last executing test programs:

55.650821221s ago: executing program 2 (id=130):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810450, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000000780)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
fchdir(r0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x1304c24, 0x0)

54.765308082s ago: executing program 2 (id=137):
syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1016400, &(0x7f0000000680)=ANY=[], 0x1, 0xc5e, &(0x7f0000001a00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[], 0x31)

53.132213735s ago: executing program 2 (id=142):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="440004000000db"], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)={0x40, 0x12, 0x5, "3f34821a9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

50.289137695s ago: executing program 2 (id=156):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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")
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40)
io_setup(0x9, &(0x7f0000000300)=<r1=>0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}])
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000440)})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x90, 0x0)

49.168079666s ago: executing program 2 (id=162):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24040010)
syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x20000}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

48.13587302s ago: executing program 2 (id=165):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x40040)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)

47.056743667s ago: executing program 32 (id=165):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x40040)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)

5.17599792s ago: executing program 0 (id=287):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x5}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x1, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x2, 0x101, 0xa71, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x2, 0x10, 0xd, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x8, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x0, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x6, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0xb9b, 0x5, 0x1, 0x6, 0x80, 0x4, 0xc4, 0x8001, 0x5, 0xffff, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]})

4.581015969s ago: executing program 0 (id=288):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=t'])

4.379268155s ago: executing program 0 (id=291):
socket$unix(0x1, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
socket$inet_udp(0x2, 0x2, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x801)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0)

3.895717245s ago: executing program 4 (id=295):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x4000, &(0x7f0000000500)={[{@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nouid32}, {@discard}, {@data_err_abort}, {@mblk_io_submit}, {@nobarrier}, {@quota}]}, 0x2, 0xbc2, &(0x7f0000002a40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$usbfs(0x0, 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0xc8e}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)

3.735735157s ago: executing program 5 (id=297):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000009500000000000008000000000000000000000000c730ae2ff90b458e857caad2af01ddbe96b4122b2fdff8db5573211154657105cae785848f3128fd9462356a73b4dd001d7ab431"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.717996509s ago: executing program 3 (id=298):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)="82", 0x1}], 0x1}, 0x8890)
recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'gre0\x00', {}, 0x441})

3.448955271s ago: executing program 5 (id=299):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r5, 0x1b)
socket$nl_route(0x10, 0x3, 0x0)
inotify_init()

2.529170515s ago: executing program 4 (id=301):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=t'])

2.283748055s ago: executing program 5 (id=302):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x40000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x32}, 0x0, @in=@remote}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x17c}}, 0x0)

2.283027725s ago: executing program 4 (id=303):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x20004804)

2.272826616s ago: executing program 3 (id=304):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fadvise64(r0, 0x8, 0x8, 0x4)

2.141134337s ago: executing program 1 (id=305):
setreuid(0xffffffffffffffff, 0xee00)
r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x8)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)

2.061266943s ago: executing program 5 (id=306):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x80000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
fstat(0xffffffffffffffff, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f00000008c0)={[{@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@init_itable}, {@init_itable}, {@nobh}, {@data_err_abort}, {@oldalloc}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x542, &(0x7f0000000140)="$eJzs3c1vI2cZAPBnnHhJuinZAodSqWVFi3YrWGfT0Dbi0HYF4lYBWu5LlHijKE68ip12bVVVKg4ckRCilThx4oLEH4CE+iegSpXoHQECVbCFAwdgqhmP98MdZxOtHUfO7ydN/M47H8/z2rH9zodnAjizLkbEaxExExHPR8RiUV8phjjoDdl8n9x5az0bsinX/5FEUtRF5MW7zheLzfUeSrU63e21RqO+V4wvtXduLbU63StbO2ub9c367srK8kurL6++uHp1JO3M2vXKd/76i5/++ruv/P4bb/7pxt8vv50l/e1ietGOkfso/1vNnou7ZiNibxzBJmCmaE910okAAHAkWR//CxHx1bz/vxgzeW8uN9ilmzv57AAAAIBRSF9diP8mEWna37xPAQAAgCnzakQsRFKpFecCLESlUqv1zuH9UjxWaTRb7a/fbO7vbmTT8jM9Kze3GvWrxTm1F6KaZOPLefne+AsD4ysR8URE/HxxPh+vrTcbGxPe9wEAAABnxfmB7f9/H/S2/wEAAIApc2HSCQAAAABjV2z/zwzWJxPIBQAAABgPx/8BAABgqn3/9dezIe3f/3rjjc7+dvONKxv11nZtZ3+9tt7cu1XbbDY382v27TxsfY1m89Y3Y3f/9lK73movtTrdGzvN/d32jS33DwQAAIBJeeIr73+URMTBt+bzIXMuyn4MUHCuAEyNynFm/sv48gBO3rCveWD6zU46AWByDo6/yMVx5AFMzAOX+ijpFNx/8s4D+wz+ML6cAACA0br05fLj//md/iedHDBWxzr+D0wVx//h7Drm8f8PxpUHcPKqegBw5j3sVh+lF++YH3L8/1zZzGl66LoAAICxW8iHpFIrjgUuRKVSq0U8nv/Uv5rc3GrUr0bE5yPij4vVz2Xjy/mSidsDAgAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAADDVIip/S4r7f11afG5hcP/AueQ/i1Hc0uvNX15/9/biXHtvOav/59369nvX37291m7vvTCJPRgAAADAoP52ev64POlsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJg2n9x5a70/nGTcj6/F9+JCWfzZmMsf56IaEY/9K4nZ+5ZLImJmBPEP3omIJ8viJ1lacaHIYjB+JSLmRx+/em/K3fhPp2laGv/8COLDWfb+tYh4rez9X4mL+WP5+3+2GB7Vx9fyN3lp/P7n38yQz7/HjxjjqQ9/uzQ0/jsRT82Wf/714ydD4j9btsKSJ+VHP+x2P1PZW3mkv4q4VPr9kzwQa6m9c2up1ele2dpZ26xv1ndXVpZfWn159cXVq0s3txr14m9pG3/29O/+P1D1v7Qnb398Nv5PoveyHNr+57LCfZ/YkQ6GKYJ9ePvOF3vF6sAq8viXny1//Z88JH72P/G14nsgm36pXz7ole/3zG8+eKY0sSL+xpDn/2Gv/+VhKx3w/A9+/OcjzgoAnIBWp7u91mjU945UmD/OzJ3udppG9GveS9P0mIsrnGCh37sbW4i509LSU1DI+tanII1hhVHs2QIAAE6be53+Iy/y9lgTAgAAAAAAAAAAAAAAAAAAgDOo1YnK4dcDS9OIR7uc2GDMg8k0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUJ8GAAD//4gf0qc=")
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
sendto$inet(r3, &(0x7f0000000740)="322687d105", 0x5, 0x0, 0x0, 0x0)

