last executing test programs:

2m48.124516067s ago: executing program 32 (id=113):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48)
mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0)

2m17.363872061s ago: executing program 33 (id=114):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1ed, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
fadvise64(r0, 0xaa1f, 0xff39, 0x3)

1m54.120107935s ago: executing program 3 (id=356):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x8, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xe}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xf79e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_retopts={{0x10}}], 0x58}, 0x0)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r4 = syz_open_procfs(0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000003c0)={&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)})
lseek(r4, 0x4, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'bridge0\x00', <r5=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m53.616532683s ago: executing program 3 (id=360):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x408003, &(0x7f0000000040)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd}}, {@noblock_validity}, {@auto_da_alloc}, {@nolazytime}, {@nogrpid}, {@errors_continue}, {}, {@i_version}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$eJzs3U1rHOcdAPD/jLS2ZcuVTHtwDXVN7SKZ1ruSVduiB9ctpT0Z2rrnuqq0EkIrrdCubEuYVqYfoFBKWygUcsolkA8QCP4IIWBI7iEJCSGxk4MPiTfsm1/kXWmNV1oj/X4wmueZF/3/zy4zO8/MMBPAvnUqIk5HxKNKpXI2IoYa09PGcKVa2agv9+D+7enqkESlcu3zJCKpT6suMvrU/zxSXyUORcQffhvxl+T5uKW19YWpQiG/0qjnyovLudLa+rn5xam5/Fx+aWJi/OLkpckLk2NdaedgRFz+9cf//sfrv7n89k9vfnD909G/Jo3pEU/a0W31pmdqn0VTf0Ss7ESwHuhrtCfT60QAAOhI8zj/RxFxNoair3Y0BwAAAOwllV8MxtdJRAUAAADYs9LaPbBJmm3cBzAYaZrN1u/h/V4cTgvFUvkns8XVpZn6vbLDkUln5wv5sca9wsORSar18Vr5Sf38pvpERByLiH8NDdTq2eliYabXJz8AAABgnziyqf//1VC9/w8AAADsMcO9TgAAAADYcfr/AAAAsPfp/wMAAMCe9rurV6tDpfn+65kba6sLxRvnZvKlhezi6nR2uriynJ0rFudqz+xb3O7/FYrF5Z/F0uqtXDlfKudKa+vXF4urS+Xr88+8AhsAAADYRcd+ePf9JCI2fj5QG6oO9DopYFf0v8jCH+1cHsDu6+t1AkDPvNDvP7CnZHqdANBzSUT8f4v5bW/eeWdn8gEAALpv5Putr/8n254b2Eh3KUVghzj/B/uX6/+wf7n+D/tXJvqi8478wI7mAvRGss38l7/+X6m8UEIAAEDXDdaGJM1G1M4DDEaaZrMRR2uvBcgks/OF/FhEfCci3hvKHKzWx2trJtv2GQAAAAAAAAAAAAAAAAAAAAAAAACAukoliQoAAACwp0WknySN93+NDJ0Z3Hx+4EDycKg2joib/7v2n1tT5fLKeHX6F4+nl//bmH6+F2cwAAAAgM2a/fRmPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuunB/dvTzWE34372y4gYbhW/Pw7VxociExGHv0yi/6n1kojo60L8jTsR8as/tYifVNOK4UYWreIPdCv+8Vbt3zp+GhFHuhAf9rO71f3PlVbbXxqnauPN29/Bx+v2dyF++/1f+nj/19dm+z/aYYwT997MtY1/J+JEf+v9TzN+0mb/d7rD+H/+4/p6u3mV1yJGWv7+JM/EypUXl3OltfVz84tTc/m5/NLExPjFyUuTFybHcrPzhXzjb8sY//zBW4+2av/hNvGHt2n/mQ7b/829W/e/Wy9mWsUfPd36+z/eJn7a+O37caNcnT/SLG/Uy087+ca7J7dq/0yb9m/3/Y922P6zv//7hx0uCgDsgtLa+sJUoZBf2deFl/o0qodFnS2cNsK8Ck1WyK+U/vZqpPFKFprbxMOe7JcAAIDue74PDAAAAAAAAAAAAAAAAAAAAOy27jwzrPlM7K2frte0UR899yxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+jYAAP//b3rPYw==")

1m53.238439308s ago: executing program 3 (id=364):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x1)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x89, "427ce796db071ddca5c8d176919fa0e06bb4afa01c0de733039bf25b243e042386dd7e145c723d5faf95b8de3ae6086a11d33a00a25693cfd0da776c4a37d29d57e12115f2382704e08edfb24beb32225eeffe18fb20b728abf4f5acd9162a1b17110acf4c8a729fe8c4d89ff1afb0fe19996e9a6e1414c2212fde670acc92eb4cfe5614fd78aa5b06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m52.579310708s ago: executing program 3 (id=372):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[], 0x12, 0xc38, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNiOSEml9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSoWwEAPExXRr5y+qz7PwA8Vq75/38AAAAAAAAAAAAAANjvUhTxZKSYubKSxqr3HfXL7b47d0eHhjevdiRVNQ9V5cuf+pmz585/8YXBC9283J76gPq77dPx2si1S42Xp2/PzE7MzU2MN0an2jemxye2vYed1t/oZHUCGrdfvzN+8+Zc4+zz59Z9fHfg/f4njg9cHHz21DPdsqNDw8Mja0XqveVrD9yQjq1meByOIk5Fiue++5PUiogidn4u6g937Dc6UnXiZNWJ0aHhqiOT7dbUfPnh1e6JKCIaPZWa3XO0+VhEre+h9mFrzYiFsvllg0+W3RuZac22rk9ONK62Zufb8+3pqaup09qyP40o4kKKWIyI5f77d9cXRdQixbePraTrEXGoex6+UE0M3rodxR72cRvKdjb6IhaLAzBm+1h/FPFqpPjpOyfiRr7OVNeaz0e8Wub3I94q86WIVH4xzke8t8n3iIOpFkX8ZTn+F1fSeHU96F5XLn+18eWpm9M9ZbvXlV/y/nDfleIR3R+ObMiHY59fm+pRRKu64q+kB//NDgAAAAAAAAAAAAAAAAC77UgU8alI8cp//Ek1rziqeenHLg7+4cCv9s4Zf/pD9lOWfT4iFortzck9nCcGXk1XU3rEc4kfZ/Uo4k/z/L9vPurGAAAAAAAAAAAAAAAAAAAAPNaK+HGkePHdE2kxetcUb0/dalxrXZ/srArbXfu3u2b66urqaiN1splzLOdCzsWcSzmXc0aR6+ds5hzLuZBzMedSzuWccSjXz9nMOZZzIedizqWcyzmjluvnbOYcy7mQczEvur+U3y/njH2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEdJEUX8PFJ86+srKVJENCPGopNL/Y+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fij5r1ttYhI1b8dJ8pfzkfzcJkfj+ZgmS9F81LOVpW15jcfQfvZmb5UxI8iRX/97XsDnse/r/Pu3tcg3vrG2rtP1zp5qPvhwPv9Txw/dnFw+Dee3up12qwBJy+3p+7cbYwODQ+P9Gyu5aN/vGfbQD5usTtdJyLm3njz9dbk5MTsg78ovwI7qH6AXqTa49LTg/3iN3drh1HbD915NC8e9ZWJh6G8/78XKX733f/s3vA79/96/Ern3b07fPzsz9bu/y9u3NE27/+1jfXy/b+8p292/3+yZ9uL+XcjfbWI+vztmb7jEfW5N9481b7dujVxa2Lq/OnTXxoc/NK5032HI+o325MTPa925XQBAAAAAAAAAAAAAAAAPDypiN+PFK0fraRGRNyt5msNXBx89tQzh+JQNd9q3bzt10auXWq8PH17ZnZibm5ivDE61b4xPT6x3cPVq+leo0PDe9KZD3Vkj9t/pP7y9Mwbs+1bfzy/6edH65euz83Ptm5s/nEciSKi2bvlZNXg0aHhqtGT7dZUVfXqppPpf3l9qYj/ihQ3zjfSZ/O2PP9/4wz/dfP/FzbuaI/m/3+sZ1t5zJSK+Fmk+J2/ejo+W7XzaNx3znK5v4sUJy98JpeLw2W5bhs6zxXozAwsy/5fpPinn68v250P+eRa2TPbPrEHRDn+xyLF9/7iO/Fbedv65z9sPv5HN+5oj8b/qZ5tR9c9r2DHXSeP/6lI8dKTb8fn8rYPev5H99kbJ3Lhe8/n2KPx/0TPtoF83N/ena4DAAAAAAAAAAAcaH2piL+PFD8YrqUX8rbt/P2/8Y072qO///XJnm3ju7Ne0Ye+2PFJBQAAAIB9oi8V8eNIcWv+7XtzqNfP/+6Z//l7a/M/h9KGT6s/5/u16rkBu/nnf70G8nHHdt5tAAAAAAAAAAAAAAAAAAAA2FdSKuKFvJ76WDWff3zL9dSXIsUr//NcLpeOl+W668APVL/Wr0xPnbo0OTl9ozXfuj450RiZad2YKOs+FSlW/vYzuW5Rra/eXW++s8b72lrss5Fi+B+6ZTtrsXfXJn9qreyZsuzHIsV//+P6sp/L5T6xVvZsWfZvIsXX/uX+sqXja2XPlWW/Eyl++LVGt+zRsmz3+aifXCv7/I3pYo9GBgAAAAAAAAAAAAAAAAAAgMdJXyrizyPF/95evDeXP6//39fztvLWN3rW+9/gbrXO/0C1/v9Wrx9k/f/quQILWx0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+mlIU8WakmLmykpb6y/cd9cvtqTt3R4eGN692JFU1D1Xly5/6mbPnzn/xhcEL3fzg+rvtU/HayLVLjZenb8/MTszNTYw3RqfaN6bHJ7a9h53W3+hkdQIat1+/M37z5lzj7PPn1n18d+D9/ieOD1wcfPbUM92yo0PDwyM9ZWp9D3z0+6Qtth+OIv46Ujz33Z+kH/RHFLHzc/Eh3529dqTqxMmqE6NDw1VHJtutqfnyw6vdE1FENHoqNbvn6CGMxY40IxbK5pcNPll2b2SmNdu6PjnRuNqanW/Pt6enrqZOa8v+NKKICyliMSKW++/fXV8U8Xqk+PaxlfSv/RGHuufhC1dGvnL67NbtKPawj9tQtrPRF7FYHIAx28f6o4h/jhQ/fedE/Ft/RC06P/H5iFfL/H7EW9EZ71R+Mc5HvLfJ94iDqRZF/H85/hdX0jv95fWge125/NXGl6duTveU7V5XDvz94WHa59emehTxw+qKv5L+3X/XAAAAAAAAAAAAAAAAAPtIEb8eKV5890Sq5gffm1PcnrrVuNa6PtmZ1ted+9edM726urraSJ1s5hzLuZBzMedSzuWcUeT6OZtl1ldXx/L7hZyLOZdyLueMQ7l+zmbOsZwLORdzLuVczhm1XD9nM+dYzoWcizmXci7njH0ydw8AAAAAAAAAAAAAAAAAAPhoKap/Unzr6ytptb+zvvRYdHLJeqAfeb8IAAD//1qT9HY=")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r2)
newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x0, 0x100)

