last executing test programs:

2m14.176860343s ago: executing program 1 (id=2):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x50b, &(0x7f0000000d00)="$eJzs3c9vE9kdAPCvnZiEEAi0HErVFkppaYVwfgAR4lK4tKoQUlXUUw+QJiaKYuMoDipJOSTH3pGK1FP7J/S2h5U47WFve9u97YU9rMTuol2Rlfbg1YyHxOSnIT+8xJ+PNJl5bwZ/37Pz3vM8Yr8AOtaZiFiMiEMRcTciBrL8XLbF9caWXPfyxaPx5RePxpNrb3+ZS88nedH0bxJHssfsjYi//DHi77n1cWvzC9Nj5XJpNksPzlVmBmvzCxen8lnOyOjw6NDVS1dGdq2upyv/f/6HqZt/ff+9nz/7aPF3/0yK1f+vo+m55nrspkbVC9HflNcdETf3IlibdGe/P63q3cOy8GaS1vajiDibtv+B6EpfTQDgIKvXB6I+0JwGAA665P6/P3L5YjYX0B/5fLHYmMM7GX35crU2d2Gg+uD+RKRzWMejkL83VS4NZXOFx6OQS9LD6fFqeuS19OPSpYg4ERGPew6n54vj1fJEO9/4AEAHO7Jm/P+mpzH+AwAHnD/IAIDOY/wHgM5j/AeAzvMG479PBwLAAeH+HwA6j/EfADrPtuP/0v6UAwDYF3++dSvZ6suN779+9U3dFydKteli5cF4cbw6O1OcrFYny6XieL2+3eOVq9WZ4csrydr8wp1K9cH9uTtTlbHJ0p1SYS8rAwC05MTpp58kg/7itcPpFk1rORir4WDLt7sAQNt0tbsAQNv4PA90rhbu8U0DwAG3wRK9r9n0T4SevOHir8APxvlT5v+hU+1k/t/cAbzb3m7+//e7Xg5g/xnDoXPV6zlr/gNAhzHHD+zo//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgQ/WnWy5fTNcCX0x+5ovFiKMRcTwKuXtT5dJQRByLiI97Cj1JerjdhQYAdij/eS5b/+v8wLn+tWcP5b7tSfcR8Y//3P73w7G5udnhJP+rlfy5J1n+yKF2VAAAaHZ9fVZjnM72TTfyL188Gn+17WcRn99oLC6axF3OtsaZ7uhO971RiIi+r3NZuiF5v9K1C/EXlyLiJ6v1f9gUoT+dA2msfLo2fhL76B7EX33+18bPvxY/n55L9oX0ufjxLpQFOs3TG41+Mmt7SRPL2l8+zqT7jdt/b9pD7VzS/yV9yfK6/i+/0v91rYufS9v8mZX01iV5fvmDP63LrA80zi1F/LR7o/i5lfi5jfvfwrmIU63c8X36s1+c3exc/b8R5zes/6sVqStpNzs4V5kZrM0vXJyqjE2WJkv3R0ZGh0eHrl66MjKYzlEnPyM+3CjGF9cuHNv0uVmK6Nskfu/W9Y9ft1D3xP++u/u3X24R/7e/2vj1P7lF/GRM/E2L8cf6rm+6fHcSf2KT+m/z+seFFuM/+2xhosVLAYB9UJtfmB4rl0uz2xwk7zW3u8bBu3kQixG79YDppERElEuz+exXrP0VdPAWB+3slYD9sNro210SAAAAAAAAAAAAAABgM7X5heme2NuPE7W7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxc3wcAAP//oKvDYg==")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0)
preadv2(r0, &(0x7f0000002380)=[{&(0x7f0000002f40)=""/4099, 0x1003}], 0x1, 0x2203, 0x1, 0xe)

2m12.976497481s ago: executing program 1 (id=8):
r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000000)={0x0, 0x30, 0x1c, "ad238576e7a9eb49ed6809edfbd71b5ca6c16580c4d082471cf7639d"}, 0x0, 0x0})

2m7.013666385s ago: executing program 1 (id=12):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f0000000100)={[{@noload}, {@minixdf}, {@data_err_ignore}, {@acl}, {@oldalloc}, {@errors_remount}]}, 0xff, 0x467, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0xf, 0xfffffffffffffed8, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x658b, 0x100000002, 0x9, 0xfff})

2m6.81095247s ago: executing program 32 (id=12):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f0000000100)={[{@noload}, {@minixdf}, {@data_err_ignore}, {@acl}, {@oldalloc}, {@errors_remount}]}, 0xff, 0x467, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0xf, 0xfffffffffffffed8, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x658b, 0x100000002, 0x9, 0xfff})

19.87377073s ago: executing program 5 (id=231):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
mount(0x0, &(0x7f0000000100)='./tracing\x00', 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r2, &(0x7f0000000040)=""/148, 0xffffff96)

17.395445246s ago: executing program 4 (id=238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000009}, 0x50)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x5)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = accept4$unix(r3, 0x0, 0x0, 0x0)
sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0)
recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

16.589768835s ago: executing program 0 (id=240):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

16.306812431s ago: executing program 4 (id=241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1000000008)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x6, 0x0, 0x0, 0x400000)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
mknod(0x0, 0x8000, 0x8)
memfd_create(0x0, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0xa6)

14.314852486s ago: executing program 4 (id=244):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x20042)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

14.287987747s ago: executing program 5 (id=245):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0xa0)
write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x401, 0xf, 0x0, 0xd}}, 0x118)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r6, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, 0x0, 0x0)

12.80431447s ago: executing program 5 (id=246):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x20040090)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f00000000c0)=0x6, 0x4)
sendmmsg$inet6(r5, &(0x7f0000001a00)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)="944e69", 0x3)
splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x4)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2004c12, &(0x7f00000001c0)={[{@cruft}, {@dmode}, {@session={'session', 0x3d, 0x57}}, {@cruft}, {@map_acorn}, {@unhide}, {@overriderock}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@nojoliet}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@dmode={'dmode', 0x3d, 0x2}}]}, 0x81, 0xa4f, &(0x7f0000000a80)="$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")
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000010180c2000000a2c5111ea96a6d"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

12.803357861s ago: executing program 2 (id=247):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
pipe(&(0x7f0000000340))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xb, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r4)

12.569808215s ago: executing program 0 (id=248):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r2})

11.898860211s ago: executing program 0 (id=249):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
getxattr(&(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000780)=""/32, 0x20)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf254f00000008000300", @ANYRES32=r8, @ANYBLOB="50007a800c000300b5dac55bc36d454a2400010074cbc6c46429dc62c32e37a80137eb9b026773a4a34eec6786ac2bccfcd094611c000200e830ce9f3aa2bac2cbed3fd5d16d9e1205a13fa42564081d"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

11.51424977s ago: executing program 2 (id=250):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
tee(r3, r3, 0xcfce, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

