last executing test programs:

1m12.894134596s ago: executing program 1 (id=211):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000100)=""/68, &(0x7f0000000040)=0x44)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9)
syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x81, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xc3, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xd422, 0x7, 0x7fff, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xff, 0x18}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf8, 0x4, 0xf2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x64, 0xa, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0xb7, 0x0}, {0x0, 0x0}]})
connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1009, 0x5, 0x2, 0x1, 0x0, 0x0, 0x3ff})
shmctl$SHM_UNLOCK(r2, 0xc)
shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0)
bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10)

1m10.941411235s ago: executing program 1 (id=228):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @broadcast}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r1, 0x0)
listen(r0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)

1m10.722359209s ago: executing program 1 (id=231):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1ed, &(0x7f0000000540)="$eJzsmb+LE0EUx78zu9mchxzYWNhYeOCJ3mZ3o3LNFSdYCsIpahnMGqKbRJIVkoBgsLHRzkKwtbG0sLCy8C+w1UIFwcKUdsLIzM7uDskmxF+5Iu8DmXxn5mXmvQf7LTYgCGJl+fL5x6fHF3aunAFwGJso6/VvVh7DjfiPz+6dfrp78fmrDy/etTfuv5k8jwEQYvH7HQBv9yzEYHayIgQ28v1NIwWtcRUcp7S+BgY3kT+FIpmEYLihY24bunNIiyh0b3ai+q1mFHpy8OUQyKFq5ieTGo8Y6gDWVHZCMGO/NxjeqUVR2J0UJZHeM7X1u4LP6Z/Kb49jF2n3hJDx1x89HMm57g088Kx/Pjh8ratg2Nd6B2W4rpu3xKj/mJ2fby1S/38RTxYNfqnEke1lJZY+I0vtxuqJ0j85h02uyAc6Wzk6Tj3QjPl64LX/uVDGBWBq6/16FF36i5OdgkZlIvcn6ewnDX+yYWf+UYlbdyu9wXC72ao1wkbYDoLqee+s550LKsqIknGO/60pf1o3zi/NiHWYg34tjrt+H4i7fjYPkjEvAPuvO9/Vb7jyP46tE2qqPFWVXS6+g+kPV99SbVnFkQ9m1kQQBEEQBEEQBEEQBEEQBFHMcTAk/4QJpl+IFhFcVm8ofwUAAP//Mr5mlg==")
setrlimit(0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r0, 0xaa1e, 0x3dc7, 0x3)

1m10.094246998s ago: executing program 1 (id=235):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000002840)=ANY=[], 0x0, 0x5fc, &(0x7f0000000740)="$eJzs3U9rHOcdB/DvrGRF64KzSewkLS0V9qElprZWmzg6tNgtpegQSqCXXHIQthwLr5UgKUUJpcj9e+07SHqQzz31UHowpOe+BUEpORR6181lZmdXG0uWV7HjXaWfDzz7PLPPzDO/+Xnm0c4sZgP831p6J6fup8jSxbe2yuXdnU53d6dzp99O8lySRjLdq1KsJcVnybX0Sr5ZvlkPVzxqP+9+8ubi5+17d3tL03Wp1m8ctd1otuuSuSRTdX1M048a73pZN58kvGJwhGXCLvQTB+P24IDt42z+hNctMAmK3t/NA1rJ6SSz9eeA1LND49lG9/Qda5YDAACAE+r5vexlK2fGHQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJPXv/xd1afTbcyn6v/8/U7+Xun2i3R93AAAAAAAAAADwFHy32N7LVs70lx8U1Xf+56uFs9XrN/JhNrKS9VzKVpazmc2sp52kNTTQzNby5uZ6e4QtFw7dcuHZHC8AAAAAAAAAfE39Jkv73/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAkKJKpXlWVs/12K43pJLNJZsr1tpO/99sn2f1xBwAAAADPwPN72ctWzvSXHxTVPf/L1X3/bD7MWjazms10s5Ib1bOA3l1/Y3en093d6dwpy8Fxf/zfY4VRjZjes4fD9zxfrVEMtljKz/KLXMxc3s56VvPLLGczK5nLT6vWcoq06qcXrX6ch8d77QtLbz8qxqm6frWKpJmbWa1iu5TreT/d3EijOoZqnaP3eLfMTjGVq5URc3Sjrssj+lNdT4ZWlZFTg4zM17kqs/HC0Zk45nny8J7aaQyeQZ0dJedXrx4r56frusz1HyY65wtDZ9/LR2ciOf+v7/z1Vnft9q2bGxcn55C+pIcz0RnKxCuPzcRsvh6ZKKZ7s2hrMFM1cm7Q+/jZ8ny17Zms5ud5PzeykjeymDeykNfzeuazmCtDeT03wrXWON61duH7daOZ5I91PRnKvL4wlNfhma5V9Q2/s5+lF48xI/3o3yOFMv2tulHu47d1PRkezkR7KBMvHZ2JPz8oXze6a7fXby1/MOL+vlfX5WX7+4mam8vz5cXyH6ta+uLZUfa9dGhfu+o7O+hrHOg7N+h73JU6U3+GOzjSQtX3yqF9narv1aG+wz7lADDxTr92eqb5n+Y/m582f9e81Xxr9ifPLT737Zmc+sf036b+0rjX+GHxWj7Nr/fv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC9v46OPby93uyvrGhpjakw5DyewMe6ZCfiqXd6888HljY8+/sHqneX3Vt5bWet02lcWFq8sLly5fHO1uzLfex13mMBXYP+P/rgjAQAAAAAAAAAAAEb1LP47wbiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjZlt7Jqfsp0p6/NJ8iyU6nu7vT6ZZ9/bpnOkkjSfGrpPgsuZZeSWtouOJR+3n3kzcXP2/fu7s/1nR//cZR241muy6ZSzJV109rvOtPPF4xOMIyYRf6iYNx+18AAAD//+/gCsM=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x105098, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1m9.390155909s ago: executing program 1 (id=238):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$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")
symlink(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setxattr$security_capability(&(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x2)

1m8.957936555s ago: executing program 1 (id=240):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @local, 0x400}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808caffffffffe5fff9620915b6f78670bdaf9acf6b7931c9b4400100"}}}}}}}, 0x0)

1m8.525184643s ago: executing program 32 (id=240):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @local, 0x400}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808caffffffffe5fff9620915b6f78670bdaf9acf6b7931c9b4400100"}}}}}}}, 0x0)

14.068193426s ago: executing program 0 (id=672):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0xf11, &(0x7f0000001100)="$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")
rmdir(&(0x7f0000000000)='./file0\x00')

13.08694671s ago: executing program 0 (id=676):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010)

11.926895098s ago: executing program 2 (id=679):
capset(0x0, &(0x7f0000000040)={0x200000, 0x200000})
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)

11.874735709s ago: executing program 0 (id=680):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

11.607434823s ago: executing program 5 (id=681):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x7, 0x18ae}, &(0x7f0000000040)=0xc)

11.539281014s ago: executing program 4 (id=682):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x2, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000040)=0x2eb4, 0x2)

11.480659155s ago: executing program 0 (id=683):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x44088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2002, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)

11.275737628s ago: executing program 5 (id=684):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0)

11.090894021s ago: executing program 2 (id=685):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}, {0x8, 0x4021, 0x0, 0x0}], 0x2})

10.421496781s ago: executing program 0 (id=686):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_GET_IO_FLUSHER(0x4)
syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

10.076532356s ago: executing program 5 (id=687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

10.031041867s ago: executing program 4 (id=688):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="6a08010101"], 0x5)

9.87105173s ago: executing program 5 (id=690):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
get_robust_list(0x0, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

9.601259344s ago: executing program 4 (id=691):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)

7.031550193s ago: executing program 2 (id=693):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x4bb3, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)=@caif=@dbg={0x25, 0x0, 0x4e}, 0x80)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
readv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1)

6.998341063s ago: executing program 4 (id=694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$video4linux(0x0, 0x2008, 0x0)
ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"})
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}})

6.946712014s ago: executing program 0 (id=695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x2}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
socket(0x10, 0x80002, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4, 0x0, 0x2}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)

6.842872916s ago: executing program 5 (id=696):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200403, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@dir_umask={'dir_umask', 0x3d, 0x8}}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2}}, {@file_umask={'file_umask', 0x3d, 0x7}}, {@codepage={'codepage', 0x3d, 'default'}}, {@type={'type', 0x3d, "cc49c62b"}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x4}}]}, 0x1, 0x301, &(0x7f0000000a80)="$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")

5.858938011s ago: executing program 3 (id=698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x14, 0x3, 0x1, 0xa05, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x6881}, 0x4040)
recvfrom(r0, 0x0, 0x0, 0x40000120, 0x0, 0x0)

5.751498013s ago: executing program 2 (id=699):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x1d, 0x1, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x20004000, 0x0, 0x0)
unshare(0x40020000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x42)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={r8, 0x40}, 0x8)

4.911525806s ago: executing program 4 (id=700):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x8, 0x1000})
socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x7)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)

4.688034989s ago: executing program 5 (id=701):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.65382805s ago: executing program 2 (id=702):
io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)

2.465122633s ago: executing program 3 (id=703):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00')
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)

1.270985611s ago: executing program 3 (id=704):
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0404"], 0xd)

1.130203373s ago: executing program 2 (id=705):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x4000000000003, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xaa1})

1.039568775s ago: executing program 3 (id=706):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1548, &(0x7f0000000f00)="$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")
mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24)
rename(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./bus\x00')

422.886774ms ago: executing program 3 (id=707):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfffffff9, 0x0, 0x200, 0x8, 0x1a, "fc12105588e633bbb1dfe72dace17a02d211ee"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd)

