last executing test programs:

1m14.845494579s ago: executing program 4 (id=25):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

1m14.463663881s ago: executing program 4 (id=27):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r0, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48)

1m14.267056643s ago: executing program 4 (id=28):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206c1801d82b68d04f3048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1bfd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9daebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0x9c}, {&(0x7f0000002880)="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", 0x11a}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff160f374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030d070047bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xac}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a5", 0x3b}, {&(0x7f0000000180)="df2966f83be61be11a9831c2e62c48d200e5ef6d8633d6649f81483cbc10718f59d4d3dc25fb782b4fdc860f55724dd87c32431d89b0308d4b485cd6e33677f9a435b540f044c23f51305edb2a14923925ef64a400ea0d6ea8c9a927449c6b8a8785", 0x62}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90d06cf30a05e802b63ce2ff861f27d6ded13918f0c33169c6bca92fa8b8cccc944946434358e5a0193a91a73794fc7249", 0xd8}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e43732", 0x7a}, {0x0}], 0x3}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

1m13.981126855s ago: executing program 4 (id=32):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x100c000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@resgid}, {@grpid}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x583, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x43)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x439, &(0x7f0000000580)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x100000, 0xa4, 0x101, 0x100, 0x1, 0x0, 0x0, 0x40, 0x1ff}}, 0x50)

1m12.985900222s ago: executing program 4 (id=39):
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m12.078224969s ago: executing program 4 (id=45):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m11.779558711s ago: executing program 32 (id=45):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m10.874768938s ago: executing program 0 (id=53):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r0, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @default]}, 0x48)
accept$ax25(r0, 0x0, 0x0)

1m10.693282889s ago: executing program 0 (id=56):
creat(&(0x7f0000000300)='./file0\x00', 0xe5)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000004, 0x10048484, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141001, 0x0)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)="9e4cf938bce1666d85cb", 0xa}, {&(0x7f0000000640)="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", 0xff6}], 0x2)
close(r0)

1m10.413829361s ago: executing program 0 (id=58):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet(0x2, 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x92, 0x86, 0x93, 0x20, 0x3823, 0x1, 0x30fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x5, 0x20, 0x10, [{{0x9, 0x4, 0xcd, 0xf7, 0x0, 0x83, 0x8b, 0x5b, 0x5}}]}}]}}, 0x0)
socket$inet(0x2, 0x1, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

1m9.076772621s ago: executing program 0 (id=65):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m8.975059582s ago: executing program 0 (id=66):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000004780)=[@text32={0x20, &(0x7f0000004740)="c4e3fbf01f650fc7ad83000000f30f096251370f216b66b89a008ec80fc7b200880000260f0057d6c4c1a1686e1266baf80cb858559c8eef66bafc0c66ed", 0x3e}], 0x1, 0x1a, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m8.104239818s ago: executing program 0 (id=70):
epoll_create1(0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c00}, 0x10)
r0 = syz_usbip_server_init(0x4)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$usbip_server(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000300000001"], 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7)

1m7.8878474s ago: executing program 33 (id=70):
epoll_create1(0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c00}, 0x10)
r0 = syz_usbip_server_init(0x4)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$usbip_server(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000300000001"], 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7)

1m7.8434567s ago: executing program 3 (id=72):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000800800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10)

1m5.182259549s ago: executing program 3 (id=78):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='size=7'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1)

1m3.876385639s ago: executing program 3 (id=83):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x1}], 0x1)

51.843032048s ago: executing program 2 (id=114):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
setxattr$trusted_overlay_nlink(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00), 0x0, 0x0, 0x3)

51.495866511s ago: executing program 2 (id=115):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kvm_unmap_hva_range\x00', r2}, 0x10)
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)

48.712820861s ago: executing program 2 (id=129):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400), 0x4, 0x542, &(0x7f0000000440)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

48.151527445s ago: executing program 2 (id=124):
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/223, 0xe6}, {&(0x7f0000000200)=""/160, 0x8f}, {&(0x7f0000000b40)=""/217, 0xb5}, {&(0x7f0000002a80)=""/4137, 0x1029}, {&(0x7f00000000c0)=""/172, 0xb3}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000580)=""/271, 0x105}], 0x8}, 0x2001)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="82"])

46.803488175s ago: executing program 2 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000100)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x40)
mkdir(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@resgid}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x573, &(0x7f0000001140)="$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")
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

45.921529392s ago: executing program 2 (id=133):
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

44.449544103s ago: executing program 3 (id=83):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x1}], 0x1)

32.61530215s ago: executing program 3 (id=83):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x1}], 0x1)

30.744496493s ago: executing program 34 (id=133):
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

13.56038498s ago: executing program 1 (id=223):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x4, {0x81, 0x0, 0x14, 0xc, 0x1, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c840)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="e2b2c612e1be"}, 0x14)

10.80139401s ago: executing program 1 (id=232):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}])
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
dup3(r2, r0, 0x0)

10.412055963s ago: executing program 1 (id=234):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.981835767s ago: executing program 1 (id=237):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)

7.411421326s ago: executing program 5 (id=242):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.771503178s ago: executing program 5 (id=244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd90}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

4.533974337s ago: executing program 6 (id=246):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

4.455859987s ago: executing program 1 (id=247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xa, 0x40000000, 0x100, 0x7}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4a438dde92cbb6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="15"], 0x0, 0x0, 0x0, 0x0})
getdents(r4, 0x0, 0x0)

3.418399105s ago: executing program 5 (id=248):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x101, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d00), 0x20000, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000d40)={0xff, 0xffffffff, 0x2, 0xf6d, 0xf, "6c8ddd4a6ab0b6fae2e8171178c517edb50565"})
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1f, 0x2, 0x1})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000340))
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x3ff, 0x2fc}})

3.320039506s ago: executing program 6 (id=249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00')

3.187952087s ago: executing program 6 (id=250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socket(0x6, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001b40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xfff2}}]}}]}, 0x40}}, 0x24000000)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}}}, 0x24}}, 0x0)

3.100864147s ago: executing program 1 (id=251):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000780), &(0x7f0000000400)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x48014)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1)
socket$key(0xf, 0x3, 0x2)
unshare(0x20000)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)

2.903110539s ago: executing program 5 (id=252):
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601160000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x0)

1.868763266s ago: executing program 6 (id=253):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000000000000", @ANYBLOB="7b13000000000000280012800900010076"], 0x48}}, 0x40080)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0)
getgroups(0x0, &(0x7f0000000080))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.777133937s ago: executing program 3 (id=83):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x1}], 0x1)

1.205366322s ago: executing program 6 (id=254):
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, 0x0)

1.192812662s ago: executing program 7 (id=183):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x3)

1.190239731s ago: executing program 5 (id=255):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x100, 0x70bd25, 0x5, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xffe0, 0xffff}, {0xb, 0x5}}}, 0x24}}, 0x4008804)
mkdir(&(0x7f0000000280)='./file0\x00', 0x2)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000001600)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000200}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000200)='./file0/file0\x00', 0x0)

59.21524ms ago: executing program 7 (id=256):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
syz_emit_ethernet(0x7e, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, 0x0, 0xfdef)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="010003007f00000100000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40c0}, 0x0)

51.73777ms ago: executing program 6 (id=257):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f000001f6c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x800, 0x7fff)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
truncate(&(0x7f0000000280)='./file1\x00', 0x1)

0s ago: executing program 5 (id=258):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa1e88cf0b88ec3ef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)

kernel console output (not intermixed with test programs):

IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.670200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.679784][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.687626][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.696561][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.705270][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.713290][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.723828][ T4175] device veth0_vlan entered promiscuous mode
[   76.760320][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.771543][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.779297][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.794476][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.802472][ T4175] device veth1_vlan entered promiscuous mode
[   76.814914][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.835989][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.851684][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.868634][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.889390][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.906908][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.937295][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.950589][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.988579][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.002290][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.017739][ T4175] device veth0_macvtap entered promiscuous mode
[   77.028605][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.038675][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.048524][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.059031][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.068374][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.078402][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.090714][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.103673][ T4175] device veth1_macvtap entered promiscuous mode
[   77.136062][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.151936][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.162281][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.180169][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.191440][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.212087][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.231206][ T4174] device veth0_vlan entered promiscuous mode
[   77.239344][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.250051][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.267387][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.300282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.309451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.327230][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.350975][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.360471][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.370066][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.378960][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.390320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.399220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.408635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.418746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.428714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.437878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.449358][ T4174] device veth1_vlan entered promiscuous mode
[   77.494998][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.503194][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.513152][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.522994][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.530956][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.539385][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.548347][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.556500][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.568274][ T4173] device veth0_vlan entered promiscuous mode
[   77.587396][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.625507][ T4173] device veth1_vlan entered promiscuous mode
[   77.650545][ T4174] device veth0_macvtap entered promiscuous mode
[   77.673825][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.682162][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.691296][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.701064][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.710933][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.731774][ T4174] device veth1_macvtap entered promiscuous mode
[   77.749188][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.758933][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.768134][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.778089][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.793292][ T4186] device veth0_vlan entered promiscuous mode
[   77.805977][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.818575][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.830350][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.841343][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.862581][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.869284][ T4186] device veth1_vlan entered promiscuous mode
[   77.879152][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.888531][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.899368][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.908610][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.917243][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.926361][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.942849][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.954480][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.966477][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.992096][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.001556][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.015201][ T4174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.025218][ T4174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.034435][ T4174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.043146][ T4174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.075623][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.086552][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.094855][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.132142][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.141033][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.154850][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.163846][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.172411][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.181451][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.192925][ T4173] device veth0_macvtap entered promiscuous mode
[   78.203853][ T4186] device veth0_macvtap entered promiscuous mode
[   78.214994][ T4186] device veth1_macvtap entered promiscuous mode
[   78.223631][ T4176] device veth0_vlan entered promiscuous mode
[   78.231554][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.242328][ T4173] device veth1_macvtap entered promiscuous mode
[   78.257286][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.276528][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.288219][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.297369][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.308184][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.316639][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.329888][ T4176] device veth1_vlan entered promiscuous mode
[   78.362252][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.374148][ T4219] Bluetooth: hci3: command 0x040f tx timeout
[   78.380432][ T4219] Bluetooth: hci1: command 0x040f tx timeout
[   78.381546][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.389171][ T4219] Bluetooth: hci4: command 0x040f tx timeout
[   78.404090][ T4219] Bluetooth: hci2: command 0x040f tx timeout
[   78.405305][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.410217][ T4219] Bluetooth: hci0: command 0x040f tx timeout
[   78.427748][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.441015][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.475531][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.490729][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.501165][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.511978][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.521929][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.532421][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.546537][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.560140][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.568401][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.576741][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.586222][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.595627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.605421][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.617245][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.628424][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.638668][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.649936][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.661446][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.682650][ T4176] device veth0_macvtap entered promiscuous mode
[   78.697313][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.710590][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.721180][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.732672][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.743029][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.754231][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.768200][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.781196][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.804788][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.817365][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.820822][ T4249] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.826688][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.852128][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.863897][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.877690][ T4173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.886855][ T4173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.899468][ T4173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.909083][ T4173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.934084][  T446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.942171][  T446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.949656][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.949725][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.949757][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.949787][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.017395][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.030648][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.041321][ T4176] device veth1_macvtap entered promiscuous mode
[   79.113611][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.121658][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.160251][  T446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.166064][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.179841][  T446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.181576][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.199632][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.210302][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.221868][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.232449][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.243059][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.254732][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.268611][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.279435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.288386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.298050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.307171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.329302][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.347312][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.357587][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.368976][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.380019][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.390981][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.401159][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.412241][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.426822][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.458959][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.489913][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.510821][ T4176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.520666][ T4176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.530659][ T4176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.539616][ T4176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.563781][  T446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.580624][  T446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.607492][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.658898][  T446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.682131][  T446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.712927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.761118][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.780098][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.792208][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.803297][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.822548][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.842306][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.485309][ T4257] Bluetooth: hci0: command 0x0419 tx timeout
[   80.491403][ T4257] Bluetooth: hci2: command 0x0419 tx timeout
[   80.505628][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.523318][ T4257] Bluetooth: hci4: command 0x0419 tx timeout
[   80.532590][ T4257] Bluetooth: hci1: command 0x0419 tx timeout
[   80.539285][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.548634][ T4257] Bluetooth: hci3: command 0x0419 tx timeout
[   80.608389][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.677658][ T4270] loop4: detected capacity change from 0 to 128
[   80.722293][ T4271] loop1: detected capacity change from 0 to 512
[   80.836562][ T4271] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.893001][ T4270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.930906][ T4271] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   80.959359][ T4270] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.977667][ T4271] EXT4-fs (loop1): 1 truncate cleaned up
[   80.985359][ T4271] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   81.038496][   T26] audit: type=1800 audit(1742329969.432:2): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name="file1" dev="loop1" ino=15 res=0 errno=0
[   81.755457][ T4302] loop3: detected capacity change from 0 to 8192
[   81.833366][ T4302] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   81.843099][ T4302] REISERFS (device loop3): using ordered data mode
[   81.863620][ T4302] reiserfs: using flush barriers
[   81.873174][ T4302] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   82.001841][ T4302] REISERFS (device loop3): checking transaction log (loop3)
[   82.319119][ T4302] REISERFS (device loop3): Using tea hash to sort names
[   82.339245][ T4302] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   82.429670][ T4286] loop1: detected capacity change from 0 to 32768
[   82.439535][ T4302] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   82.550631][ T4286] 
[   82.550631][ T4286]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   82.550631][ T4286] 
[   82.797415][ T4326] loop0: detected capacity change from 0 to 512
[   82.826213][ T4326] =======================================================
[   82.826213][ T4326] WARNING: The mand mount option has been deprecated and
[   82.826213][ T4326]          and is ignored by this kernel. Remove the mand
[   82.826213][ T4326]          option from the mount to silence this warning.