10.447832254s ago: executing program 2 (id=251):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000001040))

10.205014189s ago: executing program 2 (id=252):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0)
setxattr$incfs_id(0x0, &(0x7f0000000280), 0x0, 0x0, 0x1)
socket$packet(0x11, 0x2, 0x300)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r3 = epoll_create(0x1)
dup3(r3, 0xffffffffffffffff, 0x0)

10.134054261s ago: executing program 3 (id=253):
fanotify_init(0xf00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x900, 0xfffffffffffffffe, 0xe1)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)

8.769570172s ago: executing program 3 (id=254):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1000000008)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x6, 0x0, 0x0, 0x400000)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
mknod(0x0, 0x8000, 0x8)
memfd_create(0x0, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0xa6)

8.017072649s ago: executing program 4 (id=255):
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fanotify_init(0x18, 0x101000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000780)={0x1, 0x2, 0xff8e, 0x5})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x541b, 0x0)

7.924343151s ago: executing program 2 (id=256):
unshare(0x20400)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000100)='./file1\x00', 0x3804c52, &(0x7f0000000000)=ANY=[@ANYBLOB='nocompress,session=0x0000000000000013,nocompress,showassoc,check=strict,iocharset=cp437,cruft,unhide,norock,sbsector=0x00\x00\x00\x00\x00\n\x00\x00\x00000001,map=off,mode=0x0000000000000006,uid=', @ANYRESDEC, @ANYRES16], 0x3, 0x9bf, &(0x7f00000023c0)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0)

7.774473284s ago: executing program 4 (id=257):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0xa0)
write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x401, 0xf, 0x0, 0xd}}, 0x118)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r6, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, 0x0, 0x0)

6.374142476s ago: executing program 4 (id=258):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

6.265205918s ago: executing program 5 (id=259):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="25b6c403727541f6fc4cd1285cef", @ANYRES8, @ANYRES16, @ANYRES32], 0x1, 0x2ca, &(0x7f0000001140)="$eJzs3b9rJFUcAPDvbDa7e1rsFlZy4IBXWB2Xa202yB2IqZQt1ELFuwO5XYQEAv7ATSpbG0v/AkGw80+wsfE/EGwFO1MERmZnZn8kO7tZyCZ6fD5F8s177zvvO4+3yYYwLx/fHT1/ksaz06//iE4niUY/7sRZEr1oROUkFvS/CwDg/+wsy+LvrLBJXhIRne2VBQBs0VmWnSz9+b9Tk/DzjZQFAGzRe+9/8M7+wcGjd9O0E49H3x4P8t/s889F//6z+CyG8TQeRDfOI7JK9feBLMvGzTRN06wbMRofD/LM0Ue/ldff/ytikr8X3ehVGcW7jfzj47cPHu2lhbg3zR/ndbxUzt/P8x9GN16Zm38u/+GS/Bi04o3X5+q/H934/dP4PIbxZFLELP+bvTR9K/v+n68+zMvL85Px8aA9GTeT1b0jAgAAAAAAAAAAAAAAAAAAAACAjd0vz85pR9qLe6O8qTx/Z+c8/2I30kpv8XyeIr9dXejC+UDjLH6oztd5kKZplhTDpvnRjFeb0byduwYAAAAAAAAAAAAAAAAAAID/lqMvvnz+yXD49PBagvIh/+lj/euyfo3lXf25ltdqxlRBezZXowxXTBo71ZgkIm9J6hYhv4lrWpZ1wZ26mn/8adMLdtaP2V21PrOgs34xa4Nqd+XLu3RMO6qWTrVJfpkf04orztWq67pblnC167SWdnU3vvfWy5NgvGJMJKteF2/+WZRdtiQXX0StyaouTd8tg5ju8Yt7Y6P9fPl7ReK0DgAAAAAAAAAAAAAAAAAA2KrZQ7+XuppxujK1kbW3WBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3KDZ//+vD5oRsdAyLpNXZhVBKw6PFmds3MZtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8IL7NwAA//8qo1Fz")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r1, 0x0)
futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
listen(r0, 0x5)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, 0x0, 0x0)

4.781110572s ago: executing program 3 (id=260):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
pipe(&(0x7f0000000340))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xd, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r4)

4.620830455s ago: executing program 2 (id=261):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
tee(r3, r3, 0xcfce, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

4.341779442s ago: executing program 0 (id=262):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20081e, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0xfe}}, {@dax}, {@grpquota}]}, 0x1, 0x536, &(0x7f0000000dc0)="$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")
io_setup(0x2, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2015816, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r1, 0x0, 0x138)

3.95221665s ago: executing program 0 (id=263):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0x0, 0x4b4, &(0x7f0000000a00)="$eJzs3E1sFFUcAPD/bD9o5aMVEQVBK2gkfrS0oHLwgEYTD5qY6AGPtS2ILNTQmgBptBiDR0Pi3Xg08ezBxIMXox6MiVdNPBoSor0AnmpmZ4Zuy+7SLW1Xur9fst33dt7Me2/mvd038zoTQNsaSP8kEVsi4veI6MuiixMMZG/X52bGbszNjCUxP//m30kl3bW5mbEiabHe5jxyoBRR+iSJo8mt+U6dv3BqtFyeOJvHh6ZPvz80df7CMydPj56YODFxZuTIkcOHhp9/buTZValnWq9ruz+c3LPr1bcvvz527PI7P32dFmvn3mx5dT1u60aNCtUwkO61f+Yrli57vImy3w22VoWTzhYWhKZ0RER6uLoq/b8vOmLh4PXFKx+3tHDAmkp/mzbVXzw7D2xgSbS6BEBrFD/06flv8Vqnocf/wtUXI7rz8PW5mbHrczN5tDNKWeCbtcx/ICKOzf77RfqKZq9DAACsQFf65+la479S7Ky8Z3Md2/I5lP6IuDcitkfEfRGxIyLuj6ikfSAiHsxWnu9bZv4DS+K3jn9KV2qWeZWk478XFsZ+lVeeb/HW35HHtlbq35UcP1meOJjvkwPRtSmNDzfI4/uXf/us3rLq8V/6SvMvxoJ5Aa50LrlANz46PbpaO+HqxYjdndX1L+a2kpszAeknuyJid3Ob3lYETj751Z56iW5f/wZWYZ5p/suIJ7Ljn26t6vgvzPEljecnh3qiPHFwqGgVt/r510tv1Mv/juq/Cq7ueygLLLT/JSmqGlq5PHF2qvk8Lv3xad1zmpW2/+7krUqf/OXd7LNzo9PTZ4cjupPXKvHinK7y+cjCuudGp3vTeJE+bf8H9tfu/9vzddLjn+6ltBHvjYiHI+KRvOyPRsS+iNjfoP4/vvTYew3qn0QSrTv+FyPGa37/3Wz//Un1fP0KAh2nfvi23oz58o7/4ZitfNdmKt9/t7HcAt7h7gMAAIC7QikitkRSGszCA1uiVBoczP6Hf0fcUypPTk0/dXzygzPj2T0C/dFVKq509VVdDx1OZvMtZvGR/FpxsfxQft34847eSnxwbLI83uK6Q7vbvLj/R9H/U391tLp0wJpzvxa0r6X9v9Qgbf8alwVYX8v5/XcuABvT4v7fk/7pbVVZgPXl/B/aV63+/9GSuPE/bEyL+/93EfFnjUfWARuR8T+0L/0f2tfN/t/gSaDAhtPM7fxxtN6inoho5rEAxc0CK3+qQM+y7/Bvl0DxxIu1zKs3Lpzqzj+J0p1vMFZS5o4mG9uGCKQ9Zn0zXXiGCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN3svwAAAP//zxnZKg==")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x105000, 0x0)
read$msr(r0, &(0x7f0000000600)=""/175, 0xaf)