1.996651079s ago: executing program 3 (id=307):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x5292002, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYBLOB=',time_offset=0x0000000000000005,errors=continue,errors=remount-ro,discard,allow_utime=00000000000000000000 11,subj_type=iocharset,\x00'], 0x5, 0x152f, &(0x7f00000044c0)="$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")
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
dup3(r1, r0, 0x0)

1.881089478s ago: executing program 1 (id=308):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

1.837146831s ago: executing program 0 (id=309):
syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1016400, &(0x7f0000000680)=ANY=[], 0x1, 0xc5e, &(0x7f0000001a00)="$eJzs3U9sHNd9B/DfGy7FpdxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZFpBlIRRzC8CVSKkLUyRBUq1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRhD0wBYBAhQIGMzsW3FFkYksUiIlfT629J2deW/mvZn1DC3ozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xjt/4mTaZkPfPjQGAHgoLo5/6cSp7Z7/AMBj6/JO//8PAAAAAAAAAAAAAAAcFCmKeDpSzF9cT5PV5476hXb/zVsTo2PbVxtMVc2+qnz5q37y1OkzX3hp5Gw3L7Rnf079vfapeGP88vnGq3M35hemFxenpxoTs+2rc1PT97yH3dbfarg6AY0bb96cunZtsXHqxdN3bL419OHAU0eHzo08f/y5btmJ0bGx8c0i9d7ytftuSMdOIzwORRHHI8UL3/phakVEEbs/F/WHe+23Gqw6MVx1YmJ0rOrITLs1u1RuvNQ9EUVEo6dSs3uOtr8WUet/qH3YWTNiuWx+2eDhsnvj862F1pWZ6cal1sJSe6k9N3spdVpb9qcRRZxNESsRsTZw9+76o4hapPjGkfV0Jb/1ozoPn68GBu/cjuIB9vEelO1s9EesFI/ANTvABqKI1yPFj987Flfzfaa613wu4vUyvxPxTpmvRKTyi3Em4oNtvkc8mmpRxF+W1//cepqq7gfd+8qFLzf+cPbaXE/Z7n3lIz4f7rpT7NPzYXBLPhwH/N5UjyJa1R1/Pd3/DzsAAAAAAAAAAAAAAAAA7LXBKOKTkeK1//jjalxxVOPSj5wb+f2hX+4dM/7sL9hPWfbFiFgu7m1M7qE8MPBSupTSPo8lfpLVo4g/zeP/vrbfjQEAAAAAAAAAAAAAAAAAAHiiFfGDSPHy+8fSSvTOKd6evd643Loy05kVtjv3b3fO9I2NjY1G6mQz52TO5ZwrOVdzruWMItcf6OyomT9P5lzOuZJzNedazujL9XM2c07mXM65knM151rOqOX6OZs5J3Mu51zJuZpzLWcckLl7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJ0UU8dNI8fU/WU+RIqIZMRmdXB3Y79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMS3I0XjD5q319UiIlX/dhwrfzsTzUNlfjyaI2W+Es3zOVtV1ppf24f2szv9qYjvR4qB+ru3L3i+/v2dT7e/BvHOVyMG8/Knap3s624c+nDgqaNHzo2MfebZnZbTdg0YvtCevXmrMTE6Njbes7qWj/7xnnVD+bjF3nSdiFh86+03WzMz0wv3s3CoWii/AvdV/ZFbSLV96OnAE3N6D95C1A5EM/an73eo79cNigeqfP5/ECl++/3/7D7wO8//evxS59PtJ3z85M82fxp4eeuO7vH5X9taLz//y2f6ds//p3vWvZx/GumvRdSXbsz3H42oL7719vH2jdb16evTs2dOnPjiyMgXT5/oPxRRv9aeme5Z2pPTBQAAAAAAAAAAAAAAAPDwpCJ+N1K0vr+eGhFxqxqvNXRu5Pnjz/VFXzXe6o5x22+MXz7feHXuxvzC9OLi9FRjYrZ9dW5q+l4PV6+Ge02Mjj2QzvxCgw+4/YP1V+fm31poX/+jpW23H66fv7K4dLV1dfvNMRhFRLN3zXDV4InRsarRM+3WbFX10raD6T+6/lTEf0WKq2ca6bN5XR7/v3WEfzX+v3vY5a072sPx/585vDn+72M9RctjplTETyLFb/3Vs/HZqp2H465zlsv9XaQYPvvpXC4OleW6bei8V6AzMrAs+7+R4p9+emfZ7njIpzfLnvxIJ/cRUF7/I5Hi23/xzfj1vO7O9z9sf/0Pb93RHl3/4W4b8tGf6Sl6+I73FexJ95945fU/Hileefrd+I1qzf//3Pd/dN+9caxTePP9HA/o/R+/2rNuKB/3N/eq8wAAAAAAAAAAAI+w/lTE30eK747V0kt53b38/b+prTt6QH//6xM966Z2O1/RPS7s+qQCAAAAwAHRn4r4QaS4vvTu7THUd47/7hn/+Tub4z9H05at1Z/z/Ur13oC9/PO/XkP5uJO77zYAAAAAAAAAAAAAAAAAAAAcKCkV8VKeT32yGs8/teN86quR4rUfvZDLpaNlue488EPV7/WLc7PHz8/MzNVjqXVlZroxPt+6Ol3WfSZSrP/tp3PdoppfvTvffGeO98252Bcixdg/dMt25mLvzk3+zGbZk2XZj0WK//7HO8vmqanz3NFV2VNl2b+JFF/5l96yfbfLHt0se7os+81I8b2vNLplD5f77b4f9RObZV+8Olc8gKsCAAAAAAAAAAAAAAAAAADAk6Y/FfHnkeJ/bqzcHsuf5//v7/lYeeerPfP9b3Grmud/qJr/f6fl+5n/v3qvwPJORwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdTiiLejhTzF9fT6kD5uaN+oV3ErYnRse2rDaaqZl9VvvxVP3nq9JkvvDRytpsX2rM3d66/1z4Zb4xfPt94de7G/ML04uL0VGNitn11bmr6nvew2/pbDVcnoHHjzZs/unZtsXHqxdN3bL419OHAU0eHzo08f/y5btmJ0bGx8Z4ytf77Pvpd0g7rD0URfx0pXvjWD9N3ByKK2P25qD/ca7/VYNWJ4aoTE6NjVUdm2q3ZpXLjpe6JKCIaPZWa3XP0EK7FrjQjlsvmlw0eLrs3Pt9aaF2ZmW5cai0stZfac7OXUqe1ZX8aUcTZFLESEWsDd++uP4p4M1J848h6+teBiL7uefj8xfEvnTi1czuKB9jHe1C2s9EfsVLsfM0O7WP7HhUDUcQ/R4ofv3cs/m0gohadX/G5iNfL/E7EO9G53qn8YpyJ+GCb7xGPploU8X/l9T+3nt4bKO8H3fvKhS+n5Yi5nrLd+8oj/3x4mA7486QeRXyvuuOvp3/33zUAAAAAAAAAAAAAAADAAVLEr0WKl98/ltaid0xxe/Z643LrykxnWF937F93zPTGxsZGI3WymXMy53LOlZyrOddyRpHr52yWWd/YmMyfl3Ou5FzNuZYz+nL9nM2ckzmXc67kXM25ljNquX7OZs7JnMs5V3Ku5lzLGQdk7B4AAAAAAAAAAAAAAAAAAPB4Kap/Uny9qCYDruaXnoxOrpoP9LH3swAAAP//ta7yzA==")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x31)

