ T5979] loop3: rw=0, sector=576, nr_sectors = 8 limit=16
[  265.446564][ T5979] syz.3.333: attempt to access beyond end of device
[  265.446564][ T5979] loop3: rw=0, sector=576, nr_sectors = 8 limit=16
[  265.466642][ T5979] syz.3.333: attempt to access beyond end of device
[  265.466642][ T5979] loop3: rw=0, sector=576, nr_sectors = 8 limit=16
[  265.485505][ T5979] syz.3.333: attempt to access beyond end of device
[  265.485505][ T5979] loop3: rw=0, sector=576, nr_sectors = 8 limit=16
[  265.502399][ T5979] syz.3.333: attempt to access beyond end of device
[  265.502399][ T5979] loop3: rw=0, sector=576, nr_sectors = 8 limit=16
[  266.647773][ T5997] loop3: detected capacity change from 0 to 4096
[  266.733455][ T5998] loop2: detected capacity change from 0 to 1024
[  267.997044][ T5997] EXT4-fs (loop3): Test dummy encryption mode enabled
[  268.172187][ T5997] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  268.180895][ T5997] System zones: 0-5
[  268.242284][ T5998] EXT4-fs (loop2): orphan cleanup on readonly fs
[  268.243457][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  268.303046][ T5998] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  268.313582][ T5998] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  268.323051][ T5998] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.339: Failed to acquire dquot type 0
[  268.534225][ T5997] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  269.340286][ T6010] loop4: detected capacity change from 0 to 1024
[  269.400375][ T5998] EXT4-fs (loop2): 1 truncate cleaned up
[  269.444447][ T5998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  269.769301][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  269.825552][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  269.844236][ T6010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  270.067232][ T6010] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.340: reserved inode found cleared - inode=2
[  270.096727][ T6010] EXT4-fs (loop4): Remounting filesystem read-only
[  270.272445][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  270.493483][ T4340] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  270.706452][ T4340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  270.750992][ T4340] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  270.760894][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.769089][ T4340] usb 1-1: Product: syz
[  270.773481][ T4340] usb 1-1: Manufacturer: syz
[  270.778215][ T4340] usb 1-1: SerialNumber: syz
[  270.807251][ T4340] usb 1-1: config 0 descriptor??
[  270.874210][ T4340] usb-storage 1-1:0.0: USB Mass Storage device detected
[  271.195880][ T4340] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  271.327053][ T4340] usb 1-1: USB disconnect, device number 8
[  271.914418][ T4334] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  274.374180][ T4334] usb 6-1: Using ep0 maxpacket: 32
[  274.412724][ T4334] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  274.463455][ T4334] usb 6-1: config 0 has no interface number 0
[  274.491075][ T4334] usb 6-1: config 0 interface 2 has no altsetting 0
[  274.769801][ T4334] usb 6-1: string descriptor 0 read error: -71
[  274.789523][ T4334] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  274.827418][ T4334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.859925][ T4334] usb 6-1: config 0 descriptor??
[  274.902733][ T4334] usb 6-1: can't set config #0, error -71
[  274.942880][ T4334] usb 6-1: USB disconnect, device number 2
[  276.767657][ T6083] loop5: detected capacity change from 0 to 512
[  277.953063][ T6083] ------------[ cut here ]------------
[  277.959074][ T6083] EA inode 11 i_nlink=2
[  277.959385][ T6083] WARNING: CPU: 0 PID: 6083 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520
[  277.973855][ T6083] Modules linked in:
[  277.977881][ T6083] CPU: 0 PID: 6083 Comm: syz.5.355 Not tainted syzkaller #0
[  277.985263][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  277.995727][ T6083] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520
[  278.002377][ T6083] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08
[  278.022684][ T6083] RSP: 0018:ffffc900051e7200 EFLAGS: 00010246
[  278.029169][ T6083] RAX: 180a5b113bb96a00 RBX: 0000000000000002 RCX: 0000000000080000