84.872069ms ago: executing program 4 (id=708):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x204001, &(0x7f0000000580)=ANY=[@ANYBLOB='mode=fragment:segment,background_gc=sync,alloc_mode=default,background_gc=sync,gc_merge,background_gc=off,age_extent_cache,noacl,disable_roll_forward,fsync_mode=posix,fsync_mode=posix,resuid=', @ANYRESHEX=0x0, @ANYBLOB="00000000000026316dff84978dac9a6ce141807299e76ab52abbc8490c7b87d6da5376e760365bcaaf3364149e0584970f30c8b46356cf9e06ba66540a49eb3f79d58c1de344f8f9be4acf2eed0beb0b237b85dd9a882a3708b57fb18882235e4d32b8561002da5a96ba423298a59b219352c4358cc5752cdf64c55bd210d0274d5c197eae7655aeed67efc926850716e47d9ad066d10335985849f780cb8bfaf44bcb313d9313415e80d85c7f12fb2a3edbea7ac00eb81de59e69790273007d5b6e062d0af7237125a6"], 0x1, 0x5531, &(0x7f00000057c0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=709):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000101020d0000052406000105240040000d240f0100000000000000000006241a03000008241cf40400020009058103000200000009040100"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts.
[   79.027628][ T4241] cgroup: Unknown subsys name 'net'
[   79.189105][ T4241] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.723040][ T4241] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   82.309667][ T4256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.327231][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.335195][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.343811][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.351716][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.361434][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.366219][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.369559][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.377277][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.384337][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.391883][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.398678][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.405233][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.411899][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.419693][ T4269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.433980][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.434698][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.442665][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.449078][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.456236][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.464308][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.470480][ T4269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.477516][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.486158][ T4269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.493036][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.500621][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.508337][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   82.515128][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.558208][ T4254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.567561][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.058911][ T4252] chnl_net:caif_netlink_parms(): no params data found
[   83.109060][ T4259] chnl_net:caif_netlink_parms(): no params data found
[   83.236634][ T4253] chnl_net:caif_netlink_parms(): no params data found
[   83.261140][ T4251] chnl_net:caif_netlink_parms(): no params data found
[   83.305545][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.313986][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.322839][ T4252] device bridge_slave_0 entered promiscuous mode
[   83.336678][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.344081][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.353114][ T4252] device bridge_slave_1 entered promiscuous mode
[   83.361066][ T4263] chnl_net:caif_netlink_parms(): no params data found
[   83.387147][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.395390][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.404695][ T4259] device bridge_slave_0 entered promiscuous mode
[   83.414262][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.423818][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.433521][ T4259] device bridge_slave_1 entered promiscuous mode
[   83.511872][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.549566][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.566138][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.606036][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.668324][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.675802][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.684472][ T4253] device bridge_slave_0 entered promiscuous mode
[   83.695079][ T4252] team0: Port device team_slave_0 added
[   83.701624][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.709445][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.718013][ T4253] device bridge_slave_1 entered promiscuous mode
[   83.725499][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.736631][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.744967][ T4251] device bridge_slave_0 entered promiscuous mode
[   83.755818][ T4259] team0: Port device team_slave_0 added
[   83.771291][ T4252] team0: Port device team_slave_1 added
[   83.786227][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.793915][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.802142][ T4251] device bridge_slave_1 entered promiscuous mode
[   83.811259][ T4259] team0: Port device team_slave_1 added
[   83.853411][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.861070][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.869986][ T4263] device bridge_slave_0 entered promiscuous mode
[   83.900882][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.921799][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.929568][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.938383][ T4263] device bridge_slave_1 entered promiscuous mode
[   83.957684][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.966001][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.994732][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.010883][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.023438][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.042999][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.050006][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.077047][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.096282][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.103468][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.130336][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.153345][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.169970][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.178155][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.206180][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.243150][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.256727][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.280033][ T4253] team0: Port device team_slave_0 added
[   84.333851][ T4253] team0: Port device team_slave_1 added
[   84.352913][ T4251] team0: Port device team_slave_0 added
[   84.362257][ T4263] team0: Port device team_slave_0 added
[   84.389169][ T4259] device hsr_slave_0 entered promiscuous mode
[   84.399451][ T4259] device hsr_slave_1 entered promiscuous mode
[   84.408554][ T4251] team0: Port device team_slave_1 added
[   84.417211][ T4263] team0: Port device team_slave_1 added
[   84.425784][ T4252] device hsr_slave_0 entered promiscuous mode
[   84.433097][ T4252] device hsr_slave_1 entered promiscuous mode
[   84.440743][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.449004][ T4252] Cannot create hsr debugfs directory
[   84.464818][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.471893][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.498504][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.537592][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.545585][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.573401][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.600296][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.607534][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.613351][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[   84.634472][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.640743][ T4268] Bluetooth: hci4: command 0x0409 tx timeout
[   84.651079][ T4267] Bluetooth: hci1: command 0x0409 tx timeout
[   84.675349][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.683044][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.692330][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[   84.711128][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.716959][ T4268] Bluetooth: hci0: command 0x0409 tx timeout
[   84.733931][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.733948][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.767997][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.809338][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.817162][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.844514][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.910350][ T4253] device hsr_slave_0 entered promiscuous mode
[   84.918205][ T4253] device hsr_slave_1 entered promiscuous mode
[   84.926151][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.935492][ T4253] Cannot create hsr debugfs directory
[   84.987386][ T4251] device hsr_slave_0 entered promiscuous mode
[   84.995221][ T4251] device hsr_slave_1 entered promiscuous mode
[   85.002619][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.010564][ T4251] Cannot create hsr debugfs directory
[   85.079450][ T4263] device hsr_slave_0 entered promiscuous mode
[   85.088618][ T4263] device hsr_slave_1 entered promiscuous mode
[   85.099685][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.108816][ T4263] Cannot create hsr debugfs directory
[   85.379484][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.390988][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.430348][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.450054][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.494673][ T4259] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.515540][ T4259] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.536166][ T4259] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.552873][ T4259] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.607117][ T4251] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.619164][ T4251] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.640728][ T4251] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.678795][ T4251] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.723087][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.758438][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   85.768098][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.784099][ T4252] 8021q: adding VLAN 0 to HW filter on device team0
[   85.826845][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.864761][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.875988][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.886677][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.894221][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.905006][ T4253] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.931728][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   85.941620][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.951395][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.961505][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.968794][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.977314][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   85.986463][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.996482][ T4253] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.011846][ T4253] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.025779][ T4263] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.039434][ T4263] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.052345][ T4263] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.064543][ T4253] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.077218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.088818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   86.099044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   86.109732][ T4263] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.136570][ T4259] 8021q: adding VLAN 0 to HW filter on device team0
[   86.151459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   86.160921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   86.170677][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   86.180245][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.190537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.200721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.216035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   86.225544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.234948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.245533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.254787][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.262299][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.282709][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   86.316441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.353111][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.368940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.379515][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.386739][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.403949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   86.418025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   86.446054][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.478055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.489384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   86.514871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   86.563052][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.572811][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.581027][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   86.597789][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   86.611844][ T4251] 8021q: adding VLAN 0 to HW filter on device team0