3.873160202s ago: executing program 5 (id=264):
fanotify_init(0xf00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x900, 0xfffffffffffffffe, 0xe1)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)

2.354379686s ago: executing program 5 (id=265):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x440, &(0x7f0000000640)="$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")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.165791241s ago: executing program 0 (id=266):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)

1.623415583s ago: executing program 3 (id=267):
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fanotify_init(0x18, 0x101000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000780)={0x1, 0x2, 0xff8e, 0x5})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x541b, 0x0)

1.463044017s ago: executing program 3 (id=268):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0xa0)
write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x401, 0xf, 0x0, 0xd}}, 0x118)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r6, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, 0x0, 0x0)

0s ago: executing program 3 (id=269):
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180), 0xc)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts.
[   65.996992][ T4174] cgroup: Unknown subsys name 'net'
[   66.128400][ T4174] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.672507][ T4174] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   69.544729][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   69.665637][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   69.676501][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.685937][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.695151][ T4194] device bridge_slave_0 entered promiscuous mode
[   69.715330][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.722664][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.730532][ T4194] device bridge_slave_1 entered promiscuous mode
[   69.768580][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   69.804860][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.817734][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.864362][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   69.878147][ T4199] chnl_net:caif_netlink_parms(): no params data found
[   69.916426][ T4194] team0: Port device team_slave_0 added
[   69.925014][ T4194] team0: Port device team_slave_1 added
[   69.976485][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.983900][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.992154][ T4187] device bridge_slave_0 entered promiscuous mode
[   70.006311][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.013605][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.021690][ T4187] device bridge_slave_1 entered promiscuous mode
[   70.042871][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.049862][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.076266][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.116081][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.123374][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.150016][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.161589][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.168819][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.178015][ T4186] device bridge_slave_0 entered promiscuous mode
[   70.190916][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.210280][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.217748][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.226911][ T4186] device bridge_slave_1 entered promiscuous mode
[   70.241510][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.302977][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.310172][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.318593][ T4199] device bridge_slave_0 entered promiscuous mode
[   70.333684][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.340791][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.348888][ T4190] device bridge_slave_0 entered promiscuous mode
[   70.359105][ T4187] team0: Port device team_slave_0 added
[   70.374491][ T4187] team0: Port device team_slave_1 added
[   70.380669][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.387976][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.396371][ T4199] device bridge_slave_1 entered promiscuous mode
[   70.405426][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.414766][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.422031][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.430074][ T4190] device bridge_slave_1 entered promiscuous mode
[   70.443582][ T4194] device hsr_slave_0 entered promiscuous mode
[   70.450432][ T4194] device hsr_slave_1 entered promiscuous mode
[   70.472900][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.503844][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.510848][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.537505][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.557791][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.565130][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.591383][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.635819][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.647426][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.659883][ T4186] team0: Port device team_slave_0 added
[   70.686330][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.697175][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.707827][ T4186] team0: Port device team_slave_1 added
[   70.766372][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.773647][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.799987][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.815053][ T4187] device hsr_slave_0 entered promiscuous mode
[   70.824293][ T4187] device hsr_slave_1 entered promiscuous mode
[   70.831096][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.839035][ T4187] Cannot create hsr debugfs directory
[   70.854621][ T4199] team0: Port device team_slave_0 added
[   70.865825][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.872972][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.899535][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.921275][ T4190] team0: Port device team_slave_0 added
[   70.929208][ T4199] team0: Port device team_slave_1 added
[   70.963702][ T4190] team0: Port device team_slave_1 added
[   71.004586][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.011983][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.038365][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.054697][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.061825][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.087792][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.109751][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.117009][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.143584][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.167013][ T4186] device hsr_slave_0 entered promiscuous mode
[   71.174766][ T4186] device hsr_slave_1 entered promiscuous mode
[   71.182049][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.189658][ T4186] Cannot create hsr debugfs directory
[   71.200236][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.208720][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.235131][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.305267][ T4199] device hsr_slave_0 entered promiscuous mode
[   71.312370][ T4199] device hsr_slave_1 entered promiscuous mode
[   71.319070][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.324675][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[   71.327706][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   71.336603][ T4199] Cannot create hsr debugfs directory
[   71.361510][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[   71.367813][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   71.387509][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   71.405100][ T4190] device hsr_slave_0 entered promiscuous mode
[   71.414729][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.421513][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.429613][ T4190] device hsr_slave_1 entered promiscuous mode
[   71.436548][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.444671][ T4190] Cannot create hsr debugfs directory
[   71.677849][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.697691][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.707730][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.718572][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.790137][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.800600][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.817741][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.839938][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.883512][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.895812][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.906649][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.929301][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.985924][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.020409][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.027713][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.055808][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.076262][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.088695][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.100622][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.130528][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   72.153653][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.167833][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.177251][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.186431][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.198754][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.206169][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.222357][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.239179][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.252313][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.263935][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.275175][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.284544][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.291691][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.301847][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.322197][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.344965][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.357805][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   72.368717][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.380546][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.389787][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.402330][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.412496][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.454077][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.466356][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.476142][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.485857][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.493047][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.501204][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.513062][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.522453][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.529649][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.537758][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.548268][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.557351][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.568513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.587577][ T4199] 8021q: adding VLAN 0 to HW filter on device team0