1m51.593904492s ago: executing program 3 (id=377):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2)
r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
ftruncate(r3, 0xffff)
close(0x3)
fcntl$addseals(r3, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x0, 0x8000})
pselect6(0x40, &(0x7f0000000440)={0x6, 0x2, 0xe, 0x2, 0x3, 0x4, 0x9, 0x8000000000000000}, 0x0, &(0x7f00000004c0)={0xfd, 0x5, 0x8000000000000000, 0x0, 0x101, 0x5, 0x0, 0x8}, &(0x7f0000000500), 0x0)

1m51.01846456s ago: executing program 3 (id=385):
r0 = epoll_create1(0x0)
r1 = socket(0x1, 0x80802, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0xc0000011})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0)

1m50.849369652s ago: executing program 34 (id=385):
r0 = epoll_create1(0x0)
r1 = socket(0x1, 0x80802, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0xc0000011})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0)

1m32.766531103s ago: executing program 1 (id=461):
socket$inet6(0xa, 0x80002, 0x0)
setsockopt(0xffffffffffffffff, 0x6, 0x7f, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x4b4b, &(0x7f0000000200))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

1m32.655812445s ago: executing program 1 (id=463):
syz_usb_connect(0x3, 0x6d, &(0x7f0000000000)=ANY=[], 0x0)
readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x400000000, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)

1m32.610795545s ago: executing program 6 (id=464):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="180000001800210a000300000000000004000002040010"], 0x18}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
close(0x3)

1m32.462533378s ago: executing program 6 (id=466):
unshare(0x2040400)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000640)=0x1)
pwritev(r0, &(0x7f0000000040), 0x0, 0x9, 0x0)

1m32.035672384s ago: executing program 1 (id=471):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020c00000000000000000000000200090008000000fd0000000000000002000100000000f6ff030500000000a0030006000000000002000000ac1414aa00000000000000000300050000000000020000"], 0x60}, 0x1, 0x7}, 0x0)

1m31.906427856s ago: executing program 1 (id=473):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
setxattr(0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

1m31.787705467s ago: executing program 1 (id=475):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
getgroups(0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mouse(0x0, 0x1, 0x400200)

1m26.78194048s ago: executing program 6 (id=486):
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x101a}], 0x0, 0x0, 0x0})

1m26.565853863s ago: executing program 1 (id=488):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="e49c955344")
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")

1m26.564756563s ago: executing program 6 (id=489):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x20000000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)

1m26.223281277s ago: executing program 35 (id=488):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="e49c955344")
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")

1m26.177970878s ago: executing program 6 (id=492):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0xbc44)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r7], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

1m25.992688111s ago: executing program 6 (id=495):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

1m25.623312516s ago: executing program 2 (id=498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18)
r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x12)

1m25.434497959s ago: executing program 2 (id=500):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020)

1m25.401865389s ago: executing program 2 (id=501):
syz_usb_connect(0x3, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f5278e10889e8f9ee49b0102030109"], 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x400000000, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)

1m24.855574627s ago: executing program 2 (id=502):
r0 = inotify_init1(0x80000)
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x88800)
socket$tipc(0x1e, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m24.806472018s ago: executing program 2 (id=503):
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001040)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe7dd77f390cd54b8}, 0x0)

1m24.740350249s ago: executing program 2 (id=504):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0xbc44)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

1m10.79070619s ago: executing program 36 (id=495):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

1m8.767454899s ago: executing program 37 (id=504):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0xbc44)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

39.730244528s ago: executing program 9 (id=600):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000009400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0)

39.526368021s ago: executing program 9 (id=603):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4)
recvmmsg(r3, &(0x7f0000000080), 0x21e, 0x40010002, 0x0)

39.133434886s ago: executing program 8 (id=608):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
munlockall()

38.609455784s ago: executing program 8 (id=612):
sched_setscheduler(0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, 0x0, 0x0)

38.608589084s ago: executing program 9 (id=613):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@user_xattr}, {@i_version}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@dioread_nolock}, {@data_err_abort}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

38.1204367s ago: executing program 9 (id=617):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT], 0xfd, 0x1502, &(0x7f00000002c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

37.841616645s ago: executing program 9 (id=621):
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x1, 0x7, 0x2, 0x1, 0xce5, 0xbc7})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0)

37.329207292s ago: executing program 9 (id=626):
syz_usb_connect(0x3, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f5278e10889e8f9ee49b0102030109025b000140fef0090904000000ace79a"], 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x400000000, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)

37.121572115s ago: executing program 38 (id=626):
syz_usb_connect(0x3, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f5278e10889e8f9ee49b0102030109025b000140fef0090904000000ace79a"], 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x400000000, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)

36.573191623s ago: executing program 0 (id=632):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x20, r0, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xe7dd77f390cd54b8}, 0x0)

36.378067556s ago: executing program 0 (id=634):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x101a}], 0x0, 0x0, 0x0})

36.192151259s ago: executing program 0 (id=635):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r0=>0x0}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x9)

35.922411943s ago: executing program 0 (id=637):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

35.751177045s ago: executing program 0 (id=638):
syz_usb_connect(0x3, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f5278e10889e8f9ee49b0102030109"], 0x0)
readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {}, {0x400000000, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)

35.506330628s ago: executing program 8 (id=639):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4)
recvmmsg(r3, &(0x7f0000000080), 0x21e, 0x40010002, 0x0)

34.989802826s ago: executing program 7 (id=644):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x101a}], 0x0, 0x0, 0x0})

34.809498889s ago: executing program 7 (id=646):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x81, 0x576, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0xbf39)
read$FUSE(r0, &(0x7f00000054c0)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

34.618423031s ago: executing program 7 (id=647):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xb, 0x6, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x23, 0x10, 0x10}]}, 0x38}}, 0x4)

34.567524242s ago: executing program 8 (id=648):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r2, 0xc, 0x0, 0x0, 0x24, 0x1, 0x16c0, 0x5505, 0x48b, 0x1, 0xe, 'syz0\x00'})

34.426861914s ago: executing program 8 (id=649):
getpid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
shutdown(r0, 0x1)
listen(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

34.322410295s ago: executing program 7 (id=650):
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

34.241837887s ago: executing program 7 (id=651):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x9, '['}]}}, 0x0}, 0x0)

33.577194856s ago: executing program 7 (id=652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

33.458396098s ago: executing program 8 (id=653):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000940)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="04001300050019000000000006001200040000000500e400000000000a000600ffffffffffff0000050029000a0000000600100098000000060012010900"], 0x5c}, 0x1, 0x0, 0x0, 0x20008840}, 0x20000000)

32.682598069s ago: executing program 0 (id=654):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x20, r0, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xe7dd77f390cd54b8}, 0x0)

18.234539817s ago: executing program 39 (id=653):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000940)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="04001300050019000000000006001200040000000500e400000000000a000600ffffffffffff0000050029000a0000000600100098000000060012010900"], 0x5c}, 0x1, 0x0, 0x0, 0x20008840}, 0x20000000)

18.126590619s ago: executing program 40 (id=652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

17.105919494s ago: executing program 41 (id=654):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x20, r0, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xe7dd77f390cd54b8}, 0x0)

1.670102726s ago: executing program 5 (id=709):
r0 = userfaultfd(0x80001)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r1, 0x5501)
close_range(r0, 0xffffffffffffffff, 0x0)

1.540148128s ago: executing program 5 (id=710):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)

1.426237909s ago: executing program 5 (id=712):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b", 0x2a}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x6, 0x5}, {}], 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33)

1.42132914s ago: executing program 4 (id=713):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7fff, "04d997973e863b04000000000000500000000a00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r1 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x1, 0x400100)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$sndpcmp(0x0, 0x8000000000000, 0x440002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"})
setgroups(0x0, 0x0)

1.271945002s ago: executing program 5 (id=714):
gettid()
timer_create(0x0, 0x0, &(0x7f0000000080)=<r0=>0x0)
timer_delete(r0)

432.467934ms ago: executing program 5 (id=715):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4021, 0x4)

430.538134ms ago: executing program 4 (id=716):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020)

334.392665ms ago: executing program 5 (id=717):
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x0, 0x852dd6c070cd7e4d, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x4, 0x700000000000000}, 0x8850)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

312.863895ms ago: executing program 4 (id=718):
r0 = userfaultfd(0x80001)
close_range(r0, 0xffffffffffffffff, 0x0)

257.671256ms ago: executing program 4 (id=719):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x4c3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001c40)="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", 0x4b1}, {&(0x7f0000000100)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43f0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80928ff807a27624831c36caa3250460ce26adc9f1cc83e58d21abd5fafce3212e7d76b915a0b55b6d2e46ecff544879ec590032ae88298e2dbc1c671628", 0x8e}], 0x2}}], 0x2, 0x8010)
shutdown(r0, 0x1)

30.36631ms ago: executing program 4 (id=720):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000)

0s ago: executing program 4 (id=721):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
shutdown(0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000004", @ANYBLOB="080001"], 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