1.787656395s ago: executing program 4 (id=310):
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040000)
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x135)

1.518374207s ago: executing program 3 (id=311):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x8, 0x0, 0x0)

1.463260091s ago: executing program 5 (id=312):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)

1.443383633s ago: executing program 4 (id=313):
socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000180))

1.261024348s ago: executing program 1 (id=314):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=t'])

966.702972ms ago: executing program 5 (id=315):
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000480)={0x0, 0xffffffff, 0x80000007, 0xfffffff7}, 0x10)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
socket$packet(0x11, 0xa, 0x300)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

695.393544ms ago: executing program 4 (id=316):
r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x4007)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x2b, 0x800000000004}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x464380, 0x78d6fd44144b8169, 0x2}, 0x18)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040), 0x4)

577.083553ms ago: executing program 3 (id=317):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000041c0)=ANY=[@ANYBLOB="0100000000000000b2000040e4ce7f8817"])

541.231326ms ago: executing program 0 (id=318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40058}, 0x4000080)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

500.798159ms ago: executing program 1 (id=319):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r0 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

276.980248ms ago: executing program 1 (id=320):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18)
io_uring_setup(0x1ddd, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r0})

76.634404ms ago: executing program 1 (id=321):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file1\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x323, &(0x7f00000002c0)="$eJzs3E9rK1UYx/FfcpM0zeV2shBFQe5BN7oZ2rgXg9wLYsBLvRH/gDj3ZqIhY1IyoRIR27ty40J8ES5Kl90VtC/Abty5cuOuG8GFXYgjk5n8aZrYmiaNNd8PlDnNeZ6ZczJteM5Azsm733xar/p21WkrmTVKSNKplFdSPYn4mOy2Mxq2q5dv//7z82+/9/6bxVLp3qYx94sPXykYY9bufv/ZF6tx2OGKjvMfnvxW+PX46eNnT/56+EnNNzXfNJpt45hHzV/aziPPNZWaX7eNeeC5ju+aWsN3W1F/sCN5rql6za2tjnEalTu5rZbr+8ZpdEzd7Zh207RbHeN87NQaxrZtcyenSVYm9iyb8t7mplOcMvnxjAeDOWm1is4tSavnesp7CxkQAABYqLj+71f7ybCkn6b+T42t//dfOGrffudgLa7/DzNh/S8N1f8fDc7lmkqyX/9nJQ3q/2a0PphN/T9wviK62b4eujmJXSkI+r9mxsVfqf7HDRHW/7n4/7fryQf7690G9T8AAAAAAAAAAAAAAAAAAAAAADfBaRBYQRBY0fFW/GpgrUjKhq24f8HDxJycvf+DH+7/chhs3JFak7yvtsvb5egYBxxJ8uRqXZb+7P49xMJ2Ztd0g0worx+8nTh/Z7scfZYUq6p18zdkKT+aHwT33yjd2zCRs/lp5YbzC7L01Pj8wmh+Ojxm9NKLQ/m2LP30WE15qij6Zlwv/8sNY15/qzRy/dVuHAAAAAAA/we26euv34f3x7Tt8/3R+jjqj9bXKY1/PhCtr9fHru9Tei61qFkDAAAAALBc/M7ndcfz3NacGk8kzfkSExq9GV42q7dB7oSYhBKTumbQ6F18uvRwbDMbT/rsO/Zjbmxwcqqh3s38y5syttF7bDQpRg+mOXNgSVd9D5/59rs//jkmejImXeaErx5kL5jptI3MRTNNX9sHEAAAAIBrMyj6e6+8ttgBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAACwhEZ3/0pKmvX+doueIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf8XcAAAD//yu//wc=")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_setup(0x1, &(0x7f00000013c0)=<r0=>0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001400)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3, 0x10, &(0x7f0000000000)={0xfffffffc, 0x4000}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001880)=""/127, 0x7f}], 0x1, 0x6, 0x0)
preadv(r6, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x7e, 0xffffffff)