[   86.649442][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   86.659200][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.678409][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.690862][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   86.699036][ T4268] Bluetooth: hci3: command 0x041b tx timeout
[   86.705632][ T4270] Bluetooth: hci4: command 0x041b tx timeout
[   86.711900][ T4270] Bluetooth: hci1: command 0x041b tx timeout
[   86.738646][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.757940][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   86.770784][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.779248][ T4270] Bluetooth: hci0: command 0x041b tx timeout
[   86.780260][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.786352][ T4268] Bluetooth: hci2: command 0x041b tx timeout
[   86.802700][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.811703][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.819714][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.828368][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.838162][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.847131][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.854324][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.862537][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   86.871715][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.917446][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.931905][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   86.947599][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.960724][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   86.980565][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   86.989102][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   86.998425][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.032387][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.041054][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.063091][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.083763][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.119315][ T4263] 8021q: adding VLAN 0 to HW filter on device team0
[   87.131092][ T4253] 8021q: adding VLAN 0 to HW filter on device team0
[   87.144947][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.155274][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.164966][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.176740][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.195590][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.248055][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.256533][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.276431][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.304616][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.322620][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.329766][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.345971][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.358422][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.370902][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.378279][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.397680][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.415842][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.428095][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.435391][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.450322][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.460102][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.476614][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.484277][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.499567][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.509492][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.525926][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.542476][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.576894][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.593723][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.613336][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.630411][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.639561][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.657868][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.669446][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.703738][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.714975][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.729603][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.773210][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.808025][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.821335][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.844512][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.868170][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.889404][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.907757][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.917835][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.927337][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.936763][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.945370][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.984478][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.013370][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.049559][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.074129][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.094104][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.109127][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.131695][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   88.150875][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.162668][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.196554][ T4252] device veth0_vlan entered promiscuous mode
[   88.207201][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.216583][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   88.225930][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.235505][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.244442][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.252984][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.261191][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.315768][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.336222][ T4252] device veth1_vlan entered promiscuous mode
[   88.403182][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   88.417444][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   88.433384][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   88.457703][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.523661][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.544610][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.560240][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   88.571022][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.587509][ T4259] device veth0_vlan entered promiscuous mode
[   88.597226][ T4252] device veth0_macvtap entered promiscuous mode
[   88.610683][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.621787][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   88.636666][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.666681][ T4252] device veth1_macvtap entered promiscuous mode
[   88.701566][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.719471][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.728619][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.737519][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   88.746819][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.760368][ T4251] device veth0_vlan entered promiscuous mode
[   88.771219][ T4259] device veth1_vlan entered promiscuous mode
[   88.777481][ T4268] Bluetooth: hci1: command 0x040f tx timeout
[   88.784512][ T4268] Bluetooth: hci3: command 0x040f tx timeout
[   88.791027][ T4268] Bluetooth: hci4: command 0x040f tx timeout
[   88.814465][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   88.823722][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.833708][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.852533][ T4268] Bluetooth: hci2: command 0x040f tx timeout
[   88.859210][ T4268] Bluetooth: hci0: command 0x040f tx timeout
[   88.860521][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.891410][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   88.901929][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.914340][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.925306][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.937767][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.977595][ T4251] device veth1_vlan entered promiscuous mode
[   88.995751][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   89.006077][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   89.019534][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   89.034940][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.045448][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.056414][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.066453][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.100494][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.111439][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.121399][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.130507][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.144946][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   89.154808][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.163502][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.175168][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.183171][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.191024][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.200642][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   89.209387][ T4253] device veth0_vlan entered promiscuous mode
[   89.230528][ T4253] device veth1_vlan entered promiscuous mode
[   89.246646][ T4259] device veth0_macvtap entered promiscuous mode
[   89.271409][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   89.280835][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   89.312224][ T4251] device veth0_macvtap entered promiscuous mode
[   89.322808][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.336872][ T4259] device veth1_macvtap entered promiscuous mode
[   89.353686][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   89.370560][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   89.381592][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   89.391642][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   89.401481][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   89.459036][ T4251] device veth1_macvtap entered promiscuous mode
[   89.491357][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.515921][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.534253][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.587167][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   89.598993][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   89.615789][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   89.625834][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   89.635359][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   89.647354][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.659434][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.671674][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.685547][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.697756][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.721162][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.736801][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.749337][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.760268][ T4253] device veth0_macvtap entered promiscuous mode
[   89.768435][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   89.782729][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   89.798053][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   89.808445][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.826428][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.850908][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.863329][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.875798][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.890810][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.909676][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.929486][ T4259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.941007][ T4259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.950876][ T4259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.960153][ T4259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.975585][ T4253] device veth1_macvtap entered promiscuous mode
[   89.987601][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   89.996534][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.008491][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.023526][ T4251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.033394][ T4251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.040323][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.048226][ T4251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.052419][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.061936][ T4251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.099206][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.186276][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.206560][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.219810][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.231234][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.241624][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.253358][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.278587][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.290246][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.303674][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.315557][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.328039][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.338730][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.350124][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.362730][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.384124][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.394115][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.400639][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.403588][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.419250][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.430510][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.440015][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.473557][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.484529][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.494130][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.503845][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.523723][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.532982][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.608744][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.654011][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.666152][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.679916][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.690621][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.699560][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.710080][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.736707][ T4263] device veth0_vlan entered promiscuous mode
