last executing test programs:

1m26.748379058s ago: executing program 4 (id=56):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94)

1m26.516498412s ago: executing program 4 (id=59):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x800)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x0, 0xe5a])

1m26.376368183s ago: executing program 4 (id=63):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="04"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)

1m26.345224524s ago: executing program 4 (id=64):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}})

1m25.313948409s ago: executing program 4 (id=72):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0xfffffffffffffe29, 0x1, {0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m25.136704352s ago: executing program 4 (id=75):
ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff000000}, 0x48)

1m14.840494954s ago: executing program 2 (id=142):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0)

1m14.720349765s ago: executing program 2 (id=146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}, {&(0x7f0000000440)=""/19, 0x13}, {0x0}, {&(0x7f0000000040)=""/22, 0x16}, {0x0}], 0x6}, 0x60}], 0x1, 0x62, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00', @ANYRES16], 0x44}}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00002e2000/0x4000)=nil, 0x4000, 0xd, 0x80010, 0xffffffffffffffff, 0x8000000)
socket$caif_seqpacket(0x25, 0x5, 0x5)
syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x710a89d0c9b734a9})
r7 = fsmount(r5, 0x0, 0x18)
symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00')
openat2(r7, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}})
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)

1m11.566633522s ago: executing program 2 (id=165):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

1m11.417578404s ago: executing program 2 (id=168):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1m9.835218908s ago: executing program 2 (id=177):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m9.783759119s ago: executing program 32 (id=75):
ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff000000}, 0x48)

1m8.136425673s ago: executing program 2 (id=188):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {}, {0x3, 0xf}}}, 0x24}}, 0x200400d4)

1m7.976738785s ago: executing program 33 (id=188):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {}, {0x3, 0xf}}}, 0x24}}, 0x200400d4)

52.257082588s ago: executing program 3 (id=274):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)=@ethtool_eeprom={0xb, 0x5, 0x102000, 0x6, "f731c837e929"}})

50.608443683s ago: executing program 3 (id=279):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mlockall(0x7)
mlock2(&(0x7f0000181000/0x1000)=nil, 0x1000, 0x0)

49.44045201s ago: executing program 3 (id=290):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000))

49.176083954s ago: executing program 3 (id=294):
syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f"], 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)

48.483524044s ago: executing program 3 (id=296):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}})

47.321818161s ago: executing program 3 (id=302):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff000000}, 0x48)

32.144017046s ago: executing program 34 (id=302):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff000000}, 0x48)

15.192293737s ago: executing program 1 (id=481):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1810088, &(0x7f0000000200)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x5bf01be}}, {@bh}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x7}}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2})

14.332116319s ago: executing program 1 (id=482):
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d044af7f1515f968abdacc18d8acac7714", 0x11}], 0x1)

12.762334762s ago: executing program 1 (id=487):
socketpair(0x23, 0x2, 0x8, &(0x7f0000000040))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

9.640437629s ago: executing program 1 (id=494):
socket$inet6(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})

7.327707032s ago: executing program 7 (id=500):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff00000000711094000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

7.283279943s ago: executing program 0 (id=501):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x2, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x2, 0xd, 0x8, 0x1}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0xf, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x103d}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x9, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x1, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0x0, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x9, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x4a, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)

7.196466134s ago: executing program 5 (id=503):
syz_usb_connect$uac1(0x69a90eab3db9c902, 0x71, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x1, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xca400)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

7.164102265s ago: executing program 7 (id=504):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

7.093651216s ago: executing program 0 (id=505):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}]})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

6.792118231s ago: executing program 0 (id=506):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x202183b, 0x0, 0x5, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)

5.915085813s ago: executing program 5 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e64000000000c00028008001200feffffff"], 0x50}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)

5.910400753s ago: executing program 7 (id=508):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})

4.853210339s ago: executing program 5 (id=509):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000003c0)=""/188)

4.804525109s ago: executing program 0 (id=510):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x0, 0x2}, 0x80, 0x0}}], 0x1, 0x0)

4.004122461s ago: executing program 7 (id=511):
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
epoll_create1(0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0)

3.986612921s ago: executing program 5 (id=512):
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@none, 0x8, 0xda, "e2c1c9", 0x1, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x6, "249403", 0x80, 0x1d}]}}}, 0x20)

3.800432364s ago: executing program 0 (id=513):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xff00)

3.800082354s ago: executing program 5 (id=514):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4})

3.744978295s ago: executing program 7 (id=515):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setresgid(0xee00, 0x0, 0x0)

3.609277757s ago: executing program 0 (id=516):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)

2.773772609s ago: executing program 6 (id=518):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

2.71245923s ago: executing program 5 (id=519):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2)

2.566793792s ago: executing program 7 (id=520):
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
ftruncate(r4, 0x2007ffc)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r4, 0x0, r7, 0x0, 0xfffffbffa003e45b, 0x700000000000000)

894.719097ms ago: executing program 6 (id=521):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x8, 0x0, 0x0}}, 0x10)

748.502208ms ago: executing program 6 (id=522):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

585.490021ms ago: executing program 6 (id=523):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

436.009803ms ago: executing program 1 (id=524):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)=0xffffffffffffff98)

272.173316ms ago: executing program 1 (id=525):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f00000015c0)={0x4, [0x0, 0x8, 0x40], [{0x0, 0x8, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x5, 0x100000}, {}, {}, {0x5, 0x10001}, {0x8, 0x80000}, {0xee, 0x80000000}, {0x8}], 0x20})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r6, r5, 0x0, 0xffffffff)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)

241.205186ms ago: executing program 6 (id=526):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0200"], 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$phonet(0x23, 0x2, 0x1)
socket$inet(0x2, 0x80001, 0x84)

0s ago: executing program 6 (id=527):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x24000000)

kernel console output (not intermixed with test programs):

