last executing test programs:

1m46.609706307s ago: executing program 1 (id=124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff038}, {0x6}]})
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)

1m46.432950552s ago: executing program 1 (id=126):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0)
close(0x3)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0)

1m46.157702501s ago: executing program 1 (id=130):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
close(0x3)

1m44.971210629s ago: executing program 1 (id=134):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x20)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
setxattr$security_capability(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
fdatasync(r0)

1m41.542499538s ago: executing program 1 (id=142):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m40.287371189s ago: executing program 1 (id=156):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x40f, 0x801)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000001d00)=""/168, 0x0, 0x5000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usbip_server_init(0x6)

1m40.122096004s ago: executing program 32 (id=156):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x40f, 0x801)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000001d00)=""/168, 0x0, 0x5000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usbip_server_init(0x6)

13.774392235s ago: executing program 3 (id=484):
syz_open_dev$tty20(0xc, 0x4, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
fsmount(r0, 0x0, 0x19)

12.929102463s ago: executing program 5 (id=487):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
socket$tipc(0x1e, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000200)=0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10)

12.875843974s ago: executing program 3 (id=490):
ptrace(0x10, 0x0)
ptrace$getregset(0x4205, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r3}, 0x38)

12.199352326s ago: executing program 5 (id=492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980), 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)

11.125767831s ago: executing program 2 (id=496):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00')

9.814456273s ago: executing program 2 (id=498):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043)
socket$can_j1939(0x1d, 0x2, 0x7)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)

9.813873593s ago: executing program 5 (id=499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000640)="000a18000500000000eb55000000000116aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)

9.794611424s ago: executing program 3 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000011c0)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)

7.880321426s ago: executing program 3 (id=501):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

7.760562839s ago: executing program 2 (id=502):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108)

7.064142312s ago: executing program 5 (id=505):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x9, @pix={0x1, 0xffff7fff, 0x53333459, 0x2, 0x9, 0x5, 0xa, 0x3961, 0x0, 0x1, 0x2, 0x4}})

6.629687926s ago: executing program 3 (id=507):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x8)
mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2)

6.587553767s ago: executing program 2 (id=508):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x58}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000324c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)

5.422036945s ago: executing program 2 (id=512):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x2c}}, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000080)={{}, {0xe}, 0x40000, 0xba})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0xa80485, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00')

5.182692463s ago: executing program 4 (id=514):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mremap(&(0x7f00005f6000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007bb000/0x2000)=nil)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4.045800909s ago: executing program 4 (id=515):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000140))
fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2})
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = getpid()
sched_setaffinity(r4, 0x1, &(0x7f0000000180)=0x7)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

3.527497746s ago: executing program 0 (id=516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = socket$unix(0x1, 0x5, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20000040)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xc, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004)

3.368806781s ago: executing program 4 (id=517):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

3.153560048s ago: executing program 5 (id=518):
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\x04\x1ae\xe0\x00\x00\x00\x00\xfbR[\xe3\f+o\xb3\a\x94\x002u\x8b\x90\xfa\"\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x00\x00\x00\x00\x00\x00\x00\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\xd5$G\x9f\xef\xba\x19O\xbb\xb1\xb4\x98\xd5\x84m\xe0\xed\x95\x92wAx(\x0e\x80\x906\x94\xc9\xcf\x9a\xd2.\r\x02 \xac\x8d&\xf8\xfb\xe9la\xfda\xae^\xc4\xf2\xf7\xd4\x96\xf1\x94\x80\xe8\x96\xec\x11B\x1a\x1eS\xf3\xb6\xb3^M\x02\x1c\x138\xa0\x91 %f\\u\x1a\r\x82\x9e\xd8\xc6\xcb\x1c\xea\x8c\xd0\xc8u:Y\xab\x1d\x15O\xf5\xc6\x83\xf1(m\xc1`\xfe\xac\x1ae%\xf2\x9ed\x8a\xcb\x03\xb1:\x04\xa6\x841\x13#U0\x85$k\xf6\x18\xe8\x0e\xfa\xe0gW}\xc7\xc4\x9b\xa2\x98-\xd4', 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0x3}, {0x0, 0xc8, 0xff7f}}}}, 0xb)
sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00040000"], 0x18}, 0xc020)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x11, &(0x7f0000000040)="222000000980", 0x6)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

2.243401707s ago: executing program 0 (id=519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)

2.237891128s ago: executing program 2 (id=520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

2.237236077s ago: executing program 3 (id=521):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)

2.16653972s ago: executing program 4 (id=522):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.316790377s ago: executing program 0 (id=523):
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x8000000004)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17)

1.292833038s ago: executing program 4 (id=524):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents(0xffffffffffffffff, 0x0, 0x48)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x3454, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1.203446441s ago: executing program 0 (id=525):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48)

175.613704ms ago: executing program 0 (id=526):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000), 0x200, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0xf7f, 0x400}, 0x0, 0x0)

122.353436ms ago: executing program 5 (id=527):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xe0, 0xfd9, 0xfffffff8}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

86.660647ms ago: executing program 0 (id=528):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)