[   72.610186][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.622509][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.639839][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.650150][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.660642][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.669096][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.677211][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.687909][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.696944][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.706262][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.715513][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.724621][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.733102][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.764696][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.782561][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.823578][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.839923][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.850550][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.857781][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.868047][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.877133][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.885793][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.895543][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.908092][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.915379][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.925241][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.934387][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.943580][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.954164][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.967013][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.987367][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.995928][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.015864][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.032658][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.060577][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   73.088036][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.097374][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.105947][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.115884][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.128584][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.149949][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.161672][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.189111][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.202317][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.211129][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.223633][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.234616][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.244284][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.253826][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.260975][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.269356][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.277734][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.286053][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.294417][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.316234][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.332060][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.340921][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.356500][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.364390][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.402044][ T4231] Bluetooth: hci3: command 0x041b tx timeout
[   73.408436][ T4231] Bluetooth: hci0: command 0x041b tx timeout
[   73.414210][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.432221][ T4231] Bluetooth: hci1: command 0x041b tx timeout
[   73.438552][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.446903][ T4231] Bluetooth: hci4: command 0x041b tx timeout
[   73.453170][ T4231] Bluetooth: hci2: command 0x041b tx timeout
[   73.464582][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.480032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.508132][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.518645][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.527137][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.539759][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.582701][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.593585][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.603067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.611107][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.619652][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.629321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.661302][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   73.684499][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.698290][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.709730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.722740][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.748438][ T4194] device veth0_vlan entered promiscuous mode
[   73.759279][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.771342][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.780435][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.790813][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.798009][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.808333][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.819974][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.828790][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.837069][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.846082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.860989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.870731][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.880829][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.887943][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.897168][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.917093][ T4194] device veth1_vlan entered promiscuous mode
[   73.928474][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.950096][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.969677][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.991070][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.003139][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.010656][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.029506][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.038896][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.057875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.068266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.121349][ T4194] device veth0_macvtap entered promiscuous mode
[   74.158007][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.170283][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.179465][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.189376][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.198767][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.208251][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.224182][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.233586][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.242221][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.255075][ T4194] device veth1_macvtap entered promiscuous mode
[   74.277216][ T4187] device veth0_vlan entered promiscuous mode
[   74.285722][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.296568][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.305251][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.313892][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.323695][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.337862][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.346050][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.361514][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.385596][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.395076][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.404349][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.413884][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.423536][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.436443][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.462004][ T4187] device veth1_vlan entered promiscuous mode
[   74.472879][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.495453][ T4199] device veth0_vlan entered promiscuous mode
[   74.505805][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.516942][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.528417][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.537878][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.547446][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.571259][ T4199] device veth1_vlan entered promiscuous mode
[   74.581966][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.592722][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.602947][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.613278][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.643669][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.652659][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.660802][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.672022][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.680362][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.690856][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.701201][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.710602][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.759264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.769611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.779679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.797363][ T4199] device veth0_macvtap entered promiscuous mode
[   74.825584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.840922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.850555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.861096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.872994][ T4187] device veth0_macvtap entered promiscuous mode
[   74.893559][ T4190] device veth0_vlan entered promiscuous mode
[   74.909410][ T4199] device veth1_macvtap entered promiscuous mode
[   74.918700][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.932509][ T4187] device veth1_macvtap entered promiscuous mode
[   74.959244][ T4190] device veth1_vlan entered promiscuous mode