27.228608ms ago: executing program 3 (id=322):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x80000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
fstat(0xffffffffffffffff, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f00000008c0)={[{@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@init_itable}, {@init_itable}, {@nobh}, {@data_err_abort}, {@oldalloc}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x542, &(0x7f0000000140)="$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")
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
sendto$inet(r3, &(0x7f0000000740)="322687d105", 0x5, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=323):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts.
[   72.997505][ T4253] cgroup: Unknown subsys name 'net'
[   73.104752][ T4253] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.628972][ T4253] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   76.176249][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.184613][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.194499][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.203669][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.211816][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.219650][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.221222][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.227821][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.235657][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.241919][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.249681][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.258920][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.263340][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.270043][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.278141][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.284894][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.292558][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.299123][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.312549][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.313054][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.319891][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.327493][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.334393][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.341189][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.359327][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.360920][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.375286][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.383184][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.419230][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.437525][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.839306][ T4264] chnl_net:caif_netlink_parms(): no params data found
[   76.953041][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   76.982453][ T4263] chnl_net:caif_netlink_parms(): no params data found
[   77.016272][ T4269] chnl_net:caif_netlink_parms(): no params data found
[   77.086480][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.093764][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.103123][ T4264] device bridge_slave_0 entered promiscuous mode
[   77.117198][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.125800][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.134005][ T4264] device bridge_slave_1 entered promiscuous mode
[   77.150579][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   77.213043][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.220553][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.228796][ T4272] device bridge_slave_0 entered promiscuous mode
[   77.263356][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.270605][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.279249][ T4272] device bridge_slave_1 entered promiscuous mode
[   77.292416][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.330913][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.343513][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.351040][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.359335][ T4263] device bridge_slave_0 entered promiscuous mode
[   77.394194][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.401524][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.409614][ T4263] device bridge_slave_1 entered promiscuous mode
[   77.419259][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.458710][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.468281][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.475470][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.484002][ T4269] device bridge_slave_0 entered promiscuous mode
[   77.493111][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.500376][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.508446][ T4269] device bridge_slave_1 entered promiscuous mode
[   77.528019][ T4264] team0: Port device team_slave_0 added
[   77.567786][ T4264] team0: Port device team_slave_1 added
[   77.575434][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.595801][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.616643][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.634621][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.642054][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.650410][ T4277] device bridge_slave_0 entered promiscuous mode
[   77.659990][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.671789][ T4272] team0: Port device team_slave_0 added
[   77.693963][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.701529][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.709800][ T4277] device bridge_slave_1 entered promiscuous mode
[   77.726062][ T4272] team0: Port device team_slave_1 added
[   77.741694][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.748866][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.775121][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.813079][ T4269] team0: Port device team_slave_0 added
[   77.829189][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.836199][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.862582][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.885527][ T4263] team0: Port device team_slave_0 added
[   77.901548][ T4269] team0: Port device team_slave_1 added
[   77.913453][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.924359][ T4263] team0: Port device team_slave_1 added
[   77.931761][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.938914][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.965016][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.995068][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.018895][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.025882][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.052296][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.086178][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.093292][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.119599][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.141141][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.148172][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.174197][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.203781][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.211222][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.238563][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.258222][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.265222][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.291712][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.306243][ T4264] device hsr_slave_0 entered promiscuous mode
[   78.313888][ T4264] device hsr_slave_1 entered promiscuous mode
[   78.323583][ T4277] team0: Port device team_slave_0 added
[   78.356924][ T4277] team0: Port device team_slave_1 added
[   78.374488][ T4272] device hsr_slave_0 entered promiscuous mode
[   78.381532][ T4272] device hsr_slave_1 entered promiscuous mode
[   78.388988][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.396801][ T4272] Cannot create hsr debugfs directory
[   78.408241][ T4270] Bluetooth: hci1: command 0x0409 tx timeout
[   78.414572][ T4270] Bluetooth: hci4: command 0x0409 tx timeout
[   78.436630][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.443941][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.470186][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.487616][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[   78.487665][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[   78.493900][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[   78.534945][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.542212][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.568614][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.582803][ T4263] device hsr_slave_0 entered promiscuous mode
[   78.590182][ T4263] device hsr_slave_1 entered promiscuous mode
[   78.596879][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.604951][ T4263] Cannot create hsr debugfs directory
[   78.626328][ T4269] device hsr_slave_0 entered promiscuous mode
[   78.633517][ T4269] device hsr_slave_1 entered promiscuous mode
[   78.640793][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.648651][ T4269] Cannot create hsr debugfs directory
[   78.718985][ T4277] device hsr_slave_0 entered promiscuous mode
[   78.725761][ T4277] device hsr_slave_1 entered promiscuous mode
[   78.732774][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.740484][ T4277] Cannot create hsr debugfs directory
[   79.069812][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.082404][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.092523][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.103468][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.176511][ T4263] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.194831][ T4263] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.216266][ T4263] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.233928][ T4263] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.290644][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.314197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.323872][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.349144][ T4264] 8021q: adding VLAN 0 to HW filter on device team0
[   79.371895][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.390161][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.399878][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.410030][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.417437][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.428166][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.456124][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.465110][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.474808][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.483743][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.490868][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.499441][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.508216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.529753][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.553991][ T4269] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.569563][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.579790][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.591035][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.599917][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.611651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.621697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.631059][ T4269] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.646421][ T4269] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.675340][ T4269] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.696114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.704994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.733962][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.746397][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.756965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.765871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.791698][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.803458][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.816480][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.832414][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.854967][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.916781][ T4263] 8021q: adding VLAN 0 to HW filter on device team0