[   82.826213][ T4326] =======================================================
[   82.871552][ T4328] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET)
[   82.980888][ T4286] 
[   82.980888][ T4286]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   82.980888][ T4286] 
[   82.996030][ T4286] 
[   82.996030][ T4286]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   82.996030][ T4286] 
[   83.003879][ T4326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.009307][ T4286] 
[   83.009307][ T4286]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.009307][ T4286] 
[   83.034323][ T4326] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.043731][ T4286] 
[   83.043731][ T4286]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.043731][ T4286] 
[   83.111794][ T4286] 
[   83.111794][ T4286]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.111794][ T4286] 
[   83.170356][ T4326] EXT4-fs error (device loop0): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.0.24: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   83.211485][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[   83.263057][ T4326] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.24: directory missing '.'
[   83.331874][ T4326] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 3: comm syz.0.24: lblock 0 mapped to illegal pblock 3 (length 1)
[   83.336744][    T9] 
[   83.336744][    T9]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.336744][    T9] 
[   83.386680][    T9] 
[   83.386680][    T9]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.386680][    T9] 
[   83.409310][ T4326] EXT4-fs error (device loop0) in ext4_resetent:3739: Corrupt filesystem
[   83.446499][ T4174] 
[   83.446499][ T4174]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.446499][ T4174] 
[   83.469744][ T4326] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.24: Invalid inode table block 34 in block_group 0
[   83.495724][  T276] 
[   83.495724][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.495724][  T276] 
[   83.535486][ T4174] 
[   83.535486][ T4174]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.535486][ T4174] 
[   83.546307][ T4326] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   83.623967][ T4326] EXT4-fs error (device loop0): ext4_rename:4087: inode #18: comm syz.0.24: mark_inode_dirty error
[   83.648044][ T4326] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.24: Invalid inode table block 34 in block_group 0
[   83.667241][ T4348] loop2: detected capacity change from 0 to 8
[   83.688498][ T4347] loop4: detected capacity change from 0 to 1024
[   83.715048][ T4326] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   83.724317][ T4347] EXT4-fs (loop4): Ignoring removed orlov option
[   83.732949][ T4326] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #18: comm syz.0.24: mark_inode_dirty error
[   83.750276][ T4347] EXT4-fs (loop4): Ignoring removed orlov option
[   83.793652][ T4326] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[   83.869103][ T4347] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,grpid,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,orlov,orlov,. Quota mode: none.
[   83.901221][ T4348] process 'syz.2.31' launched './file1' with NULL argv: empty string added
[   84.021489][ T4348] SQUASHFS error: Failed to read block 0x4e8: -5
[   84.041884][ T4348] SQUASHFS error: Failed to read block 0xed04f1: -5
[   84.161018][ T4347] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz.4.32: Invalid inode table block 10510707248058774399 in block_group 0
[   84.220191][ T4347] EXT4-fs (loop4): Remounting filesystem read-only
[   84.267969][ T4347] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz.4.32: Invalid inode table block 10510707248058774399 in block_group 0
[   84.316374][ T4349] loop3: detected capacity change from 0 to 32768
[   84.363863][ T4347] EXT4-fs (loop4): Remounting filesystem read-only
[   84.380673][ T4347] EXT4-fs error (device loop4): ext4_get_max_inline_size:115: inode #15: comm syz.4.32: can't get inode location 15
[   84.458935][ T4347] EXT4-fs (loop4): Remounting filesystem read-only
[   84.479893][ T4349] XFS (loop3): Mounting V5 Filesystem
[   84.489799][ T4347] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz.4.32: Invalid inode table block 10510707248058774399 in block_group 0
[   84.541169][ T4347] EXT4-fs (loop4): Remounting filesystem read-only
[   84.544478][ T4369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.567388][ T4173] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 10510707248058774399 in block_group 0
[   84.594350][ T4173] EXT4-fs (loop4): Remounting filesystem read-only
[   84.634912][ T4173] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 10510707248058774399 in block_group 0
[   84.637461][ T4371] device syzkaller0 entered promiscuous mode
[   84.665228][ T4375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.683878][ T4369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.697226][ T4173] EXT4-fs (loop4): Remounting filesystem read-only
[   84.747893][ T4349] XFS (loop3): Ending clean mount
[   84.806646][ T4349] XFS (loop3): Quotacheck needed: Please wait.
[   84.848484][   T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.860046][ T4349] XFS (loop3): Quotacheck: Done.
[   85.043342][ T4176] XFS (loop3): Unmounting Filesystem
[   85.087649][ T4173] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 10510707248058774399 in block_group 0
[   85.141423][ T4173] EXT4-fs (loop4): Remounting filesystem read-only
[   85.157275][ T4173] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   85.158008][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.168180][ T4173] EXT4-fs (loop4): Remounting filesystem read-only
[   85.192134][ T4173] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #15: comm syz-executor: mark_inode_dirty error
[   85.204286][   T13] usb 1-1: Using ep0 maxpacket: 16
[   85.232646][ T4173] EXT4-fs (loop4): Remounting filesystem read-only
[   85.252184][ T4173] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 10510707248058774399 in block_group 0
[   85.292414][ T4173] EXT4-fs (loop4): Remounting filesystem read-only
[   85.356723][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.511669][ T4387] loop1: detected capacity change from 0 to 4096
[   85.548753][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.564682][   T13] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[   85.583495][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.623509][   T13] usb 1-1: Product: syz
[   85.636736][   T13] usb 1-1: Manufacturer: syz
[   85.643687][   T13] usb 1-1: SerialNumber: syz
[   85.648593][ T4387] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   85.685222][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.698784][   T13] usb 1-1: config 0 descriptor??
[   85.795763][ T4393] netlink: 'syz.3.41': attribute type 10 has an invalid length.
[   85.857327][ T4393] device veth0_macvtap left promiscuous mode
[   85.890523][ T4393] batman_adv: batadv0: Adding interface: macvtap0
[   85.918573][ T4393] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.939298][   T26] audit: type=1800 audit(1742329974.332:3): pid=4387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file1" dev="loop1" ino=33 res=0 errno=0
[   86.022603][ T1336] usb 1-1: USB disconnect, device number 2
[   86.035848][ T4393] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[   86.171654][ T4402] loop2: detected capacity change from 0 to 512
[   86.351123][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   86.371637][ T4402] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.417928][ T4414] loop3: detected capacity change from 0 to 128
[   86.450346][ T4402] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.50: Unrecognised inode hash code 20
[   86.457594][ T4399] chnl_net:caif_netlink_parms(): no params data found
[   86.469977][ T4402] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.50: Corrupt directory, running e2fsck is recommended
[   86.486794][ T4414] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   86.518310][ T4414] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   86.525362][ T4402] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.50: Unrecognised inode hash code 20
[   86.551710][ T4402] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.50: Corrupt directory, running e2fsck is recommended
[   86.583300][ T4402] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.50: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18
[   86.622626][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.631076][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.640355][ T4399] device bridge_slave_0 entered promiscuous mode
[   86.650282][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.658348][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.667399][ T4399] device bridge_slave_1 entered promiscuous mode
[   86.722389][ T1111] cfg80211: failed to load regulatory.db
[   86.732026][  T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   86.808400][ T4399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.885191][ T4399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.977454][ T4399] team0: Port device team_slave_0 added
[   86.991310][ T4399] team0: Port device team_slave_1 added
[   87.069743][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.111371][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.145963][ T4399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.205102][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.229260][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.281896][ T4399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.428264][ T2302] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   87.451242][ T4441] loop2: detected capacity change from 0 to 1024
[   87.459007][ T2302] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   87.481004][ T4399] device hsr_slave_0 entered promiscuous mode
[   87.496437][ T4399] device hsr_slave_1 entered promiscuous mode
[   87.512858][ T4219] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   87.526098][ T4399] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.545209][ T4399] Cannot create hsr debugfs directory
[   87.567431][ T4441] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext2
[   87.944442][ T4219] usb 1-1: unable to get BOS descriptor or descriptor too short
[   88.049943][ T4399] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   88.069346][ T4399] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   88.088099][ T4424] loop3: detected capacity change from 0 to 65536
[   88.113774][ T4219] usb 1-1: unable to read config index 0 descriptor/start: -71
[   88.123981][ T4219] usb 1-1: can't read configurations, error -71
[   88.154755][ T4399] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   88.173336][ T4399] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   88.214555][ T1336] Bluetooth: hci0: command 0x0409 tx timeout
[   88.258270][ T4424] XFS (loop3): Mounting V5 Filesystem
[   88.302025][ T4466] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   88.468509][ T4424] XFS (loop3): Ending clean mount
[   88.506226][ T4424] XFS (loop3): Quotacheck needed: Please wait.
[   88.632515][ T4399] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.671057][ T4424] XFS (loop3): Quotacheck: Done.
[   88.671184][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.722207][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.845213][ T4399] 8021q: adding VLAN 0 to HW filter on device team0
[   88.920797][ T4485] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   88.946435][ T4424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.131517][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.151005][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.171250][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.178664][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.230182][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.256680][ T4498] loop1: detected capacity change from 0 to 512
[   89.290847][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.301757][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.310870][  T446] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.318082][  T446] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.318294][ T4498] EXT4-fs (loop1): Ignoring removed bh option
[   89.354755][ T4498] EXT4-fs (loop1): Unrecognized mount option "fowner<00000000000000060928" or missing value
[   89.367856][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.384027][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.417841][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.435846][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.480163][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.504750][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.514870][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.531764][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.548258][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.589349][ T4176] XFS (loop3): Unmounting Filesystem
[   89.652735][ T4399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.696768][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.294934][ T1108] Bluetooth: hci0: command 0x041b tx timeout
[   90.463823][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.472375][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.491554][ T4505] loop2: detected capacity change from 0 to 512
[   90.708530][ T4505] EXT4-fs (loop2): Ignoring removed bh option
[   90.772056][ T4505] EXT4-fs (loop2): Unrecognized mount option "fowner<00000000000000060928" or missing value
[   91.160814][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.168483][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.466796][ T4399] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.528489][ T4525] loop1: detected capacity change from 0 to 256
[   91.565343][    T9] device hsr_slave_0 left promiscuous mode
[   91.620962][    T9] device hsr_slave_1 left promiscuous mode
[   91.663973][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.702474][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.765442][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.773347][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.878163][    T9] device bridge_slave_1 left promiscuous mode
[   91.893361][ T4533] loop2: detected capacity change from 0 to 512
[   91.905183][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.948954][ T4525] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   92.000189][   T26] audit: type=1800 audit(1742329980.392:4): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.75" name="file1" dev="loop1" ino=1048590 res=0 errno=0
[   92.031344][    T9] device bridge_slave_0 left promiscuous mode
[   92.032035][ T4519] exFAT-fs (loop1): hint_cluster is invalid (17)
[   92.067840][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.069143][ T4519] Zero length message leads to an empty skb
[   92.076096][ T4533] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   92.134176][ T4533] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.209206][    T9] device veth1_macvtap left promiscuous mode
[   92.239089][    T9] device veth0_macvtap left promiscuous mode
[   92.279051][ T4533] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters
[   92.308460][    T9] device veth1_vlan left promiscuous mode
[   92.361170][    T9] device veth0_vlan left promiscuous mode
[   92.384044][ T4533] EXT4-fs (loop2): Remounting filesystem read-only
[   92.391167][ T4533] Quota error (device loop2): write_blk: dquota write failed
[   92.435352][ T4533] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   92.475205][ T4533] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.76: Failed to acquire dquot type 0
[   92.500868][ T4533] EXT4-fs (loop2): Remounting filesystem read-only
[   92.534321][   T21] Bluetooth: hci0: command 0x040f tx timeout
[   92.540858][ T4533] Quota error (device loop2): write_blk: dquota write failed
[   92.558211][ T4533] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   92.584918][ T4533] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.76: Failed to acquire dquot type 0
[   92.608906][ T4533] EXT4-fs (loop2): Remounting filesystem read-only