size 0-0 line 3239
[  121.000884][  T112] binder: undelivered TRANSACTION_ERROR: 29201
[  121.134423][ T5267] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  121.195899][ T5267] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  121.199554][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.210238][ T5430] loop1: detected capacity change from 0 to 1024
[  121.220023][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.670210][ T5267] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  122.801242][ T5267] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  122.901905][ T5440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.311'.
[  123.079699][ T5457] team0: No ports can be present during mode change
[  123.084483][ T5457] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  123.152468][ T5267] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.156965][ T5460] binder: 5458:5460 tried to acquire reference to desc 0, got 1 instead
[  123.172529][ T5460] binder_alloc: 5458: binder_alloc_buf failed to map page at 20ffd000 in userspace
[  123.181101][ T5460] binder: cannot allocate buffer: memory allocation failed
[  123.181141][ T5460] binder: 5458:5460 transaction async to 5458:0 failed 172/29201/-12, size 0-0 line 3239
[  123.193721][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  123.209969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.218446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.264143][ T5267] 8021q: adding VLAN 0 to HW filter on device team0
[  123.298760][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.302670][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.305456][ T4958] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.307614][ T4958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.310975][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.328525][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.336409][ T4958] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.338953][ T4958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.402973][ T5474] loop3: detected capacity change from 0 to 512
[  123.411075][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.447936][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.451227][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.453901][ T5474] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  123.460607][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.464696][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.469177][ T5474] EXT4-fs (loop3): invalid journal inode
[  123.470907][ T5474] EXT4-fs (loop3): can't get journal size
[  123.471932][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.503175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.506301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.522125][ T5474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  123.524784][ T5474] System zones: 1-12, 13-13
[  123.541639][ T5474] EXT4-fs (loop3): 1 truncate cleaned up
[  123.543368][ T5474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  123.560547][ T5267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.563741][ T5267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.568200][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.571212][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.574446][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.585470][ T5480] loop0: detected capacity change from 0 to 128
[  123.588494][ T5480] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  123.592899][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.596183][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.670365][ T4297] EXT4-fs (loop3): unmounting filesystem.
[  123.689813][ T5485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.325'.
[  123.861068][ T5495] loop3: detected capacity change from 0 to 2048
[  123.903369][ T5495] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  123.928047][ T5498] binder: 5497:5498 tried to acquire reference to desc 0, got 1 instead
[  123.932877][ T5495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.944307][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.952574][ T5498] binder_alloc: 5497: binder_alloc_buf failed to map page at 20ffd000 in userspace
[  123.955250][ T5498] binder: cannot allocate buffer: memory allocation failed
[  123.955286][ T5498] binder: 5497:5498 transaction async to 5497:0 failed 177/29201/-12, size 0-0 line 3239
[  123.966457][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.974882][ T5502] loop1: detected capacity change from 0 to 1024
[  123.977226][ T5502] EXT4-fs: Ignoring removed orlov option
[  123.998849][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  124.067921][ T5502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  124.107288][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  124.109636][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.117124][ T5267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.132616][ T5513] team0: No ports can be present during mode change
[  124.146572][ T5513] device vlan0 entered promiscuous mode
[  124.187065][ T5517] loop0: detected capacity change from 0 to 1024
[  124.189488][ T5517] EXT4-fs: Ignoring removed orlov option
[  124.191102][ T5517] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.193927][ T5502] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  124.238893][ T5513] team0: Port device vlan0 added
[  124.249868][ T5517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  124.281104][ T5518] tipc: Started in network mode
[  124.283074][ T5518] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  124.298461][ T5518] tipc: Enabled bearer <eth:team0>, priority 0
[  124.350427][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  124.394350][ T5525] loop3: detected capacity change from 0 to 512
[  124.434827][ T5525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  124.537118][ T5530] loop0: detected capacity change from 0 to 512
[  124.555348][ T4296] EXT4-fs (loop1): unmounting filesystem.
[  124.562175][ T5530] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  124.611934][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.615007][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.622706][ T4297] EXT4-fs (loop3): unmounting filesystem.
[  124.626165][ T5530] EXT4-fs (loop0): 1 truncate cleaned up
[  124.627734][ T5530] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  124.648651][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.654720][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.658614][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.679949][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.683590][ T5267] device veth0_vlan entered promiscuous mode
[  124.698643][ T5267] device veth1_vlan entered promiscuous mode
[  124.717088][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.720694][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  124.732197][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.739448][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.750290][ T5267] device veth0_macvtap entered promiscuous mode
[  124.758124][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'.
[  124.763269][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  124.800738][ T5267] device veth1_macvtap entered promiscuous mode
[  124.885956][ T5544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.339'.
[  124.889304][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.895706][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.898446][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.901310][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.919092][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.926168][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.934891][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.942316][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.945411][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.951858][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.960809][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.000434][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.003991][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.006656][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.018858][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.032069][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.035088][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.051656][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.056088][ T5552] loop1: detected capacity change from 0 to 128
[  125.059649][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.063675][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.068027][ T5267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.070409][ T5267] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.074195][ T5267] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.076621][ T5267] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.098932][ T5552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  125.170066][ T5556] loop0: detected capacity change from 0 to 512
[  125.172967][ T5556] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.189525][ T4296] EXT4-fs (loop1): unmounting filesystem.
[  125.221275][ T5556] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  125.236284][ T5556] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.344: attempt to clear invalid blocks 2 len 1
[  125.282893][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  125.285577][ T5556] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  125.296241][ T5560] binder: 5559:5560 ioctl 4018620d 0 returned -22
[  125.314765][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  125.316855][ T5556] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.344: invalid indirect mapped block 1819239214 (level 0)
[  125.334293][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.336815][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.342420][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.350307][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.353334][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.357825][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.377994][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  125.379850][ T5556] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.344: invalid indirect mapped block 1819239214 (level 1)
[  125.394309][ T5563] binder: 5559:5563 ioctl 4018620d 0 returned -22
[  125.417626][ T4346] tipc: Node number set to 11578026
[  125.441570][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  125.444476][ T5556] EXT4-fs (loop0): 1 truncate cleaned up
[  125.446082][ T5556] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  125.468233][ T5556] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.344: corrupted in-inode xattr
[  125.495355][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  125.505949][ T5556] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.344: corrupted in-inode xattr
[  125.530576][ T5556] EXT4-fs (loop0): Remounting filesystem read-only
[  125.600813][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.630559][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.725406][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  125.830114][ T5579] loop1: detected capacity change from 0 to 512
[  125.866427][ T5579] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.871933][ T5579] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.877294][ T5582] loop0: detected capacity change from 0 to 128
[  125.894509][ T5579] EXT4-fs (loop1): 1 truncate cleaned up
[  125.902393][ T5579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  125.913442][ T5582] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  125.952820][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  125.954740][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  125.998283][ T5582] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  126.059278][ T5586] device vlan3 entered promiscuous mode
[  126.067665][ T4296] EXT4-fs (loop1): unmounting filesystem.
[  126.309899][ T5606] team0: No ports can be present during mode change
[  126.353812][ T5606] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  126.415261][  T112] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  126.478646][ T5614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.481233][ T5614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.496299][ T5615] loop2: detected capacity change from 0 to 1024
[  126.513481][ T5615] EXT4-fs (loop2): Test dummy encryption mode enabled
[  126.522005][ T5615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  126.611583][  T112] usb 1-1: Using ep0 maxpacket: 16
[  126.617169][  T112] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  126.624245][  T112] usb 1-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4
[  126.633435][  T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.636017][  T112] usb 1-1: Product: syz
[  126.642802][ T5615] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  126.648137][  T112] usb 1-1: Manufacturer: syz
[  126.649694][  T112] usb 1-1: SerialNumber: syz
[  126.784333][ T5632] loop3: detected capacity change from 0 to 512
[  126.799450][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  126.801149][ T5632] EXT4-fs: Ignoring removed i_version option
[  126.813714][ T5632] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  126.824987][ T5632] EXT4-fs (loop3): orphan cleanup on readonly fs
[  126.827686][ T5632] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6).
[  126.838287][ T5632] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  126.848638][ T5632] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  126.865556][ T5632] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  126.911775][  T112] ftdi_sio 1-1:64.0: Ignoring interface reserved for JTAG
[  126.927732][  T112] usb 1-1: USB disconnect, device number 15
[  126.937727][ T5632] EXT4-fs (loop3): 1 truncate cleaned up
[  126.939474][ T5632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  127.051675][ T4297] EXT4-fs (loop3): unmounting filesystem.
[  127.117891][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.130167][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.144458][ T5648] loop6: detected capacity change from 0 to 512
[  127.158931][ T5648] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  127.185297][ T5648] EXT4-fs (loop6): 1 truncate cleaned up
[  127.187017][ T5648] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  127.312296][ T5267] EXT4-fs (loop6): unmounting filesystem.
[  127.323116][ T5658] loop2: detected capacity change from 0 to 4096
[  127.361255][ T5658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  127.419903][ T5668] team0: No ports can be present during mode change
[  127.513522][ T5668] device vlan0 entered promiscuous mode
[  127.564489][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  127.631206][ T5668] team0: Port device vlan0 added
[  127.633491][ T5674] tipc: Started in network mode
[  127.700316][ T5674] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  127.710380][ T5674] tipc: Enabled bearer <eth:team0>, priority 0
[  127.738341][ T5680] loop1: detected capacity change from 0 to 1764
[  128.609490][ T5687] loop3: detected capacity change from 0 to 2048
[  128.624786][ T5687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.707049][ T5695] loop6: detected capacity change from 0 to 512
[  128.723551][ T5695] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  128.737123][ T5698] netlink: 'syz.2.370': attribute type 4 has an invalid length.
[  128.742312][ T5695] EXT4-fs (loop6): 1 truncate cleaned up
[  128.743909][ T5695] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  128.803469][ T4346] tipc: Node number set to 11578026
[  128.811596][ T4297] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  128.814209][ T4297] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  128.870995][ T5267] EXT4-fs (loop6): unmounting filesystem.
[  129.015013][ T5712] loop6: detected capacity change from 0 to 1764
[  129.116021][ T5720] loop0: detected capacity change from 0 to 256
[  129.128863][ T5720] exfat: Deprecated parameter 'namecase'
[  129.130402][ T5720] exfat: Deprecated parameter 'namecase'
[  129.148243][ T5721] loop1: detected capacity change from 0 to 512
[  129.171136][ T5721] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  129.179345][ T5721] EXT4-fs (loop1): invalid journal inode
[  129.190014][ T5721] EXT4-fs (loop1): can't get journal size
[  129.192983][ T5720] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  129.244070][ T5721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  129.246442][ T5721] System zones: 1-12, 13-13
[  129.248563][ T5721] EXT4-fs (loop1): 1 truncate cleaned up
[  129.250318][ T5721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  129.474009][ T4296] EXT4-fs (loop1): unmounting filesystem.
[  130.389159][ T5741] loop6: detected capacity change from 0 to 256
[  130.399038][ T4298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.407603][ T4298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.416943][ T4298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.420090][ T4298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.429080][ T4298] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  130.431428][ T4298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.480485][ T5741] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  130.594117][ T5752] loop0: detected capacity change from 0 to 512
[  130.606396][ T5752] EXT4-fs: Ignoring removed orlov option
[  130.612950][ T5752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  130.710006][   T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.728017][ T5752] EXT4-fs (loop0): 1 truncate cleaned up
[  130.730961][ T5752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  131.618706][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  131.626039][   T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.739568][ T5767] loop2: detected capacity change from 0 to 1024
[  131.743559][   T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.897261][ T5773] loop6: detected capacity change from 0 to 256