[   74.991155][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.004634][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.017860][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.029322][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.040502][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.053501][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.069188][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.083427][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.094723][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.105276][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.118783][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.129027][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.139081][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.148372][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.167526][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.177207][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.187059][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.202563][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.211334][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.220861][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.232974][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.263554][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.274977][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.285460][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.296978][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.308739][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.316496][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.325137][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.333823][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.343010][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.360125][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.378995][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.399947][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.409260][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.424894][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.431652][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.441322][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.481823][   T21] Bluetooth: hci2: command 0x040f tx timeout
[   75.487531][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.501567][   T21] Bluetooth: hci4: command 0x040f tx timeout
[   75.508722][   T21] Bluetooth: hci1: command 0x040f tx timeout
[   75.521115][   T21] Bluetooth: hci0: command 0x040f tx timeout
[   75.527823][   T21] Bluetooth: hci3: command 0x040f tx timeout
[   75.559521][ T4190] device veth0_macvtap entered promiscuous mode
[   75.588471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.598657][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.614145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.630108][ T4190] device veth1_macvtap entered promiscuous mode
[   75.685393][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.701753][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.719537][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.736308][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.748492][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.759401][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.769613][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.782192][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.793938][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.805575][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.817774][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.827995][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.838731][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.848874][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.859649][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.871961][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.879409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.888612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.907164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.916962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.926453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.936180][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.961127][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.981488][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.990259][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.010458][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.071047][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.095697][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.120623][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.197930][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.223889][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.248777][ T4271] loop3: detected capacity change from 0 to 1024
[   76.260256][ T4186] device veth0_vlan entered promiscuous mode
[   76.268438][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.296950][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.307622][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.309554][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.325768][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.335469][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.346106][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.392561][ T4186] device veth1_vlan entered promiscuous mode
[   76.413974][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.426757][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.466112][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.474957][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.487867][ T4271] attempt to access beyond end of device
[   76.487867][ T4271] loop3: rw=0, want=5780, limit=1024
[   76.579670][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.606894][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.621855][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.629586][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   76.637532][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.657438][ T4273] loop1: detected capacity change from 0 to 512
[   76.664720][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.724440][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.735396][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.744741][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.756070][ T4186] device veth0_macvtap entered promiscuous mode
[   76.792707][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.800585][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.828858][ T4186] device veth1_macvtap entered promiscuous mode
[   76.843999][ T4273] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[   76.852600][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.870908][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.880000][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.886207][ T4273] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   77.112337][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.407241][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.591656][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   77.618720][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[   77.651570][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.675871][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   77.711636][ T4231] Bluetooth: hci4: command 0x0419 tx timeout
[   77.724961][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.760099][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   77.779407][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   77.799147][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.836313][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.856030][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   77.878916][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   77.896891][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.928296][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   77.938400][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.964553][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   77.989805][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.020781][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.040961][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.065825][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   78.097647][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.118516][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.139842][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   78.158465][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.188803][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.199290][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.222043][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   78.247096][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.273133][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.290097][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.311582][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   78.337175][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.363105][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.380561][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   78.391868][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.430133][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.437247][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.466100][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   78.494386][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.517472][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.545930][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.565946][ T4187] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[   78.591547][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.621167][ T4187] EXT4-fs (loop1): Remounting filesystem read-only
[   78.633928][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.910182][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.941887][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.961422][    C0] sched: RT throttling activated
[   79.151476][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   79.161484][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   79.171468][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   79.181454][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   79.191459][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   79.201456][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   79.211469][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   79.221463][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   79.231463][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   79.241464][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   82.257084][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.326335][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.364472][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.401084][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.422708][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.381048][ T4302] sctp: failed to load transform for md5: -2
[   83.556293][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.626252][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.646947][ T4306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.695793][ T4187] syz-executor (4187) used greatest stack depth: 20976 bytes left