[   79.946352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.959317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.981672][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.995447][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.013291][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.020514][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.042814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.078268][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.088910][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.115706][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.122910][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.176985][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.206658][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.224793][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.239749][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.271310][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.279715][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.291586][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   80.302168][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.311794][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.321650][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.333611][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.341696][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.352338][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.363090][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.389949][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.399606][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.410658][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.420349][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.429422][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.436562][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.444634][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.454068][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.463273][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.472023][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.480913][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.489311][ T4270] Bluetooth: hci1: command 0x041b tx timeout
[   80.489320][ T4280] Bluetooth: hci4: command 0x041b tx timeout
[   80.497850][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.510455][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.517702][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.532148][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.550793][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   80.561361][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.569223][ T4280] Bluetooth: hci0: command 0x041b tx timeout
[   80.575297][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[   80.577972][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.588880][ T4281] Bluetooth: hci3: command 0x041b tx timeout
[   80.596795][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.615564][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.676189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.693597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.718637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.733552][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.740759][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.755620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.765731][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.780262][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.787569][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.801058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.812529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.852496][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   80.908786][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.922824][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.935356][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.951141][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.963869][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.975559][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.985625][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.995446][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.004875][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.013717][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.023061][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.036250][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.045322][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.065787][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.085466][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.140827][ T4269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.173934][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.198798][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.214293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.239338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.269178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.279727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.295665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.304646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.313570][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.322758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.332868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.341598][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.348765][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.358234][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.367019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.376902][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.384126][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.398803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.408814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.416733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.424887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.443052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.511980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.523708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.533747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.544690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.554118][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.563502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.589041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.596627][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.620403][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.653837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.670208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.689004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.711445][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.726793][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.756745][ T4264] device veth0_vlan entered promiscuous mode
[   81.770997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.783700][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.795442][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.808221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.856535][ T4264] device veth1_vlan entered promiscuous mode
[   81.885078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.898259][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.917775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.943914][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.957964][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.044533][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.069328][ T4263] device veth0_vlan entered promiscuous mode
[   82.100691][ T4264] device veth0_macvtap entered promiscuous mode
[   82.118488][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.132161][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.141387][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.151515][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.161799][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.170699][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.185370][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.201246][ T4263] device veth1_vlan entered promiscuous mode
[   82.226807][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.241085][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.252397][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.263712][ T4264] device veth1_macvtap entered promiscuous mode
[   82.286104][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.340878][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.355501][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.364462][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.377593][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.385173][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.400244][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.417941][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.432911][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.443337][ T4263] device veth0_macvtap entered promiscuous mode
[   82.454165][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.462936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.472123][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.485442][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.498466][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.507647][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.516372][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.526281][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.551655][ T4263] device veth1_macvtap entered promiscuous mode
[   82.558940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.567187][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.575425][ T4280] Bluetooth: hci4: command 0x040f tx timeout
[   82.577554][ T4270] Bluetooth: hci1: command 0x040f tx timeout
[   82.584623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.601773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.610825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.644663][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.652323][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[   82.655781][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.658388][ T4270] Bluetooth: hci0: command 0x040f tx timeout
[   82.658421][ T4270] Bluetooth: hci2: command 0x040f tx timeout
[   82.683978][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.743009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.752548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.772369][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.785464][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.799979][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.811229][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.821809][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.833953][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.880768][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.891066][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.901178][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.910504][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.919893][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.928944][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.943512][ T4272] device veth0_vlan entered promiscuous mode
[   82.956121][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.975652][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.981867][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.992492][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.001316][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.011571][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.020289][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.029351][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.037741][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.045624][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.054555][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.070547][ T4263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.082866][ T4263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.091917][ T4263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.100935][ T4263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.123788][ T4277] device veth0_vlan entered promiscuous mode