[   90.755678][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.765262][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.768673][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.799609][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.814692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.852223][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[   90.853565][ T4268] Bluetooth: hci4: command 0x0419 tx timeout
[   90.858317][ T4270] Bluetooth: hci1: command 0x0419 tx timeout
[   90.874465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.908615][ T4339] sctp: [Deprecated]: syz.0.1 (pid 4339) Use of int in max_burst socket option.
[   90.908615][ T4339] Use struct sctp_assoc_value instead
[   90.924473][ T4263] device veth1_vlan entered promiscuous mode
[   90.932417][ T4268] Bluetooth: hci0: command 0x0419 tx timeout
[   90.932489][ T4270] Bluetooth: hci2: command 0x0419 tx timeout
[   90.998904][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.999335][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.016397][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.027690][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.070206][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   91.092692][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   91.106534][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.123831][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.171882][ T4263] device veth0_macvtap entered promiscuous mode
[   91.212330][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.221678][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.262867][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.287019][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.289364][ T4263] device veth1_macvtap entered promiscuous mode
[   91.302241][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.376892][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.413787][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.456359][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.491377][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.532423][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.552227][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.574627][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.595778][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.626391][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.652231][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.674357][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.705270][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.730770][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.756637][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.778683][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.809600][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.847267][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.887403][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.918677][ T4345] loop0: detected capacity change from 0 to 32768
[   91.943627][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.972623][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.997040][ T4345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6 (4345)
[   92.002075][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.083290][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.104292][ T4345] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.104379][ T4342] loop1: detected capacity change from 0 to 32768
[   92.130380][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.142403][   T14] cfg80211: failed to load regulatory.db
[   92.149072][ T4345] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   92.163082][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.195596][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.204435][ T4345] BTRFS info (device loop0): force clearing of disk cache
[   92.218279][ T4342] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.2 (4342)
[   92.241241][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.269792][ T4345] BTRFS info (device loop0): enabling auto defrag
[   92.283574][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.293183][ T4345] BTRFS info (device loop0): max_inline at 0
[   92.293213][ T4345] BTRFS info (device loop0): enabling disk space caching
[   92.293230][ T4345] BTRFS info (device loop0): disk space caching is enabled
[   92.382133][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.714242][ T4362] netlink: 'syz.1.2': attribute type 83 has an invalid length.
[   92.727821][ T4362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   93.105691][ T4347] loop3: detected capacity change from 0 to 40427
[   93.183422][ T4345] BTRFS info (device loop0): enabling ssd optimizations
[   93.213575][ T4347] =======================================================
[   93.213575][ T4347] WARNING: The mand mount option has been deprecated and
[   93.213575][ T4347]          and is ignored by this kernel. Remove the mand
[   93.213575][ T4347]          option from the mount to silence this warning.
[   93.213575][ T4347] =======================================================
[   93.258278][ T4345] BTRFS info (device loop0): rebuilding free space tree
[   93.303460][ T4347] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   93.382190][ T4347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   93.435798][ T4345] BTRFS info (device loop0): disabling free space tree
[   93.449797][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.501631][ T4345] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   93.517456][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.544244][ T4347] F2FS-fs (loop3): invalid crc value
[   93.551607][ T4350] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4350)
[   93.564431][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.572976][ T4345] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   93.615021][ T4347] F2FS-fs (loop3): Found nat_bits in checkpoint
[   93.652865][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   93.661241][    T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!!
[   93.670172][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.679151][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.687642][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.696976][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.706144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.714862][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.723296][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.732272][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   93.836030][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.880381][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.380305][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.764769][ T4349] loop2: detected capacity change from 0 to 32768
[   96.689511][ T4252] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.992123][ T4304] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.822077][ T4304] usb 4-1: Using ep0 maxpacket: 32
[   97.868552][ T4304] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=51.44
[   97.906027][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.915662][ T4304] usb 4-1: Product: syz
[   97.920945][ T4304] usb 4-1: Manufacturer: syz
[   97.926372][ T4304] usb 4-1: SerialNumber: syz
[   97.938038][ T4304] usb 4-1: config 0 descriptor??
[   97.952249][ T4304] legousbtower 4-1:0.0: interrupt endpoints not found
[   98.171688][ T4403] loop3: detected capacity change from 0 to 164
[   98.284229][ T4382] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   98.298964][ T4403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.308146][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.895291][ T4403] loop3: detected capacity change from 0 to 128
[   99.002999][ T4403] qnx6: superblock #1 checksum error
[   99.333392][ T4430] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   99.435096][ T4435] loop0: detected capacity change from 0 to 1024
[   99.505702][ T4435] hfsplus: unable to parse mount options
[  100.628378][ T4447] xt_l2tp: v2 doesn't support IP mode
[  101.888926][    T7] usb 4-1: USB disconnect, device number 2
[  102.759678][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'.
[  102.933006][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'.
[  103.755509][ T4470] loop1: detected capacity change from 0 to 8
[  105.452596][ T4481] overlayfs: unrecognized mount option "\']*=Mp�S‹°¢°©æ[{WhL‡9#—$ž�\1£ÎöØ„ø?›~b¹yB@F'É
" or missing value
[  105.960297][ T4492] loop4: detected capacity change from 0 to 4096
[  106.072166][ T4492] ntfs: (device loop4): parse_options(): Unrecognized mount option 0xffffffffffffffff0x0000000000000000.
[  106.158067][ T4495] loop3: detected capacity change from 0 to 736
[  106.349096][ T4492] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier option argument: 0x000ì>000s»‹˜ü�lžWÞ0x0000000000000000
[  106.790700][ T4492] device lo entered promiscuous mode
[  106.800225][ T4493] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET)
[  106.856610][ T4500] device batadv_slave_1 entered promiscuous mode
[  106.901225][ T4490] device batadv_slave_1 left promiscuous mode
[  106.922437][ T4490] device lo left promiscuous mode
[  107.670692][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[  107.679687][ T4508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.687589][ T4508] IPv6: NLM_F_CREATE should be set when creating new route
[  109.318239][ T4529] use of bytesused == 0 is deprecated and will be removed in the future,
[  109.373727][ T4529] use the actual size instead.
[  109.707923][ T4502] loop0: detected capacity change from 0 to 40427
[  109.745305][ T4502] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  109.769398][ T4502] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2
[  109.800459][ T4502] F2FS-fs (loop0): invalid crc value
[  109.838159][ T4502] F2FS-fs (loop0): Found nat_bits in checkpoint
[  110.965583][ T4547] device wlan0 entered promiscuous mode
[  110.973293][ T4547] device macsec1 entered promiscuous mode
[  110.985367][ T4545] loop0: detected capacity change from 0 to 2048
[  111.026303][ T4528] loop3: detected capacity change from 0 to 32768
[  111.032207][ T4523] loop1: detected capacity change from 0 to 40427
[  111.044062][ T4528] XFS: ikeep mount option is deprecated.
[  111.067731][ T4523] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  111.778745][ T4523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  111.824606][ T4528] XFS (loop3): Mounting V5 Filesystem
[  111.916276][ T4523] F2FS-fs (loop1): invalid crc value
[  111.944409][ T4523] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12)
[  112.096536][ T4556] ax25_connect(): syz.4.38 uses autobind, please contact jreuter@yaina.de
[  112.366031][ T4528] XFS (loop3): log mount failed
[  112.604091][ T4561] loop2: detected capacity change from 0 to 40427
[  112.635107][ T4561] F2FS-fs (loop2): invalid crc value
[  112.670197][ T4561] F2FS-fs (loop2): Found nat_bits in checkpoint
[  112.724990][ T4561] F2FS-fs (loop2): Start checkpoint disabled!
[  112.759008][ T4561] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  113.203404][ T4568] syz.2.39: attempt to access beyond end of device
[  113.203404][ T4568] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  113.205323][ T4561] syz.2.39: attempt to access beyond end of device
[  113.205323][ T4561] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  113.291729][ T4572] loop0: detected capacity change from 0 to 16
[  113.298302][ T4566] syz.2.39: attempt to access beyond end of device
[  113.298302][ T4566] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  113.668557][ T4572] loop0: detected capacity change from 0 to 16
[  114.239145][   T41] kworker/u4:2: attempt to access beyond end of device
[  114.239145][   T41] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  114.283268][   T41] kworker/u4:2: attempt to access beyond end of device
[  114.283268][   T41] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[  114.404470][ T4564] loop1: detected capacity change from 0 to 32768
[  115.058479][ T4587] ax25_connect(): syz.4.47 uses autobind, please contact jreuter@yaina.de
[  116.215654][ T4359] udevd[4359]: incorrect btrfs checksum on /dev/loop1
[  116.737414][ T4615] loop2: detected capacity change from 0 to 2048
[  116.831782][ T4615]  loop2: p1 < > p3
[  116.851165][ T4615] loop2: p3 size 134217728 extends beyond EOD, truncated
[  117.262088][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  117.312908][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  123.780733][ T4905] loop2: detected capacity change from 0 to 256
[  123.885977][ T4905] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d)
[  123.945864][ T4905] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  123.990217][   T27] audit: type=1800 audit(1750702919.073:2): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.189" name="file2" dev="loop2" ino=1048595 res=0 errno=0
[  124.046710][ T4908] loop3: detected capacity change from 0 to 1024
[  124.835239][ T4932] loop0: detected capacity change from 0 to 128
[  125.042741][ T4932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  125.123478][ T4932] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.144065][ T4945] loop1: detected capacity change from 0 to 256