[   92.645813][ T4533] Quota error (device loop2): write_blk: dquota write failed
[   92.669096][ T4533] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   92.696242][ T4533] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.76: Failed to acquire dquot type 0
[   92.723772][ T4533] EXT4-fs (loop2): Remounting filesystem read-only
[   92.732563][ T4533] EXT4-fs (loop2): 1 orphan inode deleted
[   92.756401][ T4533] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noblock_validity,nomblk_io_submit,noinit_itable,errors=remount-ro,init_itable,noauto_da_alloc,usrquota,resgid=0x000000000000ee002. Quota mode: writeback.
[   92.783741][ T4219] Bluetooth: hci2: command 0x0409 tx timeout
[   93.096872][    T9] team0 (unregistering): Port device team_slave_1 removed
[   93.124405][    T9] team0 (unregistering): Port device team_slave_0 removed
[   93.150386][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.169146][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.215786][ T4550] loop1: detected capacity change from 0 to 32768
[   93.271118][    T9] bond0 (unregistering): Released all slaves
[   93.315371][ T4550] XFS (loop1): Mounting V5 Filesystem
[   93.343633][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   93.455588][ T4550] XFS (loop1): Ending clean mount
[   93.484232][ T4550] XFS (loop1): Quotacheck needed: Please wait.
[   93.583809][   T23] usb 3-1: Using ep0 maxpacket: 8
[   93.599140][ T4509] chnl_net:caif_netlink_parms(): no params data found
[   93.609810][ T4550] XFS (loop1): Quotacheck: Done.
[   93.708174][   T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   93.732840][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.737229][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.775307][   T23] usb 3-1: config 0 descriptor??
[   93.799915][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.878902][ T4174] XFS (loop1): Unmounting Filesystem
[   93.907490][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.956727][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.062352][ T4399] device veth0_vlan entered promiscuous mode
[   94.079046][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.095094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.113966][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.121161][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.151541][ T4509] device bridge_slave_0 entered promiscuous mode
[   94.254841][ T4399] device veth1_vlan entered promiscuous mode
[   94.281893][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.297884][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.316817][ T4509] device bridge_slave_1 entered promiscuous mode
[   94.411214][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   94.428401][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   94.444412][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.453317][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.481483][ T4399] device veth0_macvtap entered promiscuous mode
[   94.505948][ T4509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.527189][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.544465][ T4399] device veth1_macvtap entered promiscuous mode
[   94.568393][ T4509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.614363][ T4219] Bluetooth: hci0: command 0x0419 tx timeout
[   94.636827][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.660014][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.672423][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.689799][ T4586] loop1: detected capacity change from 0 to 4096
[   94.704194][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.720876][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.741831][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.762705][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.791762][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.809599][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.847576][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.856637][ T4220] Bluetooth: hci2: command 0x041b tx timeout
[   94.872541][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.888079][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.912801][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.926241][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.946413][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.956800][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.967824][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.978569][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.990099][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.002023][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.015276][ T4509] team0: Port device team_slave_0 added
[   95.076509][ T4399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.086275][ T4399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.095672][ T4399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.106455][ T4399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.132559][ T4509] team0: Port device team_slave_1 added
[   95.149302][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.174654][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.307085][ T4509] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.323491][ T4509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.383511][ T4509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.405648][ T4509] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.412725][ T4509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.483575][ T4509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.534207][ T4573] chnl_net:caif_netlink_parms(): no params data found
[   95.593587][   T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   95.620963][   T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[   95.662245][   T23] asix: probe of 3-1:0.0 failed with error -71
[   95.677744][   T23] usb 3-1: USB disconnect, device number 2
[   95.828344][ T4509] device hsr_slave_0 entered promiscuous mode
[   95.873868][ T4509] device hsr_slave_1 entered promiscuous mode
[   95.899694][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.953585][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.036496][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   96.063843][ T4219] Bluetooth: hci3: command 0x0409 tx timeout
[   96.099968][  T446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.107480][ T4573] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.119402][  T446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.153501][ T4573] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.177321][ T4573] device bridge_slave_0 entered promiscuous mode
[   96.223601][ T4573] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.251166][ T4573] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.278505][ T4174] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[   96.284993][ T4573] device bridge_slave_1 entered promiscuous mode
[   96.294203][ T4174] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   96.295291][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   96.407798][ T4573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.477152][ T4573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.676438][ T4620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.679843][ T4614] loop2: detected capacity change from 0 to 4096
[   96.719130][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   96.784740][ T4621] loop5: detected capacity change from 0 to 1024
[   96.799532][   T23] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   96.822226][ T4573] team0: Port device team_slave_0 added
[   96.860252][ T4621] EXT4-fs (loop5): Mount option "nodioread_nolock" incompatible with ext2
[   96.885558][ T4624] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.916397][ T4573] team0: Port device team_slave_1 added
[   96.943677][ T4257] Bluetooth: hci2: command 0x040f tx timeout
[   97.075930][ T4573] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.082916][ T4573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.188108][ T4573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.243175][ T4573] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.271153][ T4573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.345665][ T4573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.436684][ T4509] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   97.515531][ T4509] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   97.594414][ T4509] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   97.673051][ T4509] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   97.713483][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.767953][ T4573] device hsr_slave_0 entered promiscuous mode
[   97.793287][ T4573] device hsr_slave_1 entered promiscuous mode
[   97.814198][ T4573] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.821664][ T4647] input: syz0 as /devices/virtual/input/input5
[   97.842638][ T4573] Cannot create hsr debugfs directory
[   98.083861][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.106230][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.133845][   T13] Bluetooth: hci3: command 0x041b tx timeout
[   98.142280][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.164064][   T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.181620][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.215882][   T23] usb 2-1: config 0 descriptor??
[   98.270091][ T4573] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.392840][ T4573] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.461291][ T4509] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.514378][ T4573] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.551391][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   98.570044][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   98.602812][ T4509] 8021q: adding VLAN 0 to HW filter on device team0
[   98.650365][ T4573] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.700711][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   98.724664][   T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   98.765050][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   98.791261][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.798903][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.822396][   T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   98.921248][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.023601][ T4220] Bluetooth: hci2: command 0x0419 tx timeout
[   99.049104][ T4668] kvm: emulating exchange as write
[   99.061108][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   99.092689][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   99.123293][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   99.144044][    C1] plantronics 0003:047F:FFFF.0003: hid_field_extract() called with n (132) > 32! (syz.5.96)
[   99.185453][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.192645][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.204169][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   99.224181][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   99.287700][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.351391][   T21] usb 2-1: USB disconnect, device number 2
[   99.357671][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   99.396199][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   99.445669][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   99.497042][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.522041][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   99.538022][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   99.554413][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   99.563296][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   99.587768][ T4509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.602138][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.623598][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   99.635867][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   99.679617][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.817853][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   99.829253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.888963][ T4509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.018992][ T4257] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  100.079560][ T4701] loop1: detected capacity change from 0 to 1024
[  100.100129][ T4257] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  100.157663][ T4701] EXT4-fs (loop1): Mount option "nodioread_nolock" incompatible with ext2
[  100.213848][ T4219] Bluetooth: hci3: command 0x040f tx timeout
[  100.314922][ T4573] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.349069][ T4573] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.395687][ T4573] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.503504][ T4573] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  100.518429][ T4716] loop2: detected capacity change from 0 to 4096
[  100.574107][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  100.591857][ T4722] loop1: detected capacity change from 0 to 512
[  100.617027][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  100.644238][ T4722] EXT4-fs (loop1): Ignoring removed bh option
[  100.650833][ T4722] EXT4-fs (loop1): Unrecognized mount option "fowner<00000000000000060928" or missing value
[  100.753111][ T4725] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.782424][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  100.797736][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  100.812414][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  100.822161][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  100.849506][ T4509] device veth0_vlan entered promiscuous mode
[  100.941033][ T4699] loop5: detected capacity change from 0 to 40427
[  101.080959][ T4699] F2FS-fs (loop5): invalid crc value
[  101.110520][ T4509] device veth1_vlan entered promiscuous mode
[  101.239093][ T4699] F2FS-fs (loop5): Found nat_bits in checkpoint
[  101.730849][ T4699] F2FS-fs (loop5): Start checkpoint disabled!
[  101.826661][ T4699] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  101.838789][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  101.981729][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  102.024147][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.078227][ T4573] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.092630][ T4509] device veth0_macvtap entered promiscuous mode
[  102.123745][ T4745] loop2: detected capacity change from 0 to 256
[  102.158228][ T4745] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  102.175893][   T26] audit: type=1800 audit(1742329990.572:5): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.107" name="file1" dev="loop2" ino=1048593 res=0 errno=0
[  102.200025][ T4745] exFAT-fs (loop2): hint_cluster is invalid (17)
[  102.229313][ T4509] device veth1_macvtap entered promiscuous mode
[  102.256278][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  102.265486][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  102.293964][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.304145][ T1336] Bluetooth: hci3: command 0x0419 tx timeout
[  102.334866][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.417724][ T4573] 8021q: adding VLAN 0 to HW filter on device team0
[  102.437985][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.461578][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.475857][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.516011][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.526796][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.537848][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.563984][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.585003][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.601782][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.613046][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.628074][ T4509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.667304][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.696989][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.717402][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.731890][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.737241][  T144] attempt to access beyond end of device