0s ago: executing program 4 (id=529):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
syz_open_dev$audion(&(0x7f0000000040), 0x401, 0x2000)
connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts.
[   58.787335][ T4176] cgroup: Unknown subsys name 'net'
[   58.932004][ T4176] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.463363][ T4176] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   61.822421][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   61.843390][ T4198] chnl_net:caif_netlink_parms(): no params data found
[   61.899155][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   61.998511][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.005786][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.019093][ T4198] device bridge_slave_0 entered promiscuous mode
[   62.030780][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.038412][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.046614][ T4188] device bridge_slave_0 entered promiscuous mode
[   62.066774][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.073889][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.082310][ T4198] device bridge_slave_1 entered promiscuous mode
[   62.094016][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.101553][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.109440][ T4188] device bridge_slave_1 entered promiscuous mode
[   62.116759][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.123827][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.132106][ T4192] device bridge_slave_0 entered promiscuous mode
[   62.143239][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.150557][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.158773][ T4192] device bridge_slave_1 entered promiscuous mode
[   62.165732][ T4195] chnl_net:caif_netlink_parms(): no params data found
[   62.192282][ T4197] chnl_net:caif_netlink_parms(): no params data found
[   62.240871][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.252510][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.272073][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.288325][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.303952][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.325441][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.363100][ T4198] team0: Port device team_slave_0 added
[   62.383907][ T4198] team0: Port device team_slave_1 added
[   62.391939][ T4192] team0: Port device team_slave_0 added
[   62.403542][ T4192] team0: Port device team_slave_1 added
[   62.412174][ T4188] team0: Port device team_slave_0 added
[   62.446709][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.453698][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.479657][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.492574][ T4188] team0: Port device team_slave_1 added
[   62.514207][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.521501][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.547569][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.571639][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.578826][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.605052][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.616277][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.623631][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.631623][ T4195] device bridge_slave_0 entered promiscuous mode
[   62.655468][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.662841][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.689830][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.701574][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.709054][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.717163][ T4195] device bridge_slave_1 entered promiscuous mode
[   62.737406][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.744494][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.771893][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.783345][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.790722][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.798542][ T4197] device bridge_slave_0 entered promiscuous mode
[   62.813248][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.823988][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.831332][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.839704][ T4197] device bridge_slave_1 entered promiscuous mode
[   62.852982][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.860211][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.887334][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.923980][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.954563][ T4195] team0: Port device team_slave_0 added
[   62.967649][ T4198] device hsr_slave_0 entered promiscuous mode
[   62.974480][ T4198] device hsr_slave_1 entered promiscuous mode
[   62.983373][ T4195] team0: Port device team_slave_1 added
[   63.031565][ T4192] device hsr_slave_0 entered promiscuous mode
[   63.038708][ T4192] device hsr_slave_1 entered promiscuous mode
[   63.045820][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.053799][ T4192] Cannot create hsr debugfs directory
[   63.074724][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.084661][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.091727][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.118073][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.133184][ T4188] device hsr_slave_0 entered promiscuous mode
[   63.140150][ T4188] device hsr_slave_1 entered promiscuous mode
[   63.147289][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.154862][ T4188] Cannot create hsr debugfs directory
[   63.165248][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.182667][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.190175][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.216465][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.306229][ T4197] team0: Port device team_slave_0 added
[   63.337527][ T4195] device hsr_slave_0 entered promiscuous mode
[   63.344279][ T4195] device hsr_slave_1 entered promiscuous mode
[   63.351180][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.358821][ T4195] Cannot create hsr debugfs directory
[   63.365843][ T4197] team0: Port device team_slave_1 added
[   63.393836][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.401063][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.427441][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.442476][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.449568][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.475514][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.477224][ T1108] Bluetooth: hci1: command 0x0409 tx timeout
[   63.557077][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[   63.563314][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[   63.566556][ T4201] Bluetooth: hci4: command 0x0409 tx timeout
[   63.573037][ T1108] Bluetooth: hci0: command 0x0409 tx timeout
[   63.634980][ T4197] device hsr_slave_0 entered promiscuous mode
[   63.642044][ T4197] device hsr_slave_1 entered promiscuous mode
[   63.648716][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.656292][ T4197] Cannot create hsr debugfs directory
[   63.787719][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.799264][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.819422][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.836536][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.897789][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.909800][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.920257][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.939252][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.999641][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.010429][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.024586][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.048641][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.055613][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.083138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.093746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.124426][ T4198] 8021q: adding VLAN 0 to HW filter on device team0
[   64.146990][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.162164][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.173716][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.184812][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.194863][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.204365][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.211621][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.232753][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.253686][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.262064][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.271249][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.280371][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.287554][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.327354][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.339284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.350091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.365921][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.376238][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.402075][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.411967][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.421754][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.430464][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.438625][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.451063][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.460930][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.480040][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   64.489721][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.498807][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.526439][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.535169][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.544067][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.553307][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.563174][  T737] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.570308][  T737] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.578712][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.605682][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.614837][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.624153][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.631322][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.640199][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.659243][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.671215][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.691814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.700762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.709996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.720970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.732081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.742333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.763439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.774290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.785642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.796190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.807608][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.832837][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.846195][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.856054][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.865406][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.875762][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.910371][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   64.931461][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   64.949397][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.958755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.994993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.015025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.026797][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.033919][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.042890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.051733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.062029][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.069465][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.079150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.088119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.098465][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.105534][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.113539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.122600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.131762][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.138888][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.146517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.155083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.164750][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.173123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.182706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.211513][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.223219][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.233997][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.244031][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.253720][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.261932][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.269657][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.278541][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.298555][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.313947][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.323606][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.333353][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.343262][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.352929][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.362002][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.370713][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.379273][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.405559][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.415642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.425171][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.435903][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.445162][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.454325][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.464067][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.492770][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.504504][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   65.521594][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.529713][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.557148][ T4232] Bluetooth: hci1: command 0x041b tx timeout