e hsr_slave_0 entered promiscuous mode
[   50.199961][ T4035] device hsr_slave_1 entered promiscuous mode
[   50.249713][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.251935][ T4035] Cannot create hsr debugfs directory
[   50.312035][ T4023] device hsr_slave_0 entered promiscuous mode
[   50.349926][ T4023] device hsr_slave_1 entered promiscuous mode
[   50.399751][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.401861][ T4023] Cannot create hsr debugfs directory
[   50.461691][ T4025] device hsr_slave_0 entered promiscuous mode
[   50.510006][ T4025] device hsr_slave_1 entered promiscuous mode
[   50.549620][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.551949][ T4025] Cannot create hsr debugfs directory
[   50.632750][ T4026] device hsr_slave_0 entered promiscuous mode
[   50.670176][ T4026] device hsr_slave_1 entered promiscuous mode
[   50.709698][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.711960][ T4026] Cannot create hsr debugfs directory
[   50.860254][ T4029] Bluetooth: hci4: command 0x0409 tx timeout
[   50.862409][ T4029] Bluetooth: hci0: command 0x0409 tx timeout
[   50.864146][ T4029] Bluetooth: hci1: command 0x0409 tx timeout
[   50.865904][ T4029] Bluetooth: hci2: command 0x0409 tx timeout
[   50.869835][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[   50.914515][ T4024] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.956192][ T4024] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.995224][ T4024] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   51.033631][ T4024] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   51.118751][ T4035] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   51.171734][ T4035] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   51.243453][ T4035] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   51.289234][ T4035] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   51.385690][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.407457][ T4023] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   51.457141][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.464321][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.467137][ T4023] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   51.521740][ T4023] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   51.573757][ T4024] 8021q: adding VLAN 0 to HW filter on device team0
[   51.581319][ T4023] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   51.637164][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.642481][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.650421][  T550] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.652677][  T550] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.655820][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.658893][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.662813][  T550] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.664806][  T550] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.680211][ T4026] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   51.742313][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.749123][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.758645][ T4026] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   51.827064][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.831255][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.835632][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.838943][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.843189][ T4026] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   51.886752][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.890063][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.906010][ T4026] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   51.968424][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.972143][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.985078][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.987955][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.992972][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.995808][ T4025] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.033129][ T4025] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.077045][ T4025] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.132523][ T4025] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   52.170335][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.195101][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.206945][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.210483][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.231984][ T4035] 8021q: adding VLAN 0 to HW filter on device team0
[   52.258623][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.264911][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.267518][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.271457][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.274002][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.275943][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.278423][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.284669][ T4023] 8021q: adding VLAN 0 to HW filter on device team0
[   52.290347][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.292632][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.297607][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.315865][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.318907][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.323159][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.325082][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.345207][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.347450][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.351421][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.354131][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.356668][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.358632][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.363257][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.366032][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.368786][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.370798][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.388597][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.392080][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.395315][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.405522][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.414078][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.426965][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.431453][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.435326][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.438709][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.443071][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.446065][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.467100][ T4026] 8021q: adding VLAN 0 to HW filter on device team0
[   52.469557][ T4024] device veth0_vlan entered promiscuous mode
[   52.484371][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.487225][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.490411][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.493856][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.497861][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.501089][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.523717][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.526445][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.528992][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.534403][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.537518][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.540549][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.542436][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.544811][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.547783][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.551849][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.554628][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.557403][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.561309][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.563939][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.567676][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.571151][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.573749][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.577896][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.582897][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.585648][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.588174][  T550] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.590204][  T550] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.595306][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.604630][ T4024] device veth1_vlan entered promiscuous mode
[   52.616377][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.648353][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   52.653009][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   52.656140][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.689654][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.692532][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.695452][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.698186][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.706557][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.709447][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.714023][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.716678][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.731903][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.735487][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.757699][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.761454][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.776452][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.789013][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.813741][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.815971][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.823441][ T4024] device veth0_macvtap entered promiscuous mode
[   52.833396][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.836241][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.838999][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.851813][ T4025] 8021q: adding VLAN 0 to HW filter on device team0
[   52.856580][ T4024] device veth1_macvtap entered promiscuous mode
[   52.868669][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   52.871482][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.873898][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.894234][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.897316][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.907734][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.909844][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.913012][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.917384][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.924902][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.927034][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.938841][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.942440][ T1533] Bluetooth: hci3: command 0x041b tx timeout
[   52.944343][ T1533] Bluetooth: hci2: command 0x041b tx timeout
[   52.946184][ T1533] Bluetooth: hci1: command 0x041b tx timeout
[   52.949162][ T1533] Bluetooth: hci0: command 0x041b tx timeout
[   52.959831][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.961870][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.964937][ T1533] Bluetooth: hci4: command 0x041b tx timeout
[   52.986724][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.996617][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.004479][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.028564][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.033820][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.036832][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.047518][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.055089][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.064223][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.067332][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.075703][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.094057][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.096960][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.108460][ T4024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.117864][ T4024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.120746][ T4024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.123147][ T4024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.134562][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.137477][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.158989][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.163915][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.166753][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.170514][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   53.172763][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   53.197126][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.203369][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.206129][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.208866][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.212808][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.215668][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.221356][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.232840][ T4035] device veth0_vlan entered promiscuous mode
[   53.243781][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.246634][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.295503][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.298484][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.310146][ T4035] device veth1_vlan entered promiscuous mode
[   53.374669][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.377602][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.381092][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.384947][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.391851][ T4026] device veth0_vlan entered promiscuous mode
[   53.395294][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.398001][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.415548][ T4023] device veth0_vlan entered promiscuous mode
[   53.417785][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.423964][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.434829][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.437217][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.456042][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   53.458802][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   53.461870][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   53.466056][ T4026] device veth1_vlan entered promiscuous mode
[   53.476026][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.498708][ T4023] device veth1_vlan entered promiscuous mode
[   53.507233][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   53.513258][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   53.516045][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.518921][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.526704][ T4035] device veth0_macvtap entered promiscuous mode