[  102.737241][  T144] loop5: rw=2049, want=40968, limit=40427
[  102.744211][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.772903][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.784336][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.807741][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.833684][ T4509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.853434][ T4509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.867840][ T4738] loop1: detected capacity change from 0 to 40427
[  102.878866][ T4509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.897566][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  102.914672][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.934297][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.954116][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.994936][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.002124][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.033574][ T4738] F2FS-fs (loop1): invalid crc value
[  103.066904][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.096356][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.121317][ T4738] F2FS-fs (loop1): Found nat_bits in checkpoint
[  103.128723][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.135945][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.155291][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  103.179102][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.204455][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  103.269981][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.295463][ T4738] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.324688][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.368268][ T4509] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.385614][ T4738] F2FS-fs (loop1) : inject slab alloc in f2fs_kmem_cache_alloc of new_inode_pseudo+0x60/0x210
[  103.396782][ T4509] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.405759][ T4509] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.421265][ T4509] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.443729][ T4219] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  103.469133][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.481591][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.515441][ T4174] attempt to access beyond end of device
[  103.515441][ T4174] loop1: rw=2049, want=45120, limit=40427
[  103.584324][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.604874][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.625332][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.703920][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.719720][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.744999][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.758252][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.785134][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  103.843820][ T4219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.863801][ T4219] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.887448][ T4219] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  103.903834][ T4219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.922008][ T4219] usb 3-1: config 0 descriptor??
[  104.102556][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.117398][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.159137][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  104.205308][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.228038][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.376234][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  104.489414][ T4783] loop1: detected capacity change from 0 to 32768
[  104.502140][ T4219] ortek 0003:1223:3F07.0005: unknown main item tag 0x6
[  104.521232][ T4219] ortek 0003:1223:3F07.0005: report_id 29495 is invalid
[  104.536814][ T4219] ortek 0003:1223:3F07.0005: item 0 2 1 8 parsing failed
[  104.553015][ T4219] ortek: probe of 0003:1223:3F07.0005 failed with error -22
[  104.571343][ T4783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.110 (4783)
[  104.602845][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.643851][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.660701][ T4573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.682348][ T4783] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  104.691621][ T4783] BTRFS info (device loop1): using free space tree
[  104.700470][ T4783] BTRFS info (device loop1): has skinny extents
[  104.710578][    T9] device hsr_slave_0 left promiscuous mode
[  104.774277][    T9] device hsr_slave_1 left promiscuous mode
[  104.851382][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.861274][ T4765] loop2: detected capacity change from 0 to 2048
[  104.867952][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.904602][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.912083][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.915228][ T4765] Alternate GPT is invalid, using primary GPT.
[  104.950941][ T4765]  loop2: p1 p2 p3
[  104.964465][    T9] batman_adv: batadv0: Removing interface: macvtap0
[  104.995835][    T9] device bridge_slave_1 left promiscuous mode
[  105.002098][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.082311][ T4783] BTRFS info (device loop1): enabling ssd optimizations
[  105.220435][ T1231] BTRFS info (device loop1): space_info 5 has 10264576 free, is not full
[  105.229858][ T1231] BTRFS info (device loop1): space_info total=11534336, used=53248, pinned=0, reserved=16384, may_use=1200128, readonly=0 zone_unusable=0
[  105.244067][ T1231] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 847872
[  105.253015][ T1231] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  105.261632][ T1231] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  105.269331][ T1231] BTRFS info (device loop1): delayed_block_rsv: size 32768 reserved 32768
[  105.277896][ T1231] BTRFS info (device loop1): delayed_refs_rsv: size 720896 reserved 151552
[  105.313848][    T9] device bridge_slave_0 left promiscuous mode
[  105.321594][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.352457][    T9] device hsr_slave_0 left promiscuous mode
[  105.418207][    T9] device hsr_slave_1 left promiscuous mode
[  105.435430][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.442906][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.476216][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.503810][ T4794] loop6: detected capacity change from 0 to 32768
[  105.513765][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.549065][ T4794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.71 (4794)
[  105.574142][    T9] device bridge_slave_1 left promiscuous mode
[  105.580388][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.623613][    T9] device bridge_slave_0 left promiscuous mode
[  105.632814][   T23] usb 3-1: USB disconnect, device number 3
[  105.665379][ T4794] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  105.668847][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.711317][ T4794] BTRFS info (device loop6): enabling auto defrag
[  105.753700][ T4794] BTRFS info (device loop6): doing ref verification
[  105.760359][ T4794] BTRFS info (device loop6): use no compression
[  105.768555][    T9] device veth1_macvtap left promiscuous mode
[  105.776922][    T9] device veth1_vlan left promiscuous mode
[  105.812054][    T9] device veth0_vlan left promiscuous mode
[  105.833305][ T4794] BTRFS info (device loop6): max_inline at 4096
[  105.876389][ T4794] BTRFS info (device loop6): enabling ssd optimizations
[  105.892112][ T4797] loop5: detected capacity change from 0 to 32768
[  105.904082][ T4794] BTRFS info (device loop6): using spread ssd allocation scheme
[  105.933996][ T4794] BTRFS info (device loop6): using free space tree
[  105.941149][ T4794] BTRFS info (device loop6): has skinny extents
[  105.970252][ T4797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.112 (4797)
[  106.157851][ T4797] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  106.167123][ T4797] BTRFS info (device loop5): setting nodatacow, compression disabled
[  106.177364][ T4797] BTRFS info (device loop5): metadata ratio 1
[  106.184255][ T4797] BTRFS info (device loop5): enabling auto defrag
[  106.191780][ T4797] BTRFS error (device loop5): support for check_integrity* not compiled in!
[  106.201999][    T9] device veth1_macvtap left promiscuous mode
[  106.211191][    T9] device veth0_macvtap left promiscuous mode
[  106.220977][ T4797] BTRFS error (device loop5): open_ctree failed: -22
[  106.231792][    T9] device veth1_vlan left promiscuous mode
[  106.238860][    T9] device veth0_vlan left promiscuous mode
[  107.124181][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.133360][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.142458][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.151686][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.160900][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.170239][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.179277][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.188422][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.197504][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  107.206562][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  108.145416][    T9] team0 (unregistering): Port device team_slave_1 removed
[  108.170963][    T9] team0 (unregistering): Port device team_slave_0 removed
[  108.186743][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.202288][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.283729][    T9] bond0 (unregistering): Released all slaves
[  108.459239][    T9] team0 (unregistering): Port device team_slave_1 removed
[  108.476559][    T9] team0 (unregistering): Port device team_slave_0 removed
[  108.497904][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.517373][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.602327][    T9] bond0 (unregistering): Released all slaves
[  108.778107][ T4573] device veth0_vlan entered promiscuous mode
[  108.829426][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.853374][ T4877] loop2: detected capacity change from 0 to 512
[  108.871475][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.882487][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.911690][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.923329][ T4877] EXT4-fs (loop2): orphan cleanup on readonly fs
[  108.980042][ T4877] EXT4-fs error (device loop2): ext4_quota_enable:6388: comm syz.2.129: inode #65535: comm syz.2.129: iget: illegal inode #
[  109.004259][ T4877] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.129: Bad quota inode: 65535, type: 2
[  109.065354][ T4573] device veth1_vlan entered promiscuous mode
[  109.120700][ T4877] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-117, ino=65535). Please run e2fsck to fix.
[  109.150708][ T4895] loop6: detected capacity change from 0 to 512
[  109.160019][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.168731][ T4877] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  109.176444][ T4877] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.183030][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.227955][ T4895] EXT4-fs (loop6): Ignoring removed bh option
[  109.250464][ T4895] EXT4-fs (loop6): Unrecognized mount option "fowner<00000000000000060928" or missing value
[  109.280983][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  109.306380][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  109.367302][ T4573] device veth0_macvtap entered promiscuous mode
[  109.461536][ T4573] device veth1_macvtap entered promiscuous mode
[  109.534080][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.542770][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  110.214263][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  110.266544][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  110.334830][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.347098][ T4912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  110.408394][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.468103][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.485497][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.496674][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.514285][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.543509][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.560831][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.615300][ T4573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.625390][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  110.655374][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.700728][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.750879][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.802274][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.807055][ T4924] loop2: detected capacity change from 0 to 1024
[  110.842050][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.864171][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.905428][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.931855][ T4573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.967231][ T4573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.004310][ T4573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.023208][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.052363][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.098269][ T4573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.129978][ T4573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.154320][ T4924] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,resgid=0x0000000000000000,grpquota,sysvgroups,,errors=continue. Quota mode: writeback.
[  111.185714][ T4940] loop6: detected capacity change from 0 to 512
[  111.192993][ T4573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.202718][ T4573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.260442][ T4940] EXT4-fs (loop6): Ignoring removed bh option
[  111.268596][ T4940] EXT4-fs (loop6): Unrecognized mount option "fowner<00000000000000060928" or missing value
[  111.303209][ T4898] loop5: detected capacity change from 0 to 32768
[  111.381552][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.495038][ T4898] XFS (loop5): Mounting V5 Filesystem
[  111.516305][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.570055][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.826394][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.164010][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.221152][ T4898] XFS (loop5): Ending clean mount
[  112.256293][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  112.291905][ T4898] XFS (loop5): Quotacheck needed: Please wait.
[  112.384453][ T4961] netlink: 68 bytes leftover after parsing attributes in process `syz.6.134'.
[  112.563752][ T4898] XFS (loop5): Quotacheck: Done.
[  112.667000][ T4399] XFS (loop5): Unmounting Filesystem
[  113.693607][ T4841] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  113.835134][ T4981] loop6: detected capacity change from 0 to 32768
[  113.898303][ T4981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.138 (4981)
[  114.106669][ T4981] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  114.123709][ T4841] usb 2-1: config 0 has an invalid interface number: 178 but max is 0
[  114.131931][ T4841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.153093][ T4841] usb 2-1: config 0 has no interface number 0
[  114.156933][ T4981] BTRFS info (device loop6): using free space tree
[  114.225503][ T4981] BTRFS info (device loop6): has skinny extents
[  114.289658][ T5005] chnl_net:caif_netlink_parms(): no params data found
[  114.353839][ T4841] usb 2-1: New USB device found, idVendor=4c94, idProduct=2388, bcdDevice=c6.b5
[  114.370789][ T4841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.379573][ T4841] usb 2-1: Product: syz
[  114.384507][ T4841] usb 2-1: Manufacturer: syz
[  114.390503][ T4841] usb 2-1: SerialNumber: syz
[  114.398192][ T4841] usb 2-1: config 0 descriptor??
[  114.530429][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.549635][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.559331][ T4981] BTRFS info (device loop6): enabling ssd optimizations