[  125.164577][ T4943] loop4: detected capacity change from 0 to 128
[  125.179010][ T4945] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  125.227148][ T4945] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  125.266155][ T4943] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  125.431169][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  125.440507][ T4398] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  125.598742][ T4949] loop2: detected capacity change from 0 to 512
[  125.684463][ T4949] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  125.724251][ T4949] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  125.761591][ T4953] process 'syz.1.207' launched './file2' with NULL argv: empty string added
[  125.786845][ T4949] EXT4-fs (loop2): group descriptors corrupted!
[  125.837867][ T4956] loop4: detected capacity change from 0 to 1024
[  125.883613][ T4959] loop3: detected capacity change from 0 to 256
[  125.939112][ T4959] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  125.989348][ T4957] loop0: detected capacity change from 0 to 4096
[  126.221347][ T4964] loop2: detected capacity change from 0 to 16
[  126.339483][ T4964] erofs: (device loop2): mounted with root inode @ nid 36.
[  126.422102][ T4297] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  126.623863][ T4976] loop3: detected capacity change from 0 to 164
[  126.637728][ T4957] EXT4-fs (loop0): Test dummy encryption mode enabled
[  126.646300][ T4297] usb 2-1: No LPM exit latency info found, disabling LPM.
[  126.671741][ T4297] usb 2-1: config 1 interface 0 altsetting 195 endpoint 0x82 is Bulk; changing to Interrupt
[  126.684145][ T4957] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  126.701687][ T4297] usb 2-1: config 1 interface 0 altsetting 195 endpoint 0x3 is Bulk; changing to Interrupt
[  126.714662][ T4297] usb 2-1: config 1 interface 0 has no altsetting 0
[  126.728886][ T4976] rock: directory entry would overflow storage
[  126.740132][ T4976] rock: sig=0x4f50, size=4, remaining=3
[  126.748933][ T4297] usb 2-1: string descriptor 0 read error: -22
[  126.777761][ T4976] iso9660: Corrupted directory entry in block 4 of inode 1792
[  126.781828][ T4297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  126.839547][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.854825][ T4979] loop4: detected capacity change from 0 to 512
[  126.883983][ T4979] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  126.908930][ T4962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  126.921015][ T4962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  126.976211][ T4297] cdc_ether: probe of 2-1:1.0 failed with error -22
[  127.030641][ T4979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  127.139984][ T4979] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  127.162675][ T4979] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  127.213108][ T4987] loop3: detected capacity change from 0 to 512
[  127.226244][ T4979] EXT4-fs (loop4): 1 truncate cleaned up
[  127.229483][ T4987] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  127.232041][ T4979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  127.292392][ T4301] usb 2-1: USB disconnect, device number 2
[  127.360288][ T4987] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  127.367758][ T4989] loop0: detected capacity change from 0 to 2048
[  127.380961][ T4987] EXT4-fs (loop3): group descriptors corrupted!
[  127.381888][ T4991] loop2: detected capacity change from 0 to 256
[  127.403485][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  127.462661][ T4991] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  127.497786][ T4989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.517366][ T4991] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  127.546662][ T4989] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh
[  127.590727][ T4989] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0
[  127.948626][ T5001] loop0: detected capacity change from 0 to 1024
[  127.979565][ T5001] EXT4-fs: Ignoring removed bh option
[  128.013689][ T5001] EXT4-fs: Ignoring removed mblk_io_submit option
[  128.087425][ T5001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  128.204111][ T5011] loop3: detected capacity change from 0 to 8
[  128.233135][ T5013] loop2: detected capacity change from 0 to 1024
[  128.250535][ T5013] hfsplus: unable to parse mount options
[  128.269921][ T5015] loop1: detected capacity change from 0 to 16
[  128.286478][ T5015] erofs: (device loop1): mounted with root inode @ nid 36.
[  128.306108][ T4382] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  128.478276][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  129.016954][ T5021] loop3: detected capacity change from 0 to 256
[  129.139768][ T5021] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  129.293845][ T5026] loop1: detected capacity change from 0 to 1024
[  129.530757][ T5030] loop0: detected capacity change from 0 to 512
[  129.657667][ T5034] loop2: detected capacity change from 0 to 256
[  129.670857][ T5030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  129.697645][ T5030] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.787952][ T5030] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.237: corrupted inode contents
[  129.813826][ T5034] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  129.890826][ T5030] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.237: mark_inode_dirty error
[  129.903072][ T5030] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.237: corrupted inode contents
[  129.933493][ T5030] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.237: mark_inode_dirty error
[  129.962357][   T27] audit: type=1800 audit(1750702925.053:3): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.239" name="file0" dev="loop2" ino=1048600 res=0 errno=0
[  129.981620][ T5034] exFAT-fs (loop2): error, invalid size(size(1) > aligned(9223372036854777344)
[  129.981620][ T5034] 
[  129.999483][ T4296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.024369][ T5034] exFAT-fs (loop2): Filesystem has been set read-only
[  130.145330][ T4296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.181112][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  130.269092][ T4296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.391760][ T4296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.538509][ T5044] loop2: detected capacity change from 0 to 512
[  130.589569][ T5044] EXT4-fs (loop2): Test dummy encryption mode enabled
[  130.667382][ T5044] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.245: invalid indirect mapped block 4294967295 (level 1)
[  130.729511][ T5044] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.245: invalid indirect mapped block 4294967295 (level 1)
[  130.759539][ T5044] EXT4-fs (loop2): 2 truncates cleaned up
[  130.797631][ T5044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  131.039075][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  131.251812][ T5063] loop3: detected capacity change from 0 to 128
[  131.317853][ T5063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  131.340305][ T5059] loop2: detected capacity change from 0 to 2048
[  131.371400][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.382336][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.390516][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.401299][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.410011][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  131.410393][ T5063] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.427972][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.480686][ T5069] loop4: detected capacity change from 0 to 256
[  131.644198][ T5069] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  131.713413][ T5069] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  131.808441][ T5077] loop0: detected capacity change from 0 to 4096
[  131.880630][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  132.016600][ T5077] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.167942][   T27] audit: type=1804 audit(1750702927.253:4): pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.256" name="/newroot/48/file1/file1" dev="loop0" ino=15 res=1 errno=0
[  132.168353][ T5077] EXT4-fs (loop0): shut down requested (2)
[  132.265989][ T5088] loop4: detected capacity change from 0 to 256
[  132.470966][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  132.540037][ T4312] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  132.594636][ T4312] Quota error (device loop0): write_blk: dquota write failed
[  132.605222][ T4312] Quota error (device loop0): free_dqentry: Can't write quota data block 5
[  133.010467][ T5108] loop2: detected capacity change from 0 to 1024
[  133.024601][ T5108] hfsplus: unable to parse mount options
[  133.098482][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.105747][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.175114][ T4359] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  133.505399][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[  134.424540][ T5116] loop0: detected capacity change from 0 to 512
[  134.484813][ T5116] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  134.508472][ T5065] chnl_net:caif_netlink_parms(): no params data found
[  134.560705][ T5116] EXT4-fs (loop0): 1 truncate cleaned up
[  134.595138][ T5116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  134.812566][ T4296] device hsr_slave_0 left promiscuous mode
[  134.849376][ T4296] device hsr_slave_1 left promiscuous mode
[  134.879569][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  134.893034][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.954714][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.995773][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.008011][ T5133] loop4: detected capacity change from 0 to 512
[  135.014610][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.034632][ T5133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  135.041473][ T4296] device bridge_slave_1 left promiscuous mode
[  135.054595][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.068929][ T5133] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  135.090973][ T4296] device bridge_slave_0 left promiscuous mode
[  135.097994][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.102316][ T5133] EXT4-fs (loop4): 1 truncate cleaned up
[  135.113752][ T5133] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  135.152678][ T4296] device veth1_macvtap left promiscuous mode
[  135.159598][ T4296] device veth0_macvtap left promiscuous mode
[  135.166032][ T4296] device veth1_vlan left promiscuous mode
[  135.172320][ T4296] device veth0_vlan left promiscuous mode
[  135.490138][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  135.572094][ T4270] Bluetooth: hci3: command 0x041b tx timeout
[  135.842261][ T5148] loop4: detected capacity change from 0 to 512
[  135.910327][ T5152] loop2: detected capacity change from 0 to 512
[  135.947628][ T5148] EXT4-fs (loop4): 1 orphan inode deleted
[  135.964572][ T4363] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  135.965034][ T5148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  135.996447][ T4363] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 1
[  136.015460][ T5148] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.130823][ T5152] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.278: corrupted inode contents
[  136.219389][ T5152] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #16: comm syz.2.278: mark_inode_dirty error
[  136.273974][ T5152] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.278: corrupted inode contents
[  136.330318][ T5152] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.278: mark_inode_dirty error
[  136.342838][ T5152] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.278: corrupted inode contents
[  136.514143][ T5152] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  136.726183][ T5152] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.278: corrupted inode contents
[  136.878978][ T5152] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.278: mark_inode_dirty error
[  137.014434][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  137.022423][ T5152] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  137.124061][ T5152] EXT4-fs (loop2): 1 truncate cleaned up
[  137.129801][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  137.174285][ T4479] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  137.193505][ T4479] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:12: Failed to release dquot type 1
[  137.199598][ T5152] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.266874][ T4296] team0 (unregistering): Port device team_slave_1 removed
[  137.338739][ T5152] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  137.362173][ T5152] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  137.386193][ T5152] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.278: Failed to acquire dquot type 1
[  137.449685][ T4296] team0 (unregistering): Port device team_slave_0 removed
[  137.517626][ T5173] loop4: detected capacity change from 0 to 256
[  137.559140][ T5173] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.578312][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  137.600103][ T5173] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  137.615924][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.652211][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[  137.859440][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.929585][ T5185] fuse: Invalid rootmode
[  138.369931][ T5194] loop2: detected capacity change from 0 to 1764
[  138.614725][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'.
[  138.769153][ T5205] loop0: detected capacity change from 0 to 16
[  138.808708][ T5205] erofs: (device loop0): mounted with root inode @ nid 36.
[  139.037667][ T4296] bond0 (unregistering): Released all slaves
[  139.822404][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[  140.204869][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.228547][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.275788][ T5065] device bridge_slave_0 entered promiscuous mode
[  140.295315][ T5219] loop4: detected capacity change from 0 to 128
[  140.307447][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.335022][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.364129][ T5065] device bridge_slave_1 entered promiscuous mode