[   53.550607][ T4131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.552989][ T4131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.558540][ T4035] device veth1_macvtap entered promiscuous mode
[   53.566869][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   53.572423][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   53.575235][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.577906][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   53.581549][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.584654][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.605453][ T4026] device veth0_macvtap entered promiscuous mode
[   53.630064][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   53.633915][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   53.636773][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.642949][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.661787][ T4026] device veth1_macvtap entered promiscuous mode
[   53.688943][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   53.707593][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.712368][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.716579][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.744848][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.747681][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.769450][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.779446][ T4144] loop0: detected capacity change from 0 to 64
[   53.782187][ T4144] =======================================================
[   53.782187][ T4144] WARNING: The mand mount option has been deprecated and
[   53.782187][ T4144]          and is ignored by this kernel. Remove the mand
[   53.782187][ T4144]          option from the mount to silence this warning.
[   53.782187][ T4144] =======================================================
[   53.786668][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.796287][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.801964][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.804957][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.809157][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.817322][ T4026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.822855][ T4026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.825327][ T4026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.827938][ T4026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.837864][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.842285][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.867061][ T4023] device veth0_macvtap entered promiscuous mode
[   53.875192][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.878198][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.882589][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.885452][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.890064][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.892292][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   53.895131][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.898031][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.904190][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.907055][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.913745][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.916564][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.919402][ T4025] device veth0_vlan entered promiscuous mode
[   53.981230][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.985351][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.988208][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.991959][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.996112][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.003993][ T4144] smc: net device bond0 applied user defined pnetid SYZ2
[   54.014187][ T4023] device veth1_macvtap entered promiscuous mode
[   54.020217][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.022980][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.025982][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.036420][ T4035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.039234][ T4035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.042469][ T4035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.045115][ T4035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.077365][ T4025] device veth1_vlan entered promiscuous mode
[   54.115776][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.119037][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.123797][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.126868][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.131706][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.135003][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.142167][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.155385][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   54.158157][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   54.162390][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.165416][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.188110][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.193913][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.198090][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.203652][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.206639][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.210171][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.213130][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.216157][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.224452][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.238231][ T4025] device veth0_macvtap entered promiscuous mode
[   54.253794][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.256230][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.263192][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   54.266463][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.270175][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.273289][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.278666][ T4023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.283021][ T4023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.285645][ T4023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.288321][ T4023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.311776][ T4025] device veth1_macvtap entered promiscuous mode
[   54.372324][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.374704][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.387994][ T4131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.401757][ T4131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.410668][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.414056][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.431224][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.437411][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.442819][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.445903][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.448684][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.451962][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.454779][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.457682][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.463754][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.473695][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.476745][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.496426][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.499182][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.499258][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.511034][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.513938][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.516872][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.521868][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.524800][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.527604][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.530616][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.534765][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.546594][ T4025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.549134][ T4025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.552456][ T4025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.554941][ T4025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.565191][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.568204][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.573280][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.595938][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.598511][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.602764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.674383][ T4131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.676775][ T4131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.687710][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.999083][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.007079][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.021333][   T25] Bluetooth: hci4: command 0x040f tx timeout
[   55.023270][   T25] Bluetooth: hci0: command 0x040f tx timeout
[   55.029829][   T25] Bluetooth: hci1: command 0x040f tx timeout
[   55.032322][   T25] Bluetooth: hci2: command 0x040f tx timeout
[   55.040763][   T25] Bluetooth: hci3: command 0x040f tx timeout
[   55.052356][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   55.072864][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.076372][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.096459][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   55.180099][ T4159] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   55.261934][   T25] kernel write not supported for file /register (pid: 25 comm: kworker/1:1)
[   55.339214][ T4157] loop1: detected capacity change from 0 to 40427
[   55.350060][ T4157] F2FS-fs (loop1): invalid crc value
[   55.361058][ T4157] F2FS-fs (loop1): Found nat_bits in checkpoint
[   55.377663][ T4157] F2FS-fs (loop1): Start checkpoint disabled!
[   55.388100][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   55.401343][ T4157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   55.401754][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   55.542925][ T4157] attempt to access beyond end of device
[   55.542925][ T4157] loop1: rw=10241, want=45104, limit=40427
[   55.631813][ T4164] loop2: detected capacity change from 0 to 32768
[   55.781319][  T153] attempt to access beyond end of device
[   55.781319][  T153] loop1: rw=2049, want=40976, limit=40427
[   55.825040][ T4172] udc-core: couldn't find an available UDC or it's busy
[   55.837272][ T4168] loop0: detected capacity change from 0 to 32768
[   55.846159][ T4172] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   55.872623][ T4159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.912652][ T4164] XFS (loop2): Mounting V5 Filesystem
[   55.984109][ T4168] XFS (loop0): Mounting V5 Filesystem
[   56.002312][ T4164] XFS (loop2): Ending clean mount
[   56.143649][ T4168] XFS (loop0): Ending clean mount
[   56.147198][ T4025] XFS (loop2): Unmounting Filesystem
[   56.245021][ T4114] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x3e4, xfs_rmapbt block 0x14 
[   56.248497][ T4114] XFS (loop0): Unmount and run xfs_repair
[   56.252833][ T4114] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   56.255327][ T4192] loop4: detected capacity change from 0 to 1024
[   56.258909][ T4114] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   56.268214][ T4114] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   56.273592][ T4114] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   56.278979][ T4114] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   56.294454][ T4114] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   56.296982][ T4114] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   56.299463][ T4114] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   56.337314][ T4114] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   56.340189][ T4168] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x14 len 4 error 74
[   56.346495][ T4168] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x152c/0x1d58 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[   56.349135][ T4196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.350986][ T4168] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   56.433688][ T4131] hfsplus: b-tree write err: -5, ino 4
[   56.588687][ T4024] XFS (loop0): Unmounting Filesystem
[   56.638325][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'.
[   56.643045][ T4209] device ip6gretap0 entered promiscuous mode
[   56.686639][ T4205] loop3: detected capacity change from 0 to 32768
[   56.699037][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'.
[   56.740849][ T4205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.21 (4205)
[   56.947648][ T4205] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   56.950504][ T4205] BTRFS info (device loop3): max_inline at 0
[   56.952129][ T4205] BTRFS info (device loop3): enabling disk space caching
[   56.954109][ T4205] BTRFS info (device loop3): setting nodatasum
[   56.955880][ T4205] BTRFS info (device loop3): turning off barriers
[   56.957616][ T4205] BTRFS info (device loop3): turning on flush-on-commit
[   56.959855][ T4205] BTRFS info (device loop3): doing ref verification
[   56.961786][ T4205] BTRFS info (device loop3): force clearing of disk cache
[   56.963921][ T4205] BTRFS warning (device loop3): excessive commit interval 2147483647
[   56.966238][ T4205] BTRFS info (device loop3): enabling ssd optimizations
[   56.968303][ T4205] BTRFS info (device loop3): max_inline at 4096
[   56.970146][ T4205] BTRFS info (device loop3): disk space caching is enabled
[   56.972172][ T4205] BTRFS info (device loop3): has skinny extents
[   57.110517][ T4029] Bluetooth: hci3: command 0x0419 tx timeout
[   57.113701][ T4029] Bluetooth: hci2: command 0x0419 tx timeout
[   57.115640][ T4029] Bluetooth: hci1: command 0x0419 tx timeout
[   57.117655][ T4029] Bluetooth: hci0: command 0x0419 tx timeout
[   57.129000][ T4029] Bluetooth: hci4: command 0x0419 tx timeout
[   57.202899][ T4205] BTRFS info (device loop3): clearing free space tree
[   57.205036][ T4205] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   57.208000][ T4205] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   57.504473][ T4242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   57.775217][ T4196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.833222][ T4248] udc-core: couldn't find an available UDC or it's busy
[   57.835126][ T4248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   57.892062][ T4196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.988722][ T4247] loop2: detected capacity change from 0 to 32768
[   58.032089][ T4196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.089004][ T4247] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   58.185057][ T4025] ocfs2: Unmounting device (7,2) on (node local)
[   58.351785][ T4260] loop3: detected capacity change from 0 to 32768
[   58.399707][ T4260] XFS (loop3): Mounting V5 Filesystem