[  131.963835][   T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.972458][ T5773] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 196)
[  131.975024][ T5773] FAT-fs (loop6): Filesystem has been set read-only
[  132.108111][ T5267] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 196)
[  132.306078][ T5745] chnl_net:caif_netlink_parms(): no params data found
[  132.523773][ T4308] Bluetooth: hci1: command 0x0409 tx timeout
[  133.233914][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.267798][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.267976][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.270447][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.418077][ T5814] fuse: Unknown parameter '0x0000000000000004'
[  133.441461][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.443585][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.446236][ T5745] device bridge_slave_0 entered promiscuous mode
[  133.459384][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.471995][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.478816][ T5745] device bridge_slave_1 entered promiscuous mode
[  133.487900][   T55] tipc: Disabling bearer <eth:team0>
[  133.490251][   T55] tipc: Left network mode
[  133.525423][ T5816] loop1: detected capacity change from 0 to 2048
[  133.542323][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.547121][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.579014][ T5816]  loop1: p1 < > p3
[  133.581012][ T5816] loop1: p3 size 134217728 extends beyond EOD, truncated
[  133.604905][ T3913]  loop1: p1 < > p3
[  133.618058][ T3913] loop1: p3 size 134217728 extends beyond EOD, truncated
[  133.662367][ T3913]  loop1: p1 < > p3
[  133.665350][ T3913] loop1: p3 size 134217728 extends beyond EOD, truncated
[  133.730504][ T5819] loop0: detected capacity change from 0 to 4096
[  133.737088][ T5819] EXT4-fs: Ignoring removed mblk_io_submit option
[  133.751146][ T5816] loop1: detected capacity change from 0 to 2048
[  133.770428][ T5819] EXT4-fs (loop0): Test dummy encryption mode enabled
[  133.773739][ T5819] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  133.791058][ T5816] loop1: detected capacity change from 0 to 512
[  133.806442][ T5745] team0: Port device team_slave_0 added
[  133.831188][ T5745] team0: Port device team_slave_1 added
[  133.882852][ T5816] loop1: detected capacity change from 0 to 512
[  133.945106][ T5816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  134.022639][ T4296] EXT4-fs (loop1): unmounting filesystem.
[  134.038764][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.040733][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.041868][ T5830] loop0: detected capacity change from 0 to 256
[  134.051647][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.061939][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.063914][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.115664][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.180154][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.201733][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.339625][ T5510] udevd[5510]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  134.392494][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  134.453167][ T5745] device hsr_slave_0 entered promiscuous mode
[  134.501901][ T5745] device hsr_slave_1 entered promiscuous mode
[  134.502970][ T5511] udevd[5511]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  134.532588][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  134.541825][ T5745] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.544106][ T5745] Cannot create hsr debugfs directory
[  134.591712][ T4298] Bluetooth: hci1: command 0x041b tx timeout
[  134.604912][ T5511] udevd[5511]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  134.617452][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  134.744384][ T5853] device syzkaller0 entered promiscuous mode
[  134.752071][ T5861] loop0: detected capacity change from 0 to 128
[  134.759910][ T5861] EXT4-fs: Ignoring removed nomblk_io_submit option
[  134.769400][ T5861] EXT4-fs: Ignoring removed nomblk_io_submit option
[  134.778241][ T5861] EXT4-fs (loop0): Test dummy encryption mode enabled
[  134.792683][ T5861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  135.092462][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  135.431121][ T5879] x_tables: ip6_tables: CT target: only valid in raw table, not ./file0
[  135.477542][ T5882] loop6: detected capacity change from 0 to 512
[  135.522134][ T5882] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  135.586739][ T5267] EXT4-fs (loop6): unmounting filesystem.
[  135.790509][ T5893] loop0: detected capacity change from 0 to 512
[  135.852153][ T5893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  135.946232][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  136.032448][ T5903] loop6: detected capacity change from 0 to 164
[  136.129760][ T5901] loop0: detected capacity change from 0 to 8192
[  136.145270][ T5901] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  136.288695][ T5911] netlink: 64 bytes leftover after parsing attributes in process `syz.6.437'.
[  136.671526][ T4308] Bluetooth: hci1: command 0x040f tx timeout
[  136.977288][ T5919] loop0: detected capacity change from 0 to 512
[  136.995689][ T5919] EXT4-fs: Ignoring removed oldalloc option
[  136.998256][ T5919] EXT4-fs: old and new quota format mixing
[  138.752333][ T4298] Bluetooth: hci1: command 0x0419 tx timeout
[  146.199322][ T5924] loop1: detected capacity change from 0 to 128
[  146.234940][ T5927] loop6: detected capacity change from 0 to 512
[  146.248775][ T5930] loop0: detected capacity change from 0 to 128
[  146.252675][ T5927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  146.270830][ T5927] EXT4-fs (loop6): 1 truncate cleaned up
[  146.274898][ T5927] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  146.322261][ T5267] EXT4-fs (loop6): unmounting filesystem.
[  146.379321][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.392161][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.614925][ T5948] netlink: 64 bytes leftover after parsing attributes in process `syz.1.453'.
[  146.754633][ T5950] loop0: detected capacity change from 0 to 8192
[  146.764582][ T5950] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.908436][ T5745] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  147.014061][ T5745] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  147.041978][ T5966] binder: 5964:5966 tried to acquire reference to desc 0, got 1 instead
[  147.053998][ T5745] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  147.058169][ T5966] binder_alloc: 5964: binder_alloc_buf failed to map page at 20ffd000 in userspace
[  147.069883][ T5966] binder: cannot allocate buffer: memory allocation failed
[  147.069923][ T5966] binder: 5964:5966 transaction async to 5964:0 failed 182/29201/-12, size 0-0 line 3239
[  147.085676][ T5968] device vlan3 entered promiscuous mode
[  147.086114][ T4346] binder: undelivered TRANSACTION_ERROR: 29201
[  147.410495][ T5745] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  147.548405][   T55] device hsr_slave_0 left promiscuous mode
[  147.608767][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.461'.
[  147.654008][   T55] device hsr_slave_1 left promiscuous mode
[  147.732419][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.745872][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.771747][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.774272][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.787775][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.790026][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.831592][ T5997] binder: 5996:5997 tried to acquire reference to desc 0, got 1 instead
[  147.834660][ T5997] binder_alloc: 5996: binder_alloc_buf failed to map page at 20ffd000 in userspace
[  147.837321][ T5997] binder: cannot allocate buffer: memory allocation failed
[  147.837358][ T5997] binder: 5996:5997 transaction async to 5996:0 failed 187/29201/-12, size 0-0 line 3239
[  147.867265][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  147.921780][   T55] device veth1_macvtap left promiscuous mode
[  147.923677][   T55] device veth0_macvtap left promiscuous mode
[  147.928135][   T55] device veth1_vlan left promiscuous mode
[  148.400626][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.472'.
[  148.420972][ T6016] loop1: detected capacity change from 0 to 2048
[  148.445925][ T6016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.453674][ T6019] loop2: detected capacity change from 0 to 512
[  148.493077][ T6019] EXT4-fs (loop2): 1 orphan inode deleted
[  148.495809][ T6019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  148.512313][ T1614] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  148.516845][ T1614] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 1
[  148.573445][ T4296] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  148.576077][ T4296] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  148.594981][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  148.650840][ T6024] binder: 6023:6024 tried to acquire reference to desc 0, got 1 instead
[  148.665098][ T6024] binder_alloc: 6023: binder_alloc_buf failed to map page at 20ffd000 in userspace
[  148.667746][ T6024] binder: cannot allocate buffer: memory allocation failed
[  148.667791][ T6024] binder: 6023:6024 transaction async to 6023:0 failed 192/29201/-12, size 0-0 line 3239
[  148.676680][ T4345] binder: undelivered TRANSACTION_ERROR: 29201
[  148.713290][ T6026] input: syz1 as /devices/virtual/input/input4
[  148.835874][ T6028] binder: 6027:6028 tried to acquire reference to desc 0, got 1 instead
[  148.839490][ T6028] binder: 6027:6028 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  148.852068][ T6028] binder: 6028 RLIMIT_NICE not set
[  148.853587][ T6028] binder: 6028 RLIMIT_NICE not set
[  148.855566][ T6028] binder: release 6027:6028 transaction 197 in, still active
[  149.004788][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.007356][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.015999][   T55] team0 (unregistering): Port device vlan0 removed
[  150.153314][   T55] team0 (unregistering): Port device team_slave_1 removed
[  150.345112][   T55] team0 (unregistering): Port device team_slave_0 removed
[  150.533119][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.749661][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.249389][   T55] bond0 (unregistering): Released all slaves
[  153.364817][ T6009] device vlan3 entered promiscuous mode
[  153.432852][ T6039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.483'.
[  153.528589][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.574822][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.577445][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.584279][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.591221][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.595613][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[  153.602567][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.606217][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.609012][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.610967][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.621840][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  153.626862][ T6048] binder: 6044:6048 tried to acquire reference to desc 0, got 1 instead
[  153.627916][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.630141][ T6048] binder_alloc: 6044: binder_alloc_buf failed to map page at 20ffd000 in userspace
[  153.644010][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.646853][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.648833][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.650706][ T6048] binder_debug: 3 callbacks suppressed
[  153.650718][ T6048] binder: cannot allocate buffer: memory allocation failed
[  153.653247][ T6048] binder: 6044:6048 transaction async to 6044:0 failed 202/29201/-12, size 0-0 line 3239
[  153.680555][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  153.684689][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.688540][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.694947][ T4625] binder: undelivered TRANSACTION_ERROR: 29201
[  153.705462][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.708428][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.716874][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.747096][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  153.750030][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.763084][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.768469][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  153.789582][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.796111][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  153.828572][ T6051] loop0: detected capacity change from 0 to 2048
[  153.846264][ T6051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.191059][ T6073] device vlan2 entered promiscuous mode
[  154.253489][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.255805][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.285456][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'.
[  154.292099][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.390275][ T6081] loop0: detected capacity change from 0 to 1764
[  154.462294][ T6085] loop2: detected capacity change from 0 to 2048
[  154.535723][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.539884][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.550586][ T6085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  154.562243][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.566223][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.569602][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  154.572436][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.599772][ T6085] fs-verity: sha512 using implementation "sha512-arm64"
[  154.644972][ T6097] loop0: detected capacity change from 0 to 512
[  154.702580][ T6097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  154.706819][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  154.731578][ T6097] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.497: bg 0: block 264: padding at end of block bitmap is not set
[  154.751228][ T6097] Quota error (device loop0): write_blk: dquota write failed
[  154.760170][ T6097] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  154.764222][ T6097] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  154.767204][ T6097] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.497: Failed to acquire dquot type 1
[  154.826627][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  154.940741][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.944746][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.682178][ T4308] Bluetooth: hci0: command 0x0409 tx timeout
[  158.761624][ T4308] Bluetooth: hci0: command 0x041b tx timeout
[  160.831549][ T4308] Bluetooth: hci0: command 0x040f tx timeout
[  162.911525][ T4298] Bluetooth: hci0: command 0x0419 tx timeout
[  163.871588][ T4308] Bluetooth: hci4: command 0x0406 tx timeout
[  163.871838][ T4298] Bluetooth: hci3: command 0x0406 tx timeout
[  165.898062][ T6133] binder: 6132:6133 tried to acquire reference to desc 0, got 1 instead
[  165.902143][ T6133] binder: 6132:6133 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  165.906159][ T6133] binder: 6133 RLIMIT_NICE not set
[  165.907762][ T6133] binder: 6133 RLIMIT_NICE not set
[  165.909994][ T6133] binder: 6133 RLIMIT_NICE not set
[  165.912624][ T6133] binder_alloc: 6132: binder_alloc_buf, no vma
[  165.914421][ T6133] binder: cannot allocate buffer: vma cleared, target dead or dying
[  165.914451][ T6133] binder: 6132:6133 transaction reply to 6132:6133 failed 208/29189/-3, size 252-0 line 3239
[  165.920105][ T6133] binder: send failed reply for transaction 207 to 6132:6133
[  165.930342][   T22] binder: undelivered TRANSACTION_COMPLETE
[  165.932270][   T22] binder: undelivered TRANSACTION_ERROR: 29189
[  165.946296][   T22] binder: undelivered TRANSACTION_ERROR: 29190
[  169.623032][ T4308] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  169.626604][ T4308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  169.629596][ T4308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  169.635610][ T4308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  169.638359][ T4308] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  169.640775][ T4308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  171.648881][ T4310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  171.653540][ T4310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  171.657781][ T4310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  171.671847][ T4310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  171.674630][ T4310] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  171.676969][ T4310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  171.711645][ T4308] Bluetooth: hci6: command 0x0409 tx timeout
[  173.721679][ T4308] Bluetooth: hci7: command 0x0409 tx timeout
[  173.791558][ T4308] Bluetooth: hci6: command 0x041b tx timeout
[  175.792353][ T4308] Bluetooth: hci7: command 0x041b tx timeout
[  175.872009][ T4308] Bluetooth: hci6: command 0x040f tx timeout
[  177.506955][ T6092] chnl_net:caif_netlink_parms(): no params data found
[  177.619786][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  177.623692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.816117][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  177.819346][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.832751][ T5745] device veth0_vlan entered promiscuous mode
[  177.871665][ T4308] Bluetooth: hci7: command 0x040f tx timeout
[  177.919384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  177.922523][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.947444][ T4342] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  177.952402][ T4308] Bluetooth: hci6: command 0x0419 tx timeout
[  177.960235][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.971648][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.975255][ T6092] device bridge_slave_0 entered promiscuous mode