[   65.580823][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.598376][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.628468][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.636025][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.636621][ T4232] Bluetooth: hci3: command 0x041b tx timeout
[   65.643814][ T4231] Bluetooth: hci0: command 0x041b tx timeout
[   65.661967][ T4231] Bluetooth: hci4: command 0x041b tx timeout
[   65.666571][ T4232] Bluetooth: hci2: command 0x041b tx timeout
[   65.673574][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.686043][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.694714][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.701819][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.717086][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.725302][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.734819][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.743637][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.750932][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.759692][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.793258][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.813417][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.822601][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.838769][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.848757][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.856289][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.865957][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.874186][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.885544][ T4198] device veth0_vlan entered promiscuous mode
[   65.898575][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.923307][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.933528][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.942624][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.953119][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.963144][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.971846][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.980497][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.015122][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.025912][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.033853][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.052002][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.067260][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.087182][ T4198] device veth1_vlan entered promiscuous mode
[   66.105014][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.115876][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.131336][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.142064][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.161633][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.172680][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.181305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.194739][ T4197] device veth0_vlan entered promiscuous mode
[   66.224748][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.235629][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.244629][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.254369][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.263279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.271824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.294907][ T4198] device veth0_macvtap entered promiscuous mode
[   66.306456][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.315723][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.328356][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.338456][ T4188] device veth0_vlan entered promiscuous mode
[   66.349493][ T4198] device veth1_macvtap entered promiscuous mode
[   66.376006][ T4188] device veth1_vlan entered promiscuous mode
[   66.385037][ T4197] device veth1_vlan entered promiscuous mode
[   66.412412][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.439595][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.448619][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.457913][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.468094][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.479171][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.487517][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.496291][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.531133][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.541294][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.555132][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.567349][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.576199][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.596296][ T4188] device veth0_macvtap entered promiscuous mode
[   66.612410][ T4188] device veth1_macvtap entered promiscuous mode
[   66.630824][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.640081][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.648581][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.661077][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.671616][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.681580][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.690933][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.699721][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.714531][ T4197] device veth0_macvtap entered promiscuous mode
[   66.729051][ T4197] device veth1_macvtap entered promiscuous mode
[   66.752137][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.762052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.770604][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.780094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.805872][ T4192] device veth0_vlan entered promiscuous mode
[   66.820897][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.831694][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.844430][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.852919][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.861628][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.870423][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.880841][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.890061][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.898417][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.908130][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.919426][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.929752][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.940808][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.952224][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.968822][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.977200][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.984854][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.995611][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.011121][ T4192] device veth1_vlan entered promiscuous mode
[   67.022306][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.034511][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.047723][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.064551][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.088260][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.099006][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.110437][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.121068][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.131972][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.140097][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.149016][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.159165][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.169378][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.182274][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.191354][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.200361][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.209370][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.234572][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.248729][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.257819][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.267558][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.323438][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.332598][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.341544][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.350577][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.372393][ T4192] device veth0_macvtap entered promiscuous mode
[   67.390429][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.402511][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.433101][ T4192] device veth1_macvtap entered promiscuous mode
[   67.463553][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.472218][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.480673][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.490642][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.499573][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.508473][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.516721][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.532406][ T4195] device veth0_vlan entered promiscuous mode
[   67.574815][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.586493][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.597220][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.607715][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.617701][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.628431][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.646089][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.647612][ T4230] Bluetooth: hci1: command 0x040f tx timeout
[   67.666219][ T4195] device veth1_vlan entered promiscuous mode
[   67.674887][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.684273][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.692916][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.697199][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.702576][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.718886][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.727069][ T4233] Bluetooth: hci4: command 0x040f tx timeout
[   67.727692][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.737535][ T4233] Bluetooth: hci2: command 0x040f tx timeout
[   67.742290][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.752541][ T4233] Bluetooth: hci3: command 0x040f tx timeout
[   67.759389][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.763749][ T4233] Bluetooth: hci0: command 0x040f tx timeout
[   67.769692][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.784849][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.797206][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.807453][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.818881][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.829265][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.839927][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.851331][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.883766][ T4195] device veth0_macvtap entered promiscuous mode
[   67.900497][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.915990][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.927819][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.937217][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.945733][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.979651][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.998356][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.023752][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.035484][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.052254][ T4195] device veth1_macvtap entered promiscuous mode