[   58.496510][ T4196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.584715][ T4260] XFS (loop3): Ending clean mount
[   58.631796][ T4196] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.659000][ T4196] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.676444][ T4196] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.731844][ T4274] loop2: detected capacity change from 0 to 32768
[   58.811549][ T4026] XFS (loop3): Unmounting Filesystem
[   58.833537][ T4274] XFS (loop2): Mounting V5 Filesystem
[   58.897496][ T4292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'.
[   58.913369][   T26] audit: type=1326 audit(58.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896b29a8 code=0x7ffc0000
[   58.924159][   T26] audit: type=1326 audit(58.860:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff896b29a8 code=0x7ffc0000
[   58.942370][   T26] audit: type=1326 audit(58.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff896b29dc code=0x7ffc0000
[   58.949066][   T26] audit: type=1326 audit(58.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff896b29dc code=0x7ffc0000
[   58.956182][   T26] audit: type=1326 audit(58.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896b29a8 code=0x7ffc0000
[   58.962737][   T26] audit: type=1326 audit(58.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff896b29a8 code=0x7ffc0000
[   59.004252][ T4274] XFS (loop2): Ending clean mount
[   59.192251][ T4083] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x3e4, xfs_rmapbt block 0x14 
[   59.201136][ T4083] XFS (loop2): Unmount and run xfs_repair
[   59.202847][ T4083] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   59.204883][ T4083] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   59.207375][ T4083] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   59.231425][ T4083] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   59.238254][ T4083] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   59.245219][ T4083] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   59.253973][ T4083] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   59.256661][ T4083] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   59.259251][ T4083] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   59.262113][ T4274] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x14 len 4 error 74
[   59.269077][ T4274] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x152c/0x1d58 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[   59.273698][ T4274] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   59.300319][ T4025] XFS (loop2): Unmounting Filesystem
[   59.459627][ T4083] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   59.549917][ T4316] loop4: detected capacity change from 0 to 256
[   59.552355][ T4316] exfat: Unknown parameter 'keep_last_dots'
[   59.820605][ T4083] usb 1-1: config index 0 descriptor too short (expected 69, got 36)
[   59.823085][ T4083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.825799][ T4083] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   59.838992][ T4083] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.999829][ T4083] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[   60.002379][ T4083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.004571][ T4083] usb 1-1: Product: syz
[   60.005829][ T4083] usb 1-1: Manufacturer: syz
[   60.015982][ T4083] usb 1-1: SerialNumber: syz
[   60.082291][ T4083] usb 1-1: config 0 descriptor??
[   60.123350][ T4083] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[   60.186226][ T4331] loop3: detected capacity change from 0 to 32768
[   60.214663][ T4339] Zero length message leads to an empty skb
[   60.285102][ T4331] XFS (loop3): Mounting V5 Filesystem
[   60.295704][ T4350] loop1: detected capacity change from 0 to 1024
[   60.367385][ T4331] XFS (loop3): Ending clean mount
[   60.416119][ T4253] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x3e4, xfs_rmapbt block 0x14 
[   60.425107][ T4253] XFS (loop3): Unmount and run xfs_repair
[   60.546189][ T4350] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   60.589607][ T4253] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   60.592212][ T4253] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   60.594757][ T4253] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   60.597388][ T4253] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   60.600270][ T4253] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   60.602786][ T4253] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   60.604424][ T4350] EXT4-fs (loop1): shut down requested (1)
[   60.605296][ T4253] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   60.605330][ T4253] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   60.625127][ T4253] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   60.627701][ T4331] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x14 len 4 error 74
[   60.639082][ T4331] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x152c/0x1d58 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[   60.643818][ T4331] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[   60.680339][ T4367] loop2: detected capacity change from 0 to 1024
[   60.711430][ T4026] XFS (loop3): Unmounting Filesystem
[   60.814706][ T4131] hfsplus: b-tree write err: -5, ino 4
[   60.945808][ T4373] loop2: detected capacity change from 0 to 512
[   61.002685][ T4083] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2
[   61.034584][ T4373] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   61.074813][ T4371] loop1: detected capacity change from 0 to 32768
[   61.117595][ T4371] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.69 (4371)
[   61.126705][ T4371] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   61.129140][ T4371] BTRFS info (device loop1): enabling auto defrag
[   61.131293][ T4371] BTRFS info (device loop1): doing ref verification
[   61.133142][ T4371] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   61.136092][ T4371] BTRFS info (device loop1): trying to use backup root at mount time
[   61.138327][ T4371] BTRFS info (device loop1): max_inline at 4096
[   61.140067][ T4371] BTRFS info (device loop1): enabling ssd optimizations
[   61.142034][ T4371] BTRFS info (device loop1): using spread ssd allocation scheme
[   61.144089][ T4371] BTRFS info (device loop1): using free space tree
[   61.145902][ T4371] BTRFS info (device loop1): has skinny extents
[   61.321767][ T1533] usb 1-1: USB disconnect, device number 2
[   61.559465][  T136] BTRFS info (device loop1): space_info 5 has 126976 free, is not full
[   61.562234][  T136] BTRFS info (device loop1): space_info total=3276800, used=53248, pinned=0, reserved=16384, may_use=3080192, readonly=0 zone_unusable=0
[   61.566237][  T136] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968
[   61.568733][  T136] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[   61.570973][  T136] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[   61.573227][  T136] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[   61.575382][  T136] BTRFS info (device loop1): delayed_refs_rsv: size 524288 reserved 389120
[   61.607451][ T4406] BTRFS info (device loop1): space_info 5 has 126976 free, is not full
[   61.610563][ T4406] BTRFS info (device loop1): space_info total=3276800, used=53248, pinned=0, reserved=16384, may_use=3080192, readonly=0 zone_unusable=0
[   61.614448][ T4406] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968
[   61.617062][ T4406] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[   61.619093][ T4406] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[   61.621343][ T4406] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[   61.623456][ T4406] BTRFS info (device loop1): delayed_refs_rsv: size 524288 reserved 389120
[   61.733207][ T4414] xt_hashlimit: size too large, truncated to 1048576
[   62.073213][ T4420] loop2: detected capacity change from 0 to 128
[   62.128560][ T4420] FAT-fs (loop2): bogus logical sector size 0
[   62.139067][ T4420] FAT-fs (loop2): Can't find a valid FAT filesystem
[   62.177907][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'.
[   62.256079][ T4166] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4166)
[   62.551760][ T4443] loop3: detected capacity change from 0 to 128
[   62.558014][ T4446] loop0: detected capacity change from 0 to 1024
[   62.666221][ T4446] EXT4-fs (loop0): Ignoring removed nobh option
[   62.695391][ T4443] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   62.707932][ T4446] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.89: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   62.751166][ T4446] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.89: couldn't read orphan inode 11 (err -117)
[   62.762331][ T4199] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   62.765512][ T4199] Bluetooth: hci1: Injecting HCI hardware error event
[   62.766276][ T4446] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,mb_optimize_scan=0x0000000000000000,dioread_lock,errors=continue,quota,,errors=continue. Quota mode: writeback.
[   62.768870][ T4031] Bluetooth: hci1: hardware error 0x00
[   63.727670][ T4456] udc-core: couldn't find an available UDC or it's busy
[   63.732095][ T4456] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   63.737973][ T4446] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.89: Invalid block bitmap block 0 in block_group 0
[   63.751365][ T4446] Quota error (device loop0): write_blk: dquota write failed
[   63.755562][ T4446] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   63.758543][ T4446] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.89: Failed to acquire dquot type 0
[   63.984369][ T4463] loop3: detected capacity change from 0 to 2048
[   64.005356][ T4463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.045698][ T4463] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[   64.049423][ T4463] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[   64.485885][ T4481] loop2: detected capacity change from 0 to 128
[   64.603919][ T4479] loop0: detected capacity change from 0 to 32768
[   64.631699][ T4479] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   64.634242][ T4479] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   64.651285][ T4479] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[   64.699110][ T4479] gfs2: fsid=syz:syz.s: first mount done, others may mount
[   64.718651][ T4481] attempt to access beyond end of device
[   64.718651][ T4481] loop2: rw=2049, want=148, limit=128
[   65.814599][ T4496] netlink: 'syz.2.107': attribute type 1 has an invalid length.
[   65.835297][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'.
[   65.991017][ T4498] capability: warning: `syz.0.110' uses deprecated v2 capabilities in a way that may be insecure
[   66.198445][ T4500] loop2: detected capacity change from 0 to 4096
[   66.273007][ T4500] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   66.307684][ T4504] loop0: detected capacity change from 0 to 1024
[   66.311818][ T4500] ntfs3: loop2: Failed to load $Extend.
[   66.558609][  T153] hfsplus: b-tree write err: -5, ino 4
[   66.576491][ T4507] loop1: detected capacity change from 0 to 40427
[   66.583817][ T4507] F2FS-fs (loop1): invalid crc value
[   66.587534][ T4507] F2FS-fs (loop1): Found nat_bits in checkpoint
[   66.603140][ T4507] F2FS-fs (loop1): Start checkpoint disabled!
[   66.620455][ T4507] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   67.429914][ T3605] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   67.526621][  T153] attempt to access beyond end of device
[   67.526621][  T153] loop1: rw=2049, want=40968, limit=40427
[   67.789872][ T3605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.793041][ T3605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.795910][ T3605] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   67.798470][ T3605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.807402][ T4521] loop3: detected capacity change from 0 to 256
[   67.820978][ T3605] usb 1-1: config 0 descriptor??
[   68.037150][ T4527] netlink: 'syz.3.121': attribute type 1 has an invalid length.
[   68.039365][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'.
[   69.611326][ T4548] loop3: detected capacity change from 0 to 40427
[   69.703294][ T2054] ieee802154 phy0 wpan0: encryption failed: -22
[   69.706384][ T2054] ieee802154 phy1 wpan1: encryption failed: -22
[   69.792747][ T4548] F2FS-fs (loop3): invalid crc value
[   70.313278][ T4548] F2FS-fs (loop3): Found nat_bits in checkpoint
[   70.334982][ T4548] F2FS-fs (loop3): Start checkpoint disabled!
[   70.349008][ T4548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   70.439689][ T3605] usbhid 1-1:0.0: can't add hid device: -71
[   70.441561][ T3605] usbhid: probe of 1-1:0.0 failed with error -71
[   70.451105][ T3605] usb 1-1: USB disconnect, device number 3
[   70.540974][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   70.558783][ T4131] attempt to access beyond end of device
[   70.558783][ T4131] loop3: rw=2049, want=40976, limit=40427
[   70.588551][ T4565] netlink: 'syz.0.134': attribute type 1 has an invalid length.
[   70.597671][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'.
[   70.740948][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'.
[   70.743459][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'.
[   71.851230][ T4580] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   71.853514][ T4580] netlink: 244 bytes leftover after parsing attributes in process `syz.0.141'.
[   72.207278][ T4593] loop1: detected capacity change from 0 to 1024
[   72.236943][ T4594] loop3: detected capacity change from 0 to 512
[   72.347759][ T4597] udc-core: couldn't find an available UDC or it's busy
[   72.349954][ T4597] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   73.098066][ T4594] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   73.124638][ T4594] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   73.159956][ T4594] EXT4-fs (loop3): 1 truncate cleaned up
[   73.162979][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[   73.250226][ T4535] hfsplus: b-tree write err: -5, ino 4
[   73.393426][ T4609] ieee802154 phy0 wpan0: encryption failed: -22
[   73.483951][ T4613] loop3: detected capacity change from 0 to 512
[   73.488961][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   73.656422][ T4613] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   74.784505][ T1959] cfg80211: failed to load regulatory.db
[   74.815974][ T4630] netlink: 'syz.0.162': attribute type 21 has an invalid length.
[   74.837399][ T4630] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   74.847262][ T4625] loop1: detected capacity change from 0 to 40427
[   74.852626][ T4630] netlink: 144 bytes leftover after parsing attributes in process `syz.0.162'.
[   74.874996][ T4625] F2FS-fs (loop1): invalid crc value
[   74.902237][ T4625] F2FS-fs (loop1): Found nat_bits in checkpoint
[   74.918142][ T4625] F2FS-fs (loop1): Start checkpoint disabled!
[   74.929638][ T4625] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   75.041626][ T4635] loop0: detected capacity change from 0 to 128
[   75.376408][ T4643] loop2: detected capacity change from 0 to 512
[   75.515446][ T4649] loop3: detected capacity change from 0 to 512
[   75.526153][ T4643] EXT4-fs (loop2): orphan cleanup on readonly fs