[  178.025407][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.027827][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.030746][ T6092] device bridge_slave_1 entered promiscuous mode
[  178.039071][ T5745] device veth1_vlan entered promiscuous mode
[  178.098494][ T6092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.102201][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.106505][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.113685][ T6144] chnl_net:caif_netlink_parms(): no params data found
[  178.128927][ T6092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.141705][ T4342] usb 1-1: Using ep0 maxpacket: 16
[  178.144535][ T4342] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  178.147545][ T4342] usb 1-1: config 64 has 0 interfaces, different from the descriptor's value: 1
[  178.154219][ T4342] usb 1-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4
[  178.161557][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.163910][ T4342] usb 1-1: Product: syz
[  178.165268][ T4342] usb 1-1: Manufacturer: syz
[  178.166661][ T4342] usb 1-1: SerialNumber: syz
[  178.220039][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.223509][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.232965][ T5745] device veth0_macvtap entered promiscuous mode
[  178.245232][ T6092] team0: Port device team_slave_0 added
[  178.249664][ T6138] chnl_net:caif_netlink_parms(): no params data found
[  178.288887][ T6092] team0: Port device team_slave_1 added
[  178.366916][ T5745] device veth1_macvtap entered promiscuous mode
[  178.396547][ T4342] usb 1-1: USB disconnect, device number 16
[  178.454824][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.456942][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.459948][ T6144] device bridge_slave_0 entered promiscuous mode
[  178.479292][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.490307][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.496165][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.499195][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.509119][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.517127][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.521988][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.524719][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.526701][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.535300][ T6092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.540051][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.542306][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.549566][ T6092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.558791][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.561080][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.564202][ T6144] device bridge_slave_1 entered promiscuous mode
[  178.576562][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  178.581843][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  178.602067][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  178.605229][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.621166][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.624879][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.627744][ T6138] device bridge_slave_0 entered promiscuous mode
[  178.642558][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.644606][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.647476][ T6138] device bridge_slave_1 entered promiscuous mode
[  178.663842][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.666769][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.669497][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.673715][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.676338][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.679171][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.683849][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.704291][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.715402][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  178.718853][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  178.725735][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.735607][ T5745] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.738181][ T5745] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.740706][ T5745] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.743891][ T5745] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.766458][ T6092] device hsr_slave_0 entered promiscuous mode
[  178.812807][ T6092] device hsr_slave_1 entered promiscuous mode
[  178.860348][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.867462][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.234918][   T55] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.991510][ T4310] Bluetooth: hci7: command 0x0419 tx timeout
[  180.067077][ T6216] loop0: detected capacity change from 0 to 1024
[  180.073352][   T55] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.140241][ T6144] team0: Port device team_slave_0 added
[  180.170460][ T6216] hfsplus: bad catalog entry type
[  180.186279][   T55] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.206235][   T11] hfsplus: b-tree write err: -5, ino 4
[  180.215426][ T6138] team0: Port device team_slave_0 added
[  180.218949][ T6138] team0: Port device team_slave_1 added
[  180.280985][ T6144] team0: Port device team_slave_1 added
[  180.295984][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.0.515'.
[  180.423658][   T55] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.430664][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.433864][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.441069][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.448850][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.450790][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.459645][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.495820][ T6221] loop0: detected capacity change from 0 to 164
[  180.539156][ T6221] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  180.585362][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.587291][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.596092][ T6221] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  180.599232][ T6221] rock: directory entry would overflow storage
[  180.599890][ T6144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.600940][ T6221] rock: sig=0x4f50, size=4, remaining=3
[  180.648027][ T6221] iso9660: Corrupted directory entry in block 4 of inode 1792
[  180.705574][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.707628][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.731606][ T6144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.793413][ T6138] device hsr_slave_0 entered promiscuous mode
[  180.809101][ T6230] loop0: detected capacity change from 0 to 1024
[  180.833064][ T6230] EXT4-fs: inline encryption not supported
[  180.834827][ T6230] EXT4-fs: Ignoring removed i_version option
[  180.837130][ T6230] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  180.842633][ T6138] device hsr_slave_1 entered promiscuous mode
[  180.847739][ T6230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  180.871652][ T6138] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.873791][ T6138] Cannot create hsr debugfs directory
[  180.906741][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.909967][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.934036][ T6230] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.517: Allocating blocks 497-513 which overlap fs metadata
[  180.959996][ T6230] EXT4-fs (loop0): pa 00000000a68d1246: logic 256, phys. 385, len 8
[  180.963002][ T6230] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[  180.976640][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  181.115979][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  181.123828][ T6144] device hsr_slave_0 entered promiscuous mode
[  181.172125][ T6144] device hsr_slave_1 entered promiscuous mode
[  181.211540][ T6144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.213915][ T6144] Cannot create hsr debugfs directory
[  181.272275][   T55] tipc: Disabling bearer <eth:team0>
[  181.274929][   T55] tipc: Left network mode
[  181.279425][ T6092] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  181.395119][ T6092] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  182.344802][ T6092] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  182.471793][ T6092] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  182.476732][  T285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.479557][  T285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.517578][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.913763][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'.
[  183.922541][ T6138] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  184.005859][ T6271] loop7: detected capacity change from 0 to 4096
[  184.038135][ T6271] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  184.106136][ T5745] EXT4-fs (loop7): unmounting filesystem.
[  184.161358][    C0] sched: RT throttling activated
[  184.187767][ T6276] loop7: detected capacity change from 0 to 1024
[  184.210057][ T6276] EXT4-fs: Ignoring removed i_version option
[  184.312341][ T6276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  184.353585][ T6276] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  184.373256][ T6276] EXT4-fs (loop7): re-mounted. Quota mode: none.
[  184.463375][ T5745] EXT4-fs (loop7): unmounting filesystem.
[  185.042157][ T6138] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  185.364950][ T6138] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  185.393871][ T6138] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  185.755866][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.760140][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.838903][ T6092] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.191889][ T4344] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  186.371035][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.374861][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  186.377926][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.380694][ T4344] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  186.386240][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.389077][ T4344] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  186.393726][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.427578][ T4344] usb 1-1: config 0 descriptor??
[  186.458702][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.474335][ T6138] 8021q: adding VLAN 0 to HW filter on device team0
[  186.525439][ T6092] 8021q: adding VLAN 0 to HW filter on device team0
[  186.574410][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.577413][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.581970][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  186.585061][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  186.622591][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.624830][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.770524][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  186.796003][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  186.816396][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.818523][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.839866][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  186.874198][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  186.905883][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  186.944371][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  186.970696][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  187.004563][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  187.035658][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  187.058482][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  187.086526][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.109456][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  187.277056][ T6138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.336402][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  187.339995][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  187.349589][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  187.363907][ T6332] loop7: detected capacity change from 0 to 164
[  187.368413][ T6332] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  187.370129][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  187.380086][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.382378][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.392662][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  187.394666][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  187.529811][ T6337] loop7: detected capacity change from 0 to 1024
[  187.530624][ T4344] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xe
[  187.537970][ T6337] hfsplus: failed to load catalog file
[  187.540378][ T4344] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  187.549991][ T4344] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  187.562025][ T4344] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  187.693886][ T6339] 9pnet_fd: Insufficient options for proto=fd
[  187.718518][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.722124][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.726040][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.736006][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.738245][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.740786][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  187.826242][ T4445] usb 1-1: USB disconnect, device number 17
[  187.866178][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  187.869625][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  187.888339][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  187.901242][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  187.906992][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  187.910210][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  187.966510][   T55] device hsr_slave_0 left promiscuous mode
[  188.052215][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.054595][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.057414][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.059837][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.063476][   T55] device bridge_slave_1 left promiscuous mode
[  188.066838][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.114121][   T55] device bridge_slave_0 left promiscuous mode
[  188.117086][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.241728][   T55] device veth1_macvtap left promiscuous mode
[  188.243745][   T55] device veth0_macvtap left promiscuous mode
[  188.245455][   T55] device veth1_vlan left promiscuous mode
[  188.458444][ T6362] loop0: detected capacity change from 0 to 1024
[  188.489500][ T6362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  188.536319][ T6362] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.0.537: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1
[  188.554543][ T6362] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[  188.557679][ T6362] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.537: Deleting old file: nlink 4, error=-117
[  188.612345][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  189.712259][ T4308] Bluetooth: hci7: command 0x0405 tx timeout
[  189.774881][ T6384] loop0: detected capacity change from 0 to 512
[  189.825201][   T55] team0 (unregistering): Port device vlan0 removed
[  190.891262][ T6399] loop0: detected capacity change from 0 to 16
[  190.899343][ T6399] erofs: Unknown parameter ''
[  191.060101][ T6403] loop0: detected capacity change from 0 to 512
[  191.094779][ T6403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  191.116676][   T55] team0 (unregistering): Port device team_slave_1 removed
[  191.138276][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  191.293479][   T55] team0 (unregistering): Port device team_slave_0 removed
[  191.474290][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.703526][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.262081][   T55] bond0 (unregistering): Released all slaves
[  194.486707][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.490349][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.498640][ T6092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.502816][ T6092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.571622][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.574554][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.591607][ T4310] Bluetooth: hci2: command 0x0406 tx timeout
[  194.644155][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.646506][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.665821][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.695690][ T6421] loop7: detected capacity change from 0 to 128
[  194.732346][ T6421] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  194.739498][ T6144] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.762774][ T6421] EXT4-fs (loop7): shut down requested (1)
[  194.825648][ T6144] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.874191][ T6144] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.876850][ T5745] EXT4-fs (loop7): unmounting filesystem.
[  194.944937][ T6144] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.983362][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.7.558'.
[  195.148288][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.150692][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.179330][ T6092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.329939][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.346794][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.353323][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.364457][ T6457] loop7: detected capacity change from 0 to 164
[  195.381555][ T4347] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  195.393470][ T6457] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.420982][ T6144] 8021q: adding VLAN 0 to HW filter on device team0