[   83.780595][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.971037][ T4316] loop4: detected capacity change from 0 to 512
[   84.054022][ T4316] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[   84.054022][ T4316] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   84.054022][ T4316] 
[   84.147360][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   84.181248][ T4316] EXT4-fs (loop4): 1 truncate cleaned up
[   84.197276][ T4316] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,resgid=0x0000000000000000,nobarrier,,errors=continue. Quota mode: writeback.
[   84.243809][ T4317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.329069][ T4306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.393004][ T4321] loop0: detected capacity change from 0 to 512
[   84.904583][ T4323] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   85.085116][ T4323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.975180][ T4306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.985908][ T4321] EXT4-fs (loop0): Ignoring removed nobh option
[   86.068740][ T4321] EXT4-fs (loop0): orphan cleanup on readonly fs
[   86.212614][ T4321] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.9: EA inode hash validation failed
[   86.272734][ T4306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.286203][ T4321] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   86.342918][ T4321] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.9: corrupted inode contents
[   86.419022][ T4321] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.9: mark_inode_dirty error
[   86.488471][ T4321] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.9: corrupted inode contents
[   86.592531][ T4321] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2957: inode #15: comm syz.0.9: mark_inode_dirty error
[   86.626549][ T4321] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2960: inode #15: comm syz.0.9: mark inode dirty (error -117)
[   87.036820][ T1326] cfg80211: failed to load regulatory.db
[   87.142629][ T4321] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117)
[   87.263444][ T4321] EXT4-fs (loop0): 1 orphan inode deleted
[   87.270057][ T4321] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,min_batch_time=0x000000000000b656,block_validity,,errors=continue. Quota mode: none.
[   87.487836][ T4329] chnl_net:caif_netlink_parms(): no params data found
[   89.118130][ T1326] Bluetooth: hci0: command 0x0409 tx timeout
[   89.625322][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.632890][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.643726][ T4329] device bridge_slave_0 entered promiscuous mode
[   90.504676][ T4370] binder: Unknown parameter 'measure'
[   90.506978][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.530349][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.538860][ T4370] syz.2.23 (4370): attempted to duplicate a private mapping with mremap.  This is not supported.
[   90.572853][ T4329] device bridge_slave_1 entered promiscuous mode
[   90.779085][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.939846][ T4377] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24'.
[   91.733033][ T1326] Bluetooth: hci0: command 0x041b tx timeout
[   91.744095][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.752131][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.780837][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.160715][ T4329] team0: Port device team_slave_0 added
[   92.174313][ T4329] team0: Port device team_slave_1 added
[   92.988192][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.049548][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.653585][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.704707][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.721479][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.802582][ T4233] Bluetooth: hci0: command 0x040f tx timeout
[   93.916667][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.179656][ T4329] device hsr_slave_0 entered promiscuous mode
[   94.250317][ T4329] device hsr_slave_1 entered promiscuous mode
[   94.292574][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.300199][ T4329] Cannot create hsr debugfs directory
[   96.023482][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   97.909056][ T4306] device hsr_slave_0 left promiscuous mode
[   97.930335][ T4306] device hsr_slave_1 left promiscuous mode
[   97.972742][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.980285][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.994248][ T4445] loop3: detected capacity change from 0 to 1024
[   98.045303][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.061575][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.075777][ T4445] EXT4-fs (loop3): error: journal path ./cgroup is not a block device
[   98.087796][ T4306] device bridge_slave_1 left promiscuous mode
[   98.107455][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.164983][ T4306] device bridge_slave_0 left promiscuous mode
[   98.192148][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.246158][ T4306] device veth1_macvtap left promiscuous mode
[   98.262276][ T4306] device veth0_macvtap left promiscuous mode
[   98.278854][ T4306] device veth1_vlan left promiscuous mode
[   98.291923][ T4306] device veth0_vlan left promiscuous mode
[  100.074842][  T264] block nbd4: Attempted send on invalid socket
[  100.082997][  T264] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  100.095189][ T4464] efs: cannot read volume header
[  100.499851][ T4306] team0 (unregistering): Port device team_slave_1 removed
[  100.768656][ T4306] team0 (unregistering): Port device team_slave_0 removed
[  100.837700][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.884025][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.985513][ T4473] loop0: detected capacity change from 0 to 1024
[  101.022172][ T4306] bond0 (unregistering): Released all slaves
[  101.208623][ T4450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.31'.
[  101.222181][    T9] hfsplus: b-tree write err: -5, ino 25
[  101.233174][    T9] hfsplus: b-tree write err: -5, ino 4
[  101.239015][ T4451] netlink: 72 bytes leftover after parsing attributes in process `syz.2.31'.
[  101.244971][    T9] hfsplus: b-tree write err: -5, ino 2
[  101.278372][ T4451] Zero length message leads to an empty skb
[  102.010536][ T4329] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  103.472387][ T4329] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  103.565456][ T4329] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  103.631512][ T4329] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.396548][ T4507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.54'.
[  105.405799][ T4507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.54'.
[  105.572349][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.726198][ T4231] Process accounting resumed
[  105.735625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.791210][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.036964][ T4329] 8021q: adding VLAN 0 to HW filter on device team0
[  106.396155][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.482376][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.490923][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.498238][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.507856][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.535064][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.580213][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.655982][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.663172][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.723966][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.770055][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.816115][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.816965][ T4523] loop4: detected capacity change from 0 to 512
[  106.877420][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.903546][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.930759][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.958904][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.017479][ T4528] loop0: detected capacity change from 0 to 256
[  107.063165][ T4523] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  107.081776][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.120275][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  107.123711][ T4528] =======================================================
[  107.123711][ T4528] WARNING: The mand mount option has been deprecated and
[  107.123711][ T4528]          and is ignored by this kernel. Remove the mand
[  107.123711][ T4528]          option from the mount to silence this warning.
[  107.123711][ T4528] =======================================================
[  107.146306][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.183386][ T4523] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.306934][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.364960][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.404426][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.443055][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  108.582298][ T4528] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  110.444302][ T4556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.65'.
[  110.453333][ T4556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.65'.
[  111.292197][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  111.299877][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  111.346091][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.713061][ T4579] loop4: detected capacity change from 0 to 1024
[  112.863605][ T4579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.014089][ T4589] EXT4-fs warning (device loop4): ext4_rmdir:3243: inode #11: comm syz.4.71: empty directory 'file0' has too many links (111)
[  113.073464][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.113200][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.214027][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.258546][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.285437][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.310965][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.345623][ T4329] device veth0_vlan entered promiscuous mode
[  113.352279][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'.
[  113.393920][ T4329] device veth1_vlan entered promiscuous mode
[  113.454442][ T4595] loop4: detected capacity change from 0 to 1024
[  113.507506][ T4595] hfsplus: unable to parse mount options
[  113.527933][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.553285][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  113.592208][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.638724][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.685607][ T4329] device veth0_macvtap entered promiscuous mode
[  113.733339][ T4329] device veth1_macvtap entered promiscuous mode