[  140.419073][ T5219] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  140.445063][ T5219] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.523711][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.612501][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.696040][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  140.790945][ T5065] team0: Port device team_slave_0 added
[  140.831220][ T5065] team0: Port device team_slave_1 added
[  140.927489][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.962042][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.000566][ T5234] loop4: detected capacity change from 0 to 4096
[  141.038639][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.109774][ T4382] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  141.121820][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.140004][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.289231][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.544333][ T5065] device hsr_slave_0 entered promiscuous mode
[  141.576760][ T5065] device hsr_slave_1 entered promiscuous mode
[  142.547904][   T27] audit: type=1326 audit(1750702937.633:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5259 comm="syz.2.312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd45458e929 code=0x0
[  142.818543][ T5065] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  142.832195][ T5065] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  142.897789][ T5265] loop3: detected capacity change from 0 to 256
[  142.926647][ T5265] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  142.988082][ T5065] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  143.068271][ T5065] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  143.467061][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.534318][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.597997][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.624646][ T5065] 8021q: adding VLAN 0 to HW filter on device team0
[  143.669997][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.707776][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.746404][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.753621][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.785722][ T5278] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  143.790873][ T5279] loop0: detected capacity change from 0 to 2048
[  143.813071][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.836008][ T5279] EXT4-fs: inline encryption not supported
[  143.843562][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.859877][ T5279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  143.878569][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.885812][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.895495][ T5278] kvm: pic: single mode not supported
[  143.896359][ T5278] kvm: pic: non byte read
[  143.902707][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  143.928283][ T5279] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  143.941125][ T5278] kvm: pic: level sensitive irq not supported
[  143.942656][ T5278] kvm: pic: non byte read
[  143.954173][ T5278] kvm: pic: level sensitive irq not supported
[  143.954243][ T5278] kvm: pic: non byte read
[  143.976609][ T5278] kvm: pic: level sensitive irq not supported
[  143.976679][ T5278] kvm: pic: non byte read
[  144.003396][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  144.033810][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  144.050525][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  144.080682][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  144.092805][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  144.108721][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  144.150116][ T5065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  144.173229][ T5065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.203433][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  144.203735][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  144.282908][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  144.318599][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  144.352955][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  144.396950][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  144.448483][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  144.898537][ T5316] loop3: detected capacity change from 0 to 16
[  144.927201][ T5316] erofs: (device loop3): mounted with root inode @ nid 36.
[  145.037819][ T5319] loop0: detected capacity change from 0 to 1024
[  145.551588][ T5337] loop0: detected capacity change from 0 to 256
[  145.624749][ T5337] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.680005][ T5337] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  145.718499][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.728625][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.730048][ T5340] loop2: detected capacity change from 0 to 512
[  145.745124][ T5337] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  145.759121][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.781837][ T5340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  145.855768][ T5337] exFAT-fs (loop0): hint_cluster is invalid (17)
[  145.929593][ T5340] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  145.972656][ T5340] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  145.992924][ T5340] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.333: Failed to acquire dquot type 0
[  146.039205][ T5340] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  146.077021][ T5340] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  146.127425][ T5340] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.333: Failed to acquire dquot type 0
[  146.150799][ T5340] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  146.181040][ T5340] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  146.232184][ T5340] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.333: Failed to acquire dquot type 0
[  146.336426][ T5340] EXT4-fs (loop2): 1 orphan inode deleted
[  146.362752][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  146.371771][ T5340] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.588412][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  146.722165][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  146.774037][ T5367] loop2: detected capacity change from 0 to 2048
[  146.859809][ T5367] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  146.892220][ T5367] UDF-fs: Scanning with blocksize 512 failed
[  146.921183][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.949069][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  146.972753][ T4297] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  146.986956][ T5374] loop0: detected capacity change from 0 to 128
[  146.994746][ T5367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.019070][ T5374] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  147.041373][ T4297] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  147.066042][ T5374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.075735][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.102386][ T4297] usb 4-1: Product: syz
[  147.110218][ T4297] usb 4-1: Manufacturer: syz
[  147.120349][ T4297] usb 4-1: SerialNumber: syz
[  147.143444][ T4297] usb 4-1: config 0 descriptor??
[  147.396443][ T4300] usb 4-1: USB disconnect, device number 3
[  147.860526][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.968599][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.080581][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.151667][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.181444][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.215057][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.241078][ T5065] device veth0_vlan entered promiscuous mode
[  148.320050][ T5065] device veth1_vlan entered promiscuous mode
[  148.326403][ T5397] loop0: detected capacity change from 0 to 2048
[  148.371513][ T5397] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  148.390462][ T5397] UDF-fs: Scanning with blocksize 512 failed
[  148.417958][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.443634][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.492704][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.516270][ T5397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.552167][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.594762][ T5065] device veth0_macvtap entered promiscuous mode
[  148.640866][ T5065] device veth1_macvtap entered promiscuous mode
[  148.779441][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.848597][ T5412] loop2: detected capacity change from 0 to 164
[  148.883116][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.912095][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.961129][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.124738][ T5417] loop0: detected capacity change from 0 to 1024
[  149.321342][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.595403][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.809768][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.062271][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.350484][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.443805][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  150.463313][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  150.529320][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  150.539557][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.552876][ T5420] loop3: detected capacity change from 0 to 256
[  150.579721][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.598975][ T5420] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x09567547, utbl_chksum : 0xe619d30d)
[  150.609184][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.657245][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.710693][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.744931][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.770202][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.790148][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.801856][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.848698][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.900934][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  150.922894][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.963741][ T5065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.981576][ T5065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.005484][ T5065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.036608][ T5065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.365853][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.398789][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.561785][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.662868][ T5440] loop3: detected capacity change from 0 to 512
[  151.671541][ T4451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.795306][ T5440] EXT4-fs (loop3): Test dummy encryption mode enabled
[  151.842155][ T4451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.888789][ T5440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  151.908615][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  151.939563][ T5440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002]
[  152.026180][ T5440] System zones: 1-12
[  152.119914][ T5440] EXT4-fs (loop3): 1 truncate cleaned up
[  152.267748][ T5440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  153.096076][ T5453] loop0: detected capacity change from 0 to 2048
[  153.176477][ T5453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  153.270817][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  153.381030][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  153.739237][ T5480] loop3: detected capacity change from 0 to 128
[  153.780380][ T5480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  153.827569][ T5480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.229830][ T5494] loop4: detected capacity change from 0 to 16
[  154.300578][ T5494] erofs: (device loop4): mounted with root inode @ nid 36.
[  154.374096][ T4270] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  154.388520][ T5494] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  154.462086][   T27] audit: type=1800 audit(1750703462.483:6): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.375" name="file2" dev="loop4" ino=89 res=0 errno=0
[  154.583119][   T27] audit: type=1326 audit(1750703462.503:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.0.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44aff8e929 code=0x0
[  154.918755][ T5509] loop5: detected capacity change from 0 to 2048
[  154.986974][ T5509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  155.254353][ T5065] EXT4-fs (loop5): unmounting filesystem.
[  155.461307][ T5525] capability: warning: `syz.0.386' uses deprecated v2 capabilities in a way that may be insecure
[  155.490984][ T5529] loop5: detected capacity change from 0 to 256
[  155.568750][ T5529] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x09567547, utbl_chksum : 0xe619d30d)
[  155.869680][ T5494] syz.4.375 (5494) used greatest stack depth: 20392 bytes left
[  155.941703][ T5541] loop3: detected capacity change from 0 to 512
[  155.949269][ T5539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'.
[  156.011579][ T5541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  156.152142][ T5541] EXT4-fs (loop3): 1 truncate cleaned up
[  156.195421][ T5541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  156.265213][ T5552] loop0: detected capacity change from 0 to 256
[  156.329887][ T5552] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  156.342982][   T27] audit: type=1800 audit(1750703464.433:8): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.389" name="file1" dev="loop3" ino=16 res=0 errno=0
[  156.563650][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  156.692704][ T5563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.994643][ T5576] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  159.432242][  T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  159.623673][  T125] usb 1-1: Using ep0 maxpacket: 16
[  159.667494][  T125] usb 1-1: config 0 has an invalid interface number: 226 but max is 0
[  159.768494][  T125] usb 1-1: config 0 has no interface number 0