[   68.068102][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.093350][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.109954][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.128830][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.230923][ T4265] loop1: detected capacity change from 0 to 32768
[   68.259111][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.270623][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.276193][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.291782][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.301968][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.313005][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.323134][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.333604][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.344478][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.355177][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.369347][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.375131][ T4265] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4265)
[   68.399237][ T4265] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   68.408774][ T4265] BTRFS info (device loop1): force zlib compression, level 3
[   68.416275][ T4265] BTRFS info (device loop1): allowing degraded mounts
[   68.423855][ T4265] BTRFS info (device loop1): setting nodatasum
[   68.430193][ T4265] BTRFS info (device loop1): allowing degraded mounts
[   68.437801][ T4265] BTRFS info (device loop1): using free space tree
[   68.444346][ T4265] BTRFS info (device loop1): has skinny extents
[   68.475154][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.484976][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.495405][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.509963][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.528751][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.542717][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.556593][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.574224][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.586622][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.604385][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.616195][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.640031][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.672466][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.712224][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.730879][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.737843][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.745290][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.757021][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.765755][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.788744][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.843543][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.867254][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.917897][ T4288] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   68.947319][ T4265] BTRFS info (device loop1): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3
[   68.959921][ T4265] BTRFS info (device loop1): balance: ended with status: 0
[   68.979870][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.018673][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.071500][ T1217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.096271][ T1217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.145093][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.145142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.161178][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.241828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.264585][ T1217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.297618][ T1217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.310107][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.497572][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   69.731040][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   69.808196][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[   69.815306][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   69.835152][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   69.842209][ T4231] Bluetooth: hci4: command 0x0419 tx timeout
[   69.947998][ T4318] loop0: detected capacity change from 0 to 8
[   70.028819][ T4323] 9pnet_virtio: no channels available for device syz
[   70.039442][ T4318] SQUASHFS error: zlib decompression failed, data probably corrupt
[   70.093484][ T4318] SQUASHFS error: Failed to read block 0x9b: -5
[   70.112176][ T4318] SQUASHFS error: Unable to read metadata cache entry [99]
[   70.136683][ T4318] SQUASHFS error: Unable to read inode 0x127
[   70.526574][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.634442][ T4338] loop3: detected capacity change from 0 to 8
[   70.726361][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   70.772653][ T4338] SQUASHFS error: xz decompression failed, data probably corrupt
[   70.780676][ T4338] SQUASHFS error: Failed to read block 0x108: -5
[   70.787198][ T4338] SQUASHFS error: Unable to read metadata cache entry [106]
[   70.794589][ T4338] SQUASHFS error: Unable to read inode 0x11f
[   70.886826][ T1108] usb 3-1: config 0 has no interfaces?
[   70.966714][ T1108] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   71.048979][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   71.182580][ T1108] usb 3-1: SerialNumber: syz
[   71.400479][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[   71.407582][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[   71.529733][ T1108] usb 3-1: config 0 descriptor??
[   71.968679][ T4349] loop3: detected capacity change from 0 to 128
[   71.981099][ T4347] usb 3-1: USB disconnect, device number 2
[   72.064873][ T4349] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[   72.405412][ T4327] loop4: detected capacity change from 0 to 32768
[   72.442251][ T4327] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.13 (4327)
[   72.532426][ T4327] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   72.605424][ T4327] BTRFS info (device loop4): turning off barriers
[   72.632119][ T4327] BTRFS info (device loop4): turning on async discard
[   72.664040][ T4327] BTRFS info (device loop4): doing ref verification
[   72.717351][ T4327] BTRFS info (device loop4): using free space tree
[   72.767249][ T4327] BTRFS info (device loop4): has skinny extents
[   72.875900][ T4336] loop0: detected capacity change from 0 to 32768
[   72.964100][ T4327] BTRFS info (device loop4): enabling ssd optimizations
[   73.009698][ T4336] XFS (loop0): Mounting V5 Filesystem
[   73.058253][ T4336] XFS (loop0): Ending clean mount
[   73.272090][ T4385] loop3: detected capacity change from 0 to 1024
[   73.380630][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   73.425079][ T4336] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[   73.454224][ T4336] XFS (loop0): Unmount and run xfs_repair
[   73.477435][ T4336] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   73.484962][ T4336] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   73.547851][ T4336] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   73.586277][ T4336] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   73.646422][ T4336] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   73.844741][ T4336] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   73.887286][ T4336] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   73.916444][ T4336] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   74.027185][ T4336] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   74.066589][ T4400] Bluetooth: (null): Invalid header checksum
[   74.084926][ T4336] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[   74.113547][ T4336] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   74.144411][ T4336] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   74.184614][ T4336] syz.0.15 (4336) used greatest stack depth: 20720 bytes left
[   74.247309][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   74.267785][ T4188] XFS (loop0): Unmounting Filesystem
[   74.500188][ T4408] binder: 4407:4408 ioctl c0306201 200000000080 returned -14
[   74.550095][ T4408] binder: 4407:4408 ioctl c0306201 2000000003c0 returned -14
[   74.570023][ T4317] ODEBUG: Out of memory. ODEBUG disabled
[   75.628803][ T4414] loop3: detected capacity change from 0 to 1024
[   75.763142][ T4414] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,,errors=continue. Quota mode: none.
[   75.816863][   T26] audit: type=1804 audit(1781299297.959:2): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.29" name="/newroot/6/file0" dev="fuse" ino=1 res=1 errno=0
[   76.054644][ T4414] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory
[   76.101988][ T4414] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #18: comm syz.3.28: mark_inode_dirty error
[   76.124486][ T4414] EXT4-fs error (device loop3): ext4_discard_preallocations:5134: comm syz.3.28: Error -117 loading buddy information for 4294940146
[   76.147337][ T4414] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory
[   76.173563][ T4414] EXT4-fs error (device loop3): ext4_ext_truncate:4472: inode #18: comm syz.3.28: mark_inode_dirty error
[   76.197061][ T4414] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory
[   76.212854][ T4414] EXT4-fs error (device loop3): ext4_truncate:4286: inode #18: comm syz.3.28: mark_inode_dirty error
[   76.287491][ T4432] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   76.582126][ T4438] loop4: detected capacity change from 0 to 512
[   76.643276][ T4444] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   76.673500][ T4438] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback.
[   76.698833][ T4438] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   76.939160][ T4448] loop0: detected capacity change from 0 to 64
[   77.041988][ T4317] Set syz1 is full, maxelem 65536 reached
[   77.227734][ T4452] loop1: detected capacity change from 0 to 512
[   77.277114][ T4452] =======================================================
[   77.277114][ T4452] WARNING: The mand mount option has been deprecated and
[   77.277114][ T4452]          and is ignored by this kernel. Remove the mand
[   77.277114][ T4452]          option from the mount to silence this warning.
[   77.277114][ T4452] =======================================================
[   77.359867][ T4452] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   77.384488][ T4452] EXT4-fs (loop1): orphan cleanup on readonly fs
[   77.400270][ T4452] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   77.408963][ T4452] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   77.424538][ T4452] EXT4-fs (loop1): 1 truncate cleaned up
[   77.475546][ T4452] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,user_xattr,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,lazytime,,errors=continue. Quota mode: writeback.
[   77.537085][ T4452] EXT4-fs (loop1): shut down requested (2)
[   77.578344][   T26] audit: type=1107 audit(1781299299.729:3): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   77.758385][ T4472] loop4: detected capacity change from 0 to 512
[   77.920006][ T4474] overlayfs: failed to clone upperpath
[   77.936302][ T4476] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   78.157022][ T4481] loop3: detected capacity change from 0 to 4096
[   78.269280][ T4481] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   78.281265][ T4481] EXT4-fs (loop3): inline encryption not supported
[   78.295358][ T4481] EXT4-fs (loop3): Test dummy encryption mode enabled
[   78.306720][ T4481] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[   78.335363][ T4481] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[   78.373382][ T4481] System zones: 0-5
[   78.410742][ T4481] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,usrjquota=./bus,minixdf,. Quota mode: writeback.
[   78.583036][ T4452] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[   78.913528][ T4509] loop3: detected capacity change from 0 to 128
[   79.003963][ T4508] kvm: pic: single mode not supported
[   79.004112][ T4508] kvm: pic: level sensitive irq not supported
[   79.019628][ T4508] kvm: pic: non byte write
[   79.031903][ T4509] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   79.050530][ T4509] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.336453][ T4347] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   79.358836][ T4529] overlayfs: failed to clone upperpath
[   79.491775][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   79.687902][ T4546] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   79.707004][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'.
[   79.746706][ T4347] usb 5-1: unable to get BOS descriptor or descriptor too short
[   79.756264][ T4548] netlink: 'syz.3.70': attribute type 1 has an invalid length.
[   79.766222][ T4548] netlink: 'syz.3.70': attribute type 1 has an invalid length.
[   79.774573][ T4548] Zero length message leads to an empty skb
[   79.839288][ T4551] loop3: detected capacity change from 0 to 1024
[   79.919889][ T4555] loop2: detected capacity change from 0 to 128