[  195.425988][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.428792][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  195.460335][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  195.463520][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  195.476331][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.481032][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.502224][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.504441][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.542621][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.545323][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.556843][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.559531][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.561568][ T4537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.569243][ T6138] device veth0_vlan entered promiscuous mode
[  195.581632][ T4347] usb 1-1: Using ep0 maxpacket: 16
[  195.589574][ T4347] usb 1-1: config 3 has an invalid interface number: 201 but max is 0
[  195.592460][ T4347] usb 1-1: config 3 has no interface number 0
[  195.594092][ T4347] usb 1-1: config 3 interface 201 has no altsetting 0
[  195.613777][ T4347] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=a4.e0
[  195.621442][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.623823][ T4347] usb 1-1: Product: syz
[  195.624941][ T4347] usb 1-1: Manufacturer: syz
[  195.626261][ T4347] usb 1-1: SerialNumber: syz
[  195.653203][ T6448] fido_id[6448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  195.740172][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  195.743425][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  195.746407][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.750678][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.754319][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.758034][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.761005][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.766027][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.768914][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.772735][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.805067][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  195.818959][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  195.828420][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.844024][ T6144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.845397][ T4347] option 1-1:3.201: GSM modem (1-port) converter detected
[  195.847783][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.861620][ T4347] usb 1-1: USB disconnect, device number 18
[  195.862918][ T6138] device veth1_vlan entered promiscuous mode
[  195.867306][ T4347] option 1-1:3.201: device disconnected
[  195.873238][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  195.876153][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.879013][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.950015][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  195.953737][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  195.957098][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  195.970085][ T6138] device veth0_macvtap entered promiscuous mode
[  195.994462][ T6138] device veth1_macvtap entered promiscuous mode
[  196.074935][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  196.077427][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  196.142391][ T6469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.149630][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.159657][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.168432][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.191194][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.194384][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.198088][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.205489][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.209564][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.213521][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.216357][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.219351][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.222694][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.225851][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.230559][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.242940][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  196.245940][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  196.248934][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  196.254707][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  196.265922][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  196.269166][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  196.298646][ T6138] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.301598][ T6138] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.304136][ T6138] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.306631][ T6138] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.337806][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  196.340891][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  196.428581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  196.433357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  196.443157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  196.462556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  196.466407][ T6092] device veth0_vlan entered promiscuous mode
[  196.505438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.507779][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.537924][ T6483] loop0: detected capacity change from 0 to 2048
[  196.545684][ T6092] device veth1_vlan entered promiscuous mode
[  196.566269][ T6483] ext3: Unknown parameter 'smackfsdef'
[  196.579836][ T6483] ip6t_rpfilter: unknown options
[  196.587887][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  196.594079][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.640446][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.657005][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.681749][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.684675][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  196.687841][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  196.712913][ T6092] device veth0_macvtap entered promiscuous mode
[  196.765333][ T6092] device veth1_macvtap entered promiscuous mode
[  196.772828][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.772875][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.778007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  196.778769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  196.779301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.787276][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.840065][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.853175][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.856229][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.859326][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.884312][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.890140][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.904752][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.907732][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.910729][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.927775][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.940035][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  196.959243][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  196.994560][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.997909][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.000678][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.034533][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.046150][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.057393][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.070085][ T6092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.086525][ T6092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.099932][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.108555][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.568'.
[  197.113081][ T6092] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.116008][ T6092] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.118573][ T6092] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.121018][ T6092] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.126149][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  197.129236][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  197.209933][ T6507] team0: No ports can be present during mode change
[  197.308898][ T6509] tipc: Started in network mode
[  197.310771][ T6509] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  197.321049][ T6509] tipc: Enabled bearer <eth:team0>, priority 0
[  197.344808][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.349696][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.366364][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  197.383492][ T6511] loop9: detected capacity change from 0 to 2048
[  197.413877][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  197.417165][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  197.444339][ T6511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  197.484079][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.486651][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.493923][ T6511] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  197.495122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  197.504640][ T6144] device veth0_vlan entered promiscuous mode
[  197.512683][ T6144] device veth1_vlan entered promiscuous mode
[  197.526928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  197.532342][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  197.566734][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.569733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  197.580227][ T6144] device veth0_macvtap entered promiscuous mode
[  197.585375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  197.588234][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  197.591020][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.603459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.606988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  197.665766][ T6144] device veth1_macvtap entered promiscuous mode
[  197.683542][ T6138] EXT4-fs (loop9): unmounting filesystem.
[  197.744140][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.781822][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.804953][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.826857][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.842177][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.886887][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.903807][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.908889][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.922317][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.931816][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.948054][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.978184][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.010739][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.038968][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.064577][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.089512][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.108666][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.126252][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.145061][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.161484][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.180740][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.199515][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.202609][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.207417][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.211189][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.217050][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.221237][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  198.236112][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.264004][ T6144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.267064][ T6144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.275006][ T6144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.286975][ T6144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.333101][ T6540] loop9: detected capacity change from 0 to 1024
[  198.419553][ T6542] loop7: detected capacity change from 0 to 256
[  198.428390][ T6540] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  198.451953][ T4344] tipc: Node number set to 11578026
[  198.560442][ T6138] EXT4-fs (loop9): unmounting filesystem.
[  198.612699][ T4958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.615567][ T4958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.621481][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  198.668915][ T6551] loop0: detected capacity change from 0 to 2048
[  198.693701][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.8.579'.
[  198.705800][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.708570][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.729714][ T6551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.766926][ T6559] team0: No ports can be present during mode change
[  198.797033][ T6559] device vlan0 entered promiscuous mode
[  198.873535][ T6559] team0: Port device vlan0 added
[  198.875766][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  198.879676][ T6563] tipc: Started in network mode
[  198.881092][ T6563] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  198.924742][ T6563] tipc: Enabled bearer <eth:team0>, priority 0
[  198.934599][ T6568] loop9: detected capacity change from 0 to 512
[  198.997781][ T6568] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e84ec028, mo2=0000]
[  199.000206][ T6568] System zones: 0-2, 18-18, 34-34
[  199.057624][ T6568] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  199.070997][ T6568] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  199.074494][ T6568] EXT4-fs error (device loop9): ext4_acquire_dquot:6814: comm syz.9.581: Failed to acquire dquot type 0
[  199.100190][ T6568] EXT4-fs (loop9): Remounting filesystem read-only
[  199.155862][ T6568] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  199.158820][ T6568] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  199.196032][ T6568] EXT4-fs error (device loop9): ext4_acquire_dquot:6814: comm syz.9.581: Failed to acquire dquot type 0
[  199.250265][ T6568] EXT4-fs (loop9): Remounting filesystem read-only
[  199.304657][ T6568] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  199.308128][ T6568] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  199.310908][ T6568] EXT4-fs error (device loop9): ext4_acquire_dquot:6814: comm syz.9.581: Failed to acquire dquot type 0
[  199.368577][ T6568] EXT4-fs (loop9): Remounting filesystem read-only
[  199.370699][ T6568] EXT4-fs (loop9): 1 orphan inode deleted
[  199.372792][ T6568] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  199.521127][ T6594] loop4: detected capacity change from 0 to 1024
[  199.542263][ T6138] EXT4-fs (loop9): unmounting filesystem.
[  199.602255][ T6594] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  199.604964][ T6594] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  199.692803][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.710422][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.720651][   T38] hfsplus: b-tree write err: -5, ino 4
[  199.763527][ T6601] loop8: detected capacity change from 0 to 128
[  199.777302][ T6601] EXT4-fs (loop8): Test dummy encryption mode enabled
[  199.798999][ T6601] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  199.921553][   T22] tipc: Node number set to 11578026
[  199.925354][ T6092] EXT4-fs (loop8): unmounting filesystem.
[  199.979089][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.985530][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.314034][ T6629] loop0: detected capacity change from 0 to 512
[  200.341909][ T6627] loop7: detected capacity change from 0 to 2048
[  200.346470][ T6629] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #12: comm syz.0.596: corrupted in-inode xattr
[  200.365935][ T6629] EXT4-fs (loop0): Remounting filesystem read-only
[  200.378453][ T6629] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.596: couldn't read orphan inode 12 (err -117)
[  200.390974][ T6627] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  200.400851][ T6627] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  200.401579][ T6629] EXT4-fs (loop0): Remounting filesystem read-only
[  200.421199][ T6627] EXT4-fs (loop7): Remounting filesystem read-only
[  200.449509][ T6629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  200.566397][ T5745] EXT4-fs (loop7): unmounting filesystem.
[  200.570949][ T6629] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.596: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  200.595104][ T6629] EXT4-fs (loop0): Remounting filesystem read-only
[  200.598305][ T6629] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.596: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  200.608270][ T6629] EXT4-fs (loop0): Remounting filesystem read-only
[  200.729854][ T4307] EXT4-fs (loop0): unmounting filesystem.
[  200.850081][ T6654] loop7: detected capacity change from 0 to 1024
[  200.983240][ T6654] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  201.065532][ T6654] process 'syz.7.602' launched './file1' with NULL argv: empty string added
[  201.079022][ T6667] syz.8.606 sent an empty control message without MSG_MORE.
[  201.081187][ T6669] binder: 6665:6669 BC_ACQUIRE_DONE u0000000000000002 no match
[  201.087871][ T6669] binder: 6665:6669 BC_FREE_BUFFER u0000000000000000 no match
[  201.101488][ T4445] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  201.207949][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.218347][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.238389][ T5745] EXT4-fs (loop7): unmounting filesystem.
[  201.281538][ T4445] usb 1-1: Using ep0 maxpacket: 16
[  201.284846][ T4445] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  201.290524][ T4445] usb 1-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4