[   75.538385][ T4643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.168: bg 0: block 248: padding at end of block bitmap is not set
[   75.554419][ T4643] Quota error (device loop2): write_blk: dquota write failed
[   75.556935][ T4643] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   75.561427][ T4643] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.168: Failed to acquire dquot type 1
[   75.582917][ T4643] EXT4-fs (loop2): 1 truncate cleaned up
[   75.585772][ T4643] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   75.592103][ T4649] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   75.668294][ T4643] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   75.745086][ T4643] Quota error (device loop2): write_blk: dquota write failed
[   75.784687][ T4643] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   75.929870][ T4643] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.168: Failed to acquire dquot type 1
[   75.962995][ T4643] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix.
[   76.908194][ T4025] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12
[   76.930221][ T4025] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12
[   77.371153][ T4256] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   77.752455][ T4256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.755825][ T4256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.759109][ T4256] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   77.770140][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.776029][ T4256] usb 1-1: config 0 descriptor??
[   78.100894][ T4683] udc-core: couldn't find an available UDC or it's busy
[   78.102950][ T4683] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   78.504808][ T4697] capability: warning: `syz.3.187' uses 32-bit capabilities (legacy support in use)
[   78.782067][ T4701] udc-core: couldn't find an available UDC or it's busy
[   78.784104][ T4701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   78.896334][ T4454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.015258][ T4454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.113295][ T4454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.221256][ T4454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.293742][ T4684] chnl_net:caif_netlink_parms(): no params data found
[   79.341779][ T4256] usbhid 1-1:0.0: can't add hid device: -71
[   79.343600][ T4256] usbhid: probe of 1-1:0.0 failed with error -71
[   79.353996][ T4256] usb 1-1: USB disconnect, device number 4
[   79.484570][ T4716] udc-core: couldn't find an available UDC or it's busy
[   79.507148][ T4716] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   79.635119][ T4718] loop0: detected capacity change from 0 to 128
[   79.858963][ T4684] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.868815][ T4684] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.878593][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'.
[   79.890121][ T4684] device bridge_slave_0 entered promiscuous mode
[   79.932951][ T4684] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.935200][ T4684] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.946212][ T4684] device bridge_slave_1 entered promiscuous mode
[   80.219772][ T4422] Bluetooth: hci5: command 0x0409 tx timeout
[   80.551586][ T4684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.561835][ T4684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.680326][ T4753] udc-core: couldn't find an available UDC or it's busy
[   80.682512][ T4753] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   81.100728][ T1533] Bluetooth: hci2: command 0x0409 tx timeout
[   81.440885][ T4684] team0: Port device team_slave_0 added
[   81.452472][ T4703] chnl_net:caif_netlink_parms(): no params data found
[   81.477743][ T4684] team0: Port device team_slave_1 added
[   81.543263][ T4761] syz.0.202 uses obsolete (PF_INET,SOCK_PACKET)
[   81.685435][ T4684] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.696439][ T4684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.733024][ T4684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.742452][ T4684] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.744583][ T4684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.752177][ T4684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.303659][ T4422] Bluetooth: hci5: command 0x041b tx timeout
[   82.731409][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.735719][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.748885][ T4703] device bridge_slave_0 entered promiscuous mode
[   82.915104][ T4684] device hsr_slave_0 entered promiscuous mode
[   82.924756][ T4786] loop0: detected capacity change from 0 to 256
[   82.960348][ T4684] device hsr_slave_1 entered promiscuous mode
[   82.989679][ T4684] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.992834][ T4684] Cannot create hsr debugfs directory
[   82.994778][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.997101][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.011086][ T4703] device bridge_slave_1 entered promiscuous mode
[   83.013423][ T4786] FAT-fs (loop0): Directory bread(block 64) failed
[   83.029331][ T4786] FAT-fs (loop0): Directory bread(block 65) failed
[   83.040857][ T4786] FAT-fs (loop0): Directory bread(block 66) failed
[   83.054365][ T4786] FAT-fs (loop0): Directory bread(block 67) failed
[   83.058565][ T4786] FAT-fs (loop0): Directory bread(block 68) failed
[   83.063143][ T4786] FAT-fs (loop0): Directory bread(block 69) failed
[   83.068576][ T4786] FAT-fs (loop0): Directory bread(block 70) failed
[   83.074086][ T4786] FAT-fs (loop0): Directory bread(block 71) failed
[   83.078285][ T4786] FAT-fs (loop0): Directory bread(block 72) failed
[   83.083425][ T4786] FAT-fs (loop0): Directory bread(block 73) failed
[   83.217359][ T4703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.241116][ T4703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.260016][ T1533] Bluetooth: hci2: command 0x041b tx timeout
[   83.411726][ T4703] team0: Port device team_slave_0 added
[   83.532554][ T4797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'.
[   83.711654][ T4703] team0: Port device team_slave_1 added
[   83.816322][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.819082][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.870196][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.917470][ T4806] usb usb8: usbfs: process 4806 (syz.1.211) did not claim interface 0 before use
[   83.961568][ T4684] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   84.005677][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.008948][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.033774][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.082727][ T4814] loop0: detected capacity change from 0 to 128
[   84.104518][ T4684] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   84.108736][ T4814] FAT-fs (loop0): FAT read failed (blocknr 288)
[   84.142378][ T4684] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   84.287982][ T4684] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   84.395413][ T4253] Bluetooth: hci5: command 0x040f tx timeout
[   84.435304][ T4825] loop1: detected capacity change from 0 to 2048
[   84.496605][ T4454] device hsr_slave_0 left promiscuous mode
[   84.512472][ T4422] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   84.534304][ T4454] device hsr_slave_1 left promiscuous mode
[   84.573844][ T4825] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none.
[   84.600714][ T4454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.603208][ T4454] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.607080][ T4454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.638334][ T4454] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.650490][ T4454] device bridge_slave_1 left promiscuous mode
[   84.659350][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.752144][ T4454] device bridge_slave_0 left promiscuous mode
[   84.757543][ T4454] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.765977][ T4840] loop1: detected capacity change from 0 to 1024
[   84.846546][ T4755] hfsplus: b-tree write err: -5, ino 4
[   84.878830][ T4422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.883065][ T4422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.885785][ T4422] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   84.889442][ T4422] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   84.902763][ T4422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.909128][ T4422] usb 1-1: config 0 descriptor??
[   84.910152][ T4454] device veth1_macvtap left promiscuous mode
[   84.913719][ T4454] device veth0_macvtap left promiscuous mode
[   84.915676][ T4454] device veth1_vlan left promiscuous mode
[   84.920758][ T4454] device veth0_vlan left promiscuous mode
[   85.339708][ T4199] Bluetooth: hci2: command 0x040f tx timeout
[   85.394159][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.396514][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.398468][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.421577][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.424641][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.426752][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.428730][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.439688][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.441770][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.443822][ T4422] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.456173][ T4422] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description
[   85.459211][ T4422] plantronics 0003:047F:FFFF.0001: parse failed
[   85.464335][ T4422] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22
[   85.561610][ T4454] team0 (unregistering): Port device team_slave_1 removed
[   85.582942][ T4454] team0 (unregistering): Port device team_slave_0 removed
[   85.596200][ T4454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.604324][ T4199] usb 1-1: USB disconnect, device number 5
[   85.645392][ T4454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.887348][ T4454] bond0 (unregistering): Released all slaves
[   86.082092][ T4703] device hsr_slave_0 entered promiscuous mode
[   86.117495][ T4859] loop3: detected capacity change from 0 to 128
[   86.120133][ T4703] device hsr_slave_1 entered promiscuous mode
[   86.158195][ T4859] FAT-fs (loop3): FAT read failed (blocknr 288)
[   86.169750][ T4703] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.171967][ T4703] Cannot create hsr debugfs directory
[   86.395251][ T4866] loop3: detected capacity change from 0 to 512
[   86.437484][ T4866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   86.464143][ T4866] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   86.477759][ T4253] Bluetooth: hci5: command 0x0419 tx timeout
[   86.504155][ T4866] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   86.512353][ T4866] EXT4-fs (loop3): 1 truncate cleaned up
[   86.513872][ T4866] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nodioread_nolock,quota,quota,,errors=continue. Quota mode: writeback.
[   86.735441][ T4874] loop1: detected capacity change from 0 to 256
[   86.811612][ T4684] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.909665][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.913393][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.922036][ T4874] udc-core: couldn't find an available UDC or it's busy
[   86.923884][ T4874] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   86.938232][ T4684] 8021q: adding VLAN 0 to HW filter on device team0
[   86.999006][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.004379][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.014319][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.016333][ T4754] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.022926][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.031503][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.095933][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.097968][ T4754] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.136207][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.138926][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.152459][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.209307][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.220246][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.251946][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.280133][ T4703] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   87.322501][ T4888] loop3: detected capacity change from 0 to 40427
[   87.324622][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.328007][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.340493][ T4703] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   87.373911][ T4703] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   87.385212][ T4888] F2FS-fs (loop3): invalid crc value
[   87.403453][ T4888] F2FS-fs (loop3): Found nat_bits in checkpoint
[   87.419644][ T4253] Bluetooth: hci2: command 0x0419 tx timeout
[   87.427940][ T4888] F2FS-fs (loop3): Start checkpoint disabled!
[   87.464116][ T4888] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   87.485005][ T4703] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   87.534953][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.546151][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.557810][ T4684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.587405][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.644256][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.647191][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.676392][  T153] attempt to access beyond end of device
[   87.676392][  T153] loop3: rw=2049, want=40976, limit=40427
[   87.705144][ T4912] loop1: detected capacity change from 0 to 128
[   87.946073][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.971274][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'.
[   88.056566][ T4703] 8021q: adding VLAN 0 to HW filter on device team0
[   88.058855][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.061999][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.084228][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.086590][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.117384][ T4925] loop1: detected capacity change from 0 to 1024
[   88.128796][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.151298][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.157241][  T550] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.159135][  T550] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.173876][ T4930] usb usb8: usbfs: process 4930 (syz.0.239) did not claim interface 0 before use
[   88.187804][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.214915][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.221747][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.231868][  T550] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.233934][  T550] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.239894][ T4684] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.251724][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.269339][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.295649][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.300807][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.316435][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.351163][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.365063][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.378492][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.394730][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.406523][  T148] hfsplus: b-tree write err: -5, ino 4