[   79.975900][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   79.996631][ T4347] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   80.006785][ T4555] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.032163][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.061191][ T4347] usb 5-1: Product: syz
[   80.071901][ T4347] usb 5-1: Manufacturer: syz
[   80.079597][ T4347] usb 5-1: SerialNumber: syz
[   80.393405][ T4565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.435872][ T4565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'.
[   80.566752][ T4347] usb 5-1: MIDIStreaming interface descriptor not found
[   80.660822][ T4347] usb 5-1: USB disconnect, device number 2
[   80.824847][ T4581] binder: 4579:4581 ioctl c0306201 200000000680 returned -14
[   80.948257][ T4577] udevd[4577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   81.040809][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'.
[   81.203669][ T4394] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   81.313962][ T4584] loop1: detected capacity change from 0 to 32768
[   81.347257][ T4584] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.87 (4584)
[   81.402207][ T4584] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   81.434123][ T4584] BTRFS info (device loop1): setting nodatasum
[   81.443256][ T4584] BTRFS info (device loop1): force zlib compression, level 3
[   81.476782][ T4584] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[   81.492233][ T4394] usb 4-1: Using ep0 maxpacket: 8
[   81.496675][ T4584] BTRFS info (device loop1): use lzo compression, level 0
[   81.516430][ T4584] BTRFS info (device loop1): turning on flush-on-commit
[   81.526623][ T4584] BTRFS info (device loop1): enabling auto defrag
[   81.533122][ T4584] BTRFS info (device loop1): max_inline at 4096
[   81.563834][ T4584] BTRFS info (device loop1): force zlib compression, level 3
[   81.591226][ T4584] BTRFS info (device loop1): using free space tree
[   81.611172][ T4584] BTRFS info (device loop1): has skinny extents
[   81.624425][ T4615] netlink: 'syz.0.99': attribute type 10 has an invalid length.
[   81.647135][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.655424][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.674784][ T4394] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   81.687636][ T4394] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.723218][ T4394] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.756157][ T4394] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   81.788407][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.795801][ T4615] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.804385][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.811783][ T4615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.835561][ T4394] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.841143][ T4615] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   81.864969][ T4584] BTRFS info (device loop1): enabling ssd optimizations
[   81.877824][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'.
[   81.887566][ T4627] device bridge_slave_1 left promiscuous mode
[   81.893443][ T4394] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.893814][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.926257][ T4394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.052663][ T4627] device bridge_slave_0 left promiscuous mode
[   82.075840][   T26] audit: type=1800 audit(1781299304.219:4): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="file1" dev="loop1" ino=260 res=0 errno=0
[   82.097407][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.177576][   T26] audit: type=1800 audit(1781299304.299:5): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="file1" dev="loop1" ino=260 res=0 errno=0
[   82.206721][ T4394] usb 4-1: GET_CAPABILITIES returned 0
[   82.212660][ T4394] usbtmc 4-1:16.0: can't read capabilities
[   82.239790][ T4627] bond0: (slave bridge0): Releasing backup interface
[   82.284113][   T26] audit: type=1800 audit(1781299304.399:6): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="file1" dev="loop1" ino=260 res=0 errno=0
[   82.525187][ T4639] binder: BINDER_SET_CONTEXT_MGR already set
[   82.552157][ T4639] binder: 4638:4639 ioctl 4018620d 200000004a80 returned -16
[   82.554838][ T4201] usb 4-1: USB disconnect, device number 2
[   83.040706][ T4637] loop2: detected capacity change from 0 to 32768
[   83.059250][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   83.155358][ T4650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.218713][ T4637] XFS (loop2): Mounting V5 Filesystem
[   83.263434][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'.
[   83.392813][ T4666] loop3: detected capacity change from 0 to 2048
[   83.456631][   T23] usb 5-1: config 0 has no interfaces?
[   83.460855][ T4637] XFS (loop2): Ending clean mount
[   83.479211][ T4637] XFS (loop2): Quotacheck needed: Please wait.
[   83.503601][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   83.626463][ T4637] XFS (loop2): Quotacheck: Done.
[   83.659467][   T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   83.673181][ T4666] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   83.690113][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.698590][   T23] usb 5-1: Product: syz
[   83.702905][   T23] usb 5-1: Manufacturer: syz
[   83.708027][   T23] usb 5-1: SerialNumber: syz
[   83.713030][ T4666] EXT4-fs error (device loop3) in ext4_setattr:5645: error 28
[   83.737911][   T23] usb 5-1: config 0 descriptor??
[   83.868497][ T4666] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   83.901560][ T4666] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.107: mark_inode_dirty error
[   84.032607][ T4394] usb 5-1: USB disconnect, device number 3
[   84.036474][ T4197] XFS (loop2): Unmounting Filesystem
[   85.082565][ T4684] loop3: detected capacity change from 0 to 512
[   85.125265][ T4691] netem: change failed
[   85.268713][ T4684] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback.
[   85.327750][ T4684] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   85.480290][ T4684] EXT4-fs (loop3): shut down requested (1)
[   85.573174][ T4702] loop2: detected capacity change from 0 to 32768
[   85.694754][ T4683] loop4: detected capacity change from 0 to 32768
[   85.752054][ T4702] XFS (loop2): Mounting V5 Filesystem
[   85.879524][ T4702] XFS (loop2): Ending clean mount
[   86.437590][ T4727] netlink: 'syz.0.122': attribute type 16 has an invalid length.
[   86.456060][ T4727] netlink: 'syz.0.122': attribute type 17 has an invalid length.
[   86.475275][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.505462][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.529547][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.542336][ T4727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.592951][ T4702] syz.2.118 (4702) used greatest stack depth: 20368 bytes left
[   86.699759][ T4197] XFS (loop2): Unmounting Filesystem
[   86.758415][    T7] cfg80211: failed to load regulatory.db
[   86.865667][ T4736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'.
[   88.420381][ T4750] loop2: detected capacity change from 0 to 40427
[   88.520055][ T4750] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[   88.579568][ T4750] F2FS-fs (loop2): invalid crc value
[   88.642047][ T4750] F2FS-fs (loop2): Found nat_bits in checkpoint
[   88.879193][ T4750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   89.414415][ T4197] attempt to access beyond end of device
[   89.414415][ T4197] loop2: rw=2049, want=45104, limit=40427
[   89.460149][ T4758] loop1: detected capacity change from 0 to 40427
[   89.509459][ T4758] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   89.533369][ T4758] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   89.571712][ T4758] F2FS-fs (loop1): invalid crc value
[   89.641775][ T4758] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   89.905238][ T4758] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   89.925386][ T4758] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   90.210612][ T4774] loop4: detected capacity change from 0 to 32768
[   90.302618][ T4774] (syz.4.140,4774,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.389736][ T4774] (syz.4.140,4774,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.585547][ T4774] JBD2: Ignoring recovery information on journal
[   91.540617][ T4198] attempt to access beyond end of device
[   91.540617][ T4198] loop1: rw=524288, want=45072, limit=40427
[   91.553627][ T4198] attempt to access beyond end of device
[   91.553627][ T4198] loop1: rw=0, want=45072, limit=40427
[   91.689446][ T4789] syz.2.143 uses obsolete (PF_INET,SOCK_PACKET)
[   91.717340][  T737] attempt to access beyond end of device
[   91.717340][  T737] loop1: rw=2049, want=45120, limit=40427
[   91.741968][ T4774] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   91.962287][ T4801] loop3: detected capacity change from 0 to 8
[   92.380782][ T4803] ocfs2: Unmounting device (7,4) on (node local)
[   93.045621][ T4826] IPVS: sh: FWM 3 0x00000003 - no destination available
[   93.222123][ T4340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.304901][ T4340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.410507][ T4340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.489704][ T4340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.528753][ T4829] chnl_net:caif_netlink_parms(): no params data found
[   93.647622][ T4842] delete_channel: no stack
[   93.654134][ T4842] delete_channel: no stack
[   94.316408][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.329239][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.385896][ T4829] device bridge_slave_0 entered promiscuous mode
[   94.448928][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.469456][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.502908][ T4829] device bridge_slave_1 entered promiscuous mode
[   94.643174][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.706076][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.236719][ T4201] Bluetooth: hci4: command 0x0409 tx timeout
[   95.567837][ T4829] team0: Port device team_slave_0 added
[   95.577127][ T4829] team0: Port device team_slave_1 added
[   95.654448][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.686482][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.764322][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.815307][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.825619][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.890090][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.983136][ T4829] device hsr_slave_0 entered promiscuous mode
[   96.007348][ T4829] device hsr_slave_1 entered promiscuous mode
[   96.043537][ T4829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.078452][ T4829] Cannot create hsr debugfs directory
[   96.133882][ T4896] kvm: pic: non byte write
[   96.240375][   T26] audit: type=1326 audit(1781299318.389:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.296405][   T26] audit: type=1326 audit(1781299318.389:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.482945][   T26] audit: type=1326 audit(1781299318.429:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.586865][   T26] audit: type=1326 audit(1781299318.429:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.635016][   T26] audit: type=1326 audit(1781299318.429:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.764093][   T26] audit: type=1326 audit(1781299318.429:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.820070][ T4829] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.846083][   T26] audit: type=1326 audit(1781299318.429:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.888391][   T26] audit: type=1326 audit(1781299318.429:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   96.916939][ T4829] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.945410][ T4829] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   96.970480][ T4829] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   96.982272][   T26] audit: type=1326 audit(1781299318.429:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   97.049632][   T26] audit: type=1326 audit(1781299318.429:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.174" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40447bce59 code=0x7ffc0000
[   97.282900][ T4340] device hsr_slave_0 left promiscuous mode
[   97.312209][ T4340] device hsr_slave_1 left promiscuous mode
[   97.318780][   T23] Bluetooth: hci4: command 0x041b tx timeout
[   97.340604][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.364628][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.398165][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.432199][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.462113][ T4340] device bridge_slave_1 left promiscuous mode
[   97.487224][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.531483][ T4340] device bridge_slave_0 left promiscuous mode
[   97.546079][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.601193][ T4340] device veth1_macvtap left promiscuous mode
[   97.616007][ T4340] device veth0_macvtap left promiscuous mode
[   97.627097][ T4340] device veth1_vlan left promiscuous mode
[   97.643962][ T4340] device veth0_vlan left promiscuous mode
[   97.774612][ T4937] loop2: detected capacity change from 0 to 512