[  114.585697][ T5005] device bridge_slave_0 entered promiscuous mode
[  114.667429][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.707383][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.739348][ T5005] device bridge_slave_1 entered promiscuous mode
[  114.774006][ T4841] usb 2-1: MIDIStreaming interface descriptor not found
[  114.918010][ T5005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.940623][ T4841] usb 2-1: USB disconnect, device number 3
[  114.991777][ T5005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.255354][ T5005] team0: Port device team_slave_0 added
[  115.283697][ T5010] loop5: detected capacity change from 0 to 40427
[  115.315297][ T5005] team0: Port device team_slave_1 added
[  115.354843][ T5010] F2FS-fs (loop5): invalid crc value
[  115.406304][ T5010] F2FS-fs (loop5): Found nat_bits in checkpoint
[  115.465221][ T1231] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  115.514596][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.521601][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.649760][ T5005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.707082][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.719405][ T5010] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  115.743903][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.858318][ T5005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.893749][ T4821] Bluetooth: hci3: command 0x0409 tx timeout
[  116.025939][ T5010] attempt to access beyond end of device
[  116.025939][ T5010] loop5: rw=2049, want=77832, limit=40427
[  116.079046][ T5005] device hsr_slave_0 entered promiscuous mode
[  116.110943][ T5005] device hsr_slave_1 entered promiscuous mode
[  116.158307][ T5005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.173480][ T5005] Cannot create hsr debugfs directory
[  116.640250][ T5076] syz.5.143 (5076): drop_caches: 2
[  116.648893][ T5005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.755036][ T5086] device bridge1 entered promiscuous mode
[  116.765933][ T4399] attempt to access beyond end of device
[  116.765933][ T4399] loop5: rw=2049, want=45104, limit=40427
[  116.806970][ T5005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.012351][ T5005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.182275][ T5005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.537505][ T5005] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  117.574389][ T5005] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  117.612535][ T5005] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  117.635497][ T5005] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  117.898196][ T5005] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.909703][ T5115] loop5: detected capacity change from 0 to 256
[  117.938192][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  117.954193][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.973747][ T4862] Bluetooth: hci3: command 0x041b tx timeout
[  117.985666][ T5005] 8021q: adding VLAN 0 to HW filter on device team0
[  118.038355][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.059607][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.104739][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.111936][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.143231][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.174574][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.215300][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.222399][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.247495][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.295232][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.336067][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.413512][ T4841] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  118.460276][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.478811][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.556877][ T5108] loop1: detected capacity change from 0 to 32768
[  118.559098][ T5128] device syzkaller0 entered promiscuous mode
[  118.582115][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.591161][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  118.622816][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.650910][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  118.660677][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.672868][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  118.682264][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.699004][ T5108] XFS (loop1): Mounting V5 Filesystem
[  118.782547][ T5108] XFS (loop1): Ending clean mount
[  118.790672][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.825471][ T4841] usb 6-1: config 0 has no interfaces?
[  119.033866][ T4841] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  119.065962][ T4841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.094404][ T4841] usb 6-1: Product: syz
[  119.110777][ T4841] usb 6-1: Manufacturer: syz
[  119.118849][ T4841] usb 6-1: SerialNumber: syz
[  119.144462][ T4841] r8152-cfgselector 6-1: config 0 descriptor??
[  119.213036][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.241397][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.309284][ T5005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.367744][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.387414][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.456770][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.479704][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.520321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.545482][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.612453][ T5005] device veth0_vlan entered promiscuous mode
[  119.665806][ T5005] device veth1_vlan entered promiscuous mode
[  119.826555][ T4263] device hsr_slave_0 left promiscuous mode
[  119.843706][ T4263] device hsr_slave_1 left promiscuous mode
[  119.850601][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.887328][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.904459][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.912027][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.928577][ T5108] syz.1.150 (5108) used greatest stack depth: 18744 bytes left
[  119.941785][ T4263] device bridge_slave_1 left promiscuous mode
[  119.951349][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.961812][ T4263] device bridge_slave_0 left promiscuous mode
[  119.964515][ T4174] XFS (loop1): Unmounting Filesystem
[  119.968713][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.037041][ T4263] device veth1_macvtap left promiscuous mode
[  120.057928][ T4862] Bluetooth: hci3: command 0x040f tx timeout
[  120.065483][ T4263] device veth0_macvtap left promiscuous mode
[  120.100178][ T4263] device veth1_vlan left promiscuous mode
[  120.107159][ T4263] device veth0_vlan left promiscuous mode
[  120.153790][ T4841] r8152-cfgselector 6-1: Unknown version 0x0000
[  120.193806][ T4841] r8152-cfgselector 6-1: USB disconnect, device number 2
[  120.522139][ T5172] input: syz0 as /devices/virtual/input/input6
[  120.612488][ T4263] team0 (unregistering): Port device team_slave_1 removed
[  120.638388][ T4263] team0 (unregistering): Port device team_slave_0 removed
[  120.654475][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.701635][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.805495][ T4263] bond0 (unregistering): Released all slaves
[  120.862353][ T5005] device veth0_macvtap entered promiscuous mode
[  120.888027][ T5005] device veth1_macvtap entered promiscuous mode
[  120.903794][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  120.920138][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  120.929095][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.938426][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.948548][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.995586][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.013919][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.036342][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.052300][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.064574][ T4862] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  121.080464][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.090741][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.102330][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.109022][ T5182] loop6: detected capacity change from 0 to 164
[  121.112871][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.129119][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.140785][ T5005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.151661][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  121.161578][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.193044][ T5182] ISOFS: Bad logical zone size 25856
[  121.204957][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.222167][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.232327][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.250567][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.261871][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.272805][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.282975][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.294608][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.304786][ T4862] usb 6-1: Using ep0 maxpacket: 32
[  121.311761][ T5005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.320157][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  121.333050][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.356309][ T5005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.393900][ T5005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.412946][ T5005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.422957][ T5005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.727157][ T4862] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  121.830942][ T4862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.070597][ T4862] usb 6-1: Product: syz
[  122.153820][ T4862] usb 6-1: Manufacturer: syz
[  122.352492][ T4862] usb 6-1: SerialNumber: syz
[  122.404579][ T4862] usb 6-1: config 0 descriptor??
[  122.413544][ T4706] Bluetooth: hci3: command 0x0419 tx timeout
[  122.474389][ T4862] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  122.499823][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.509581][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.596999][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.606425][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.628459][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.648097][ T5177] loop5: detected capacity change from 0 to 22
[  122.675938][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  122.724276][ T5177] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  122.785006][ T5177] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  122.995799][ T4862] gspca_topro: reg_w err -110
[  123.045007][ T4862] gspca_topro: Sensor soi763a
[  124.286293][    T7] usb 6-1: USB disconnect, device number 3
[  124.895563][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.171'.
[  125.144811][ T5243] syz.1.174 (5243) used greatest stack depth: 18456 bytes left
[  126.620805][ T5270] syz.1.179 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  127.141855][ T5271] chnl_net:caif_netlink_parms(): no params data found
[  127.322420][ T5290] loop1: detected capacity change from 0 to 1024
[  127.474110][ T5290] hfsplus: unable to parse mount options
[  128.217921][ T5299] loop5: detected capacity change from 0 to 512
[  128.331703][ T5299] EXT4-fs (loop5): Ignoring removed bh option
[  128.353676][ T5299] EXT4-fs (loop5): Unrecognized mount option "fowner<00000000000000060928" or missing value
[  128.581831][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.590139][ T5271] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.602625][ T5271] device bridge_slave_0 entered promiscuous mode
[  128.612351][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.619962][ T5271] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.628843][ T5271] device bridge_slave_1 entered promiscuous mode
[  128.703679][ T4823] Bluetooth: hci3: command 0x0409 tx timeout
[  128.819501][ T5271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.157329][ T5271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.625956][ T5271] team0: Port device team_slave_0 added
[  129.788077][ T5271] team0: Port device team_slave_1 added
[  129.963263][ T5322] loop1: detected capacity change from 0 to 512
[  130.387831][ T4706] Bluetooth: hci4: command 0x0409 tx timeout
[  130.426695][ T5322] EXT4-fs (loop1): Ignoring removed bh option
[  130.470550][ T5322] EXT4-fs (loop1): Unrecognized mount option "fowner<00000000000000060928" or missing value
[  130.591109][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.608443][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.641213][ T5333] kvm: MWAIT instruction emulated as NOP!
[  130.714415][ T5271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.783732][ T4823] Bluetooth: hci3: command 0x041b tx timeout
[  130.936698][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.981486][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.016778][ T5348] loop6: detected capacity change from 0 to 512
[  131.378496][ T5271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.591159][ T5271] device hsr_slave_0 entered promiscuous mode
[  131.646458][ T5271] device hsr_slave_1 entered promiscuous mode
[  131.679419][ T5271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.748240][ T5271] Cannot create hsr debugfs directory
[  131.780662][ T5300] chnl_net:caif_netlink_parms(): no params data found
[  131.917416][ T5364] loop1: detected capacity change from 0 to 1024
[  131.925743][ T4263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.010930][ T5364] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  132.022168][ T5364] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  132.029993][ T5364] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  132.091314][ T4263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.108651][ T5364] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  132.128535][ T5364] System zones: 0-1, 3-36
[  132.163432][ T5364] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  132.241276][ T4263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.318520][   T26] audit: type=1800 audit(1742330020.712:6): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.195" name="bus" dev="loop1" ino=18 res=0 errno=0
[  132.353514][   T26] audit: type=1800 audit(1742330020.742:7): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.195" name="bus" dev="loop1" ino=18 res=0 errno=0
[  132.400073][ T5300] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.415869][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.441431][ T5300] device bridge_slave_0 entered promiscuous mode
[  132.455054][ T4862] Bluetooth: hci4: command 0x041b tx timeout
[  132.488260][ T4263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.537560][ T5300] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.548433][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.574267][ T5300] device bridge_slave_1 entered promiscuous mode
[  132.701620][ T5300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.836062][ T5271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.854025][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.860408][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  132.950850][    T7] Bluetooth: hci3: command 0x040f tx timeout
[  132.965505][ T5300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.365612][ T5271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.817076][ T5300] team0: Port device team_slave_0 added
[  133.849427][ T5271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.924196][ T5400] loop1: detected capacity change from 0 to 512
[  133.997039][ T5300] team0: Port device team_slave_1 added
[  134.040361][ T5400] EXT4-fs (loop1): Ignoring removed bh option
[  134.058155][ T5400] EXT4-fs (loop1): Unrecognized mount option "fowner<00000000000000060928" or missing value
[  134.145424][ T5408] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 1, id = 0