[  113.793325][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.804748][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.815766][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.841527][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.939917][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.974214][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.990812][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.003330][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.023281][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.090204][ T4605] loop2: detected capacity change from 0 to 16
[  114.228700][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.240059][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.252977][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.891162][ T4605] erofs: (device loop2): mounted with root inode @ nid 36.
[  114.940696][   T26] audit: type=1800 audit(1788996926.881:2): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="file1" dev="loop2" ino=86 res=0 errno=0
[  114.958463][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.262604][ T4232] Process accounting resumed
[  115.286025][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.368381][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.412690][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.521972][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.553841][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.566471][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  116.582542][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  116.619592][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  116.662681][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.703818][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.715135][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.133525][  T150] block nbd4: Attempted send on invalid socket
[  118.139757][  T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.151788][ T4622] efs: cannot read volume header
[  118.178456][ T4329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.187297][ T4329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.197330][ T4329] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.207098][ T4329] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.382366][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.390238][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.439583][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.461838][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.469689][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.505676][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.600190][ T4626] loop4: detected capacity change from 0 to 512
[  119.774690][ T4626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  119.791490][ T4626] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  119.893180][ T4626] EXT4-fs (loop4): 1 truncate cleaned up
[  119.899349][ T4626] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[  121.561224][ T4655] loop3: detected capacity change from 0 to 1024
[  122.595777][ T4655] hfsplus: walked past end of dir
[  123.403141][ T4665] loop2: detected capacity change from 0 to 128
[  124.050699][    T7] Process accounting resumed
[  124.209401][  T264] block nbd4: Attempted send on invalid socket
[  124.215748][  T264] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.227060][ T4690] efs: cannot read volume header
[  126.665121][ T4703] process 'syz.3.94' launched '/dev/fd/3/./config/usb_gadget/g1/functions/uvc.0/streaming/header/h' with NULL argv: empty string added
[  128.201534][ T1326] Bluetooth: hci0: command 0x0405 tx timeout
[  128.974609][   T26] audit: type=1800 audit(1788996940.921:3): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.95" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  129.204058][ T4726] binder: 4725:4726 ioctl c0306201 200000001a80 returned -14
[  129.478982][   T21] Process accounting resumed
[  130.454495][ T4751] loop0: detected capacity change from 0 to 512
[  130.613747][ T4751] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,stripe=0x000000000000f7b2,grpquota,. Quota mode: writeback.
[  130.631642][ T4751] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.871618][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  131.962520][ T4233] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  132.090398][ T4233] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  132.282534][ T4233] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config
[  132.463806][ T4233] usb 5-1: config 220 has no interface number 2
[  132.578915][ T4233] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 1024
[  132.661464][ T4233] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  132.734054][ T4233] usb 5-1: config 220 interface 0 has no altsetting 0
[  132.768402][ T4233] usb 5-1: config 220 interface 76 has no altsetting 0
[  132.800189][ T4233] usb 5-1: config 220 interface 1 has no altsetting 0
[  132.862480][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.868852][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.887474][ T4233] usb 5-1: string descriptor 0 read error: -71
[  132.925855][ T4233] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  133.162144][ T4231] Process accounting resumed
[  134.041569][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.083067][ T4804] loop5: detected capacity change from 0 to 8
[  134.090679][ T4233] usb 5-1: can't set config #220, error -71
[  134.103921][ T4233] usb 5-1: USB disconnect, device number 2
[  134.288867][ T4804] SQUASHFS error: Unable to read directory block [629:fe]
[  140.637608][ T4848] loop5: detected capacity change from 0 to 164
[  140.867590][ T4233] Process accounting resumed
[  142.803796][ T4862] loop0: detected capacity change from 0 to 256
[  146.367033][ T4887] loop0: detected capacity change from 0 to 2048
[  146.487360][ T4887] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  146.520295][ T4887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.135220][ T4899] loop0: detected capacity change from 0 to 164
[  148.446084][   T21] Process accounting resumed
[  148.564853][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.736920][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  149.051785][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  149.245478][ T4911] device bridge_slave_0 left promiscuous mode
[  149.308433][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.516461][ T4911] device bridge_slave_1 left promiscuous mode
[  149.621736][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.782691][ T4911] bond0: (slave bond_slave_0): Releasing backup interface
[  149.916980][ T4911] bond0: (slave bond_slave_1): Releasing backup interface
[  150.067446][ T4935] loop0: detected capacity change from 0 to 128
[  150.236370][ T4911] team0: Port device team_slave_0 removed
[  150.637538][ T4911] team0: Port device team_slave_1 removed
[  150.738893][ T4942] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4942]
[  150.931093][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.007728][ T4911] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.206544][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.231755][ T4911] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.320959][ T4952] loop2: detected capacity change from 0 to 256
[  151.466637][ T4952] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  151.546105][ T4911] syz.5.141 (4911) used greatest stack depth: 20016 bytes left
[  157.316767][ T5015] loop5: detected capacity change from 0 to 512
[  157.660455][ T5015] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.674020][ T5015] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.239051][ T5039] loop3: detected capacity change from 0 to 128
[  162.240713][ T5066] loop0: detected capacity change from 0 to 512
[  162.408644][ T5066] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.419925][ T5066] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.407710][ T5132] loop3: detected capacity change from 0 to 128
[  167.494268][ T5132] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  167.560308][ T5132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.684378][ T5192] loop5: detected capacity change from 0 to 256
[  175.763391][ T5192] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.868644][   T26] audit: type=1800 audit(1788996988.811:4): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.195" name="file1" dev="loop5" ino=1048623 res=0 errno=0
[  176.995442][ T5210] loop2: detected capacity change from 0 to 128
[  177.173175][ T5210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  177.233190][ T5210] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.327775][ T5218] loop5: detected capacity change from 0 to 256
[  177.345475][ T5210] syz.2.197 (pid 5210) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  178.952331][ T5210] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  179.022653][ T5210] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  181.083684][ T5262] loop2: detected capacity change from 0 to 164
[  182.094131][ T5279] loop3: detected capacity change from 0 to 16
[  182.126109][ T5279] erofs: (device loop3): mounted with root inode @ nid 36.
[  182.158631][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36
[  182.169518][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 143 @ nid 36
[  182.178732][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36
[  182.189112][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 142 @ nid 36
[  182.199179][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36
[  182.209401][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 141 @ nid 36
[  182.218582][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36
[  182.229282][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36
[  182.238897][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36
[  182.248995][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36
[  182.258224][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36
[  182.268284][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 138 @ nid 36
[  182.277480][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36
[  182.287627][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 137 @ nid 36
[  182.297630][ T5279] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36
[  182.307705][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 136 @ nid 36
[  182.317256][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 111 @ nid 36
[  182.326520][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 110 @ nid 36
[  182.336254][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 109 @ nid 36
[  182.345493][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 108 @ nid 36
[  182.354722][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 107 @ nid 36
[  182.363933][ T5279] erofs: (device loop3): z_erofs_readahead: readahead error at page 106 @ nid 36
[  182.373740][ T5279] attempt to access beyond end of device
[  182.373740][ T5279] loop3: rw=524288, want=13478624064, limit=16
[  182.385546][ T5279] attempt to access beyond end of device
[  182.385546][ T5279] loop3: rw=524288, want=13478624072, limit=16
[  182.400242][ T5279] attempt to access beyond end of device
[  182.400242][ T5279] loop3: rw=524288, want=14550774184, limit=16
[  182.412317][ T5279] attempt to access beyond end of device
[  182.412317][ T5279] loop3: rw=524288, want=14550774192, limit=16
[  182.424324][ T5279] attempt to access beyond end of device
[  182.424324][ T5279] loop3: rw=524288, want=13716630408, limit=16