[  278.037280][ T6083] RDX: ffffc9001c4d6000 RSI: 0000000000013ec0 RDI: 0000000000013ec1
[  278.045354][ T6083] RBP: ffffc900051e72e8 R08: dffffc0000000000 R09: ffffed10171c4f34
[  278.053446][ T6083] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc900051e7260
[  278.061709][ T6083] R13: ffff8880717834d8 R14: dffffc0000000000 R15: ffff888071783518
[  278.069810][ T6083] FS:  00007f3a06d526c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  278.078859][ T6083] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  278.085572][ T6083] CR2: 00007fe37abdaea0 CR3: 000000001d758000 CR4: 00000000003506f0
[  278.093607][ T6083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  278.101695][ T6083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  278.109853][ T6083] Call Trace:
[  278.113168][ T6083]  <TASK>
[  278.116185][ T6083]  ? ext4_xattr_block_csum+0x500/0x500
[  278.121717][ T6083]  ? ext4_xattr_inode_iget+0x3f0/0x600
[  278.127367][ T6083]  ext4_xattr_set_entry+0xb33/0x1e90
[  278.132725][ T6083]  ext4_xattr_ibody_set+0x250/0x690
[  278.138031][ T6083]  ext4_expand_extra_isize_ea+0x10e5/0x19b0
[  278.144018][ T6083]  __ext4_expand_extra_isize+0x301/0x3e0
[  278.149763][ T6083]  __ext4_mark_inode_dirty+0x47f/0x770
[  278.155331][ T6083]  ext4_evict_inode+0xa73/0x1100
[  278.160332][ T6083]  ? _raw_spin_unlock+0x24/0x40
[  278.165307][ T6083]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  278.171288][ T6083]  ? do_raw_spin_unlock+0x11d/0x230
[  278.176593][ T6083]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  278.182536][ T6083]  evict+0x485/0x870
[  278.186516][ T6083]  ? __lock_acquire+0x7c50/0x7c50
[  278.191598][ T6083]  ? proc_nr_inodes+0x2f0/0x2f0
[  278.196543][ T6083]  ? do_raw_spin_unlock+0x11d/0x230
[  278.201803][ T6083]  ? _raw_spin_unlock+0x24/0x40
[  278.206784][ T6083]  ? iput+0x768/0x980
[  278.210823][ T6083]  ext4_orphan_cleanup+0xbd3/0x1400
[  278.216142][ T6083]  ? ext4_orphan_del+0xb90/0xb90
[  278.221136][ T6083]  ? errseq_check_and_advance+0x62/0x120
[  278.226875][ T6083]  ext4_fill_super+0x7bdf/0x8150
[  278.231873][ T6083]  ? bdev_name+0x2c1/0x3f0
[  278.236420][ T6083]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  278.242713][ T6083]  ? snprintf+0xd7/0x120
[  278.247109][ T6083]  ? preempt_count_add+0x8d/0x190
[  278.252208][ T6083]  ? vscnprintf+0x80/0x80
[  278.256653][ T6083]  ? set_blocksize+0x1d3/0x350
[  278.261473][ T6083]  ? sb_set_blocksize+0xa5/0xe0
[  278.266416][ T6083]  get_tree_bdev+0x3f1/0x610
[  278.271055][ T6083]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  278.277390][ T6083]  vfs_get_tree+0x88/0x270
[  278.281853][ T6083]  do_new_mount+0x24a/0xa40
[  278.286449][ T6083]  __se_sys_mount+0x2d6/0x3c0
[  278.291177][ T6083]  ? __x64_sys_mount+0xc0/0xc0
[  278.296055][ T6083]  ? lockdep_hardirqs_on+0x94/0x140
[  278.301316][ T6083]  ? __x64_sys_mount+0x1c/0xc0
[  278.306195][ T6083]  do_syscall_64+0x4c/0xa0
[  278.310673][ T6083]  ? clear_bhb_loop+0x60/0xb0
[  278.315445][ T6083]  ? clear_bhb_loop+0x60/0xb0
[  278.320174][ T6083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.326164][ T6083] RIP: 0033:0x7f3a05f90eea
[  278.330671][ T6083] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.350373][ T6083] RSP: 002b:00007f3a06d51e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  278.358884][ T6083] RAX: ffffffffffffffda RBX: 00007f3a06d51ef0 RCX: 00007f3a05f90eea
[  278.366944][ T6083] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3a06d51eb0
[  278.374989][ T6083] RBP: 0000200000000180 R08: 00007f3a06d51ef0 R09: 0000000000800718
[  278.383013][ T6083] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  278.391078][ T6083] R13: 00007f3a06d51eb0 R14: 000000000000046f R15: 0000200000000480
[  278.399284][ T6083]  </TASK>
[  278.402367][ T6083] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  278.409675][ T6083] CPU: 0 PID: 6083 Comm: syz.5.355 Not tainted syzkaller #0
[  278.416987][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  278.427070][ T6083] Call Trace:
[  278.430376][ T6083]  <TASK>
[  278.433332][ T6083]  dump_stack_lvl+0x168/0x22e
[  278.438055][ T6083]  ? memcpy+0x3c/0x60
[  278.442093][ T6083]  ? show_regs_print_info+0x12/0x12