[   88.417020][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.430067][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.454009][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.679889][ T4949] loop0: detected capacity change from 0 to 2048
[   88.824944][ T4956] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.846660][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.849153][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.894017][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.998754][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.002191][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.107024][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.110607][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.119847][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.135222][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   89.162803][ T4684] device veth0_vlan entered promiscuous mode
[   89.222278][ T4684] device veth1_vlan entered promiscuous mode
[   89.312113][ T4974] affs: No valid root block on device nullb0
[   89.363802][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   89.366838][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   89.403031][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   89.406497][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   89.430591][ T4684] device veth0_macvtap entered promiscuous mode
[   89.472707][ T4684] device veth1_macvtap entered promiscuous mode
[   89.533513][ T4982] netlink: 'syz.3.250': attribute type 13 has an invalid length.
[   89.890738][ T4988] loop1: detected capacity change from 0 to 40427
[   89.934835][ T4988] F2FS-fs (loop1): invalid crc value
[   89.958660][ T4988] F2FS-fs (loop1): Found nat_bits in checkpoint
[   90.077141][ T4988] F2FS-fs (loop1): Start checkpoint disabled!
[   90.113186][ T4988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   90.163601][ T4994] loop0: detected capacity change from 0 to 32768
[   90.183703][ T4994] JBD2: Ignoring recovery information on journal
[   90.231548][ T4994] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   90.483886][ T4024] ocfs2: Unmounting device (7,0) on (node local)
[   90.497757][ T4534] attempt to access beyond end of device
[   90.497757][ T4534] loop1: rw=2049, want=40976, limit=40427
[   90.811229][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.814475][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.279661][ T4075] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   91.639890][ T4075] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.764486][ T4982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.799800][ T4075] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[   91.802359][ T4075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.805872][ T4075] usb 1-1: Product: syz
[   91.807060][ T4075] usb 1-1: Manufacturer: syz
[   91.808327][ T4075] usb 1-1: SerialNumber: syz
[   91.812808][ T4982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.820629][ T4075] usb 1-1: config 0 descriptor??
[   91.861819][ T4075] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[   91.865194][ T4075] dvb-usb: bulk message failed: -22 (3/0)
[   91.911410][ T4075] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   91.929843][ T4075] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[   91.934311][ T4075] usb 1-1: media controller created
[   91.937076][ T4075] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   91.962578][ T4075] dvb-usb: bulk message failed: -22 (6/0)
[   91.964504][ T4075] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[   92.010662][ T4075] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3
[   92.025215][ T4075] dvb-usb: schedule remote query interval to 150 msecs.
[   92.029432][ T4075] dvb-usb: bulk message failed: -22 (3/0)
[   92.059809][ T4075] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[   92.101110][ T4075] usb 1-1: USB disconnect, device number 6
[   92.202372][ T4075] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[   92.587096][ T4982] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.589884][ T4982] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.592386][ T4982] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.599006][ T4982] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.648711][ T5021] sctp: [Deprecated]: syz.0.259 (pid 5021) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.648711][ T5021] Use struct sctp_sack_info instead
[   92.918792][ T4684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.929893][ T4684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.932574][ T4684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.935477][ T4684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.941022][ T4684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.943977][ T4684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.948275][ T4684] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.999150][ T4684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.006282][ T4684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.015317][ T4684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.018537][ T4684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.038383][ T4684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.044707][ T4684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.052717][ T4684] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.055208][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   93.058059][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   93.061344][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.081544][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.091819][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.115360][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.234431][ T4684] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.279653][ T4684] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.282497][ T4684] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.284958][ T4684] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.314236][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.321967][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.456161][ T5051] loop1: detected capacity change from 0 to 256
[   93.463167][ T5051] exfat: Unknown parameter 'keep_last_dots'
[   93.493171][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.496645][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.503426][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.515458][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.520426][ T4703] device veth0_vlan entered promiscuous mode
[   93.561824][ T4703] device veth1_vlan entered promiscuous mode
[   93.599296][ T5053] udc-core: couldn't find an available UDC or it's busy
[   93.611205][ T5053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   93.651302][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.654434][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   93.657458][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.665186][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.687628][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.689145][ T4703] device veth0_macvtap entered promiscuous mode
[   93.700144][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.743929][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   93.747134][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.766091][ T4703] device veth1_macvtap entered promiscuous mode
[   93.828495][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.831359][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.835003][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.852130][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.855320][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.869116][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.872635][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.878623][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.886104][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.898581][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.914777][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.918764][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   93.923958][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.927237][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.935018][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.947472][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.961701][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.964783][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.967690][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.980366][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.993620][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.996800][ T4703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.001278][ T4703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.010640][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.021599][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.024484][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.267606][ T4703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.272772][ T4703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.280452][ T4703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.288386][ T4703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.319583][ T5072] netlink: 'syz.1.271': attribute type 13 has an invalid length.
[   94.702153][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.705006][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.329352][ T5072] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.367089][ T5072] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.846101][ T5072] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.848579][ T5072] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.851533][ T5072] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.853869][ T5072] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.015103][ T4454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.075236][ T4454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.188159][ T4454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.253703][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.256186][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.294361][ T4454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.314192][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   96.399994][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.407855][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.434965][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.077200][ T5129] netlink: 'syz.5.287': attribute type 13 has an invalid length.
[   97.333826][ T5143] loop3: detected capacity change from 0 to 1024
[   97.402119][ T5143] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[   97.491278][ T5143] EXT4-fs (loop3): Ignoring removed orlov option
[   97.493167][ T5143] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[   97.507981][ T5143] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,sb=0x00000000000050cf,orlov,norecovery,barrier,data=journal,. Quota mode: none.
[   97.631602][ T5157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'.
[   97.683900][ T5159] udc-core: couldn't find an available UDC or it's busy
[   97.686001][ T5159] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   97.740923][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.743515][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.501931][ T5129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.539716][ T4256] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   98.541416][ T5129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.542492][ T4256] Bluetooth: hci0: Injecting HCI hardware error event
[   98.546959][ T4040] Bluetooth: hci0: hardware error 0x00
[   99.028506][ T5129] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.039639][ T5129] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.042125][ T5129] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.044634][ T5129] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.299027][ T5164] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13)
[   99.313128][ T5167] loop5: detected capacity change from 0 to 1024
[   99.518237][ T5175] xt_hashlimit: size too large, truncated to 1048576
[   99.595744][ T5167] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   99.605369][ T5178] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set
[   99.621496][ T5167] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.298: bg 0: block 393: padding at end of block bitmap is not set
[   99.714700][ T5167] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[   99.722955][ T5167] EXT4-fs (loop5): This should not happen!! Data will be lost
[   99.722955][ T5167] 
[  100.799637][   T26] audit: type=1326 audit(100.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff980fd9a8 code=0x7fc00000
[  100.920022][ T5221] loop0: detected capacity change from 0 to 1024
[  101.247690][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'.
[  101.462488][   T26] audit: type=1326 audit(101.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff980fd9a8 code=0x7fc00000
[  101.496827][ T4454] device hsr_slave_0 left promiscuous mode
[  101.531250][ T4454] device hsr_slave_1 left promiscuous mode
[  101.650173][ T4454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.653157][ T4454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.656141][ T4454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.663883][ T4454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.686541][ T4454] device bridge_slave_1 left promiscuous mode
[  101.689294][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.721290][ T4454] device bridge_slave_0 left promiscuous mode
[  101.723585][ T4454] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.040327][ T4454] device veth1_macvtap left promiscuous mode
[  102.042153][ T4454] device veth0_macvtap left promiscuous mode
[  102.043882][ T4454] device veth1_vlan left promiscuous mode
[  102.045539][ T4454] device veth0_vlan left promiscuous mode
[  102.625448][ T4454] team0 (unregistering): Port device team_slave_1 removed
[  102.642611][ T4454] team0 (unregistering): Port device team_slave_0 removed
[  102.661144][ T4454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.708982][ T4454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.887427][ T4454] bond0 (unregistering): Released all slaves
[  103.202225][ T5273] loop1: detected capacity change from 0 to 2048
[  103.288749][ T5279] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.318426][ T5273] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  103.354006][ T5273] Remounting filesystem read-only
[  103.355474][ T5273] NILFS error (device loop1): nilfs_readdir: bad page in #2
[  104.027209][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.331'.
[  104.051320][ T5300] loop1: detected capacity change from 0 to 40427
[  104.058753][ T5300] F2FS-fs (loop1): invalid crc value