[   83.155875][ T4272] device veth1_vlan entered promiscuous mode
[   83.182182][ T4277] device veth1_vlan entered promiscuous mode
[   83.192712][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.201942][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.212299][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.221016][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.243809][ T4269] device veth0_vlan entered promiscuous mode
[   83.297871][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.305938][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.336871][ T4269] device veth1_vlan entered promiscuous mode
[   83.354792][ T4272] device veth0_macvtap entered promiscuous mode
[   83.372308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.381422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.389918][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.399521][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.411540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.426196][ T4272] device veth1_macvtap entered promiscuous mode
[   83.455407][ T4277] device veth0_macvtap entered promiscuous mode
[   83.490525][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.499432][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.508591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.519673][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.529597][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.545696][ T4277] device veth1_macvtap entered promiscuous mode
[   83.550057][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.564036][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.576575][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.587490][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.598317][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.609928][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.638877][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.669057][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.678174][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.686318][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.696140][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.705045][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.714013][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.741511][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.754232][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.764967][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.777724][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.790493][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.814735][ T4269] device veth0_macvtap entered promiscuous mode
[   83.824221][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.832783][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.842703][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.853514][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.859763][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.872094][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.876664][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.890855][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.899741][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.912888][ T4382] tipc: Started in network mode
[   83.918664][ T4382] tipc: Node identity d6e46f07029f, cluster identity 4711
[   83.925990][ T4382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.940326][ T4269] device veth1_macvtap entered promiscuous mode
[   83.953591][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.962057][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.971532][ T4383] device syzkaller0 entered promiscuous mode
[   83.990148][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.001913][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.013425][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.024898][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.034806][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.045701][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.059516][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.108513][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.118423][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.129554][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.140706][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.150877][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.163170][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.173397][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.186095][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.198545][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.217068][ T4382] tipc: Resetting bearer <eth:syzkaller0>
[   84.230821][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.242244][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.253204][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.265097][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.275503][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.286447][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.296711][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.308221][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.320788][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.333834][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.345012][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.355068][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.366461][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.377347][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.408953][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.419617][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.430625][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.442966][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.451307][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.460231][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.469882][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.483802][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.493780][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.502590][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.515747][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.525336][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.535351][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.544605][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.558520][ T4381] tipc: Resetting bearer <eth:syzkaller0>
[   84.580005][ T4381] tipc: Disabling bearer <eth:syzkaller0>
[   84.605446][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.614579][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.623912][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.647620][ T4280] Bluetooth: hci1: command 0x0419 tx timeout
[   84.647813][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.653691][ T4280] Bluetooth: hci4: command 0x0419 tx timeout
[   84.727446][ T4270] Bluetooth: hci2: command 0x0419 tx timeout
[   84.727484][ T4280] Bluetooth: hci0: command 0x0419 tx timeout
[   84.733498][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[   84.855203][ T4390] snd_dummy snd_dummy.0: control 0:22834:4095:syz1:65536 is already present
[   84.970044][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.985030][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.008034][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.021312][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.045645][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.058303][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.076278][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.100348][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.111653][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.126918][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.130140][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.175453][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.205390][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.224763][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.238262][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.263040][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.318947][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.366123][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.616505][ T4405] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4'.
[   85.783545][ T4391] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   86.032925][ T4414] loop4: detected capacity change from 0 to 256
[   86.096174][ T4391] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   86.226390][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   86.235444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.239143][ T4412] netlink: 'syz.3.11': attribute type 16 has an invalid length.
[   86.243756][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   86.251430][ T4412] netlink: 'syz.3.11': attribute type 17 has an invalid length.
[   86.259657][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   86.275519][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.275664][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.282792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   86.287291][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   86.294260][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.298458][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   86.307287][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   86.314305][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.322261][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   86.327099][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   87.357194][ T4391] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   87.365031][  T127] cfg80211: failed to load regulatory.db
[   87.369515][ T4391] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   87.369566][ T4391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.388036][ T4401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   87.453365][ T4414] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d)
[   88.117659][ T4425] loop2: detected capacity change from 0 to 256
[   88.149855][ T4429] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.16' sets config #0
[   88.372241][ T4265] usb 1-1: USB disconnect, device number 2
[   88.806799][ T4443] loop1: detected capacity change from 0 to 512
[   88.825608][ T4442] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.852282][ T4441] loop4: detected capacity change from 0 to 512
[   88.858376][ T4443] =======================================================
[   88.858376][ T4443] WARNING: The mand mount option has been deprecated and
[   88.858376][ T4443]          and is ignored by this kernel. Remove the mand
[   88.858376][ T4443]          option from the mount to silence this warning.
[   88.858376][ T4443] =======================================================
[   88.920602][ T4441] EXT4-fs: Ignoring removed nobh option
[   88.926258][ T4441] EXT4-fs: Ignoring removed oldalloc option
[   89.007731][ T4441] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   89.057815][ T4441] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[   90.151517][ T4270] Bluetooth: Unknown BR/EDR signaling command 0x00
[   90.158964][ T4270] Bluetooth: Wrong link type (-22)
[   90.183511][ T4467] loop0: detected capacity change from 0 to 256
[   90.492017][ T4471] 9pnet_fd: Insufficient options for proto=fd
[   91.416444][ T4481] loop4: detected capacity change from 0 to 512
[   91.494581][ T4481] EXT4-fs: Ignoring removed nobh option
[   91.529319][ T4481] EXT4-fs: Ignoring removed oldalloc option
[   91.558433][ T4481] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   91.577548][ T4481] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[   93.703549][ T4504] loop4: detected capacity change from 0 to 256
[   93.770298][ T4507] 9pnet_fd: Insufficient options for proto=fd
[   93.789528][ T4508] netlink: 'syz.0.45': attribute type 10 has an invalid length.
[   93.813907][ T4508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'.
[   94.037464][ T4508] team0: Port device geneve0 added
[   94.263475][ T4511] loop3: detected capacity change from 0 to 32768
[   94.385684][ T4511] XFS (loop3): Mounting V5 Filesystem
[   94.463926][ T4511] XFS (loop3): Ending clean mount
[   94.484466][ T4511] XFS (loop3): Quotacheck needed: Please wait.