[  201.300206][ T4445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.307547][ T4445] usb 1-1: Product: syz
[  201.308770][ T4445] usb 1-1: Manufacturer: syz
[  201.310105][ T4445] usb 1-1: SerialNumber: syz
[  201.345195][ T6676] loop7: detected capacity change from 0 to 1764
[  201.557695][ T4445] ftdi_sio 1-1:64.0: Ignoring interface reserved for JTAG
[  201.568960][ T4445] usb 1-1: USB disconnect, device number 19
[  201.802943][ T6696] loop9: detected capacity change from 0 to 1024
[  201.832310][ T6696] EXT4-fs: Ignoring removed i_version option
[  201.842009][ T6696] EXT4-fs: Ignoring removed nobh option
[  201.869490][ T6697] loop7: detected capacity change from 0 to 4096
[  201.873578][ T6696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  202.036345][ T6696] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal
[  202.040817][ T6697] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  202.069474][ T6697] fs-verity: sha256 using implementation "sha256-ce"
[  202.150209][ T6697] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.614: bg 0: block 363: padding at end of block bitmap is not set
[  202.182206][ T6697] fs-verity (loop7, inode 16): Error -117 writing Merkle tree block 0
[  202.192026][ T4310] Bluetooth: hci7: command 0x0405 tx timeout
[  202.199360][ T6697] fs-verity (loop7, inode 16): Error -117 building Merkle tree
[  202.275300][ T5745] EXT4-fs (loop7): unmounting filesystem.
[  202.312497][ T6710] loop9: detected capacity change from 0 to 256
[  202.327166][ T6710] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d)
[  202.566335][ T6722] Bluetooth: MGMT ver 1.22
[  202.878091][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.922468][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.247340][ T6724] Bluetooth: MGMT ver 1.22
[  203.335425][ T5795] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.462182][ T4310] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  203.466852][ T4310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  203.472454][ T4310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  203.476396][ T5795] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.486170][ T4310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  203.490108][ T4310] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  203.492766][ T4310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  203.547596][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.550368][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.703538][ T5795] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.834906][ T6762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.631'.
[  203.865618][ T5795] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.005485][ T6769] binder: 6768:6769 got transaction to invalid handle, 1
[  204.007496][ T6769] binder: 6769:6768 cannot find target node
[  204.009155][ T6769] binder: 6768:6769 transaction async to 0:0 failed 212/29201/-22, size 0-0 line 3054
[  204.040905][ T4625] binder: undelivered TRANSACTION_ERROR: 29201
[  204.360713][ T6742] chnl_net:caif_netlink_parms(): no params data found
[  204.699072][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.701673][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.704476][ T6742] device bridge_slave_0 entered promiscuous mode
[  204.709325][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.711726][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.714826][ T6742] device bridge_slave_1 entered promiscuous mode
[  204.809838][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.868833][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.871502][ T4625] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  205.043978][ T6742] team0: Port device team_slave_0 added
[  205.054381][ T4625] usb 1-1: Using ep0 maxpacket: 16
[  205.067351][ T4625] usb 1-1: unable to read config index 0 descriptor/start: -61
[  205.069497][ T4625] usb 1-1: can't read configurations, error -61
[  205.117647][ T6742] team0: Port device team_slave_1 added
[  205.188421][ T6810] netlink: 72 bytes leftover after parsing attributes in process `syz.7.642'.
[  205.221529][ T4625] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  205.279823][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.286383][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.317657][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.387117][ T6818] binder: 6817:6818 got transaction to invalid handle, 1
[  205.395956][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.398352][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.398946][ T6818] binder: 6818:6817 cannot find target node
[  205.406047][ T4625] usb 1-1: Using ep0 maxpacket: 16
[  205.411084][ T4625] usb 1-1: unable to read config index 0 descriptor/start: -61
[  205.413489][ T4625] usb 1-1: can't read configurations, error -61
[  205.416558][ T4625] usb usb1-port1: attempt power cycle
[  205.420488][ T6818] binder: 6817:6818 transaction async to 0:0 failed 216/29201/-22, size 0-0 line 3054
[  205.421867][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.440818][ T4342] binder: undelivered TRANSACTION_ERROR: 29201
[  205.539325][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.551717][ T4308] Bluetooth: hci3: command 0x0409 tx timeout
[  205.573348][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.588653][ T6827] loop7: detected capacity change from 0 to 1024
[  205.604377][ T6827] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  205.654248][ T6742] device hsr_slave_0 entered promiscuous mode
[  205.673422][    T9] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  205.681821][    T9] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28
[  205.682090][ T6742] device hsr_slave_1 entered promiscuous mode
[  205.685529][    T9] EXT4-fs (loop7): This should not happen!! Data will be lost
[  205.685529][    T9] 
[  205.695393][    T9] EXT4-fs (loop7): Total free blocks count 0
[  205.697300][    T9] EXT4-fs (loop7): Free/Dirty block details
[  205.734364][    T9] EXT4-fs (loop7): free_blocks=4293918720
[  205.736796][    T9] EXT4-fs (loop7): dirty_blocks=16
[  205.738323][    T9] EXT4-fs (loop7): Block reservation details
[  205.740184][    T9] EXT4-fs (loop7): i_reserved_data_blocks=1
[  205.771865][ T5745] EXT4-fs (loop7): unmounting filesystem.
[  205.773815][ T6742] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.775984][ T6742] Cannot create hsr debugfs directory
[  205.821554][ T4625] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  205.855141][ T4625] usb 1-1: Using ep0 maxpacket: 16
[  205.860282][ T4625] usb 1-1: unable to read config index 0 descriptor/start: -61
[  205.864584][ T4625] usb 1-1: can't read configurations, error -61
[  206.011502][ T4625] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  206.043198][ T4625] usb 1-1: Using ep0 maxpacket: 16
[  206.046770][ T4625] usb 1-1: unable to read config index 0 descriptor/start: -61
[  206.049130][ T4625] usb 1-1: can't read configurations, error -61
[  206.051102][ T4625] usb usb1-port1: unable to enumerate USB device
[  206.175400][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.201894][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.807263][ T6742] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.872452][ T6865] netlink: 72 bytes leftover after parsing attributes in process `syz.8.653'.
[  206.895163][ T5795] device hsr_slave_0 left promiscuous mode
[  206.922943][ T5795] device hsr_slave_1 left promiscuous mode
[  207.001703][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.004013][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.007135][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.014671][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.020500][ T5795] device bridge_slave_1 left promiscuous mode
[  207.025901][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.063904][ T5795] device bridge_slave_0 left promiscuous mode
[  207.066095][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.221819][ T5795] device veth1_macvtap left promiscuous mode
[  207.223853][ T5795] device veth0_macvtap left promiscuous mode
[  207.225888][ T5795] device veth1_vlan left promiscuous mode
[  207.227736][ T5795] device veth0_vlan left promiscuous mode
[  207.631497][ T4308] Bluetooth: hci3: command 0x041b tx timeout
[  208.562488][ T6907] binder: 6906:6907 got transaction to invalid handle, 1
[  208.564725][ T6907] binder: 6907:6906 cannot find target node
[  208.566366][ T6907] binder: 6906:6907 transaction async to 0:0 failed 220/29201/-22, size 0-0 line 3054
[  208.569684][ T4445] binder: undelivered TRANSACTION_ERROR: 29201
[  209.306443][ T5795] team0 (unregistering): Port device team_slave_1 removed
[  209.513911][ T5795] team0 (unregistering): Port device team_slave_0 removed
[  209.565664][ T6914] loop4: detected capacity change from 0 to 256
[  209.568182][ T6914] exfat: Unknown parameter 'ø¯‡ @ƒ2@FHL®€'
[  209.711514][ T4310] Bluetooth: hci3: command 0x040f tx timeout
[  209.732827][ T5795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.752417][ T6922] loop4: detected capacity change from 0 to 128
[  209.783627][ T6922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  209.799515][ T6922] syz.4.662 (pid 6922) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  209.823145][ T6922] fscrypt: key with descriptor 0000111122223333 is too short (got 16 bytes, need 32+ bytes)
[  209.862377][ T6144] EXT4-fs (loop4): unmounting filesystem.
[  210.082539][ T5795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.791498][ T4308] Bluetooth: hci3: command 0x0419 tx timeout
[  213.325058][ T5795] bond0 (unregistering): Released all slaves
[  222.310619][ T4302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  222.315355][ T4302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  222.318256][ T4302] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  222.329512][ T4302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  222.334012][ T4302] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  222.336410][ T4302] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  222.338572][ T4302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  222.341323][ T4302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  222.350775][ T4310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  222.372738][ T4310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  222.375318][ T4310] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  222.377706][ T4310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  223.325352][ T4298] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  223.331002][ T4298] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  223.335892][ T4298] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  223.339869][ T4298] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  223.343922][ T4298] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  223.346329][ T4298] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  224.358929][ T4298] Bluetooth: hci5: command 0x0409 tx timeout
[  224.432126][ T4298] Bluetooth: hci6: command 0x0409 tx timeout
[  224.476275][ T6742] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.498944][ T6928] netlink: 798 bytes leftover after parsing attributes in process `syz.4.663'.
[  224.668771][ T6742] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.878216][ T6742] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.396079][ T4298] Bluetooth: hci8: command 0x0409 tx timeout
[  225.578780][ T6939] chnl_net:caif_netlink_parms(): no params data found
[  225.757601][ T6933] chnl_net:caif_netlink_parms(): no params data found
[  225.812192][ T6742] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  225.826857][ T6990] binder: 6989:6990 got reply transaction with no transaction stack
[  225.829258][ T6990] binder: 6989:6990 transaction reply to 0:0 failed 221/29201/-71, size 0-48 line 2955
[  225.833398][  T112] binder: undelivered TRANSACTION_ERROR: 29201
[  225.911750][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.913992][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.917566][ T6939] device bridge_slave_0 entered promiscuous mode
[  225.936253][ T6742] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  225.963559][ T6742] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  225.984774][ T6742] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  226.043423][ T6932] chnl_net:caif_netlink_parms(): no params data found
[  226.063530][ T6999] loop4: detected capacity change from 0 to 1024
[  226.070194][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.074480][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.077268][ T6939] device bridge_slave_1 entered promiscuous mode
[  226.093678][ T6999] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  226.222245][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.231965][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.232045][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.232825][ T6933] device bridge_slave_0 entered promiscuous mode
[  226.247701][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.249840][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.258482][ T6933] device bridge_slave_1 entered promiscuous mode
[  226.432986][ T4298] Bluetooth: hci5: command 0x041b tx timeout
[  226.494147][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.511485][ T4310] Bluetooth: hci6: command 0x041b tx timeout
[  226.844582][ T5795] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.861889][ T6939] team0: Port device team_slave_0 added
[  226.869392][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.876648][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.936185][ T5795] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.942874][ T6939] team0: Port device team_slave_1 added
[  226.962673][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.964986][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.967985][ T6932] device bridge_slave_0 entered promiscuous mode
[  226.972680][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.974813][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.978341][ T6932] device bridge_slave_1 entered promiscuous mode
[  227.034394][ T5795] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.045006][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.047290][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.055570][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.065399][ T6933] team0: Port device team_slave_0 added
[  227.080685][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.082894][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.094242][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.103323][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.107416][ T6933] team0: Port device team_slave_1 added
[  227.153751][ T5795] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.162740][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.173439][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.211171][ T6742] 8021q: adding VLAN 0 to HW filter on device team0
[  227.243734][ T7020] loop4: detected capacity change from 0 to 8
[  227.248569][ T7020] SQUASHFS error: Failed to read block 0x90001ea: -5
[  227.250801][ T7020] unable to read xattr id index table
[  227.255779][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.258026][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.271285][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.300282][ T6932] team0: Port device team_slave_0 added
[  227.315807][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  227.330644][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.433421][ T6939] device hsr_slave_0 entered promiscuous mode
[  227.481714][ T4298] Bluetooth: hci8: command 0x041b tx timeout
[  227.511836][ T6939] device hsr_slave_1 entered promiscuous mode
[  227.551557][ T6939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.553828][ T6939] Cannot create hsr debugfs directory
[  227.556176][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.558177][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.566789][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.828738][ T6932] team0: Port device team_slave_1 added
[  228.258321][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  228.261582][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  228.272098][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.274225][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.276781][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  228.283566][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  228.291905][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.294068][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.309102][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  228.343916][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  228.347214][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  228.350876][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  228.362611][ T7027] loop4: detected capacity change from 0 to 16
[  228.372151][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  228.380949][ T7027] erofs: (device loop4): mounted with root inode @ nid 36.
[  228.408591][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.410650][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.413953][ T4310] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000]
[  228.424364][ T7027] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096]
[  228.427915][ T7027] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096]
[  228.429549][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.431305][ T7027] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096]
[  228.437594][ T7027] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096]
[  228.453799][ T7027] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[8192]
[  228.456958][ T7027] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[8192]
[  228.460470][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  228.463252][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  228.468361][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  228.517026][ T6933] device hsr_slave_0 entered promiscuous mode
[  228.521578][ T4310] Bluetooth: hci5: command 0x040f tx timeout
[  228.542080][ T6933] device hsr_slave_1 entered promiscuous mode