[   97.818200][ T4937] EXT4-fs (loop2): Ignoring removed oldalloc option
[   97.944118][ T4937] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,minixdf,quota,,errors=continue. Quota mode: writeback.
[   97.991220][ T4937] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.085868][ T4937] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.181: corrupted inode contents
[   98.138872][ T4937] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.181: mark_inode_dirty error
[   98.157449][ T4937] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.181: corrupted inode contents
[   98.179938][ T4937] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.181: mark_inode_dirty error
[   98.219482][ T4937] EXT4-fs error (device loop2): ext4_lookup:1855: inode #19: comm syz.2.181: 'file1' linked to parent dir
[   98.281139][ T4340] team0 (unregistering): Port device team_slave_1 removed
[   98.304387][ T4340] team0 (unregistering): Port device team_slave_0 removed
[   98.331406][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.389246][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.675575][ T4340] bond0 (unregistering): Released all slaves
[   99.671517][ T4201] Bluetooth: hci4: command 0x040f tx timeout
[   99.769791][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.790462][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   99.817302][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.821273][ T4974] vcan0: tx drop: invalid da for name 0x0000000000000001
[   99.871941][ T4829] 8021q: adding VLAN 0 to HW filter on device team0
[   99.912035][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   99.937152][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.962199][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.969358][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.048957][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  100.060081][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.075449][ T4979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.091098][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.100144][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.107285][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.129151][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  100.140456][ T4979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'.
[  100.154980][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  100.225183][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  100.284541][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  100.316181][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  100.337559][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  100.352055][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  100.364440][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  100.382525][ T4829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.414603][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  100.436265][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  100.452822][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  100.463073][  T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.714834][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.808436][ T5019] device batadv_slave_1 entered promiscuous mode
[  101.001609][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.001706][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.035219][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.416526][ T4645] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.726599][   T23] Bluetooth: hci4: command 0x0419 tx timeout
[  102.566412][ T4645] usb 4-1: Using ep0 maxpacket: 16
[  102.566977][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.606959][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.648383][ T5059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'.
[  102.681765][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  102.686678][ T4645] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  102.692169][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.706194][ T5065] process 'syz.4.211' launched './file0' with NULL argv: empty string added
[  102.717939][ T4645] usb 4-1: config 0 has no interface number 0
[  102.733954][ T4645] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.748256][ T4829] device veth0_vlan entered promiscuous mode
[  102.776224][ T4645] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  102.779348][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.845998][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.887403][ T4829] device veth1_vlan entered promiscuous mode
[  102.966674][ T4645] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  102.975804][ T4645] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  103.005410][ T4829] device veth0_macvtap entered promiscuous mode
[  103.038832][ T4645] usb 4-1: Product: syz
[  103.043259][ T4645] usb 4-1: SerialNumber: syz
[  103.059297][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.068269][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  103.075186][ T4645] usb 4-1: config 0 descriptor??
[  103.111906][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  103.118165][ T4645] cm109 4-1:0.8: invalid payload size 0, expected 4
[  103.143916][ T4645] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5
[  103.147100][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  103.214930][ T4829] device veth1_macvtap entered promiscuous mode
[  103.258552][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  103.295429][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  103.347822][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.418194][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.442470][ T5031] udc-core: couldn't find an available UDC or it's busy
[  103.448899][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.454514][ T5031] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  103.488069][ T4645] usb 4-1: USB disconnect, device number 3
[  103.494450][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.506593][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  103.514256][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  103.542324][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.592825][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.616042][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.647640][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.662651][ T5093] loop2: detected capacity change from 0 to 512
[  103.684900][ T4645] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  103.702287][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.735240][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  103.760503][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  103.780660][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.825414][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.848294][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.870524][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.891040][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.911675][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.924914][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.936648][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  103.945834][ T5093] EXT4-fs (loop2): Test dummy encryption mode enabled
[  103.960875][ T5093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  103.976917][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.993000][ T5093] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  103.995280][ T4829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.013501][ T4829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.022886][ T4829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.033098][ T4829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.035466][ T5093] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.219: bad orphan inode 131083
[  104.104073][ T5093] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none.
[  104.193834][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.220426][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.249287][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  104.264389][ T5093] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  104.284778][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.293820][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.316148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  104.330065][ T5093] overlayfs: upper fs needs to support d_type.
[  104.525426][ T5093] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  104.577154][ T5093] overlayfs: upper fs does not support tmpfile.
[  104.649506][ T5093] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  106.688300][ T5169] loop5: detected capacity change from 0 to 2048
[  106.897254][ T5176] loop2: detected capacity change from 0 to 7
[  106.986025][ T4577] Dev loop2: unable to read RDB block 7
[  106.992086][ T4577]  loop2: unable to read partition table
[  107.040184][ T4577] loop2: partition table beyond EOD, truncated
[  107.095762][ T5179] overlayfs: failed to clone upperpath
[  107.236322][    C1] sched: RT throttling activated
[  107.249473][ T5176] Dev loop2: unable to read RDB block 7
[  107.255453][ T5176]  loop2: unable to read partition table
[  107.321252][ T5176] loop2: partition table beyond EOD, truncated
[  107.371384][ T5176] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  107.753947][ T3561] Dev loop2: unable to read RDB block 7
[  107.764715][ T3561]  loop2: unable to read partition table
[  107.836661][ T3561] loop2: partition table beyond EOD, truncated
[  108.030507][ T5205] sch_tbf: burst 657 is lower than device lo mtu (65550) !
[  108.203549][ T5215] netlink: 'syz.2.244': attribute type 2 has an invalid length.
[  108.221385][ T5212] loop5: detected capacity change from 0 to 736
[  109.082491][ T5240] loop2: detected capacity change from 0 to 128
[  109.250546][ T5240] overlayfs: upper fs needs to support d_type.
[  109.261014][ T5240] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  109.269218][ T5240] overlayfs: failed to set xattr on upper
[  109.275117][ T5240] overlayfs: ...falling back to index=off,metacopy=off.
[  110.227601][ T5247] device syzkaller0 entered promiscuous mode
[  113.438272][ T5280] loop2: detected capacity change from 0 to 512
[  113.769763][ T5280] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,norecovery,,errors=continue. Quota mode: writeback.
[  113.819299][ T5280] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.994264][ T5294] netlink: 'syz.3.257': attribute type 10 has an invalid length.
[  114.108076][ T5294] 8021q: adding VLAN 0 to HW filter on device team0
[  114.174987][ T5294] bond0: (slave team0): Enslaving as an active interface with an up link
[  116.786703][ T4394] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  117.263128][ T5355] netlink: 'syz.0.272': attribute type 10 has an invalid length.
[  117.307187][ T4394] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.353076][ T4394] usb 6-1: config 0 interface 0 has no altsetting 0
[  117.377991][ T5355] team0: Port device netdevsim0 added
[  117.392254][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  117.435875][ T5358] bond0: (slave team0): Releasing backup interface
[  117.474925][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  117.519882][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.548236][ T5358] device bridge_slave_0 left promiscuous mode
[  117.554531][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.569207][ T4394] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  117.590874][ T4394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.614189][ T4394] usb 6-1: Product: syz
[  117.623547][ T4394] usb 6-1: Manufacturer: syz
[  117.629624][ T4394] usb 6-1: SerialNumber: syz
[  117.640741][ T5358] device bridge_slave_1 left promiscuous mode
[  117.657357][ T4394] usb 6-1: config 0 descriptor??
[  117.784907][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.804769][ T5358] bond0: (slave bond_slave_0): Releasing backup interface
[  117.824771][ T5358] bond0: (slave bond_slave_1): Releasing backup interface
[  117.838639][ T4394] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  118.939598][ T4394] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  118.976951][ T4394] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  118.991985][ T4394] usb 6-1: media controller created
[  119.021870][ T5358] team0: Port device team_slave_0 removed
[  119.036024][ T4394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  119.152304][ T5358] team0: Port device team_slave_1 removed
[  119.169307][ T5358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.216495][ T5358] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.231161][ T4394] DVB: Unable to find symbol tda10046_attach()
[  119.246705][ T4394] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  119.264603][ T4394] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  119.287195][ T5358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.294662][ T5358] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.333514][ T5359] team0: Mode changed to "activebackup"
[  119.352668][ T5382] netlink: 'syz.4.278': attribute type 10 has an invalid length.
[  119.418023][ T5382] 8021q: adding VLAN 0 to HW filter on device team0
[  119.426248][ T5382] bond0: (slave team0): Enslaving as an active interface with an up link