[  134.161592][ T5271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.260202][ T5407] netlink: 96 bytes leftover after parsing attributes in process `syz.5.202'.
[  134.294296][ T5300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.301380][ T5300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.526610][ T5300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.543707][ T4839] Bluetooth: hci4: command 0x040f tx timeout
[  134.546896][ T5300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.569294][ T5300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.728670][ T5420] loop5: detected capacity change from 0 to 512
[  134.978616][ T5420] EXT4-fs (loop5): Ignoring removed bh option
[  134.993776][ T5300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.023047][ T5420] EXT4-fs (loop5): Unrecognized mount option "fowner<00000000000000060928" or missing value
[  135.208394][ T4841] Bluetooth: hci3: command 0x0419 tx timeout
[  135.860584][ T5430] loop6: detected capacity change from 0 to 8192
[  137.216922][ T5430] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  137.228421][ T5430] REISERFS (device loop6): using ordered data mode
[  137.235157][ T5430] reiserfs: using flush barriers
[  137.247887][ T5430] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  137.270498][ T5430] REISERFS (device loop6): checking transaction log (loop6)
[  137.333136][ T5300] device hsr_slave_0 entered promiscuous mode
[  137.430487][ T5300] device hsr_slave_1 entered promiscuous mode
[  137.499497][ T5300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.589698][ T5300] Cannot create hsr debugfs directory
[  137.790333][ T4841] Bluetooth: hci4: command 0x0419 tx timeout
[  139.110678][ T5271] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  139.336748][ T5271] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  139.569746][ T5271] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  139.854660][ T5271] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  139.994024][ T5430] REISERFS (device loop6): Using r5 hash to sort names
[  140.001178][ T5430] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  141.286982][ T5300] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  141.384380][ T5271] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.395099][ T5300] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  141.405812][ T5478] device pim6reg1 entered promiscuous mode
[  141.421093][ T5300] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  141.522316][ T5271] 8021q: adding VLAN 0 to HW filter on device team0
[  141.531443][ T5300] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  141.549869][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.558198][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.610725][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.641234][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.669867][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.677059][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.699112][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.712086][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.736709][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.744181][ T4730] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.923774][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.934764][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.891671][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.932844][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.971507][ T5489] loop5: detected capacity change from 0 to 32768
[  142.982184][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.998766][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  143.084054][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  143.118167][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  143.168168][ T5489] XFS (loop5): Mounting V5 Filesystem
[  143.175579][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  143.211861][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  143.284385][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  143.292901][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  143.376678][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  143.398409][ T5489] XFS (loop5): Ending clean mount
[  143.469390][ T5489] XFS (loop5): Quotacheck needed: Please wait.
[  143.559962][ T5489] XFS (loop5): Quotacheck: Done.
[  143.753939][ T5300] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.811895][ T5300] 8021q: adding VLAN 0 to HW filter on device team0
[  143.871778][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.894435][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.956258][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.971509][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  144.024590][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.031779][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.078340][ T5537] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  144.252937][ T4263] device hsr_slave_0 left promiscuous mode
[  144.283480][ T4263] device hsr_slave_1 left promiscuous mode
[  144.339588][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.368210][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.394264][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.420375][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.444973][ T4263] device bridge_slave_1 left promiscuous mode
[  144.453804][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.488905][ T4263] device bridge_slave_0 left promiscuous mode
[  144.510955][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.567677][ T4263] device hsr_slave_0 left promiscuous mode
[  144.595345][ T4263] device hsr_slave_1 left promiscuous mode
[  144.610680][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.627405][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.646282][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.662792][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.670890][ T5540] loop6: detected capacity change from 0 to 32768
[  144.680096][ T4263] device bridge_slave_1 left promiscuous mode
[  144.690940][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.701053][ T4263] device bridge_slave_0 left promiscuous mode
[  144.707876][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.762308][ T4263] device veth1_macvtap left promiscuous mode
[  144.770450][ T4263] device veth0_macvtap left promiscuous mode
[  144.776903][ T4263] device veth1_vlan left promiscuous mode
[  144.784944][ T4263] device veth0_vlan left promiscuous mode
[  144.798049][ T4263] device veth1_macvtap left promiscuous mode
[  144.806865][ T4263] device veth0_macvtap left promiscuous mode
[  144.821257][ T4263] device veth1_vlan left promiscuous mode
[  144.832822][ T4263] device veth0_vlan left promiscuous mode
[  144.841247][ T5540] jfs_lookup: iget failed on inum 4
[  144.851268][ T5540] jfs_lookup: iget failed on inum 4
[  144.862714][ T5540] jfs_lookup: iget failed on inum 4
[  144.867809][ T4399] XFS (loop5): Unmounting Filesystem
[  144.868717][ T5540] jfs_lookup: iget failed on inum 4
[  145.044972][ T5540] jfs_lookup: iget failed on inum 4
[  145.054824][ T5540] jfs_lookup: iget failed on inum 4
[  145.075635][ T5540] jfs_lookup: iget failed on inum 4
[  145.081273][ T5540] jfs_lookup: iget failed on inum 4
[  145.521592][ T5545] loop5: detected capacity change from 0 to 2048
[  145.601948][ T5545] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  145.624828][ T5545] UDF-fs: Scanning with blocksize 512 failed
[  145.638211][ T5545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.816037][ T4263] team0 (unregistering): Port device team_slave_1 removed
[  145.838134][ T4263] team0 (unregistering): Port device team_slave_0 removed
[  145.872073][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.891324][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.997932][ T4263] bond0 (unregistering): Released all slaves
[  146.285948][ T4263] team0 (unregistering): Port device team_slave_1 removed
[  146.312699][ T4263] team0 (unregistering): Port device team_slave_0 removed
[  146.330622][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.347657][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.522137][ T4263] bond0 (unregistering): Released all slaves
[  146.612299][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.625609][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.648162][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.665874][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.673006][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.687005][ T5563] loop5: detected capacity change from 0 to 40427
[  146.688884][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  146.701868][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.709870][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.763685][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.775117][ T5563] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  146.823549][ T5563] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  146.834007][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.843263][ T5563] F2FS-fs (loop5): invalid crc value
[  146.891774][ T5563] F2FS-fs (loop5): Found nat_bits in checkpoint
[  146.902946][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.924144][ T5271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.942468][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  146.971508][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.002805][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.055675][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.111069][ T5563] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  147.125329][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.142531][ T5563] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  147.158705][ T5300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.214500][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.255380][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.278255][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.319904][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.342453][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.450795][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.474382][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.504519][ T5594] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  147.536322][ T5271] device veth0_vlan entered promiscuous mode
[  147.548042][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.595669][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.643786][ T5271] device veth1_vlan entered promiscuous mode
[  147.816737][ T5610] syz.1.237 sent an empty control message without MSG_MORE.
[  147.860926][ T5271] device veth0_macvtap entered promiscuous mode
[  147.914005][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  147.945898][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.006298][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.025004][ T5271] device veth1_macvtap entered promiscuous mode
[  148.072949][ T5300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.125663][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.170608][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  148.207437][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.249497][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.326387][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.368299][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.411023][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.463542][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.492610][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.538534][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.572316][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.590237][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.675665][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.708652][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.762520][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.803116][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.832080][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.867959][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.940145][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.025843][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.048216][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.118333][ T5271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.163685][ T5271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.344870][ T5271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.363723][ T5271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.169415][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  150.180383][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.237330][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.254846][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.307354][ T5300] device veth0_vlan entered promiscuous mode
[  150.407172][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.425806][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.445649][ T5300] device veth1_vlan entered promiscuous mode
[  150.477748][ T5647] xt_CT: You must specify a L4 protocol and not use inversions on it
[  151.374352][ T5300] device veth0_macvtap entered promiscuous mode
[  151.474536][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  151.511577][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  151.522912][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.536387][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.562962][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  151.617407][ T5300] device veth1_macvtap entered promiscuous mode
[  151.764063][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.796476][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.831033][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.877077][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.928163][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.974855][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.074460][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.221867][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.556493][ T5300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.619682][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.656547][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.673327][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.691297][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.725699][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.761948][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.792191][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.826773][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.861852][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.901156][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.932784][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.988833][ T5300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.033462][ T5300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.109722][ T5300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.285411][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  153.300914][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.331260][ T5300] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.415239][ T5300] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.549829][ T5300] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.712746][ T5300] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.039603][ T5435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.078545][ T5435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.218427][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  154.370738][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.393731][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.491510][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  154.709141][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.731930][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.772377][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  154.843899][ T4219] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  155.326033][ T4219] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  155.398650][ T4219] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.460379][ T4219] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.494754][ T4219] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  155.545522][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.670017][ T4219] usb 2-1: config 0 descriptor??