[  278.447345][ T6083]  ? load_image+0x3b0/0x3b0
[  278.451913][ T6083]  panic+0x2c9/0x710
[  278.455856][ T6083]  ? bpf_jit_dump+0xd0/0xd0
[  278.460415][ T6083]  __warn+0x2f8/0x4f0
[  278.464430][ T6083]  ? ext4_xattr_inode_update_ref+0x4be/0x520
[  278.470455][ T6083]  ? ext4_xattr_inode_update_ref+0x4be/0x520
[  278.476475][ T6083]  report_bug+0x2ba/0x4f0
[  278.480931][ T6083]  ? ext4_xattr_inode_update_ref+0x4be/0x520
[  278.486962][ T6083]  handle_bug+0x3a/0x70
[  278.491157][ T6083]  exc_invalid_op+0x16/0x40
[  278.495708][ T6083]  asm_exc_invalid_op+0x16/0x20
[  278.500597][ T6083] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520
[  278.507227][ T6083] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08
[  278.526873][ T6083] RSP: 0018:ffffc900051e7200 EFLAGS: 00010246
[  278.532977][ T6083] RAX: 180a5b113bb96a00 RBX: 0000000000000002 RCX: 0000000000080000
[  278.540975][ T6083] RDX: ffffc9001c4d6000 RSI: 0000000000013ec0 RDI: 0000000000013ec1
[  278.548973][ T6083] RBP: ffffc900051e72e8 R08: dffffc0000000000 R09: ffffed10171c4f34
[  278.556972][ T6083] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc900051e7260
[  278.564970][ T6083] R13: ffff8880717834d8 R14: dffffc0000000000 R15: ffff888071783518
[  278.573000][ T6083]  ? ext4_xattr_block_csum+0x500/0x500
[  278.578501][ T6083]  ? ext4_xattr_inode_iget+0x3f0/0x600
[  278.584004][ T6083]  ext4_xattr_set_entry+0xb33/0x1e90
[  278.589343][ T6083]  ext4_xattr_ibody_set+0x250/0x690
[  278.594577][ T6083]  ext4_expand_extra_isize_ea+0x10e5/0x19b0
[  278.600516][ T6083]  __ext4_expand_extra_isize+0x301/0x3e0
[  278.606175][ T6083]  __ext4_mark_inode_dirty+0x47f/0x770
[  278.611665][ T6083]  ext4_evict_inode+0xa73/0x1100
[  278.616622][ T6083]  ? _raw_spin_unlock+0x24/0x40
[  278.621503][ T6083]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  278.627425][ T6083]  ? do_raw_spin_unlock+0x11d/0x230
[  278.632655][ T6083]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  278.638574][ T6083]  evict+0x485/0x870
[  278.642487][ T6083]  ? __lock_acquire+0x7c50/0x7c50
[  278.647536][ T6083]  ? proc_nr_inodes+0x2f0/0x2f0
[  278.652399][ T6083]  ? do_raw_spin_unlock+0x11d/0x230
[  278.657622][ T6083]  ? _raw_spin_unlock+0x24/0x40
[  278.662492][ T6083]  ? iput+0x768/0x980
[  278.666493][ T6083]  ext4_orphan_cleanup+0xbd3/0x1400
[  278.671720][ T6083]  ? ext4_orphan_del+0xb90/0xb90
[  278.676679][ T6083]  ? errseq_check_and_advance+0x62/0x120
[  278.682331][ T6083]  ext4_fill_super+0x7bdf/0x8150
[  278.687277][ T6083]  ? bdev_name+0x2c1/0x3f0
[  278.691737][ T6083]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  278.697998][ T6083]  ? snprintf+0xd7/0x120
[  278.702257][ T6083]  ? preempt_count_add+0x8d/0x190
[  278.707295][ T6083]  ? vscnprintf+0x80/0x80
[  278.711646][ T6083]  ? set_blocksize+0x1d3/0x350
[  278.716425][ T6083]  ? sb_set_blocksize+0xa5/0xe0
[  278.721290][ T6083]  get_tree_bdev+0x3f1/0x610
[  278.725894][ T6083]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  278.732153][ T6083]  vfs_get_tree+0x88/0x270
[  278.736587][ T6083]  do_new_mount+0x24a/0xa40
[  278.741106][ T6083]  __se_sys_mount+0x2d6/0x3c0
[  278.745818][ T6083]  ? __x64_sys_mount+0xc0/0xc0
[  278.750603][ T6083]  ? lockdep_hardirqs_on+0x94/0x140
[  278.755848][ T6083]  ? __x64_sys_mount+0x1c/0xc0
[  278.760626][ T6083]  do_syscall_64+0x4c/0xa0
[  278.765053][ T6083]  ? clear_bhb_loop+0x60/0xb0
[  278.769739][ T6083]  ? clear_bhb_loop+0x60/0xb0
[  278.774430][ T6083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.780333][ T6083] RIP: 0033:0x7f3a05f90eea
[  278.784763][ T6083] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.804466][ T6083] RSP: 002b:00007f3a06d51e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  278.812890][ T6083] RAX: ffffffffffffffda RBX: 00007f3a06d51ef0 RCX: 00007f3a05f90eea
[  278.820871][ T6083] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3a06d51eb0
[  278.828857][ T6083] RBP: 0000200000000180 R08: 00007f3a06d51ef0 R09: 0000000000800718
[  278.836841][ T6083] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  278.844820][ T6083] R13: 00007f3a06d51eb0 R14: 000000000000046f R15: 0000200000000480
[  278.852815][ T6083]  </TASK>
[  278.856178][ T6083] Kernel Offset: disabled
[  278.860655][ T6083] Rebooting in 86400 seconds..