[  119.503655][ T5397] loop3: detected capacity change from 0 to 256
[  119.695143][ T4394] dvb_usb_m920x: probe of 6-1:0.0 failed with error -71
[  119.707776][ T4394] usb 6-1: USB disconnect, device number 2
[  121.745680][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  121.786082][ T5450] bond0: (slave bond_slave_0): Releasing backup interface
[  121.874696][ T5450] bond0: (slave bond_slave_1): Releasing backup interface
[  124.175512][ T5450] team0: Port device team_slave_0 removed
[  124.207625][ T5466] loop5: detected capacity change from 0 to 16
[  124.301304][ T5466] erofs: (device loop5): mounted with root inode @ nid 36.
[  124.447234][ T5450] team0: Port device team_slave_1 removed
[  124.507276][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.514764][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.580756][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.672084][ T5475] loop2: detected capacity change from 0 to 736
[  124.787043][ T5450] team0: Port device netdevsim0 removed
[  124.907787][ T5453] team0: Mode changed to "activebackup"
[  125.607243][ T5484] loop2: detected capacity change from 0 to 512
[  125.650065][ T5484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  125.843501][ T5484] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  125.874349][ T5494] loop3: detected capacity change from 0 to 256
[  125.899433][ T5484] EXT4-fs (loop2): 1 truncate cleaned up
[  125.905149][ T5484] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback.
[  125.975843][ T5494] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  126.259172][ T5512] overlayfs: failed to clone upperpath
[  126.514026][ T5517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  126.521007][ T5517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  126.599946][ T5517] vhci_hcd vhci_hcd.0: Device attached
[  126.682102][ T5519] vhci_hcd: connection closed
[  126.860888][ T4344] vhci_hcd: stop threads
[  126.884869][ T4344] vhci_hcd: release socket
[  126.892517][ T4344] vhci_hcd: disconnect device
[  128.236504][ T4262] usb 38-1: enqueue for inactive port 0
[  128.357640][ T5533] device syzkaller0 entered promiscuous mode
[  128.872749][ T5539] loop2: detected capacity change from 0 to 512
[  129.048566][ T5539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  129.110251][ T5539] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.314907][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  129.329132][ T5539] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  129.383876][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.422052][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.456949][ T5539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.311: inode #9: comm syz.2.311: iget: illegal inode #
[  129.478267][ T5550] device bridge_slave_0 left promiscuous mode
[  129.515365][ T5550] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.547581][ T4262] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  129.556514][ T5539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.311: error while reading EA inode 9 err=-117
[  129.572284][ T4262] usb usb38-port1: attempt power cycle
[  129.715383][ T5539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.311: inode #9: comm syz.2.311: iget: illegal inode #
[  129.732032][ T5550] device bridge_slave_1 left promiscuous mode
[  129.747454][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.757041][ T5539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.311: error while reading EA inode 9 err=-117
[  129.931250][ T5550] bond0: (slave bond_slave_0): Releasing backup interface
[  130.519441][ T5550] bond0: (slave bond_slave_1): Releasing backup interface
[  130.761199][ T5550] team0: Port device team_slave_0 removed
[  130.805221][ T5550] team0: Port device team_slave_1 removed
[  130.812064][ T5550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.819885][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.828627][ T5550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.836831][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.864471][ T5556] team0: Mode changed to "activebackup"
[  130.883194][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'.
[  130.937954][ T4262] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  131.247216][ T4262] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  131.339846][ T4262] usb usb38-port1: unable to enumerate USB device
[  131.941762][ T5591] overlayfs: missing 'lowerdir'
[  132.881597][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  132.896989][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  133.958872][ T5629] binder: BINDER_SET_CONTEXT_MGR already set
[  133.964919][ T5629] binder: 5628:5629 ioctl 4018620d 200000004a80 returned -16
[  134.356445][ T1326] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  134.606477][ T1326] usb 3-1: Using ep0 maxpacket: 32
[  134.726626][ T1326] usb 3-1: config 0 has no interfaces?
[  134.732232][ T1326] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  134.749861][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.767910][ T1326] usb 3-1: config 0 descriptor??
[  135.143370][ T5630] device batadv_slave_1 left promiscuous mode
[  135.472663][ T5630] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.481810][ T5630] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.490833][ T5630] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.500174][ T5630] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.489576][ T5639] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.504148][ T5639] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.519370][ T5639] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.530934][ T5639] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.823831][ T4263] usb 3-1: USB disconnect, device number 3
[  136.849541][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[  138.139746][ T5686] loop2: detected capacity change from 0 to 32768
[  138.226888][ T5686] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.342 (5686)
[  138.283736][ T5686] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  138.292737][ T5686] BTRFS info (device loop2): turning on sync discard
[  138.299575][ T5686] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  138.309385][ T5686] BTRFS info (device loop2): use zstd compression, level 3
[  138.316694][ T5686] BTRFS info (device loop2): turning on async discard
[  138.323699][ T5686] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  138.334614][ T5686] BTRFS info (device loop2): trying to use backup root at mount time
[  138.342929][ T5686] BTRFS info (device loop2): enabling auto defrag
[  138.349474][ T5686] BTRFS info (device loop2): using free space tree
[  138.355999][ T5686] BTRFS info (device loop2): has skinny extents
[  141.018939][ T5686] BTRFS error (device loop2): open_ctree failed: -12
[  141.470308][ T5735] autofs4:pid:5735:autofs_fill_super: called with bogus options
[  142.132373][ T4577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4577)
[  143.443600][ T5776] netlink: 'syz.5.358': attribute type 4 has an invalid length.
[  143.490244][ T5778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.361'.
[  143.818480][ T5794] overlayfs: invalid redirect ((null))
[  145.054108][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'.
[  145.108070][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'.
[  145.237555][ T5805] netlink: 'syz.4.368': attribute type 4 has an invalid length.
[  145.296426][ T5805] netlink: 152 bytes leftover after parsing attributes in process `syz.4.368'.
[  145.389818][ T5805] .`: renamed from bond0
[  145.437933][ T5805] syz.4.368 (5805) used greatest stack depth: 19536 bytes left
[  145.762663][ T5839] device veth0 entered promiscuous mode
[  145.818604][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[  147.982404][ T5874] overlayfs: failed to clone lowerpath
[  148.014364][ T5874] overlayfs: failed to clone lowerpath
[  148.551407][ T5899] netlink: set zone limit has 8 unknown bytes
[  149.636260][ T5903] loop3: detected capacity change from 0 to 2048
[  150.211472][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.485337][ T5903] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 16: comm syz.3.389: lblock 0 mapped to illegal pblock 16 (length 1)
[  150.627202][ T5934] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 16: comm syz.3.389: lblock 0 mapped to illegal pblock 16 (length 1)
[  150.655162][ T5932] loop2: detected capacity change from 0 to 4096
[  150.686033][ T5932] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  151.311540][ T4340] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm kworker/u4:8: Invalid inode table block 0 in block_group 0
[  151.514731][ T5932] ntfs3: loop2: failed to convert "076c" to cp857
[  151.594816][ T5932] ntfs3: loop2: ino=5, "/" directory corrupted
[  152.240318][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.247859][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.561247][ T5968] netlink: 112 bytes leftover after parsing attributes in process `syz.0.402'.
[  152.888162][ T5973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.399'.
[  152.988325][ T5977] overlayfs: failed to clone lowerpath
[  153.014007][ T5977] overlayfs: failed to clone lowerpath
[  153.057426][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.074218][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.429784][ T5941] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.439527][ T5941] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.449181][ T5941] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.458423][ T5941] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.634667][ T5988] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0
[  153.869858][ T5997] device syzkaller0 entered promiscuous mode
[  153.932943][ T6000] loop5: detected capacity change from 0 to 1024
[  154.073855][ T6000] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  155.254870][ T6000] EXT4-fs warning (device loop5): ext4_rmdir:3243: inode #11: comm syz.5.411: empty directory 'file0' has too many links (111)
[  155.400437][ T6025] loop3: detected capacity change from 0 to 128
[  155.535729][ T6025] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  155.535851][ T6025] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.748070][ T6034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.420'.
[  155.816837][ T6040] xt_socket: unknown flags 0x4c
[  158.200743][ T6080] loop3: detected capacity change from 0 to 4096
[  158.281946][ T6080] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  159.308231][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  159.351425][   T26] kauditd_printk_skb: 43 callbacks suppressed
[  159.351442][   T26] audit: type=1800 audit(1781299381.499:60): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.429" name="file1" dev="loop3" ino=15 res=0 errno=0
[  159.493822][ T6104] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  161.476569][ T6120] device syzkaller0 entered promiscuous mode
[  163.671524][ T6151] device syzkaller0 entered promiscuous mode
[  163.682460][ T6151] TC_ACT_REPEAT abuse ?
[  163.937514][ T6154] device syzkaller0 entered promiscuous mode
[  164.625181][ T6172] loop2: detected capacity change from 0 to 512
[  165.055362][ T6172] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  165.469337][ T6181] netlink: 'syz.4.455': attribute type 1 has an invalid length.
[  168.397047][ T6181] device bond0 entered promiscuous mode
[  168.446873][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.547172][ T6198] bond0: (slave bridge1): making interface the new active one
[  168.558850][ T6198] device bridge1 entered promiscuous mode
[  168.569231][ T6198] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  168.579727][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[  168.621597][ T6197] device syz_tun entered promiscuous mode
[  168.636551][ T6197] device macvtap1 entered promiscuous mode
[  168.650206][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  168.685947][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'.
[  168.940243][ T6199] device syz_tun left promiscuous mode
[  168.967431][ T6216] tipc: Started in network mode
[  168.972840][ T6216] tipc: Node identity 4, cluster identity 4711
[  169.677125][ T6216] tipc: Node number set to 4
[  176.126337][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.136346][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.146317][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.156315][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.166316][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.176320][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.186318][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.196318][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  176.206318][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  177.439729][ T6262] Set syz1 is full, maxelem 65536 reached
[  177.958511][ T6273] netlink: 'syz.5.473': attribute type 1 has an invalid length.
[  178.016737][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.068152][ T6278] raw_sendmsg: syz.0.477 forgot to set AF_INET. Fix it!
[  178.904154][ T6273] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  178.997939][ T6286] device syzkaller0 entered promiscuous mode
[  179.045605][ T6279] device bond1 entered promiscuous mode