[  156.211179][ T4219] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  156.231510][ T4219] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  156.246086][ T4219] hid-steam 0003:28DE:1102.0006: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  156.269789][ T4219] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[  156.283865][ T4219] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[  156.333234][ T4219] hid-steam 0003:28DE:1102.0007: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  156.366570][ T5730] loop7: detected capacity change from 0 to 128
[  156.474236][ T4219] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' connected
[  156.610522][ T4219] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0006/input/input7
[  156.617981][ T5692] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0006/input/input8
[  157.314577][ T4219] usb 2-1: USB disconnect, device number 4
[  157.628979][ T4219] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' disconnected
[  157.728739][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.256'.
[  157.739089][ T5741] loop6: detected capacity change from 0 to 4096
[  157.756922][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.810220][ T5741] NILFS (loop6): invalid segment: Checksum error in segment payload
[  157.819457][ T5741] NILFS (loop6): trying rollback from an earlier position
[  157.883239][ T5741] NILFS (loop6): recovery complete
[  157.896651][ T5746] device bridge_slave_1 left promiscuous mode
[  157.916738][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.063379][ T3533] ==================================================================
[  158.072067][ T3533] BUG: KASAN: use-after-free in __mutex_lock_common+0x11e/0x25a0
[  158.079846][ T3533] Read of size 8 at addr ffff8880611a9ce8 by task acpid/3533
[  158.087267][ T3533] 
[  158.089611][ T3533] CPU: 0 PID: 3533 Comm: acpid Not tainted 5.15.179-syzkaller #0
[  158.097437][ T3533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  158.107534][ T3533] Call Trace:
[  158.110836][ T3533]  <TASK>
[  158.113780][ T3533]  dump_stack_lvl+0x1e3/0x2d0
[  158.118505][ T3533]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  158.124165][ T3533]  ? _printk+0xd1/0x120
[  158.128358][ T3533]  ? __wake_up_klogd+0xcc/0x100
[  158.133220][ T3533]  ? panic+0x860/0x860
[  158.137303][ T3533]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  158.142797][ T3533]  print_address_description+0x63/0x3b0
[  158.148371][ T3533]  ? __mutex_lock_common+0x11e/0x25a0
[  158.153808][ T3533]  kasan_report+0x16b/0x1c0
[  158.158336][ T3533]  ? __mutex_lock_common+0x11e/0x25a0
[  158.163746][ T3533]  __mutex_lock_common+0x11e/0x25a0
[  158.168976][ T3533]  ? rcu_lock_release+0x20/0x20
[  158.173855][ T3533]  ? rcu_lock_release+0x20/0x20
[  158.178730][ T3533]  ? steam_input_open+0x93/0x1b0
[  158.184217][ T3533]  ? mutex_lock_io_nested+0x60/0x60
[  158.189443][ T3533]  ? __mutex_lock_common+0x444/0x25a0
[  158.194857][ T3533]  ? input_open_device+0x4e/0x2d0
[  158.199909][ T3533]  mutex_lock_nested+0x17/0x20
[  158.204690][ T3533]  steam_input_open+0x93/0x1b0
[  158.209472][ T3533]  ? steam_input_register+0xbd0/0xbd0
[  158.214868][ T3533]  ? do_raw_spin_lock+0x14a/0x370
[  158.219946][ T3533]  input_open_device+0x188/0x2d0
[  158.224916][ T3533]  joydev_open+0x312/0x930
[  158.229364][ T3533]  chrdev_open+0x54a/0x630
[  158.233808][ T3533]  ? cd_forget+0x160/0x160
[  158.238241][ T3533]  ? do_raw_spin_unlock+0x137/0x8b0
[  158.243501][ T3533]  ? fsnotify_perm+0x47b/0x590
[  158.248291][ T3533]  ? cd_forget+0x160/0x160
[  158.252992][ T3533]  do_dentry_open+0x807/0xfb0
[  158.257721][ T3533]  path_openat+0x2705/0x2f20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  158.262449][ T3533]  ? do_filp_open+0x460/0x460
[  158.267167][ T3533]  do_filp_open+0x21c/0x460
[  158.271688][ T3533]  ? vfs_tmpfile+0x2e0/0x2e0
[  158.276320][ T3533]  ? _raw_spin_unlock+0x24/0x40
[  158.280299][ T5750] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.281218][ T3533]  ? alloc_fd+0x598/0x630
[  158.296054][ T3533]  do_sys_openat2+0x13b/0x4f0
[  158.300766][ T3533]  ? do_sys_open+0x220/0x220
[  158.305401][ T3533]  __x64_sys_openat+0x243/0x290
[  158.310286][ T3533]  ? __ia32_sys_open+0x270/0x270
[  158.315259][ T3533]  ? syscall_enter_from_user_mode+0x2e/0x240
[  158.321261][ T3533]  ? lockdep_hardirqs_on+0x94/0x130
[  158.326484][ T3533]  ? syscall_enter_from_user_mode+0x2e/0x240
[  158.332732][ T3533]  do_syscall_64+0x3b/0xb0
[  158.337184][ T3533]  ? clear_bhb_loop+0x15/0x70
[  158.341891][ T3533]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  158.347817][ T3533] RIP: 0033:0x7f49d3cde9a4
[  158.352264][ T3533] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  158.371893][ T3533] RSP: 002b:00007ffce996b770 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  158.380342][ T3533] RAX: ffffffffffffffda RBX: 00007ffce996ba58 RCX: 00007f49d3cde9a4
[  158.388345][ T3533] RDX: 0000000000080800 RSI: 00007ffce996b958 RDI: 00000000ffffff9c
[  158.396352][ T3533] RBP: 00007ffce996b958 R08: 00000000000000f4 R09: 00007ffce996b958
[  158.404349][ T3533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800
[  158.412346][ T3533] R13: 0000000000000020 R14: 00007ffce996ba58 R15: 00007ffce996b958
[  158.420451][ T3533]  </TASK>
[  158.423483][ T3533] 
[  158.425818][ T3533] Allocated by task 4219:
[  158.430163][ T3533]  ____kasan_kmalloc+0xba/0xf0
[  158.434944][ T3533]  __kmalloc_node_track_caller+0x195/0x390
[  158.440779][ T3533]  devm_kmalloc+0x7a/0x290
[  158.445226][ T3533]  steam_probe+0x11d/0xaa0
[  158.449668][ T3533]  hid_device_probe+0x2a6/0x3a0
[  158.454539][ T3533]  really_probe+0x24e/0xb60
[  158.459069][ T3533]  __driver_probe_device+0x1a2/0x3d0
[  158.464387][ T3533]  driver_probe_device+0x50/0x420
[  158.469442][ T3533]  __device_attach_driver+0x2b9/0x500
[  158.474838][ T3533]  bus_for_each_drv+0x183/0x200
[  158.479714][ T3533]  __device_attach+0x359/0x570
[  158.484502][ T3533]  bus_probe_device+0xba/0x1e0
[  158.489378][ T3533]  device_add+0xb48/0xfd0
[  158.493732][ T3533]  hid_add_device+0x3a5/0x510
[  158.498433][ T3533]  usbhid_probe+0xb32/0xec0
[  158.502964][ T3533]  usb_probe_interface+0x5c0/0xaf0
[  158.508097][ T3533]  really_probe+0x24e/0xb60
[  158.512615][ T3533]  __driver_probe_device+0x1a2/0x3d0
[  158.517914][ T3533]  driver_probe_device+0x50/0x420
[  158.522962][ T3533]  __device_attach_driver+0x2b9/0x500
[  158.528526][ T3533]  bus_for_each_drv+0x183/0x200
[  158.533396][ T3533]  __device_attach+0x359/0x570
[  158.538258][ T3533]  bus_probe_device+0xba/0x1e0
[  158.543228][ T3533]  device_add+0xb48/0xfd0
[  158.547576][ T3533]  usb_set_configuration+0x19dd/0x2020
[  158.553058][ T3533]  usb_generic_driver_probe+0x84/0x140
[  158.558541][ T3533]  usb_probe_device+0x130/0x260
[  158.563412][ T3533]  really_probe+0x24e/0xb60
[  158.567928][ T3533]  __driver_probe_device+0x1a2/0x3d0
[  158.573226][ T3533]  driver_probe_device+0x50/0x420
[  158.578293][ T3533]  __device_attach_driver+0x2b9/0x500
[  158.583784][ T3533]  bus_for_each_drv+0x183/0x200
[  158.588653][ T3533]  __device_attach+0x359/0x570
[  158.593465][ T3533]  bus_probe_device+0xba/0x1e0
[  158.598243][ T3533]  device_add+0xb48/0xfd0
[  158.602591][ T3533]  usb_new_device+0xc21/0x18f0
[  158.607371][ T3533]  hub_event+0x2cdf/0x54c0
[  158.611807][ T3533]  process_one_work+0x8a1/0x10c0
[  158.616764][ T3533]  worker_thread+0xaca/0x1280
[  158.621461][ T3533]  kthread+0x3f6/0x4f0
[  158.625542][ T3533]  ret_from_fork+0x1f/0x30
[  158.630061][ T3533] 
[  158.632393][ T3533] Freed by task 4219:
[  158.636373][ T3533]  kasan_set_track+0x4b/0x80
[  158.640979][ T3533]  kasan_set_free_info+0x1f/0x40
[  158.645937][ T3533]  ____kasan_slab_free+0xd8/0x120
[  158.650978][ T3533]  slab_free_freelist_hook+0xdd/0x160
[  158.656370][ T3533]  kfree+0xf1/0x270
[  158.660193][ T3533]  devres_release_all+0x1c1/0x240
[  158.665247][ T3533]  device_release_driver_internal+0x51d/0x7f0
[  158.671331][ T3533]  bus_remove_device+0x2e5/0x400
[  158.676296][ T3533]  device_del+0x6e2/0xbd0
[  158.680654][ T3533]  hid_destroy_device+0x64/0x100
[  158.685620][ T3533]  usbhid_disconnect+0x9a/0xc0
[  158.690407][ T3533]  usb_unbind_interface+0x1cd/0x840
[  158.695628][ T3533]  device_release_driver_internal+0x50e/0x7f0
[  158.701720][ T3533]  bus_remove_device+0x2e5/0x400
[  158.706676][ T3533]  device_del+0x6e2/0xbd0
[  158.711032][ T3533]  usb_disable_device+0x3b8/0x840
[  158.716092][ T3533]  usb_disconnect+0x33c/0x8c0
[  158.720783][ T3533]  hub_event+0x1d58/0x54c0
[  158.725215][ T3533]  process_one_work+0x8a1/0x10c0
[  158.730169][ T3533]  worker_thread+0xaca/0x1280
[  158.734869][ T3533]  kthread+0x3f6/0x4f0
[  158.738950][ T3533]  ret_from_fork+0x1f/0x30
[  158.743382][ T3533] 
[  158.745714][ T3533] The buggy address belongs to the object at ffff8880611a9c00
[  158.745714][ T3533]  which belongs to the cache kmalloc-512 of size 512
[  158.759788][ T3533] The buggy address is located 232 bytes inside of
[  158.759788][ T3533]  512-byte region [ffff8880611a9c00, ffff8880611a9e00)
[  158.773091][ T3533] The buggy address belongs to the page:
[  158.779174][ T3533] page:ffffea0001846a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880611a8000 pfn:0x611a8
[  158.790660][ T3533] head:ffffea0001846a00 order:2 compound_mapcount:0 compound_pincount:0
[  158.799005][ T3533] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  158.807030][ T3533] raw: 00fff00000010200 ffffea0001836108 ffffea00008aae08 ffff888017441c80
[  158.815641][ T3533] raw: ffff8880611a8000 000000000010000c 00000001ffffffff 0000000000000000
[  158.824238][ T3533] page dumped because: kasan: bad access detected
[  158.830676][ T3533] page_owner tracks the page as allocated
[  158.836414][ T3533] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4186, ts 74692886490, free_ts 20873974192
[  158.855540][ T3533]  get_page_from_freelist+0x3b78/0x3d40
[  158.861259][ T3533]  __alloc_pages+0x272/0x700
[  158.865877][ T3533]  new_slab+0xbb/0x4b0
[  158.869975][ T3533]  ___slab_alloc+0x6f6/0xe10
[  158.874593][ T3533]  __kmalloc_node_track_caller+0x1f6/0x390
[  158.880422][ T3533]  __alloc_skb+0x12c/0x590
[  158.884863][ T3533]  inet6_netconf_notify_devconf+0xf8/0x1b0
[  158.890693][ T3533]  __addrconf_sysctl_register+0x380/0x3e0
[  158.896437][ T3533]  addrconf_sysctl_register+0x13d/0x190
[  158.902005][ T3533]  ipv6_add_dev+0xc9b/0x1180
[  158.906622][ T3533]  addrconf_notify+0x697/0xf40
[  158.911402][ T3533]  raw_notifier_call_chain+0xd0/0x170
[  158.916796][ T3533]  register_netdevice+0x128e/0x16a0
[  158.922019][ T3533]  geneve_configure+0x6c6/0xa60
[  158.926897][ T3533]  geneve_newlink+0xfb/0x1a0
[  158.931507][ T3533]  rtnl_newlink+0x14ca/0x2050
[  158.936203][ T3533] page last free stack trace:
[  158.940882][ T3533]  free_unref_page_prepare+0xc34/0xcf0
[  158.946364][ T3533]  free_unref_page+0x95/0x2d0
[  158.951069][ T3533]  free_contig_range+0x95/0xf0
[  158.955854][ T3533]  destroy_args+0xfe/0x980
[  158.960290][ T3533]  debug_vm_pgtable+0x40d/0x470
[  158.965162][ T3533]  do_one_initcall+0x22b/0x7a0
[  158.969957][ T3533]  do_initcall_level+0x157/0x210
[  158.974933][ T3533]  do_initcalls+0x49/0x90
[  158.979287][ T3533]  kernel_init_freeable+0x425/0x5c0
[  158.984507][ T3533]  kernel_init+0x19/0x290
[  158.988856][ T3533]  ret_from_fork+0x1f/0x30
[  158.993290][ T3533] 
[  158.995622][ T3533] Memory state around the buggy address:
[  159.001263][ T3533]  ffff8880611a9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  159.009345][ T3533]  ffff8880611a9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.017439][ T3533] >ffff8880611a9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.025514][ T3533]                                                           ^
[  159.032982][ T3533]  ffff8880611a9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.041064][ T3533]  ffff8880611a9d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.049138][ T3533] ==================================================================
[  159.057211][ T3533] Disabling lock debugging due to kernel taint
[  159.196741][ T3533] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  159.204247][ T3533] CPU: 0 PID: 3533 Comm: acpid Tainted: G    B             5.15.179-syzkaller #0
[  159.213363][ T3533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  159.223422][ T3533] Call Trace:
[  159.226695][ T3533]  <TASK>
[  159.229625][ T3533]  dump_stack_lvl+0x1e3/0x2d0
[  159.234306][ T3533]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  159.239938][ T3533]  ? panic+0x860/0x860
[  159.243999][ T3533]  ? rcu_is_watching+0x11/0xa0
[  159.248764][ T3533]  ? preempt_schedule_common+0xa6/0xd0
[  159.254225][ T3533]  panic+0x318/0x860
[  159.258118][ T3533]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  159.264268][ T3533]  ? check_panic_on_warn+0x1d/0xa0
[  159.269378][ T3533]  ? fb_is_primary_device+0xd0/0xd0
[  159.274584][ T3533]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  159.281609][ T3533]  ? _raw_spin_unlock+0x40/0x40
[  159.286457][ T3533]  check_panic_on_warn+0x7e/0xa0
[  159.291413][ T3533]  ? __mutex_lock_common+0x11e/0x25a0
[  159.296790][ T3533]  end_report+0x6d/0xf0
[  159.300971][ T3533]  kasan_report+0x18e/0x1c0
[  159.305469][ T3533]  ? __mutex_lock_common+0x11e/0x25a0
[  159.310840][ T3533]  __mutex_lock_common+0x11e/0x25a0
[  159.316048][ T3533]  ? rcu_lock_release+0x20/0x20
[  159.320985][ T3533]  ? rcu_lock_release+0x20/0x20
[  159.325838][ T3533]  ? steam_input_open+0x93/0x1b0
[  159.330773][ T3533]  ? mutex_lock_io_nested+0x60/0x60
[  159.335990][ T3533]  ? __mutex_lock_common+0x444/0x25a0
[  159.341368][ T3533]  ? input_open_device+0x4e/0x2d0
[  159.346483][ T3533]  mutex_lock_nested+0x17/0x20
[  159.351243][ T3533]  steam_input_open+0x93/0x1b0
[  159.356032][ T3533]  ? steam_input_register+0xbd0/0xbd0
[  159.361399][ T3533]  ? do_raw_spin_lock+0x14a/0x370
[  159.366424][ T3533]  input_open_device+0x188/0x2d0
[  159.371358][ T3533]  joydev_open+0x312/0x930
[  159.375780][ T3533]  chrdev_open+0x54a/0x630
[  159.380194][ T3533]  ? cd_forget+0x160/0x160
[  159.384647][ T3533]  ? do_raw_spin_unlock+0x137/0x8b0
[  159.389845][ T3533]  ? fsnotify_perm+0x47b/0x590
[  159.394608][ T3533]  ? cd_forget+0x160/0x160
[  159.399021][ T3533]  do_dentry_open+0x807/0xfb0
[  159.403699][ T3533]  path_openat+0x2705/0x2f20
[  159.408294][ T3533]  ? do_filp_open+0x460/0x460
[  159.412973][ T3533]  do_filp_open+0x21c/0x460
[  159.417473][ T3533]  ? vfs_tmpfile+0x2e0/0x2e0
[  159.422062][ T3533]  ? _raw_spin_unlock+0x24/0x40
[  159.426905][ T3533]  ? alloc_fd+0x598/0x630
[  159.431235][ T3533]  do_sys_openat2+0x13b/0x4f0
[  159.435908][ T3533]  ? do_sys_open+0x220/0x220
[  159.440499][ T3533]  __x64_sys_openat+0x243/0x290
[  159.445345][ T3533]  ? __ia32_sys_open+0x270/0x270
[  159.450279][ T3533]  ? syscall_enter_from_user_mode+0x2e/0x240
[  159.456256][ T3533]  ? lockdep_hardirqs_on+0x94/0x130
[  159.461451][ T3533]  ? syscall_enter_from_user_mode+0x2e/0x240
[  159.467433][ T3533]  do_syscall_64+0x3b/0xb0
[  159.471846][ T3533]  ? clear_bhb_loop+0x15/0x70
[  159.476522][ T3533]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  159.482408][ T3533] RIP: 0033:0x7f49d3cde9a4
[  159.486819][ T3533] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  159.506422][ T3533] RSP: 002b:00007ffce996b770 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  159.514834][ T3533] RAX: ffffffffffffffda RBX: 00007ffce996ba58 RCX: 00007f49d3cde9a4
[  159.522801][ T3533] RDX: 0000000000080800 RSI: 00007ffce996b958 RDI: 00000000ffffff9c
[  159.530766][ T3533] RBP: 00007ffce996b958 R08: 00000000000000f4 R09: 00007ffce996b958
[  159.538733][ T3533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800
[  159.546961][ T3533] R13: 0000000000000020 R14: 00007ffce996ba58 R15: 00007ffce996b958
[  159.554939][ T3533]  </TASK>
[  159.558210][ T3533] Kernel Offset: disabled
[  159.562536][ T3533] Rebooting in 86400 seconds..