[  182.436098][ T5279] attempt to access beyond end of device
[  182.436098][ T5279] loop3: rw=524288, want=13716630416, limit=16
[  182.448050][ T5279] attempt to access beyond end of device
[  182.448050][ T5279] loop3: rw=524288, want=790416, limit=16
[  182.459561][ T5279] attempt to access beyond end of device
[  182.459561][ T5279] loop3: rw=524288, want=790424, limit=16
[  182.470972][ T5279] attempt to access beyond end of device
[  182.470972][ T5279] loop3: rw=524288, want=104, limit=16
[  182.482024][ T5279] attempt to access beyond end of device
[  182.482024][ T5279] loop3: rw=524288, want=112, limit=16
[  182.828961][ T5295] loop3: detected capacity change from 0 to 256
[  184.267566][ T5300] device-mapper: ioctl: Unable to rename non-existent device,  to |
[  186.216010][ T5327] loop2: detected capacity change from 0 to 512
[  188.485137][ T5338] loop0: detected capacity change from 0 to 256
[  188.660540][ T5338] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  189.593794][ T5345] loop2: detected capacity change from 0 to 512
[  193.573469][ T5381] loop2: detected capacity change from 0 to 256
[  194.891533][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.898691][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  196.255304][ T5381] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  196.441634][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  197.921473][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  197.961641][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  198.012278][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  199.521625][   T21] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  200.569124][ T5432] loop4: detected capacity change from 0 to 128
[  200.632131][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'.
[  200.641088][ T5433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.201110][ T5433] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.871214][ T5444] loop5: detected capacity change from 0 to 1764
[  202.935177][ T5446] loop2: detected capacity change from 0 to 1764
[  204.370419][ T5444] ip_tables: iptables: counters copy to user failed while replacing table
[  205.889911][ T5452] loop5: detected capacity change from 0 to 256
[  205.994036][   T26] audit: type=1800 audit(1788997017.941:5): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.259" name="file1" dev="loop5" ino=1048672 res=0 errno=0
[  206.028710][ T5452] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  206.069085][   T26] audit: type=1800 audit(1788997017.971:6): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.259" name="file1" dev="loop5" ino=1048672 res=0 errno=0
[  206.122141][ T5452] FAT-fs (loop5): Filesystem has been set read-only
[  206.129171][ T5452] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  206.161768][ T5452] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  206.195006][ T5452] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  206.217252][ T5452] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  206.238138][ T5452] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  206.260014][ T5452] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  206.384855][ T5462] loop0: detected capacity change from 0 to 512
[  206.413218][ T5462] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  206.432036][ T5462] EXT4-fs (loop0): DAX unsupported by block device.
[  206.852246][ T5466] loop0: detected capacity change from 0 to 512
[  206.916571][ T5466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.263: missing EA_INODE flag
[  206.962020][ T5466] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.263: error while reading EA inode 2 err=-117
[  206.987607][ T5466] EXT4-fs (loop0): 1 orphan inode deleted
[  206.999174][ T5466] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  210.740701][ T5485] ------------[ cut here ]------------
[  210.772191][ T5485] failed to allocate ring buffer on CPU 1
[  210.791885][ T5485] WARNING: CPU: 1 PID: 5485 at kernel/trace/ring_buffer.c:5818 trace_rb_cpu_prepare+0x2a6/0x2f0
[  210.820766][ T5485] Modules linked in:
[  210.853922][ T5485] CPU: 1 PID: 5485 Comm: syz.0.266 Not tainted syzkaller #0
[  210.884453][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  210.921585][ T5485] RIP: 0010:trace_rb_cpu_prepare+0x2a6/0x2f0
[  210.927652][ T5485] Code: 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4a 1e fd ff 48 c7 c7 40 2f 2f 8a 8b 74 24 04 e8 6a 98 39 08 <0f> 0b b8 f4 ff ff ff eb d3 e8 2c 1e fd ff 0f 0b e9 83 fd ff ff e8
[  211.017738][ T5485] RSP: 0018:ffffc90003257ac0 EFLAGS: 00010246
[  211.037266][ T5485] RAX: 6edcc886a9052000 RBX: ffff888060202c10 RCX: 0000000000080000
[  211.072055][ T5485] RDX: ffffc90003892000 RSI: 00000000000210c8 RDI: 00000000000210c9
[  211.080110][ T5485] RBP: ffff8880744b8078 R08: ffff8880b9133d7f R09: 1ffff110172267af
[  211.132735][ T5485] R10: dffffc0000000000 R11: ffffed10172267b0 R12: 0000000000000000
[  211.140916][ T5485] R13: ffff8880253cf988 R14: ffff8880253cf988 R15: ffff888060202cb0
[  211.221478][ T5485] FS:  00007fa1b6a456c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  211.239136][ T5485] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.259342][ T5485] CR2: 00007fbd91fcf2f8 CR3: 000000001f8d2000 CR4: 00000000003506f0
[  211.287508][ T5485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  211.314634][ T5485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  211.344321][ T5485] Call Trace:
[  211.356834][ T5485]  <TASK>
[  211.366595][ T5485]  ? rb_get_reader_page+0xcd0/0xcd0
[  211.381679][ T5485]  cpuhp_invoke_callback+0x481/0x7e0
[  211.387152][ T5485]  ? mutex_lock_io_nested+0x60/0x60
[  211.409165][ T5485]  ? rb_get_reader_page+0xcd0/0xcd0
[  211.446613][ T5485]  cpuhp_issue_call+0x3d3/0x760
[  211.453095][ T5485]  __cpuhp_state_add_instance_cpuslocked+0x24b/0x6c0
[  211.471712][ T5485]  ? cpus_read_lock+0xcb/0x150
[  211.486357][ T5485]  __cpuhp_state_add_instance+0x21/0x30
[  211.501412][ T5485]  __ring_buffer_alloc+0x2d2/0x540
[  211.524028][ T5485]  allocate_trace_buffers+0x70/0x2c0
[  211.529403][ T5485]  ? __raw_spin_lock_init+0x41/0x100
[  211.536245][ T5494] loop5: detected capacity change from 0 to 512
[  211.551426][ T5485]  trace_array_create+0x2ac/0xc00
[  211.556539][ T5485]  instance_mkdir+0xc8/0x120
[  211.561187][ T5485]  tracefs_syscall_mkdir+0xb7/0x110
[  211.587573][ T5485]  vfs_mkdir+0x386/0x570
[  211.592089][ T5485]  do_mkdirat+0x1dd/0x5c0
[  211.596472][ T5485]  ? vfs_mkdir+0x570/0x570
[  211.613497][ T5485]  __x64_sys_mkdirat+0x85/0x90
[  211.618357][ T5485]  do_syscall_64+0x4c/0xa0
[  211.634505][ T5485]  ? clear_bhb_loop+0x30/0x80
[  211.639282][ T5485]  ? clear_bhb_loop+0x30/0x80
[  211.654776][ T5485]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  211.665187][ T5485] RIP: 0033:0x7fa1b87ed159
[  211.669678][ T5485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.692970][ T5494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  211.737275][ T5494] EXT4-fs error (device loop5): ext4_init_orphan_info:621: comm syz.5.265: orphan file block 0: bad magic
[  211.751746][ T5485] RSP: 002b:00007fa1b6a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  211.760243][ T5485] RAX: ffffffffffffffda RBX: 00007fa1b8a74fa0 RCX: 00007fa1b87ed159
[  211.768624][ T5485] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  211.773861][ T5494] EXT4-fs (loop5): Remounting filesystem read-only
[  211.776700][ T5485] RBP: 00007fa1b888403b R08: 0000000000000000 R09: 0000000000000000
[  211.792432][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.800468][ T5485] R13: 00007fa1b8a75038 R14: 00007fa1b8a74fa0 R15: 00007ffe01fed2a8
[  211.809762][ T5485]  </TASK>
[  211.812903][ T5485] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  211.820218][ T5485] CPU: 1 PID: 5485 Comm: syz.0.266 Not tainted syzkaller #0
[  211.827538][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  211.837630][ T5485] Call Trace:
[  211.840949][ T5485]  <TASK>
[  211.843928][ T5485]  dump_stack_lvl+0x188/0x250
[  211.848746][ T5485]  ? show_regs_print_info+0x20/0x20
[  211.854023][ T5485]  ? load_image+0x410/0x410
[  211.858586][ T5485]  panic+0x2f8/0x850
[  211.862532][ T5485]  ? bpf_jit_dump+0xd0/0xd0
[  211.867092][ T5485]  ? trace_rb_cpu_prepare+0x2a6/0x2f0
[  211.872509][ T5485]  __warn+0x248/0x2b0
[  211.876538][ T5485]  ? trace_rb_cpu_prepare+0x2a6/0x2f0
[  211.881952][ T5485]  report_bug+0x1b9/0x2e0
[  211.886329][ T5485]  handle_bug+0x3a/0x70
[  211.890524][ T5485]  exc_invalid_op+0x16/0x40
[  211.895070][ T5485]  asm_exc_invalid_op+0x16/0x20
[  211.899967][ T5485] RIP: 0010:trace_rb_cpu_prepare+0x2a6/0x2f0
[  211.905530][ T5494] EXT4-fs (loop5): mount failed
[  211.906003][ T5485] Code: 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4a 1e fd ff 48 c7 c7 40 2f 2f 8a 8b 74 24 04 e8 6a 98 39 08 <0f> 0b b8 f4 ff ff ff eb d3 e8 2c 1e fd ff 0f 0b e9 83 fd ff ff e8
[  211.906025][ T5485] RSP: 0018:ffffc90003257ac0 EFLAGS: 00010246
[  211.936690][ T5485] RAX: 6edcc886a9052000 RBX: ffff888060202c10 RCX: 0000000000080000
[  211.944699][ T5485] RDX: ffffc90003892000 RSI: 00000000000210c8 RDI: 00000000000210c9
[  211.952710][ T5485] RBP: ffff8880744b8078 R08: ffff8880b9133d7f R09: 1ffff110172267af
[  211.960720][ T5485] R10: dffffc0000000000 R11: ffffed10172267b0 R12: 0000000000000000
[  211.968732][ T5485] R13: ffff8880253cf988 R14: ffff8880253cf988 R15: ffff888060202cb0
[  211.976774][ T5485]  ? rb_get_reader_page+0xcd0/0xcd0
[  211.982027][ T5485]  cpuhp_invoke_callback+0x481/0x7e0
[  211.987361][ T5485]  ? mutex_lock_io_nested+0x60/0x60
[  211.992607][ T5485]  ? rb_get_reader_page+0xcd0/0xcd0
[  211.997855][ T5485]  cpuhp_issue_call+0x3d3/0x760
[  212.002763][ T5485]  __cpuhp_state_add_instance_cpuslocked+0x24b/0x6c0
[  212.009480][ T5485]  ? cpus_read_lock+0xcb/0x150
[  212.014288][ T5485]  __cpuhp_state_add_instance+0x21/0x30
[  212.019906][ T5485]  __ring_buffer_alloc+0x2d2/0x540
[  212.025071][ T5485]  allocate_trace_buffers+0x70/0x2c0
[  212.030403][ T5485]  ? __raw_spin_lock_init+0x41/0x100
[  212.035764][ T5485]  trace_array_create+0x2ac/0xc00
[  212.040843][ T5485]  instance_mkdir+0xc8/0x120
[  212.045480][ T5485]  tracefs_syscall_mkdir+0xb7/0x110
[  212.050721][ T5485]  vfs_mkdir+0x386/0x570
[  212.055020][ T5485]  do_mkdirat+0x1dd/0x5c0
[  212.059396][ T5485]  ? vfs_mkdir+0x570/0x570
[  212.063865][ T5485]  __x64_sys_mkdirat+0x85/0x90
[  212.068675][ T5485]  do_syscall_64+0x4c/0xa0
[  212.073132][ T5485]  ? clear_bhb_loop+0x30/0x80
[  212.077851][ T5485]  ? clear_bhb_loop+0x30/0x80
[  212.082571][ T5485]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  212.088499][ T5485] RIP: 0033:0x7fa1b87ed159
[  212.092949][ T5485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.112589][ T5485] RSP: 002b:00007fa1b6a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  212.121046][ T5485] RAX: ffffffffffffffda RBX: 00007fa1b8a74fa0 RCX: 00007fa1b87ed159
[  212.129061][ T5485] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  212.137082][ T5485] RBP: 00007fa1b888403b R08: 0000000000000000 R09: 0000000000000000
[  212.145129][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.153143][ T5485] R13: 00007fa1b8a75038 R14: 00007fa1b8a74fa0 R15: 00007ffe01fed2a8
[  212.161188][ T5485]  </TASK>
[  212.164658][ T5485] Kernel Offset: disabled
[  212.169251][ T5485] Rebooting in 86400 seconds..