[  179.112698][ T6290] device macvlan2 entered promiscuous mode
[  179.156232][ T6290] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  180.265979][ T6319] netlink: 52 bytes leftover after parsing attributes in process `syz.2.488'.
[  180.324998][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.332592][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.371605][ T6325] netlink: 76 bytes leftover after parsing attributes in process `syz.2.488'.
[  180.536217][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.543439][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.550911][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.558054][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.583821][ T6325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.488'.
[  181.696443][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.703671][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.366214][ T6349] netlink: 'syz.4.497': attribute type 1 has an invalid length.
[  185.326227][ T6349] 8021q: adding VLAN 0 to HW filter on device bond2
[  185.427965][ T6357] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  185.608001][ T6362] device bond2 entered promiscuous mode
[  186.428161][ T4302] Bluetooth: hci3: command 0x0406 tx timeout
[  186.435466][ T4302] Bluetooth: hci1: command 0x0406 tx timeout
[  186.441669][ T4302] Bluetooth: hci2: command 0x0406 tx timeout
[  186.447849][ T4302] Bluetooth: hci0: command 0x0406 tx timeout
[  187.781785][ T6419] loop2: detected capacity change from 0 to 256
[  187.889942][ T6419] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.936443][ T6419] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  187.995729][ T6419] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  190.037968][ T6444] overlayfs: failed to clone lowerpath
[  191.061483][ T6452] tipc: Started in network mode
[  191.071575][ T6452] tipc: Node identity 4, cluster identity 4711
[  191.079236][ T6452] tipc: Node number set to 4
[  191.149584][ T6458] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by ""[6458]
[  191.870751][  T146] Bluetooth: hci4: unexpected event for opcode 0x0c7b
[  193.021704][ T6477] device syzkaller0 entered promiscuous mode
[  193.056070][ T6477] ==================================================================
[  193.064909][ T6477] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240
[  193.074010][ T6477] Read of size 2 at addr ffff888077bb6dfb by task syz.5.527/6477
[  193.081763][ T6477] 
[  193.084130][ T6477] CPU: 1 PID: 6477 Comm: syz.5.527 Not tainted syzkaller #0
[  193.091447][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  193.101535][ T6477] Call Trace:
[  193.104847][ T6477]  <TASK>
[  193.107811][ T6477]  dump_stack_lvl+0x188/0x250
[  193.112540][ T6477]  ? show_regs_print_info+0x20/0x20
[  193.117778][ T6477]  ? load_image+0x400/0x400
[  193.122420][ T6477]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  193.127920][ T6477]  ? ieee80211_tx+0x460/0x460
[  193.132636][ T6477]  print_address_description+0x60/0x2d0
[  193.138214][ T6477]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  193.144485][ T6477]  kasan_report+0xdf/0x130
[  193.148932][ T6477]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  193.155210][ T6477]  ieee80211_monitor_select_queue+0x23a/0x240
[  193.161311][ T6477]  ? ieee80211_recalc_smps_work+0x20/0x20
[  193.167067][ T6477]  netdev_core_pick_tx+0x118/0x2e0
[  193.172219][ T6477]  __dev_queue_xmit+0x756/0x2f80
[  193.177283][ T6477]  ? __might_fault+0xb7/0x110
[  193.182053][ T6477]  ? dev_queue_xmit+0x20/0x20
[  193.186756][ T6477]  ? virtio_net_hdr_to_skb+0xa6b/0x11f0
[  193.192353][ T6477]  ? packet_cached_dev_get+0x270/0x270
[  193.197836][ T6477]  ? skb_copy_datagram_from_iter+0x5e3/0x6a0
[  193.203857][ T6477]  packet_sendmsg+0x3dba/0x5060
[  193.208764][ T6477]  ? __might_sleep+0xf0/0xf0
[  193.213431][ T6477]  ? aa_sk_perm+0x7dc/0x910
[  193.217969][ T6477]  ? packet_getsockopt+0x9a0/0x9a0
[  193.223208][ T6477]  ? aa_sock_msg_perm+0x94/0x150
[  193.228175][ T6477]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  193.233798][ T6477]  ? security_socket_sendmsg+0x7c/0xa0
[  193.239293][ T6477]  ? packet_getsockopt+0x9a0/0x9a0
[  193.244434][ T6477]  ____sys_sendmsg+0x5b7/0x8f0
[  193.249267][ T6477]  ? __sys_sendmsg_sock+0x30/0x30
[  193.254373][ T6477]  ? import_iovec+0x6f/0xa0
[  193.258926][ T6477]  ___sys_sendmsg+0x236/0x2e0
[  193.263667][ T6477]  ? __sys_sendmsg+0x2a0/0x2a0
[  193.268507][ T6477]  __se_sys_sendmsg+0x1af/0x290
[  193.273397][ T6477]  ? __x64_sys_sendmsg+0x80/0x80
[  193.278380][ T6477]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  193.284418][ T6477]  ? lockdep_hardirqs_on+0x94/0x140
[  193.289668][ T6477]  do_syscall_64+0x4c/0xa0
[  193.294130][ T6477]  ? clear_bhb_loop+0x30/0x80
[  193.298845][ T6477]  ? clear_bhb_loop+0x30/0x80
[  193.303567][ T6477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.309498][ T6477] RIP: 0033:0x7f3faf76ae59
[  193.313950][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.333673][ T6477] RSP: 002b:00007f3fad9c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.342127][ T6477] RAX: ffffffffffffffda RBX: 00007f3faf9e3fa0 RCX: 00007f3faf76ae59
[  193.350137][ T6477] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  193.358149][ T6477] RBP: 00007f3faf800d6f R08: 0000000000000000 R09: 0000000000000000
[  193.366155][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.374153][ T6477] R13: 00007f3faf9e4038 R14: 00007f3faf9e3fa0 R15: 00007ffd3c24bd38
[  193.382180][ T6477]  </TASK>
[  193.385233][ T6477] 
[  193.387755][ T6477] Allocated by task 4188:
[  193.392100][ T6477]  __kasan_kmalloc+0xb5/0xf0
[  193.396723][ T6477]  kmemdup+0x22/0x50
[  193.400641][ T6477]  ipv4_sysctl_init_net+0x39/0x310
[  193.405780][ T6477]  ops_init+0x357/0x600
[  193.409968][ T6477]  setup_net+0x39e/0xa10
[  193.414237][ T6477]  copy_net_ns+0x348/0x5b0
[  193.418689][ T6477]  create_new_namespaces+0x3d3/0x6f0
[  193.424006][ T6477]  unshare_nsproxy_namespaces+0x116/0x160
[  193.429758][ T6477]  ksys_unshare+0x4f1/0x8c0
[  193.434290][ T6477]  __x64_sys_unshare+0x34/0x40
[  193.439165][ T6477]  do_syscall_64+0x4c/0xa0
[  193.443613][ T6477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.449625][ T6477] 
[  193.451975][ T6477] The buggy address belongs to the object at ffff888077bb4000
[  193.451975][ T6477]  which belongs to the cache kmalloc-8k of size 8192
[  193.466315][ T6477] The buggy address is located 3579 bytes to the right of
[  193.466315][ T6477]  8192-byte region [ffff888077bb4000, ffff888077bb6000)
[  193.480323][ T6477] The buggy address belongs to the page:
[  193.485985][ T6477] page:ffffea0001deec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77bb0
[  193.496181][ T6477] head:ffffea0001deec00 order:3 compound_mapcount:0 compound_pincount:0
[  193.504543][ T6477] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  193.512567][ T6477] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42280
[  193.521272][ T6477] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  193.529875][ T6477] page dumped because: kasan: bad access detected
[  193.536316][ T6477] page_owner tracks the page as allocated
[  193.542042][ T6477] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4179, ts 59127328425, free_ts 59125793605
[  193.560379][ T6477]  get_page_from_freelist+0x1bbd/0x1ca0
[  193.565960][ T6477]  __alloc_pages+0x1ee/0x480
[  193.570614][ T6477]  new_slab+0xc0/0x4b0
[  193.574700][ T6477]  ___slab_alloc+0x80a/0xdd0
[  193.579392][ T6477]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  193.584791][ T6477]  tomoyo_init_log+0x1008/0x1e90
[  193.589749][ T6477]  tomoyo_supervisor+0x38d/0x11f0
[  193.594792][ T6477]  tomoyo_env_perm+0x14e/0x1f0
[  193.599577][ T6477]  tomoyo_find_next_domain+0x1591/0x1a60
[  193.605232][ T6477]  tomoyo_bprm_check_security+0xdd/0x120
[  193.610893][ T6477]  security_bprm_check+0x5e/0x90
[  193.615862][ T6477]  bprm_execve+0xa53/0x1840
[  193.620392][ T6477]  do_execveat_common+0x51e/0x6d0
[  193.625432][ T6477]  __x64_sys_execve+0x8e/0xa0
[  193.630132][ T6477]  do_syscall_64+0x4c/0xa0
[  193.634568][ T6477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.640486][ T6477] page last free stack trace:
[  193.645177][ T6477]  free_unref_page_prepare+0x637/0x6c0
[  193.650674][ T6477]  free_unref_page+0x8f/0x2a0
[  193.655398][ T6477]  qlist_free_all+0x35/0x90
[  193.659921][ T6477]  kasan_quarantine_reduce+0x150/0x160
[  193.665395][ T6477]  __kasan_slab_alloc+0x2f/0xd0
[  193.670285][ T6477]  slab_post_alloc_hook+0x4c/0x380
[  193.675417][ T6477]  __kmalloc+0x127/0x330
[  193.679693][ T6477]  tomoyo_supervisor+0xc90/0x11f0
[  193.684735][ T6477]  tomoyo_env_perm+0x14e/0x1f0
[  193.689522][ T6477]  tomoyo_find_next_domain+0x1591/0x1a60
[  193.695175][ T6477]  tomoyo_bprm_check_security+0xdd/0x120
[  193.700826][ T6477]  security_bprm_check+0x5e/0x90
[  193.705794][ T6477]  bprm_execve+0xa53/0x1840
[  193.710313][ T6477]  do_execveat_common+0x51e/0x6d0
[  193.715357][ T6477]  __x64_sys_execve+0x8e/0xa0
[  193.720060][ T6477]  do_syscall_64+0x4c/0xa0
[  193.724512][ T6477] 
[  193.726856][ T6477] Memory state around the buggy address:
[  193.732517][ T6477]  ffff888077bb6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.740603][ T6477]  ffff888077bb6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.748695][ T6477] >ffff888077bb6d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.756777][ T6477]                                                                 ^
[  193.764777][ T6477]  ffff888077bb6e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.772861][ T6477]  ffff888077bb6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.781048][ T6477] ==================================================================
[  193.789306][ T6477] Disabling lock debugging due to kernel taint
[  193.795589][ T6477] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  193.802923][ T6477] CPU: 1 PID: 6477 Comm: syz.5.527 Tainted: G    B             syzkaller #0
[  193.811623][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  193.821797][ T6477] Call Trace:
[  193.825089][ T6477]  <TASK>
[  193.828029][ T6477]  dump_stack_lvl+0x188/0x250
[  193.832725][ T6477]  ? show_regs_print_info+0x20/0x20
[  193.838025][ T6477]  ? load_image+0x400/0x400
[  193.842544][ T6477]  panic+0x2e5/0x810
[  193.846462][ T6477]  ? bpf_jit_dump+0xd0/0xd0
[  193.850982][ T6477]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  193.856911][ T6477]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  193.862825][ T6477]  ? _raw_spin_unlock+0x40/0x40
[  193.867696][ T6477]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  193.873955][ T6477]  check_panic_on_warn+0x80/0xa0
[  193.878912][ T6477]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  193.885259][ T6477]  end_report+0x6d/0xf0
[  193.889471][ T6477]  kasan_report+0x102/0x130
[  193.893993][ T6477]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  193.900284][ T6477]  ieee80211_monitor_select_queue+0x23a/0x240
[  193.906382][ T6477]  ? ieee80211_recalc_smps_work+0x20/0x20
[  193.912219][ T6477]  netdev_core_pick_tx+0x118/0x2e0
[  193.917352][ T6477]  __dev_queue_xmit+0x756/0x2f80
[  193.922741][ T6477]  ? __might_fault+0xb7/0x110
[  193.927440][ T6477]  ? dev_queue_xmit+0x20/0x20
[  193.932127][ T6477]  ? virtio_net_hdr_to_skb+0xa6b/0x11f0
[  193.937693][ T6477]  ? packet_cached_dev_get+0x270/0x270
[  193.943176][ T6477]  ? skb_copy_datagram_from_iter+0x5e3/0x6a0
[  193.949180][ T6477]  packet_sendmsg+0x3dba/0x5060
[  193.954192][ T6477]  ? __might_sleep+0xf0/0xf0
[  193.958836][ T6477]  ? aa_sk_perm+0x7dc/0x910
[  193.963390][ T6477]  ? packet_getsockopt+0x9a0/0x9a0
[  193.968547][ T6477]  ? aa_sock_msg_perm+0x94/0x150
[  193.973557][ T6477]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  193.978866][ T6477]  ? security_socket_sendmsg+0x7c/0xa0
[  193.984356][ T6477]  ? packet_getsockopt+0x9a0/0x9a0
[  193.989493][ T6477]  ____sys_sendmsg+0x5b7/0x8f0
[  193.994280][ T6477]  ? __sys_sendmsg_sock+0x30/0x30
[  193.999332][ T6477]  ? import_iovec+0x6f/0xa0
[  194.003869][ T6477]  ___sys_sendmsg+0x236/0x2e0
[  194.008581][ T6477]  ? __sys_sendmsg+0x2a0/0x2a0
[  194.013395][ T6477]  __se_sys_sendmsg+0x1af/0x290
[  194.018413][ T6477]  ? __x64_sys_sendmsg+0x80/0x80
[  194.023381][ T6477]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  194.029404][ T6477]  ? lockdep_hardirqs_on+0x94/0x140
[  194.034808][ T6477]  do_syscall_64+0x4c/0xa0
[  194.039400][ T6477]  ? clear_bhb_loop+0x30/0x80
[  194.044116][ T6477]  ? clear_bhb_loop+0x30/0x80
[  194.048824][ T6477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.054739][ T6477] RIP: 0033:0x7f3faf76ae59
[  194.059180][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.078830][ T6477] RSP: 002b:00007f3fad9c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.087612][ T6477] RAX: ffffffffffffffda RBX: 00007f3faf9e3fa0 RCX: 00007f3faf76ae59
[  194.095790][ T6477] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  194.103788][ T6477] RBP: 00007f3faf800d6f R08: 0000000000000000 R09: 0000000000000000
[  194.111799][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.119809][ T6477] R13: 00007f3faf9e4038 R14: 00007f3faf9e3fa0 R15: 00007ffd3c24bd38
[  194.127822][ T6477]  </TASK>
[  194.131150][ T6477] Kernel Offset: disabled
[  194.135502][ T6477] Rebooting in 86400 seconds..