[   94.593197][ T4511] XFS (loop3): Quotacheck: Done.
[   94.692376][ T4530] loop4: detected capacity change from 0 to 512
[   94.754060][ T4269] XFS (loop3): Unmounting Filesystem
[   94.762111][ T4530] EXT4-fs: Ignoring removed nobh option
[   94.809698][ T4530] EXT4-fs: Ignoring removed oldalloc option
[   94.863023][ T4530] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   94.888923][ T4530] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[   95.081045][ T4532] loop0: detected capacity change from 0 to 32768
[   95.098577][ T4532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.53 (4532)
[   95.122862][ T4532] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.137438][ T4532] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   95.146259][ T4532] BTRFS info (device loop0): enabling disk space caching
[   95.153576][ T4532] BTRFS info (device loop0): setting nodatasum
[   95.159825][ T4532] BTRFS info (device loop0): turning off barriers
[   95.166642][ T4532] BTRFS info (device loop0): turning on flush-on-commit
[   95.173723][ T4532] BTRFS info (device loop0): doing ref verification
[   95.180590][ T4532] BTRFS info (device loop0): force clearing of disk cache
[   95.187804][ T4532] BTRFS info (device loop0): enabling ssd optimizations
[   95.195040][ T4532] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   95.204642][ T4532] BTRFS info (device loop0): use lzo compression, level 0
[   95.211876][ T4532] BTRFS info (device loop0): disk space caching is enabled
[   96.300214][ T4532] BTRFS info (device loop0): rebuilding free space tree
[   96.337003][ T4532] BTRFS info (device loop0): disabling free space tree
[   96.344313][ T4532] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   96.354259][ T4532] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   96.759232][ T4571] 9pnet_fd: Insufficient options for proto=fd
[   96.814569][ T4572] loop4: detected capacity change from 0 to 512
[   96.883031][ T4277] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.923883][ T4572] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   96.975946][ T4572] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   97.016920][ T4572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   97.118989][ T4572] System zones: 0-2, 18-18, 34-34
[   97.164395][ T4572] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.59: iget: bad i_size value: 360287970189639680
[   97.192660][ T4572] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.59: couldn't read orphan inode 15 (err -117)
[   97.217986][ T4572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   97.303095][ T4270] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[   97.433271][ T4589] Zero length message leads to an empty skb
[   97.440215][ T4264] EXT4-fs (loop4): unmounting filesystem.
[   97.790326][ T4594] loop0: detected capacity change from 0 to 2048
[   97.887022][ T4594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   99.468749][ T4594] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.65: inline data xattr refers to an external xattr inode
[   99.774962][ T4277] EXT4-fs (loop0): unmounting filesystem.
[   99.907471][ T4614] loop3: detected capacity change from 0 to 8
[   99.931241][ T4612] loop4: detected capacity change from 0 to 2048
[   99.961760][ T4616] loop1: detected capacity change from 0 to 1024
[  100.208339][ T4616] EXT4-fs: inline encryption not supported
[  100.214365][ T4616] EXT4-fs: Ignoring removed bh option
[  100.932443][ T4614] SQUASHFS error: xz decompression failed, data probably corrupt
[  100.939233][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  101.081715][ T4614] SQUASHFS error: Failed to read block 0x108: -5
[  101.141724][ T4614] SQUASHFS error: Unable to read metadata cache entry [106]
[  101.197298][ T4614] SQUASHFS error: Unable to read inode 0x101f
[  101.546992][ T4263] EXT4-fs (loop1): unmounting filesystem.
[  101.963947][ T4644] loop4: detected capacity change from 0 to 2048
[  102.100562][ T4644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  102.150943][ T4648] loop2: detected capacity change from 0 to 2048
[  102.267990][ T4652] loop3: detected capacity change from 0 to 256
[  102.280197][ T4652] exfat: Deprecated parameter 'namecase'
[  102.286052][ T4652] exfat: Deprecated parameter 'namecase'
[  102.292757][ T4644] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.83: inline data xattr refers to an external xattr inode
[  102.538591][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.757379][   T27] usb 2-1: Using ep0 maxpacket: 8
[  102.856870][   T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  103.103610][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.114494][ T4652] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  103.171536][   T27] pvrusb2: Hardware description: Terratec Grabster AV400
[  103.190158][   T27] pvrusb2: **********
[  103.209654][   T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  103.229657][   T27] pvrusb2: Important functionality might not be entirely working.
[  103.252698][   T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  103.286265][   T27] pvrusb2: **********
[  103.357654][ T4264] EXT4-fs (loop4): unmounting filesystem.
[  103.360221][ T4659] loop2: detected capacity change from 0 to 4096
[  103.373859][ T2309] pvrusb2: Invalid write control endpoint
[  103.504061][ T4659] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  103.588909][ T4654] pvrusb2: Invalid write control endpoint
[  103.620055][   T27] usb 2-1: USB disconnect, device number 2
[  103.634760][ T4659] ntfs3: loop2: MFT: r=18, expect seq=1 instead of 0!
[  103.656568][ T4659] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  103.716440][ T2309] pvrusb2: Invalid write control endpoint
[  103.736923][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  103.756471][ T4269] exFAT-fs (loop3): invalid start cluster (4278190088)
[  103.775454][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  103.802795][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  103.850993][ T2309] pvrusb2: Device being rendered inoperable
[  103.874153][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  103.892381][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  103.929687][ T2309] pvrusb2: Attached sub-driver cx25840
[  103.944575][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  103.984949][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  104.339762][ T4671] loop3: detected capacity change from 0 to 4096
[  104.392192][ T4671] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  104.774076][   T26] audit: type=1800 audit(1755882746.678:2): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.90" name="file1" dev="loop3" ino=33 res=0 errno=0
[  104.849959][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.053816][ T4690] loop4: detected capacity change from 0 to 2048
[  106.046124][ T4695] loop1: detected capacity change from 0 to 256
[  106.088437][ T4695] exfat: Deprecated parameter 'namecase'
[  106.109419][ T4695] exfat: Deprecated parameter 'namecase'
[  106.216404][ T4695] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  106.570321][ T4707] input: syz1 as /devices/virtual/input/input5
[  106.666093][ T4263] exFAT-fs (loop1): invalid start cluster (4278190088)
[  107.912925][ T4726] netlink: 'syz.0.108': attribute type 16 has an invalid length.
[  107.920793][ T4726] netlink: 'syz.0.108': attribute type 17 has an invalid length.
[  107.940247][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  107.947809][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  107.958747][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.966425][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.909224][ T4730] loop2: detected capacity change from 0 to 2048
[  109.818810][ T4731] loop1: detected capacity change from 0 to 2048
[  109.957744][ T4731]  loop1: p1 < > p3
[  110.006651][ T4731] loop1: p3 size 134217728 extends beyond EOD, truncated
[  110.095227][ T3637]  loop1: p1 < > p3
[  110.126187][ T4742] loop4: detected capacity change from 0 to 256
[  110.147618][ T3637] loop1: p3 size 134217728 extends beyond EOD, truncated
[  110.168846][ T4742] exfat: Deprecated parameter 'namecase'
[  110.174577][ T4742] exfat: Deprecated parameter 'namecase'
[  110.282922][ T4742] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  110.578301][ T4746] overlayfs: failed to resolve './bus': -2
[  110.615791][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  110.641469][ T4427] udevd[4427]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  110.685405][ T4264] exFAT-fs (loop4): invalid start cluster (4278190088)
[  110.713087][ T4427] udevd[4427]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  110.731722][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  111.170592][ T4755] input: syz1 as /devices/virtual/input/input6
[  111.826716][ T4767] loop4: detected capacity change from 0 to 2048
[  112.913657][ T4776] loop4: detected capacity change from 0 to 2048
[  113.029178][ T4776] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  113.107670][ T4776] EXT4-fs (loop4): shut down requested (2)
[  113.345507][ T4264] EXT4-fs (loop4): unmounting filesystem.
[  113.444262][ T4792] overlayfs: failed to resolve './bus': -2
[  113.506682][ T4794] loop2: detected capacity change from 0 to 256
[  113.543650][ T4794] exfat: Deprecated parameter 'namecase'
[  113.593338][ T4794] exfat: Deprecated parameter 'namecase'
[  113.714202][ T4794] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  114.032993][ T4807] input: syz1 as /devices/virtual/input/input7
[  114.479154][ T4272] exFAT-fs (loop2): invalid start cluster (4278190088)
[  114.924464][ T4815] loop2: detected capacity change from 0 to 2048
[  114.966232][ T4818] 9pnet_fd: Insufficient options for proto=fd
[  114.981409][ T4819] loop4: detected capacity change from 0 to 8
[  115.064516][ T4819] SQUASHFS error: xz decompression failed, data probably corrupt
[  115.092608][ T4819] SQUASHFS error: Failed to read block 0x108: -5
[  115.184919][ T4819] SQUASHFS error: Unable to read metadata cache entry [106]
[  115.192522][ T4819] SQUASHFS error: Unable to read inode 0x11f
[  115.810001][ T4826] tipc: Started in network mode
[  115.814970][ T4826] tipc: Node identity bad27f83a3b, cluster identity 4711
[  115.894161][ T4826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.965019][ T4831] device syzkaller0 entered promiscuous mode
[  116.063296][ T4826] tipc: Resetting bearer <eth:syzkaller0>
[  116.121753][ T4825] tipc: Resetting bearer <eth:syzkaller0>
[  116.187373][ T4391] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  116.252749][ T4825] tipc: Disabling bearer <eth:syzkaller0>
[  116.397310][ T4391] usb 3-1: Using ep0 maxpacket: 32
[  116.404398][ T4391] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  116.437828][ T4391] usb 3-1: config 0 has no interface number 0
[  116.464373][ T4391] usb 3-1: config 0 interface 184 has no altsetting 0
[  116.488637][ T4391] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  116.517324][ T4391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.534203][ T4840] overlayfs: failed to resolve './bus': -2
[  116.535946][ T4391] usb 3-1: Product: syz
[  116.544392][ T4391] usb 3-1: Manufacturer: syz
[  116.556094][ T4821] loop0: detected capacity change from 0 to 32768
[  116.562782][ T4391] usb 3-1: SerialNumber: syz
[  116.574814][ T4391] usb 3-1: config 0 descriptor??
[  116.592278][ T4821] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.140 (4821)
[  116.622595][ T4391] smsc75xx v1.0.0
[  116.667131][ T4821] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.706802][ T4821] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  116.749617][ T4821] BTRFS info (device loop0): using free space tree
[  117.071761][ T4856] input: syz1 as /devices/virtual/input/input8
[  117.148311][ T4821] BTRFS info (device loop0): enabling ssd optimizations
[  117.263796][ T4277] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.275155][ T4391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  117.297282][ T4391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  117.559889][ T4877] loop3: detected capacity change from 0 to 2048
[  117.755242][ T4391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  117.777424][ T4391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  117.787791][ T4391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  117.997638][ T4884] netlink: 36 bytes leftover after parsing attributes in process `syz.4.153'.