[  104.066002][ T5300] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.081346][ T5300] F2FS-fs (loop1): Start checkpoint disabled!
[  104.098867][ T5300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  104.498606][ T5325] loop5: detected capacity change from 0 to 128
[  104.500415][ T4754] attempt to access beyond end of device
[  104.500415][ T4754] loop1: rw=2049, want=40968, limit=40427
[  105.129422][ T5345] device syzkaller0 entered promiscuous mode
[  105.173787][ T5350] loop0: detected capacity change from 0 to 1024
[  105.233874][ T5350] EXT4-fs (loop0): Ignoring removed nobh option
[  105.238120][ T5350] EXT4-fs (loop0): Ignoring removed bh option
[  105.267105][ T5350] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x0000000000000010,data_err=ignore,grpquota,nobh,user_xattr,bh,nojournal_checksum,. Quota mode: writeback.
[  106.207737][ T5371] loop0: detected capacity change from 0 to 40427
[  106.252885][ T5371] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  106.255014][ T5371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  106.259755][ T5371] F2FS-fs (loop0): invalid crc value
[  106.334586][ T5371] F2FS-fs (loop0): Found nat_bits in checkpoint
[  106.369650][ T5371] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  106.371637][ T5371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  107.038625][ T5361] loop6: detected capacity change from 0 to 32768
[  107.130520][ T5361] XFS: ikeep mount option is deprecated.
[  107.219908][ T5361] XFS (loop6): Mounting V5 Filesystem
[  107.610339][ T5361] XFS (loop6): Ending clean mount
[  107.641381][ T5361] XFS (loop6): Quotacheck needed: Please wait.
[  107.722565][ T5426] process 'syz.0.359' launched './file1' with NULL argv: empty string added
[  107.731991][ T5361] XFS (loop6): Quotacheck: Done.
[  107.882073][ T4703] XFS (loop6): Unmounting Filesystem
[  109.012244][ T5448] udc-core: couldn't find an available UDC or it's busy
[  109.029882][ T5448] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  109.253037][ T5454] qfq: no options
[  109.777284][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.374'.
[  109.793460][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.374'.
[  110.160213][ T5487] qfq: no options
[  111.242964][ T5499] loop1: detected capacity change from 0 to 4096
[  111.287522][ T5511] loop5: detected capacity change from 0 to 128
[  111.317358][ T5499] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  111.338945][ T5513] loop0: detected capacity change from 0 to 512
[  111.342127][ T5499] ntfs3: loop1: Failed to load $Extend.
[  111.505878][ T5513] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  111.719653][ T5533] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  111.753300][ T5533] VFS: Can't find a romfs filesystem on dev nullb0.
[  111.753300][ T5533] 
[  112.964464][ T5548] loop1: detected capacity change from 0 to 256
[  112.972727][ T5541] loop5: detected capacity change from 0 to 4096
[  113.220066][ T5553] loop6: detected capacity change from 0 to 40427
[  113.223044][ T5558] loop0: detected capacity change from 0 to 512
[  113.335041][ T5558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  113.351266][ T5553] F2FS-fs (loop6): Found nat_bits in checkpoint
[  113.359294][ T5558] EXT4-fs (loop0): 1 truncate cleaned up
[  113.361541][ T5558] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.369299][ T5553] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  113.385094][ T5558] EXT4-fs (loop0): shut down requested (0)
[  113.403227][ T4703] attempt to access beyond end of device
[  113.403227][ T4703] loop6: rw=2049, want=45104, limit=40427
[  115.076919][ T5595] orangefs_mount: mount request failed with -4
[  116.251812][ T4115] Bluetooth: hci1: command 0x1003 tx timeout
[  116.279845][ T4031] Bluetooth: hci1: sending frame failed (-49)
[  116.522670][ T5610] chnl_net:caif_netlink_parms(): no params data found
[  116.578660][   T26] audit: type=1326 audit(116.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  116.617659][ T5632] loop6: detected capacity change from 0 to 40427
[  116.690266][ T5632] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  116.692373][ T5632] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  116.708490][ T5632] F2FS-fs (loop6): invalid crc value
[  116.782522][ T5632] F2FS-fs (loop6): Found nat_bits in checkpoint
[  116.794922][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.807632][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.818423][ T5632] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  116.820523][ T5632] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  116.829266][ T5610] device bridge_slave_0 entered promiscuous mode
[  116.859671][ T4115] Bluetooth: hci6: command 0x0409 tx timeout
[  116.875451][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.883202][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.893450][ T5610] device bridge_slave_1 entered promiscuous mode
[  116.976841][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.992034][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.081307][  T148] Bluetooth: hci7: Frame reassembly failed (-84)
[  117.087696][ T5610] team0: Port device team_slave_0 added
[  117.107190][ T5610] team0: Port device team_slave_1 added
[  117.149091][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.154707][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.162484][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.167811][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.170223][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.178092][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.265816][ T5610] device hsr_slave_0 entered promiscuous mode
[  117.300475][ T5610] device hsr_slave_1 entered promiscuous mode
[  117.329625][ T5610] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.331863][ T5610] Cannot create hsr debugfs directory
[  117.336043][   T26] audit: type=1326 audit(117.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.345092][ T5662] loop6: detected capacity change from 0 to 128
[  117.374612][   T26] audit: type=1326 audit(117.270:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.405006][   T26] audit: type=1326 audit(117.270:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.429642][   T26] audit: type=1326 audit(117.270:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.440477][ T5662] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  117.469032][   T26] audit: type=1326 audit(117.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.493488][   T26] audit: type=1326 audit(117.270:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.500575][   T26] audit: type=1326 audit(117.270:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.506528][   T26] audit: type=1326 audit(117.270:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.513529][   T26] audit: type=1326 audit(117.270:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf46f9a8 code=0x7fc00000
[  117.596496][ T5610] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  117.644929][ T5610] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  117.671777][ T5610] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  117.709671][ T5610] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  117.985208][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.011582][ T5678] loop5: detected capacity change from 0 to 4096
[  118.016283][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.019120][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.037435][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[  118.067362][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.070399][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.072934][  T550] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.075083][  T550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.091455][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.102942][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.105970][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.117454][ T5678] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  118.138378][  T550] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.140524][  T550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.152694][ T5678] ntfs3: loop5: Failed to load $Extend.
[  118.186722][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.192738][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.203219][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.233031][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.240703][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.253999][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  118.287092][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.300310][ T4075] Bluetooth: hci1: command 0x1001 tx timeout
[  118.302153][ T4034] Bluetooth: hci1: sending frame failed (-49)
[  118.331068][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  118.334159][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.336892][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  118.350631][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.366655][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.396896][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.419'.
[  118.750111][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  118.752810][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  118.761675][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.940165][ T4115] Bluetooth: hci6: command 0x041b tx timeout
[  119.100266][ T3605] Bluetooth: hci7: command 0x1003 tx timeout
[  119.102153][ T4034] Bluetooth: hci7: sending frame failed (-49)
[  119.309189][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.316165][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.368633][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.380248][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.386928][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.398892][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.411293][ T5610] device veth0_vlan entered promiscuous mode
[  119.447899][ T5610] device veth1_vlan entered promiscuous mode
[  119.548783][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  119.560632][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.591195][ T5610] device veth0_macvtap entered promiscuous mode
[  119.619053][ T5731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.425'.
[  119.624760][ T5610] device veth1_macvtap entered promiscuous mode
[  119.660658][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.669699][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.677059][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.685527][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.696257][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.703587][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  119.706459][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  119.709171][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  119.717306][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  119.743830][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.748117][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.756699][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.767947][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.782750][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.790249][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  119.793286][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.800905][ T5610] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.807007][ T5610] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.812779][ T5610] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.820531][ T5610] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.001107][ T4755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.003608][ T4755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.019321][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  120.069051][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.077943][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.106950][  T550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  120.224886][ T5737] loop5: detected capacity change from 0 to 32768
[  120.263452][ T5737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 63 /dev/loop5 scanned by syz.5.428 (5737)
[  120.429074][ T4422] Bluetooth: hci1: command 0x1009 tx timeout
[  120.500984][ T5737] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  120.503841][ T5737] BTRFS error (device loop5): superblock checksum mismatch
[  120.512551][ T5737] BTRFS error (device loop5): open_ctree failed: -22
[  120.626589][ T4395] udevd[4395]: incorrect btrfs checksum on /dev/loop5
[  121.020430][ T4422] Bluetooth: hci6: command 0x040f tx timeout
[  121.182396][ T4422] Bluetooth: hci7: command 0x1001 tx timeout
[  121.184187][ T4034] Bluetooth: hci7: sending frame failed (-49)
[  121.480546][ T5748] loop5: detected capacity change from 0 to 40427
[  121.538172][ T5748] F2FS-fs (loop5): invalid crc value
[  121.545013][ T5748] F2FS-fs (loop5): Found nat_bits in checkpoint
[  121.568031][ T5748] F2FS-fs (loop5): Start checkpoint disabled!
[  121.577958][ T5748] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  121.640700][ T4754] attempt to access beyond end of device
[  121.640700][ T4754] loop5: rw=2049, want=40992, limit=40427
[  122.015197][ T5761] loop5: detected capacity change from 0 to 32768
[  122.172963][ T5765] loop7: detected capacity change from 0 to 32768
[  122.182399][ T5761] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  122.184851][ T5761] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  122.194622][ T5761] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  122.221384][ T3605] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  122.223605][ T3605] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  122.233193][ T5765] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.434 (5765)
[  122.294408][ T5768] loop6: detected capacity change from 0 to 2048
[  122.301292][ T3605] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms
[  122.302051][ T5765] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  122.304261][ T3605] gfs2: fsid=syz:syz.0: jid=0: Done
[  122.306025][ T5765] BTRFS info (device loop7): force zlib compression, level 3
[  122.309355][ T5761] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  122.309684][ T5765] BTRFS info (device loop7): force clearing of disk cache
[  122.309716][ T5765] BTRFS info (device loop7): setting nodatasum
[  122.315453][ T5765] BTRFS info (device loop7): disabling free space tree
[  122.317383][ T5765] BTRFS info (device loop7): allowing degraded mounts
[  122.319231][ T5765] BTRFS info (device loop7): enabling disk space caching
[  122.321236][ T5765] BTRFS info (device loop7): disk space caching is enabled
[  122.323313][ T5765] BTRFS info (device loop7): has skinny extents
[  122.342616][ T5761] gfs2: gfs2 mount does not exist
[  122.388256][ T5768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.626286][ T5765] BTRFS info (device loop7): enabling ssd optimizations
[  122.632012][ T5765] BTRFS info (device loop7): clearing free space tree
[  122.634417][ T5765] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.637037][ T5765] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.017505][ T4166] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop7 scanned by udevd (4166)