[  159.813841][  T125] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  159.924828][  T125] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  159.948304][  T125] usb 1-1: New USB device found, idVendor=0079, idProduct=e264, bcdDevice=6a.fa
[  159.993241][  T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.001307][  T125] usb 1-1: Product: syz
[  160.014056][ T5617] loop5: detected capacity change from 0 to 512
[  160.040278][  T125] usb 1-1: Manufacturer: syz
[  160.051759][  T125] usb 1-1: SerialNumber: syz
[  160.086295][  T125] usb 1-1: config 0 descriptor??
[  160.115527][ T5617] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  160.138334][ T5617] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.200946][ T5625] loop3: detected capacity change from 0 to 512
[  160.243952][   T27] audit: type=1800 audit(1750703468.333:9): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.410" name="file2" dev="loop5" ino=16 res=0 errno=0
[  160.323474][ T5625] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  160.342535][ T5625] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  160.369548][ T5635] loop4: detected capacity change from 0 to 512
[  160.369568][ T4300] usb 1-1: USB disconnect, device number 2
[  160.442307][ T5625] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.412: Failed to acquire dquot type 1
[  160.455004][ T5635] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  160.484916][ T5639] loop2: detected capacity change from 0 to 256
[  160.499340][ T5065] EXT4-fs (loop5): unmounting filesystem.
[  160.527082][ T5625] EXT4-fs (loop3): 1 truncate cleaned up
[  160.545492][ T5625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  160.573602][   T27] audit: type=1800 audit(1750703468.663:10): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.415" name="bus" dev="loop2" ino=1048608 res=0 errno=0
[  160.596829][ T5635] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.413: bg 0: block 5: invalid block bitmap
[  160.636622][ T5625] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.656771][ T5625] EXT4-fs (loop3): unmounting filesystem.
[  160.697535][ T5635] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  160.728776][ T5635] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.413: invalid indirect mapped block 3 (level 2)
[  160.773195][ T5635] EXT4-fs (loop4): 2 truncates cleaned up
[  160.787863][ T5635] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  160.846948][ T5645] loop5: detected capacity change from 0 to 256
[  160.920183][ T5645] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x09567547, utbl_chksum : 0xe619d30d)
[  161.053624][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  161.295125][ T5659] loop2: detected capacity change from 0 to 8
[  161.369861][ T5658] loop4: detected capacity change from 0 to 2048
[  161.373964][ T5659] SQUASHFS error: Failed to read block 0x260685: -5
[  161.438244][ T5659] SQUASHFS error: Unable to read metadata cache entry [260685]
[  161.468996][ T5659] SQUASHFS error: Unable to read directory block [260685:0]
[  161.539519][ T5658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  161.599899][ T5663] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 120: padding at end of block bitmap is not set
[  161.710802][ T5672] netlink: 9 bytes leftover after parsing attributes in process `syz.0.427'.
[  161.769710][ T5672] device gretap0 entered promiscuous mode
[  161.846031][ T5673] netlink: 5 bytes leftover after parsing attributes in process `syz.0.427'.
[  161.986678][ T5673] 0ªî{X¹¦: renamed from gretap0
[  162.070835][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  162.074602][ T5673] device 
30ªî{X¹¦ left promiscuous mode
[  162.095561][ T5673] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  163.124613][ T5692] loop0: detected capacity change from 0 to 1024
[  163.165277][ T5692] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  163.223293][ T5692] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  163.253920][ T5697] loop5: detected capacity change from 0 to 1024
[  163.256700][ T5700] loop4: detected capacity change from 0 to 512
[  163.286221][ T5692] EXT4-fs error (device loop0): ext4_get_journal_inode:5735: inode #5: comm syz.0.432: unexpected bad inode w/o EXT4_IGET_BAD
[  163.354482][ T5700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  163.363325][ T5692] EXT4-fs (loop0): no journal found
[  163.368697][ T5692] EXT4-fs (loop0): can't get journal size
[  163.385746][ T5700] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.433: Unimplemented hash flags: 0x0001
[  163.403903][ T5697] hfsplus: invalid extended attribute record
[  163.431479][ T5692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  163.450368][ T5700] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.433: Corrupt directory, running e2fsck is recommended
[  163.563905][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  163.582786][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  163.891615][ T4559] hfsplus: b-tree write err: -5, ino 4
[  164.047314][   T27] audit: type=1107 audit(1750703472.133:11): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  164.140760][ T5717] loop0: detected capacity change from 0 to 256
[  164.222846][ T5717] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  164.747880][ T5721] loop3: detected capacity change from 0 to 16
[  164.837962][ T5721] erofs: (device loop3): mounted with root inode @ nid 36.
[  165.512012][   T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  165.529957][ T5745] loop5: detected capacity change from 0 to 1024
[  165.668904][ T5745] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  165.747469][   T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.769004][   T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  165.821207][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  165.876353][   T14] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  165.890124][ T5065] EXT4-fs (loop5): unmounting filesystem.
[  165.896026][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.896051][   T14] usb 4-1: Product: syz
[  165.896067][   T14] usb 4-1: Manufacturer: syz
[  165.896083][   T14] usb 4-1: SerialNumber: syz
[  165.898243][   T14] usb 4-1: config 0 descriptor??
[  166.094746][ T5759] loop5: detected capacity change from 0 to 128
[  166.100984][ T5760] loop4: detected capacity change from 0 to 256
[  166.128327][ T5760] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  166.146934][ T5759] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  166.190167][ T5760] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  166.228001][ T5759] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  166.242536][ T4300] usb 4-1: USB disconnect, device number 4
[  166.248958][ T5760] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  166.308761][ T5759] ext2 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  166.466048][ T5765] loop2: detected capacity change from 0 to 256
[  166.526934][   T27] audit: type=1800 audit(1750703474.613:12): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.453" name="bus" dev="loop2" ino=1048611 res=0 errno=0
[  166.530207][ T5765] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  166.618433][ T5765] FAT-fs (loop2): Filesystem has been set read-only
[  166.634577][ T5765] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  166.643785][ T5065] EXT4-fs (loop5): unmounting filesystem.
[  166.722390][ T5765] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  166.810826][   T27] audit: type=1800 audit(1750703474.893:13): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.453" name="file1" dev="loop2" ino=1048612 res=0 errno=0
[  166.863856][ T5765] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  167.159942][ T5765] syz.2.453 (5765) used greatest stack depth: 19888 bytes left
[  167.544168][ T5794] raw_sendmsg: syz.2.464 forgot to set AF_INET. Fix it!
[  176.468965][ T6172] loop0: detected capacity change from 0 to 4096
[  176.815472][ T6175] loop4: detected capacity change from 0 to 65536
[  176.888441][ T6175] XFS (loop4): Mounting V5 Filesystem
[  176.957999][ T6175] XFS (loop4): Ending clean mount
[  177.072232][   T27] audit: type=1800 audit(1750703485.133:14): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.637" name="file1" dev="loop0" ino=33 res=0 errno=0
[  177.876649][ T4263] XFS (loop4): Unmounting Filesystem
[  178.788523][ T6183] loop2: detected capacity change from 0 to 32768
[  178.842231][ T6183] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.641 (6183)
[  178.999285][ T6183] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  179.062253][ T6183] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  179.096966][ T6183] BTRFS info (device loop2): enabling disk space caching
[  179.155472][ T6183] BTRFS info (device loop2): enabling auto defrag
[  179.197137][ T6183] BTRFS info (device loop2): doing ref verification
[  179.226153][ T6183] BTRFS info (device loop2): use no compression
[  179.272136][ T6183] BTRFS info (device loop2): force clearing of disk cache
[  179.302378][ T6183] BTRFS info (device loop2): disabling disk space caching
[  179.511411][ T6202] loop5: detected capacity change from 0 to 32768
[  179.611353][ T6202] XFS: ikeep mount option is deprecated.
[  179.633556][ T6202] XFS: noikeep mount option is deprecated.
[  180.035111][ T6202] XFS (loop5): Mounting V5 Filesystem
[  180.079328][ T4270] Bluetooth: hci4: Malformed HCI Event: 0x22
[  180.443848][ T6202] XFS (loop5): Ending clean mount
[  180.597079][ T6183] BTRFS error (device loop2): open_ctree failed: -12
[  180.997614][ T6211] loop3: detected capacity change from 0 to 40427
[  181.033110][ T5065] XFS (loop5): Unmounting Filesystem
[  181.062307][ T6211] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  181.076563][ T6211] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  181.140186][ T6211] F2FS-fs (loop3): invalid crc value
[  181.162460][ T6211] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4)
[  181.170813][ T6288] loop4: detected capacity change from 0 to 1024
[  181.237331][ T6288] EXT4-fs: Ignoring removed oldalloc option
[  181.316888][ T6288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  181.343241][ T6293] netlink: 'syz.0.656': attribute type 4 has an invalid length.
[  181.556559][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  181.662267][ T6285] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  181.852215][ T6285] usb 4-1: Using ep0 maxpacket: 8
[  181.868977][ T6285] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  181.901762][ T6285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.939553][ T6285] usb 4-1: Product: syz
[  181.964548][ T6285] usb 4-1: Manufacturer: syz
[  181.981588][ T6285] usb 4-1: SerialNumber: syz
[  182.024571][ T6285] usb 4-1: config 0 descriptor??
[  182.081439][ T6285] gspca_main: se401-2.14.0 probing 047d:5003
[  182.465734][ T6285] gspca_se401: Too many frame sizes
[  182.472871][ T6320] loop4: detected capacity change from 0 to 4096
[  182.512761][ T6320] ntfs3: loop4: ino=3, Correct links count -> 2.
[  182.675914][ T6285] usb 4-1: USB disconnect, device number 5
[  182.755677][ T6331] device geneve2 entered promiscuous mode
[  183.516412][ T6348] loop0: detected capacity change from 0 to 128
[  183.562163][   T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  183.765820][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.820751][   T26] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  183.931606][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.154735][   T26] usb 6-1: config 0 descriptor??
[  184.715724][   T26] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID vff.fe Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0
[  185.051248][   T26] usb 6-1: USB disconnect, device number 2
[  185.142206][ T6346] loop3: detected capacity change from 0 to 32768
[  185.168114][ T6377] loop0: detected capacity change from 0 to 4096
[  185.250689][ T6376] fido_id[6376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  185.336468][ T6346] XFS (loop3): Mounting V5 Filesystem
[  185.378946][ T6387] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.585008][ T6346] XFS (loop3): Ending clean mount
[  185.808711][ T6394] loop4: detected capacity change from 0 to 512
[  185.882632][ T6394] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  186.544772][ T6373] loop2: detected capacity change from 0 to 32768
[  186.642581][ T4251] XFS (loop3): Unmounting Filesystem
[  186.918371][ T6402] trusted_key: encrypted_key: master key parameter '' is invalid
[  186.967006][ T6394] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  187.388173][ T6412] loop4: detected capacity change from 0 to 512
[  187.422972][ T6412] EXT4-fs: Ignoring removed nomblk_io_submit option
[  187.569010][ T6412] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  187.683004][ T6418] loop3: detected capacity change from 0 to 4096
[  187.842319][ T6418] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  188.149172][ T6412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  188.430756][ T6418] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  188.439677][ T6412] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  188.748683][ T4263] EXT4-fs (loop4): unmounting filesystem.
[  188.962090][   T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  189.172308][   T26] usb 3-1: Using ep0 maxpacket: 32
[  189.180702][   T26] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  189.248733][   T26] usb 3-1: config 0 has no interface number 0
[  190.029568][   T26] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  190.038847][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.047154][   T26] usb 3-1: Product: syz
[  190.056498][   T26] usb 3-1: Manufacturer: syz
[  190.061368][   T26] usb 3-1: SerialNumber: syz
[  190.428725][   T26] usb 3-1: config 0 descriptor??
[  190.468454][   T26] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  190.477818][   T26] usb 3-1: selecting invalid altsetting 1
[  190.484486][   T26] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  190.547332][   T26] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  190.561262][   T26] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  190.570760][   T26] usb 3-1: media controller created
[  190.660387][ T6432] usb 3-1: dvb_usb_ce6230: I2C read not implemented
[  190.717249][   T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  190.783957][   T26] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  191.137933][ T6462] xt_TPROXY: Can be used only with -p tcp or -p udp