[  228.581521][ T6933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.583632][ T6933] Cannot create hsr debugfs directory
[  228.601537][ T4310] Bluetooth: hci6: command 0x040f tx timeout
[  228.610642][ T6742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  228.613899][ T6742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  228.619969][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.622351][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.629628][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.673473][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  228.676520][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  228.679492][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  228.687808][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  228.705815][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  228.805275][ T5795] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.887950][ T7038] loop4: detected capacity change from 0 to 512
[  228.913613][ T6932] device hsr_slave_0 entered promiscuous mode
[  228.937231][ T7038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  228.942255][ T6932] device hsr_slave_1 entered promiscuous mode
[  228.991919][ T6932] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.994144][ T6932] Cannot create hsr debugfs directory
[  229.055101][ T5795] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.082153][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  229.084795][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.092721][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.145813][ T6144] EXT4-fs (loop4): unmounting filesystem.
[  229.173787][ T5795] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.309022][ T7048] loop4: detected capacity change from 0 to 1024
[  229.320556][ T7048] hfsplus: unable to parse mount options
[  229.463556][ T5795] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.513384][ T7052] loop4: detected capacity change from 0 to 1024
[  229.520222][ T7052] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  229.557705][ T7052] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  229.561614][ T4310] Bluetooth: hci8: command 0x040f tx timeout
[  229.603929][ T7052] ptrace attach of "./syz-executor exec"[7053] was attempted by "./syz-executor exec"[7052]
[  229.646831][ T6144] EXT4-fs (loop4): unmounting filesystem.
[  229.915414][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  229.919124][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.661565][ T4310] Bluetooth: hci5: command 0x0419 tx timeout
[  230.716302][ T4298] Bluetooth: hci6: command 0x0419 tx timeout
[  230.750467][ T5795] tipc: Disabling bearer <eth:team0>
[  230.756211][ T5795] tipc: Left network mode
[  230.759886][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'.
[  230.817869][ T6742] device veth0_vlan entered promiscuous mode
[  230.838665][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  230.843333][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  230.850787][ T6742] device veth1_vlan entered promiscuous mode
[  230.870345][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  230.873905][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  230.882189][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  230.890891][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  231.157546][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.161974][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.342740][ T6742] device veth0_macvtap entered promiscuous mode
[  231.347538][ T6742] device veth1_macvtap entered promiscuous mode
[  231.636273][ T4310] Bluetooth: hci8: command 0x0419 tx timeout
[  231.780338][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.785331][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.788160][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.791091][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.807980][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.811154][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.820109][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.823554][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.826384][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.829234][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.845515][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.966488][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.970183][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.973432][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  231.983365][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  231.998362][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.001327][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.007327][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.010776][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.022242][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.025365][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.028116][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.030851][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.041770][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.044867][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.059859][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.210028][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.213778][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.334051][ T6742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.336524][ T6742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.338880][ T6742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.341863][ T6742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.595719][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'.
[  232.865719][ T6933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.006844][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.009439][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.083672][ T6933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.092004][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  233.220518][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.227139][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.234801][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  233.316710][ T6933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.483610][ T6933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.550015][ T7130] loop4: detected capacity change from 0 to 512
[  233.557254][ T7130] EXT4-fs: Ignoring removed mblk_io_submit option
[  233.572368][ T7130] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  233.578956][ T7130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0102]
[  233.581261][ T7130] System zones: 1-12
[  233.583507][ T7130] EXT4-fs (loop4): orphan cleanup on readonly fs
[  233.585807][ T7130] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.698: invalid indirect mapped block 12 (level 1)
[  233.609418][ T7130] EXT4-fs (loop4): Remounting filesystem read-only
[  233.667525][ T7130] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.698: invalid indirect mapped block 2 (level 2)
[  233.680065][ T7130] EXT4-fs (loop4): Remounting filesystem read-only
[  233.754569][ T7130] EXT4-fs (loop4): 1 truncate cleaned up
[  233.756164][ T7130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  234.628476][ T7148] netlink: 176 bytes leftover after parsing attributes in process `syz.4.698'.
[  235.322737][ T6144] EXT4-fs (loop4): unmounting filesystem.
[  236.249646][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.252017][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.038686][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.069825][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.516442][ T7170] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.519198][ T7170] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.522041][ T7170] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.524562][ T7170] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.900392][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'.
[  237.974384][ T6939] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  238.347427][ T7209] netlink: 268 bytes leftover after parsing attributes in process `syz.5.707'.
[  238.439179][ T6939] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  238.493442][ T6939] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  238.602191][ T6939] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  238.663903][ T7217] input: syz1 as /devices/virtual/input/input5
[  238.959910][ T7230] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.712'.
[  239.917650][ T5795] device hsr_slave_0 left promiscuous mode
[  239.929539][ T7244] loop4: detected capacity change from 0 to 512
[  239.940954][ T7244] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  239.964362][ T5795] device hsr_slave_1 left promiscuous mode
[  239.974300][ T7244] EXT4-fs (loop4): 1 truncate cleaned up
[  239.975918][ T7244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  240.017475][ T6144] EXT4-fs (loop4): unmounting filesystem.
[  240.040971][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.046366][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.049216][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.051313][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.071865][ T5795] device bridge_slave_1 left promiscuous mode
[  240.073747][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.093633][ T5795] device bridge_slave_0 left promiscuous mode
[  240.095475][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.136752][ T5795] device hsr_slave_0 left promiscuous mode
[  240.171712][ T5795] device hsr_slave_1 left promiscuous mode
[  240.281681][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.285871][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.288952][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.294716][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.303682][ T5795] device bridge_slave_1 left promiscuous mode
[  240.306810][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.353678][ T5795] device bridge_slave_0 left promiscuous mode
[  240.355790][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.531741][ T5795] device veth1_macvtap left promiscuous mode
[  240.533805][ T5795] device veth0_macvtap left promiscuous mode
[  240.535639][ T5795] device veth1_vlan left promiscuous mode
[  240.611758][ T5795] device veth1_macvtap left promiscuous mode
[  240.613615][ T5795] device veth0_macvtap left promiscuous mode
[  240.615298][ T5795] device veth1_vlan left promiscuous mode
[  240.617044][ T5795] device veth0_vlan left promiscuous mode
[  241.486809][ T5795] team0 (unregistering): Port device vlan0 removed
[  242.783433][ T5795] team0 (unregistering): Port device team_slave_1 removed
[  242.974925][ T5795] team0 (unregistering): Port device team_slave_0 removed
[  243.172418][ T5795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.412501][ T5795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  243.712195][   T28] INFO: task syz.5.114:5050 blocked for more than 143 seconds.
[  243.714736][   T28]       Not tainted 6.1.141-syzkaller #0
[  243.716264][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  243.718778][   T28] task:syz.5.114       state:D stack:0     pid:5050  ppid:4711   flags:0x00000009
[  243.721314][   T28] Call trace:
[  243.722911][   T28]  __switch_to+0x2f4/0x568
[  243.724144][   T28]  __schedule+0xdd4/0x1b2c
[  243.725343][   T28]  schedule+0xc4/0x170
[  243.726422][   T28]  io_schedule+0x84/0x154
[  243.727609][   T28]  folio_wait_bit_common+0x56c/0x9c4
[  243.729033][   T28]  __folio_lock+0x2c/0x3c
[  243.730197][   T28]  z_erofs_runqueue+0x700/0x1678
[  243.732254][   T28]  z_erofs_readahead+0x898/0xc58
[  243.733702][   T28]  read_pages+0x158/0x680
[  243.734944][   T28]  page_cache_ra_unbounded+0x498/0x57c
[  243.736391][   T28]  force_page_cache_ra+0x248/0x2b0
[  243.737795][   T28]  generic_fadvise+0x32c/0x57c
[  243.739076][   T28]  __arm64_sys_fadvise64_64+0x12c/0x174
[  243.740567][   T28]  invoke_syscall+0x98/0x2bc
[  243.742572][   T28]  el0_svc_common+0x138/0x258
[  243.744040][   T28]  do_el0_svc+0x58/0x13c
[  243.745158][   T28]  el0_svc+0x58/0x138
[  243.746249][   T28]  el0t_64_sync_handler+0x84/0xf0
[  243.747715][   T28]  el0t_64_sync+0x18c/0x190
[  243.749022][   T28] 
[  243.749022][   T28] Showing all locks held in the system:
[  243.751119][   T28] 1 lock held by rcu_tasks_kthre/12:
[  243.753308][   T28]  #0: ffff800015247670 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4
[  243.756220][   T28] 1 lock held by rcu_tasks_trace/13:
[  243.757712][   T28]  #0: ffff800015247e90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4
[  243.760743][   T28] 1 lock held by khungtaskd/28:
[  243.762587][   T28]  #0: ffff800015246d00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44
[  243.765162][   T28] 3 locks held by kworker/u4:3/55:
[  243.766581][   T28]  #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8
[  243.769577][   T28]  #1: ffff80001ce37c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8
[  243.773677][   T28]  #2: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  243.776077][   T28] 4 locks held by udevd/3913:
[  243.777319][   T28]  #0: ffff0000d9357668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xa8/0xc00
[  243.779805][   T28]  #1: ffff0000f2c94088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x370
[  243.782875][   T28]  #2: ffff0000dcf06bd0 (kn->active#4){.+.+}-{0:0}, at: kernfs_seq_start+0x74/0x370
[  243.785650][   T28]  #3: ffff000100b7a0e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x32c
[  243.788118][   T28] 1 lock held by dhcpcd/3968:
[  243.789380][   T28]  #0: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4
[  243.793232][   T28] 2 locks held by getty/4065:
[  243.794507][   T28]  #0: ffff0000d83a0098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[  243.797174][   T28]  #1: ffff80001ce702f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c
[  243.799962][   T28] 3 locks held by kworker/1:4/4344:
[  243.801852][   T28]  #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8
[  243.804675][   T28]  #1: ffff800020e37c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8
[  243.807596][   T28]  #2: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  243.809847][   T28] 3 locks held by kworker/1:5/4347:
[  243.811166][   T28]  #0: ffff0000d5d7f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8
[  243.814706][   T28]  #1: ffff800020e67c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8
[  243.818064][   T28]  #2: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  243.820455][   T28] 1 lock held by syz.5.114/5050:
[  243.822360][   T28]  #0: ffff0000e1fd8890 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x57c
[  243.825564][   T28] 4 locks held by kworker/u4:17/5795:
[  243.827035][   T28]  #0: ffff0000c03dd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8
[  243.829755][   T28]  #1: ffff800020e87c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8
[  243.833017][   T28]  #2: ffff8000176cd610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x12c/0xa74
[  243.835647][   T28]  #3: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  243.837963][   T28] 4 locks held by syz-executor/6932:
[  243.839501][   T28]  #0: ffff800017735930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50
[  243.842304][   T28]  #1: ffff000100b7f690 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x6a4
[  243.845433][   T28]  #2: ffff0000fe64c2f8 (&devlink->lock_key#14){+.+.}-{3:3}, at: devlink_nl_cmd_port_get_dumpit+0x118/0x4e8
[  243.849016][   T28]  #3: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  243.851911][   T28] 7 locks held by syz-executor/6933:
[  243.853349][   T28]  #0: ffff0000d85e8460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23c/0x7c4
[  243.855873][   T28]  #1: ffff0000cb3e3488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c0/0x478
[  243.858604][   T28]  #2: ffff0000cf4ea1d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1dc/0x478
[  243.861827][   T28]  #3: ffff800016a86668 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x128/0x4f4
[  243.864900][   T28]  #4: ffff000100b7a0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8c/0x3d4
[  243.867369][   T28]  #5: ffff000100b792f8 (&devlink->lock_key#15){+.+.}-{3:3}, at: devl_lock+0x24/0x34
[  243.870055][   T28]  #6: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  243.872813][   T28] 1 lock held by syz-executor/6939:
[  243.874258][   T28]  #0: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4
[  243.876943][   T28] 3 locks held by syz.5.717/7248:
[  243.878262][   T28]  #0: ffff800017735930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50
[  243.880501][   T28]  #1: ffff800017735748 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x62c
[  243.883455][   T28]  #2: ffff8000176d9c88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  243.885832][   T28] 2 locks held by syz.4.721/7272:
[  243.887113][   T28]  #0: ffff800017735930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50
[  243.889376][   T28]  #1: ffff800017735748 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x62c
[  243.892340][   T28] 
[  243.893014][   T28] =============================================
[  243.893014][   T28] 
[  243.895307][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  243.897279][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0
[  243.899298][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  243.902063][   T28] Call trace:
[  243.902918][   T28]  dump_backtrace+0x1c8/0x1f4
[  243.904226][   T28]  show_stack+0x2c/0x3c
[  243.905404][   T28]  __dump_stack+0x30/0x40
[  243.906594][   T28]  dump_stack_lvl+0xf8/0x160
[  243.907830][   T28]  dump_stack+0x1c/0x5c
[  243.908933][   T28]  panic+0x2e0/0x79c
[  243.910012][   T28]  hung_task_panic+0x0/0x2c
[  243.911238][   T28]  kthread+0x250/0x2d8
[  243.912318][   T28]  ret_from_fork+0x10/0x20
[  243.913537][   T28] SMP: stopping secondary CPUs
[  243.914862][   T28] Kernel Offset: disabled
[  243.916067][   T28] CPU features: 0x080000,02070084,26017203
[  243.917692][   T28] Memory Limit: none
[  244.487254][   T28] Rebooting in 86400 seconds..