[  123.218648][ T4422] Bluetooth: hci6: command 0x0419 tx timeout
[  123.259892][ T4422] Bluetooth: hci7: command 0x1009 tx timeout
[  124.008763][ T5812] loop5: detected capacity change from 0 to 128
[  124.017426][ T5813] udc-core: couldn't find an available UDC or it's busy
[  124.019466][ T5813] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  124.134709][   T26] kauditd_printk_skb: 63 callbacks suppressed
[  124.134721][   T26] audit: type=1326 audit(124.070:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.7.443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae1f99a8 code=0x7fc00000
[  124.155236][ T5812] attempt to access beyond end of device
[  124.155236][ T5812] loop5: rw=2049, want=1041, limit=128
[  124.186013][ T5810] attempt to access beyond end of device
[  124.186013][ T5810] loop5: rw=524288, want=369, limit=128
[  124.202941][ T5812] attempt to access beyond end of device
[  124.202941][ T5812] loop5: rw=0, want=153, limit=128
[  124.206187][ T5812] attempt to access beyond end of device
[  124.206187][ T5812] loop5: rw=0, want=153, limit=128
[  124.217778][ T5812] attempt to access beyond end of device
[  124.217778][ T5812] loop5: rw=0, want=153, limit=128
[  124.222512][ T5812] attempt to access beyond end of device
[  124.222512][ T5812] loop5: rw=0, want=153, limit=128
[  124.225687][ T5812] attempt to access beyond end of device
[  124.225687][ T5812] loop5: rw=0, want=153, limit=128
[  124.228870][ T5812] attempt to access beyond end of device
[  124.228870][ T5812] loop5: rw=0, want=153, limit=128
[  124.241567][ T5812] attempt to access beyond end of device
[  124.241567][ T5812] loop5: rw=0, want=153, limit=128
[  124.800425][ T5825] udc-core: couldn't find an available UDC or it's busy
[  124.802690][ T5825] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  124.851530][ T5825] loop6: detected capacity change from 0 to 512
[  124.855572][   T26] audit: type=1326 audit(124.790:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.7.443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffae1f99a8 code=0x7fc00000
[  124.874995][ T5825] EXT4-fs (loop6): Ignoring removed bh option
[  124.876751][ T5825] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  124.910878][ T5825] EXT4-fs (loop6): 1 truncate cleaned up
[  124.912578][ T5825] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,min_batch_time=0x0000000005bf01be,bh,errors=remount-ro,noinit_itable,sb=0x0000000000000007,. Quota mode: none.
[  126.668542][ T5864] loop6: detected capacity change from 0 to 1024
[  127.016325][ T5864] EXT4-fs (loop6): Ignoring removed nobh option
[  127.022670][ T5864] EXT4-fs (loop6): Ignoring removed bh option
[  127.033286][ T5864] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.185387][ T5864] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  127.952523][ T5885] loop5: detected capacity change from 0 to 256
[  127.969266][ T5861] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.451: Allocating blocks 497-513 which overlap fs metadata
[  128.323256][ T5888] loop7: detected capacity change from 0 to 32768
[  128.344191][ T5888] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  128.346517][ T5888] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  128.358259][ T5888] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  128.361762][ T3605] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  128.363673][ T3605] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  128.507630][ T5900] udc-core: couldn't find an available UDC or it's busy
[  128.519132][ T5900] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  128.542393][ T3605] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 178ms
[  128.555502][ T3605] gfs2: fsid=syz:syz.0: jid=0: Done
[  128.563786][ T5888] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  128.588564][ T5900] loop5: detected capacity change from 0 to 512
[  128.611213][ T5900] EXT4-fs (loop5): Ignoring removed bh option
[  128.615649][ T5900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  128.631483][ T5888] gfs2: gfs2 mount does not exist
[  128.645319][ T5900] EXT4-fs (loop5): 1 truncate cleaned up
[  128.653885][ T5900] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,min_batch_time=0x0000000005bf01be,bh,errors=remount-ro,noinit_itable,sb=0x0000000000000007,. Quota mode: none.
[  129.224951][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.464'.
[  129.227734][ T5914] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  129.255909][ T5914] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  129.321764][ T5917] loop0: detected capacity change from 0 to 128
[  129.487848][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  129.647788][ T5917] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  130.157818][ T5923] loop6: detected capacity change from 0 to 128
[  130.343853][ T5926] udc-core: couldn't find an available UDC or it's busy
[  130.345853][ T5926] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  130.348245][ T5923] qnx6: superblock #1 checksum error
[  130.940237][ T5945] udc-core: couldn't find an available UDC or it's busy
[  130.942765][ T5945] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  131.101728][ T2054] ieee802154 phy0 wpan0: encryption failed: -22
[  131.103718][ T2054] ieee802154 phy1 wpan1: encryption failed: -22
[  131.402589][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.479'.
[  131.535381][ T5963] udc-core: couldn't find an available UDC or it's busy
[  131.550088][ T5963] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  131.585874][ T5963] loop1: detected capacity change from 0 to 512
[  131.643924][ T5963] EXT4-fs (loop1): Ignoring removed bh option
[  131.687291][ T5963] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.751410][ T5963] EXT4-fs (loop1): 1 truncate cleaned up
[  131.752976][ T5963] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,min_batch_time=0x0000000005bf01be,bh,errors=remount-ro,noinit_itable,sb=0x0000000000000007,. Quota mode: none.
[  132.134246][ T5950] loop6: detected capacity change from 0 to 32768
[  132.167037][ T5950] XFS: noikeep mount option is deprecated.
[  132.286649][ T5950] XFS (loop6): Mounting V5 Filesystem
[  132.422667][ T5950] XFS (loop6): Ending clean mount
[  132.427464][ T5950] XFS (loop6): Quotacheck needed: Please wait.
[  132.547296][ T5961] loop5: detected capacity change from 0 to 32768
[  132.558500][ T5950] XFS (loop6): Quotacheck: Done.
[  132.608526][ T5999] udc-core: couldn't find an available UDC or it's busy
[  132.636744][ T5999] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  132.644564][ T5961] XFS (loop5): Mounting V5 Filesystem
[  132.710502][ T5961] XFS (loop5): Ending clean mount
[  132.892722][ T4703] XFS (loop6): Unmounting Filesystem
[  132.930365][ T4684] XFS (loop5): Unmounting Filesystem
[  133.226855][ T6016] udc-core: couldn't find an available UDC or it's busy
[  133.228966][ T6016] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  134.373512][  T550] device hsr_slave_0 left promiscuous mode
[  134.411063][  T550] device hsr_slave_1 left promiscuous mode
[  134.480033][  T550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.482987][  T550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.486866][  T550] device bridge_slave_1 left promiscuous mode
[  134.501221][  T550] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.544596][  T550] device bridge_slave_0 left promiscuous mode
[  134.547717][  T550] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.572628][ T6039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.488'.
[  134.988627][  T550] team0 (unregistering): Port device team_slave_1 removed
[  135.041231][  T550] team0 (unregistering): Port device team_slave_0 removed
[  135.712938][  T550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.771598][  T550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.108784][  T550] bond0 (unregistering): Released all slaves
[  136.280421][ T6061] udc-core: couldn't find an available UDC or it's busy
[  136.282489][ T6061] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  137.024427][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.7.492'.
[  137.029223][ T6059] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  137.038016][ T6059] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  138.230354][ T6081] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  139.567020][ T6102] udc-core: couldn't find an available UDC or it's busy
[  139.568986][ T6102] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  140.981921][ T6125] loop0: detected capacity change from 0 to 256
[  141.176269][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.5.507'.
[  141.800480][ T6124] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  141.855019][ T6124] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  141.968148][ T6131] udc-core: couldn't find an available UDC or it's busy
[  141.970401][ T6131] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  144.213508][   T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  145.041105][ T6170] loop7: detected capacity change from 0 to 1024
[  145.169827][   T21] usb 1-1: Using ep0 maxpacket: 16
[  145.920130][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.923306][   T21] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  145.927008][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.948200][   T21] usb 1-1: config 0 descriptor??
[  145.956990][ T6170] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  146.442390][   T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  146.447741][   T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  146.456261][   T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  146.462590][   T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  146.478191][   T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  146.738611][ T6190] loop1: detected capacity change from 0 to 40427
[  146.741469][   T21] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  146.794360][ T6190] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  146.796687][ T6190] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  146.821272][ T6190] F2FS-fs (loop1): invalid crc value
[  146.832954][   T21] Unable to handle kernel paging request at virtual address dfff800000000000
[  146.835777][   T21] Mem abort info:
[  146.836753][   T21]   ESR = 0x0000000096000006
[  146.838033][   T21]   EC = 0x25: DABT (current EL), IL = 32 bits
[  146.859592][   T21]   SET = 0, FnV = 0
[  146.862220][   T21]   EA = 0, S1PTW = 0
[  146.863725][   T21]   FSC = 0x06: level 2 translation fault
[  146.865602][   T21] Data abort info:
[  146.867060][   T21]   ISV = 0, ISS = 0x00000006
[  146.868541][ T6190] F2FS-fs (loop1): Found nat_bits in checkpoint
[  146.891470][   T21]   CM = 0, WnR = 0
[  146.892574][   T21] [dfff800000000000] address between user and kernel address ranges
[  146.895010][   T21] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
[  146.897005][   T21] Modules linked in:
[  146.898167][   T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 5.15.186-syzkaller #0
[  146.900362][   T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  146.903154][   T21] Workqueue: usb_hub_wq hub_event
[  146.904574][   T21] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  146.906896][   T21] pc : mcp_smbus_xfer+0x64/0xdc8
[  146.908279][   T21] lr : mcp_smbus_xfer+0x44/0xdc8
[  146.909617][   T21] sp : ffff80001b396140
[  146.910783][   T21] x29: ffff80001b396140 x28: 0000000000000000 x27: dfff800000000000
[  146.913027][   T21] x26: 00000000ffffc425 x25: 1fffe0001b32cc36 x24: 0000000000000000
[  146.915331][   T21] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000018
[  146.917530][   T21] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000002
[  146.919780][   T21] x17: ffff800016cf2000 x16: ffff8000111b2714 x15: ffff8000167d2500
[  146.922045][   T21] x14: ffff0000c0a7a540 x13: ffff0000c0a7a680 x12: 0000000000100000
[  146.924318][   T21] x11: 00000000000f396d x10: ffff80002a3fd000 x9 : ffff80000ed6bbe4
[  146.926675][   T21] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
[  146.929013][   T21] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
[  146.931233][   T21] x2 : 0000000000000000 x1 : 0000000000000018 x0 : ffff0000d9966088
[  146.933450][   T21] Call trace:
[  146.934377][   T21]  mcp_smbus_xfer+0x64/0xdc8
[  146.935647][   T21]  __i2c_smbus_xfer+0x558/0x1fbc
[  146.936987][   T21]  i2c_smbus_xfer+0x1f0/0x314
[  146.938326][   T21]  i2c_default_probe+0x1bc/0x240
[  146.939873][   T21]  i2c_do_add_adapter+0x388/0x7a0
[  146.941291][   T21]  __process_new_adapter+0x28/0x3c
[  146.942794][   T21]  bus_for_each_drv+0x150/0x1d8
[  146.944115][   T21]  i2c_register_adapter+0xd80/0x103c
[  146.945565][   T21]  i2c_add_adapter+0x16c/0x248
[  146.946899][   T21]  mcp2221_probe+0x254/0x5a8
[  146.948182][   T21]  hid_device_probe+0x230/0x338
[  146.949628][   T21]  really_probe+0x26c/0xaec
[  146.950823][   T21]  __driver_probe_device+0x180/0x314
[  146.952294][   T21]  driver_probe_device+0x78/0x34c
[  146.953687][   T21]  __device_attach_driver+0x274/0x4c4
[  146.955159][   T21]  bus_for_each_drv+0x150/0x1d8
[  146.956554][   T21]  __device_attach+0x2a8/0x3d4
[  146.957924][   T21]  device_initial_probe+0x24/0x34
[  146.959297][   T21]  bus_probe_device+0xbc/0x1c4
[  146.960674][   T21]  device_add+0xb04/0xf94
[  146.961967][   T21]  hid_add_device+0x310/0x4d4
[  146.963286][   T21]  usbhid_probe+0x858/0xba4
[  146.964535][   T21]  usb_probe_interface+0x4fc/0x994
[  146.966033][   T21]  really_probe+0x26c/0xaec
[  146.967316][   T21]  __driver_probe_device+0x180/0x314
[  146.968808][   T21]  driver_probe_device+0x78/0x34c
[  146.970313][   T21]  __device_attach_driver+0x274/0x4c4
[  146.971840][   T21]  bus_for_each_drv+0x150/0x1d8
[  146.973207][   T21]  __device_attach+0x2a8/0x3d4
[  146.974623][   T21]  device_initial_probe+0x24/0x34
[  146.976157][   T21]  bus_probe_device+0xbc/0x1c4
[  146.977564][   T21]  device_add+0xb04/0xf94
[  146.978795][   T21]  usb_set_configuration+0x15b8/0x1b2c
[  146.980288][   T21]  usb_generic_driver_probe+0x8c/0x144
[  146.981902][   T21]  usb_probe_device+0x120/0x25c
[  146.983306][   T21]  really_probe+0x26c/0xaec
[  146.984627][   T21]  __driver_probe_device+0x180/0x314
[  146.986143][   T21]  driver_probe_device+0x78/0x34c
[  146.987615][   T21]  __device_attach_driver+0x274/0x4c4
[  146.989191][   T21]  bus_for_each_drv+0x150/0x1d8
[  146.990602][   T21]  __device_attach+0x2a8/0x3d4
[  146.991938][   T21]  device_initial_probe+0x24/0x34
[  146.993424][   T21]  bus_probe_device+0xbc/0x1c4
[  146.994787][   T21]  device_add+0xb04/0xf94
[  146.996044][   T21]  usb_new_device+0x7ec/0x1164
[  146.997502][   T21]  hub_event+0x20cc/0x4188
[  146.998778][   T21]  process_one_work+0x79c/0x1140
[  147.000174][   T21]  worker_thread+0x8f4/0x101c
[  147.001556][   T21]  kthread+0x374/0x454
[  147.002669][   T21]  ret_from_fork+0x10/0x20
[  147.003956][   T21] Code: aa1303e0 966b8962 f9400273 d343fe7c (387b6b88) 
[  147.006043][   T21] ---[ end trace 39fc63b3d72adf15 ]---
[  147.483954][   T21] Kernel panic - not syncing: Oops: Fatal exception
[  147.485963][   T21] SMP: stopping secondary CPUs
[  147.487310][   T21] Kernel Offset: disabled
[  147.488517][   T21] CPU features: 0x8,000081c1,21302e40
[  147.490036][   T21] Memory Limit: none
[  147.971453][   T21] Rebooting in 86400 seconds..