[  191.609330][   T26] zl10353_read_register: readreg error (reg=127, ret==-71)
[  191.618750][   T26] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  191.657083][   T26] usb 3-1: USB disconnect, device number 2
[  191.802338][ T6447] Zero length message leads to an empty skb
[  191.905501][ T6461] nvme_fabrics: missing parameter 'transport=%s'
[  191.950165][ T6461] nvme_fabrics: missing parameter 'nqn=%s'
[  192.863220][ T6477] loop5: detected capacity change from 0 to 64
[  195.802391][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  195.808792][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  196.088624][ T6498] sp0: Synchronizing with TNC
[  196.542123][ T4297] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  197.564125][ T4297] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  197.580316][ T4297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.627620][ T4297] usb 6-1: config 0 descriptor??
[  197.710559][ T4297] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  198.008087][ T6522] loop3: detected capacity change from 0 to 256
[  198.054176][ T6522] exfat: Deprecated parameter 'utf8'
[  198.112494][ T6522] exfat: Deprecated parameter 'utf8'
[  198.127280][ T6522] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  199.147089][ T6519] loop2: detected capacity change from 0 to 32768
[  199.233954][ T6519] (syz.2.705,6519,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  199.246947][ T4304] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  199.304157][ T6519] (syz.2.705,6519,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  199.331653][ T4297] usb 6-1: USB disconnect, device number 3
[  199.440913][ T6519] JBD2: Ignoring recovery information on journal
[  199.444318][ T4304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.465407][ T4304] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.477846][ T4304] usb 4-1: config 1 interface 0 has no altsetting 0
[  199.498922][ T4304] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.508488][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.516939][ T4304] usb 4-1: Product: syz
[  199.533085][ T4304] usb 4-1: Manufacturer: syz
[  199.538217][ T4304] usb 4-1: SerialNumber: syz
[  199.652977][ T4268] Bluetooth: hci0: command 0x0409 tx timeout
[  199.690347][ T6519] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  199.879604][ T6519] 
[  199.881999][ T6519] ======================================================
[  199.889050][ T6519] WARNING: possible circular locking dependency detected
[  199.896107][ T6519] 6.1.141-syzkaller #0 Not tainted
[  199.901243][ T6519] ------------------------------------------------------
[  199.908296][ T6519] syz.2.705/6519 is trying to acquire lock:
[  199.914222][ T6519] ffff888054f64650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x66e/0xb10
[  199.923724][ T6519] 
[  199.923724][ T6519] but task is already holding lock:
[  199.931120][ T6519] ffff88807434dbe0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270
[  199.942055][ T6519] 
[  199.942055][ T6519] which lock already depends on the new lock.
[  199.942055][ T6519] 
[  199.952484][ T6519] 
[  199.952484][ T6519] the existing dependency chain (in reverse order) is:
[  199.961561][ T6519] 
[  199.961561][ T6519] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  199.970464][ T6519]        down_write+0x36/0x60
[  199.975188][ T6519]        ocfs2_lock_global_qf+0x1e5/0x270
[  199.980950][ T6519]        ocfs2_acquire_dquot+0x2a0/0xb10
[  199.986621][ T6519]        dqget+0x778/0xeb0
[  199.991088][ T6519]        dquot_set_dqblk+0x27/0xf90
[  199.996322][ T6519]        quota_setquota+0x4ac/0x530
[  200.001560][ T6519]        __se_sys_quotactl+0x295/0x6b0
[  200.007061][ T6519]        do_syscall_64+0x4c/0xa0
[  200.012047][ T6519]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.018520][ T6519] 
[  200.018520][ T6519] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}:
[  200.029087][ T6519]        down_write+0x36/0x60
[  200.033809][ T6519]        ocfs2_lock_global_qf+0x1c7/0x270
[  200.039567][ T6519]        ocfs2_acquire_dquot+0x2a0/0xb10
[  200.045236][ T6519]        dqget+0x778/0xeb0
[  200.049694][ T6519]        dquot_set_dqblk+0x27/0xf90
[  200.054937][ T6519]        quota_setquota+0x4ac/0x530
[  200.060178][ T6519]        __se_sys_quotactl+0x295/0x6b0
[  200.065673][ T6519]        do_syscall_64+0x4c/0xa0
[  200.070654][ T6519]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.077136][ T6519] 
[  200.077136][ T6519] -> #4 (&dquot->dq_lock){+.+.}-{3:3}:
[  200.084902][ T6519]        __mutex_lock+0x120/0xaf0
[  200.089963][ T6519]        dquot_commit+0x5a/0x410
[  200.094938][ T6519]        ext4_write_dquot+0x1f0/0x360
[  200.100434][ T6519]        mark_all_dquot_dirty+0xf9/0x400
[  200.106108][ T6519]        __dquot_alloc_space+0x5fc/0xe60
[  200.111786][ T6519]        ext4_mb_new_blocks+0xf74/0x4720
[  200.117509][ T6519]        ext4_ext_map_blocks+0x143c/0x66d0
[  200.123358][ T6519]        ext4_map_blocks+0x9d1/0x1b60
[  200.128764][ T6519]        ext4_getblk+0x1ab/0x6d0
[  200.133735][ T6519]        ext4_bread+0x26/0x170
[  200.138533][ T6519]        ext4_append+0x2c3/0x560
[  200.143499][ T6519]        ext4_init_new_dir+0x2b8/0x570
[  200.149000][ T6519]        ext4_mkdir+0x47d/0xc50
[  200.153880][ T6519]        vfs_mkdir+0x387/0x570
[  200.154196][ T6532] loop4: detected capacity change from 0 to 40427
[  200.158657][ T6519]        do_mkdirat+0x1d0/0x430
[  200.169981][ T6519]        __x64_sys_mkdirat+0x85/0x90
[  200.175301][ T6519]        do_syscall_64+0x4c/0xa0
[  200.180274][ T6519]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.186732][ T6519] 
[  200.186732][ T6519] -> #3 (&ei->i_data_sem){++++}-{3:3}:
[  200.194415][ T6519]        down_write+0x36/0x60
[  200.199132][ T6519]        ext4_truncate+0x987/0x1230
[  200.204361][ T6519]        ext4_setattr+0x10cb/0x19f0
[  200.209599][ T6519]        notify_change+0xc74/0xf40
[  200.214755][ T6519]        do_truncate+0x197/0x220
[  200.219735][ T6519]        do_sys_ftruncate+0x312/0x3c0
[  200.225230][ T6519]        do_syscall_64+0x4c/0xa0
[  200.230204][ T6519]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.236669][ T6519] 
[  200.236669][ T6519] -> #2 (jbd2_handle){++++}-{0:0}:
[  200.244012][ T6519]        start_this_handle+0x1f49/0x2150
[  200.249686][ T6519]        jbd2__journal_start+0x2b7/0x5a0
[  200.255357][ T6519]        jbd2_journal_start+0x26/0x30
[  200.260764][ T6519]        ocfs2_start_trans+0x372/0x6c0
[  200.266255][ T6519]        ocfs2_modify_bh+0xe5/0x460
[  200.271492][ T6519]        ocfs2_local_read_info+0x13b1/0x16e0
[  200.277512][ T6519]        dquot_load_quota_sb+0x756/0xac0
[  200.283182][ T6519]        dquot_load_quota_inode+0x2d8/0x5d0
[  200.289109][ T6519]        ocfs2_enable_quotas+0x1c3/0x440
[  200.294774][ T6519]        ocfs2_fill_super+0x409f/0x4d00
[  200.300345][ T6519]        mount_bdev+0x287/0x3c0
[  200.304389][ T6532] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[  200.305212][ T6519]        legacy_get_tree+0xe6/0x180
[  200.319547][ T6519]        vfs_get_tree+0x88/0x270
[  200.324518][ T6519]        do_new_mount+0x24a/0xa40
[  200.329576][ T6519]        __se_sys_mount+0x2d6/0x3c0
[  200.334808][ T6519]        do_syscall_64+0x4c/0xa0
[  200.339786][ T6519]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.346244][ T6519] 
[  200.346244][ T6519] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  200.354796][ T6519]        down_read+0x42/0x2d0
[  200.359521][ T6519]        ocfs2_start_trans+0x366/0x6c0
[  200.365022][ T6519]        ocfs2_modify_bh+0xe5/0x460
[  200.370255][ T6519]        ocfs2_local_read_info+0x13b1/0x16e0
[  200.376275][ T6519]        dquot_load_quota_sb+0x756/0xac0
[  200.381946][ T6519]        dquot_load_quota_inode+0x2d8/0x5d0
[  200.387874][ T6519]        ocfs2_enable_quotas+0x1c3/0x440
[  200.393538][ T6519]        ocfs2_fill_super+0x409f/0x4d00
[  200.399121][ T6519]        mount_bdev+0x287/0x3c0
[  200.404029][ T6519]        legacy_get_tree+0xe6/0x180
[  200.409287][ T6519]        vfs_get_tree+0x88/0x270
[  200.414267][ T6519]        do_new_mount+0x24a/0xa40
[  200.419329][ T6519]        __se_sys_mount+0x2d6/0x3c0
[  200.424562][ T6519]        do_syscall_64+0x4c/0xa0
[  200.429536][ T6519]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.435995][ T6519] 
[  200.435995][ T6519] -> #0 (sb_internal#5){.+.+}-{0:0}:
[  200.443524][ T6519]        __lock_acquire+0x2cf8/0x7c50
[  200.448936][ T6519]        lock_acquire+0x1b4/0x490
[  200.454001][ T6519]        ocfs2_start_trans+0x267/0x6c0
[  200.459495][ T6519]        ocfs2_acquire_dquot+0x66e/0xb10
[  200.465163][ T6519]        dqget+0x778/0xeb0
[  200.469631][ T6519]        dquot_set_dqblk+0x27/0xf90
[  200.473237][ T6554] loop5: detected capacity change from 0 to 512
[  200.474860][ T6519]        quota_setquota+0x4ac/0x530
[  200.486350][ T6519]        __se_sys_quotactl+0x295/0x6b0
[  200.491846][ T6519]        do_syscall_64+0x4c/0xa0
[  200.496816][ T6519]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.503268][ T6519] 
[  200.503268][ T6519] other info that might help us debug this:
[  200.503268][ T6519] 
[  200.513516][ T6519] Chain exists of:
[  200.513516][ T6519]   sb_internal#5 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &ocfs2_quota_ip_alloc_sem_key
[  200.513516][ T6519] 
[  200.525347][ T6554] EXT4-fs: Ignoring removed nobh option
[  200.530592][ T6519]  Possible unsafe locking scenario:
[  200.530592][ T6519] 
[  200.530600][ T6519]        CPU0                    CPU1
[  200.530605][ T6519]        ----                    ----
[  200.530610][ T6519]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  200.530628][ T6519]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  200.569935][ T6519]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  200.578132][ T6519]   lock(sb_internal#5);
[  200.582461][ T6519] 
[  200.582461][ T6519]  *** DEADLOCK ***
[  200.582461][ T6519] 
[  200.590637][ T6519] 4 locks held by syz.2.705/6519:
[  200.595691][ T6519]  #0: ffff888054f640e0 (&type->s_umount_key#112){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[  200.606021][ T6519]  #1: ffff8880702a80a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10
[  200.616062][ T6519]  #2: ffff88807434df48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270
[  200.629056][ T6519]  #3: ffff88807434dbe0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270
[  200.640393][ T6519] 
[  200.640393][ T6519] stack backtrace:
[  200.646309][ T6519] CPU: 0 PID: 6519 Comm: syz.2.705 Not tainted 6.1.141-syzkaller #0
[  200.654308][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  200.664408][ T6519] Call Trace:
[  200.667702][ T6519]  <TASK>
[  200.670647][ T6519]  dump_stack_lvl+0x168/0x22e
[  200.675356][ T6519]  ? load_image+0x3b0/0x3b0
[  200.679876][ T6519]  ? show_regs_print_info+0x12/0x12
[  200.685093][ T6519]  ? print_circular_bug+0x12b/0x1a0
[  200.690316][ T6519]  check_noncircular+0x274/0x310
[  200.695272][ T6519]  ? add_chain_block+0x940/0x940
[  200.700226][ T6519]  ? lockdep_lock+0xdc/0x1e0
[  200.704835][ T6519]  ? mark_lock+0x94/0x320
[  200.709181][ T6519]  ? _find_first_zero_bit+0xcf/0x100
[  200.714493][ T6519]  __lock_acquire+0x2cf8/0x7c50
[  200.719370][ T6519]  ? verify_lock_unused+0x140/0x140
[  200.724584][ T6519]  ? verify_lock_unused+0x140/0x140
[  200.729808][ T6519]  ? mark_lock+0x94/0x320
[  200.734162][ T6519]  ? verify_lock_unused+0x140/0x140
[  200.739381][ T6519]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  200.745390][ T6519]  lock_acquire+0x1b4/0x490
[  200.749917][ T6519]  ? ocfs2_acquire_dquot+0x66e/0xb10
[  200.755228][ T6519]  ? __might_sleep+0xd0/0xd0
[  200.759854][ T6519]  ? do_raw_spin_lock+0x11d/0x280
[  200.764907][ T6519]  ? read_lock_is_recursive+0x10/0x10
[  200.770307][ T6519]  ? __rwlock_init+0x140/0x140
[  200.775099][ T6519]  ? do_raw_spin_unlock+0x11d/0x230
[  200.780319][ T6519]  ocfs2_start_trans+0x267/0x6c0
[  200.785285][ T6519]  ? ocfs2_acquire_dquot+0x66e/0xb10
[  200.790594][ T6519]  ? ocfs2_recovery_exit+0x50/0x50
[  200.795717][ T6519]  ? do_raw_spin_unlock+0x11d/0x230
[  200.800937][ T6519]  ? _raw_spin_unlock+0x24/0x40
[  200.805808][ T6519]  ? ocfs2_qinfo_unlock+0x11a/0x140
[  200.811028][ T6519]  ocfs2_acquire_dquot+0x66e/0xb10
[  200.816156][ T6519]  ? from_kuid+0x155/0x670
[  200.820580][ T6519]  ? ocfs2_destroy_dquot+0x40/0x40
[  200.825710][ T6519]  dqget+0x778/0xeb0
[  200.829621][ T6519]  dquot_set_dqblk+0x27/0xf90
[  200.834325][ T6519]  quota_setquota+0x4ac/0x530
[  200.839016][ T6519]  ? quota_getnextquota+0x450/0x450
[  200.844238][ T6519]  ? bpf_lsm_capable+0x5/0x10
[  200.848932][ T6519]  ? do_quotactl+0x4f3/0x710
[  200.853538][ T6519]  __se_sys_quotactl+0x295/0x6b0
[  200.858513][ T6519]  ? __x64_sys_quotactl+0xa0/0xa0
[  200.863551][ T6519]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  200.869545][ T6519]  ? lock_chain_count+0x20/0x20
[  200.874416][ T6519]  ? lockdep_hardirqs_on+0x94/0x140
[  200.879620][ T6519]  do_syscall_64+0x4c/0xa0
[  200.884051][ T6519]  ? clear_bhb_loop+0x60/0xb0
[  200.888820][ T6519]  ? clear_bhb_loop+0x60/0xb0
[  200.893526][ T6519]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.899436][ T6519] RIP: 0033:0x7fd45458e929
[  200.903958][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.923582][ T6519] RSP: 002b:00007fd455372038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  200.932006][ T6519] RAX: ffffffffffffffda RBX: 00007fd4547b5fa0 RCX: 00007fd45458e929
[  200.939992][ T6519] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffff80000800
[  200.947969][ T6519] RBP: 00007fd454610b39 R08: 0000000000000000 R09: 0000000000000000
[  200.955944][ T6519] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  200.963919][ T6519] R13: 0000000000000000 R14: 00007fd4547b5fa0 R15: 00007ffe42d54838
[  200.971906][ T6519]  </TASK>
[  200.975014][    C0] vkms_vblank_simulate: vblank timer overrun
[  200.991328][ T4304] usb 4-1: USB disconnect, device number 6
[  201.040908][ T6554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  201.446422][ T4253] ocfs2: Unmounting device (7,2) on (node local)
[  202.007822][ T5065] EXT4-fs (loop5): unmounting filesystem.
[  202.562364][ T6468] Set syz1 is full, maxelem 65536 reached
[  206.852114][ T4270] Bluetooth: hci1: command 0x0406 tx timeout
[  206.858202][ T4270] Bluetooth: hci2: command 0x0406 tx timeout
[  206.858214][ T4268] Bluetooth: hci0: command 0x0406 tx timeout