[  118.520004][ T4391] smsc75xx: probe of 3-1:0.184 failed with error -71
[  118.529936][ T4391] usb 3-1: USB disconnect, device number 2
[  118.671475][ T4886] loop1: detected capacity change from 0 to 32768
[  118.686385][ T4886] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.154 (4886)
[  118.715963][ T4886] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.726343][ T4886] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  118.735098][ T4886] BTRFS info (device loop1): using free space tree
[  118.834837][ T4427] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 10 scanned by udevd (4427)
[  118.843866][ T4892] loop2: detected capacity change from 0 to 8192
[  118.861247][ T4892] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.916950][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'.
[  119.152004][ T4886] BTRFS info (device loop1): enabling ssd optimizations
[  119.318455][ T4914] loop2: detected capacity change from 8192 to 0
[  119.329192][    C1] I/O error, dev loop2, sector 7216 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  119.350971][ T4657] loop: Write error at byte offset 9223372036854776319, length 512.
[  119.367243][    C1] I/O error, dev loop2, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  119.376812][    C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  119.392464][ T4263] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.439593][    C1] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.451326][ T4892] FAT-fs (loop2): FAT read failed (blocknr 1)
[  119.471005][    C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.480889][ T4892] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050)
[  119.531044][    C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.540580][ T4657] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050)
[  119.639634][ T4257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4257)
[  119.744590][    C0] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.763305][ T4272] FAT-fs (loop2): Directory bread(block 65) failed
[  119.787619][    C0] I/O error, dev loop2, sector 66 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.797197][ T4272] FAT-fs (loop2): Directory bread(block 66) failed
[  119.822947][    C0] I/O error, dev loop2, sector 67 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.832464][ T4272] FAT-fs (loop2): Directory bread(block 67) failed
[  119.852842][    C0] I/O error, dev loop2, sector 68 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.862816][ T4272] FAT-fs (loop2): Directory bread(block 68) failed
[  119.877397][    C0] I/O error, dev loop2, sector 69 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.893883][ T4272] FAT-fs (loop2): Directory bread(block 69) failed
[  119.913958][ T4272] FAT-fs (loop2): Directory bread(block 70) failed
[  119.933768][ T4272] FAT-fs (loop2): Directory bread(block 71) failed
[  120.060309][ T4272] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050)
[  120.093513][ T4272] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050)
[  120.127677][ T4272] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[  120.914935][   T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.032916][ T4921] loop1: detected capacity change from 0 to 32768
[  121.365759][   T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.947888][ T4921] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.991045][   T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.997810][ T4921] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  122.041773][ T4921] BTRFS info (device loop1): using free space tree
[  122.097822][ T4930] input: syz1 as /devices/virtual/input/input9
[  122.200502][   T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.383971][ T4921] BTRFS info (device loop1): enabling ssd optimizations
[  122.551828][ T4263] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.963397][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.973676][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.984736][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.993992][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.089114][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  124.096708][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.258996][ T4974] loop3: detected capacity change from 0 to 4096
[  124.265658][ T4255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4255)
[  124.372481][ T4974] NILFS (loop3): invalid segment: Checksum error in segment payload
[  124.410617][ T4974] NILFS (loop3): trying rollback from an earlier position
[  124.527171][ T4974] NILFS (loop3): recovery complete
[  124.607287][ T4979] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.362185][ T4969] chnl_net:caif_netlink_parms(): no params data found
[  125.535333][ T4281] Bluetooth: Wrong link type (-22)
[  125.541014][ T4281] Bluetooth: hci2: link tx timeout
[  125.547492][ T4281] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.228992][ T4281] Bluetooth: hci3: command 0x0409 tx timeout
[  126.820925][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.838254][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.846647][ T4969] device bridge_slave_0 entered promiscuous mode
[  126.933608][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.942223][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.960347][ T4969] device bridge_slave_1 entered promiscuous mode
[  127.096789][ T5012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.401056][ T5012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.548603][ T5012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.582263][ T4969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.607497][ T4270] Bluetooth: hci2: command 0x0406 tx timeout
[  127.663635][ T5017] loop4: detected capacity change from 0 to 32768
[  127.687905][ T5017] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  127.822494][ T4969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.043281][ T5012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.056213][ T4255] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  128.102292][   T41] device hsr_slave_0 left promiscuous mode
[  128.130526][   T41] device hsr_slave_1 left promiscuous mode
[  128.168065][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.175615][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.211764][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.240020][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.247576][ T4270] Bluetooth: hci3: command 0x041b tx timeout
[  128.284610][   T41] device bridge_slave_1 left promiscuous mode
[  128.316123][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.337548][ T4579] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.371806][   T41] device bridge_slave_0 left promiscuous mode
[  128.381347][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.511779][   T41] device veth1_macvtap left promiscuous mode
[  128.527591][ T4579] usb 5-1: Using ep0 maxpacket: 8
[  128.528471][   T41] device veth0_macvtap left promiscuous mode
[  128.542018][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.546315][   T41] device veth1_vlan left promiscuous mode
[  128.579604][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.594151][   T41] device veth0_vlan left promiscuous mode
[  128.617418][ T4579] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  128.627054][ T4579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.691394][ T4579] usb 5-1: config 0 descriptor??
[  128.983536][ T5038] loop1: detected capacity change from 0 to 512
[  129.112954][ T4579] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0
[  129.145798][ T4579] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0
[  129.213920][ T4579] pantherlord 0003:0810:0001.0001: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.4-1/input0
[  129.280979][ T4579] pantherlord 0003:0810:0001.0001: no output reports found
[  129.369011][ T4579] usb 5-1: USB disconnect, device number 2
[  129.685206][ T5038] EXT4-fs (loop1): Test dummy encryption mode enabled
[  129.700859][ T5038] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  130.102519][ T5048] input: syz1 as /devices/virtual/input/input10
[  130.119911][ T5038] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  130.126309][ T5043] fido_id[5043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  130.188414][ T5038] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.184: bad orphan inode 131083
[  130.200331][ T5038] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  130.347628][ T4281] Bluetooth: hci3: command 0x040f tx timeout
[  130.595827][ T5055] loop4: detected capacity change from 0 to 40427
[  130.619337][ T5055] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff
[  130.697422][ T4255] blk_print_req_error: 4 callbacks suppressed
[  130.697439][ T4255] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  130.812107][ T5055] loop4: detected capacity change from 0 to 16
[  130.819151][ T5055] erofs: Unknown parameter 'f2fs'
[  131.015200][ T5038] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  131.138010][ T5038] overlayfs: upper fs needs to support d_type.
[  131.310139][ T5038] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  131.363137][ T5038] overlayfs: upper fs does not support tmpfile.
[  131.422994][ T5038] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  131.674202][ T4263] EXT4-fs (loop1): unmounting filesystem.
[  131.713298][   T41] team0 (unregistering): Port device team_slave_1 removed
[  131.854888][   T41] team0 (unregistering): Port device team_slave_0 removed
[  131.941480][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.970550][ T5073] loop4: detected capacity change from 0 to 32768
[  131.993890][ T5073] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  132.069272][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.107784][   T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  132.254960][ T4255] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  132.297383][   T22] usb 2-1: Using ep0 maxpacket: 16
[  132.306803][   T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.330206][   T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.356595][   T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.379735][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.409164][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[  132.428875][   T22] usb 2-1: Product: syz
[  132.433580][   T22] usb 2-1: Manufacturer: syz
[  133.168839][   T22] usb 2-1: SerialNumber: syz
[  133.391809][   T22] usb 2-1: 0:2 : does not exist
[  133.420349][   T22] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  133.427291][    C0] sched: RT throttling activated
[  133.434195][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.441067][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.543194][   T22] usb 2-1: USB disconnect, device number 3
[  133.819292][ T4255] udevd[4255]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.236009][   T41] bond0 (unregistering): Released all slaves
[  134.542689][ T4969] team0: Port device team_slave_0 added
[  134.623713][ T4969] team0: Port device team_slave_1 added
[  134.740208][ T4969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.772684][ T4969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.863689][ T4969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.877657][ T4969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.884662][ T4969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.954387][ T4969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.349354][ T5104] input: syz1 as /devices/virtual/input/input11
[  135.419647][ T5012] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.456720][ T5012] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.545209][ T5012] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.673223][ T5012] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.829150][ T4969] device hsr_slave_0 entered promiscuous mode
[  135.850972][ T4969] device hsr_slave_1 entered promiscuous mode
[  135.914301][ T4969] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.926233][ T4969] Cannot create hsr debugfs directory
[  136.194183][ T5129] loop1: detected capacity change from 0 to 512
[  136.218234][ T5128] loop3: detected capacity change from 0 to 1024
[  136.296249][ T5128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  136.323732][ T5129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  136.380168][ T5129] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.400508][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  136.526499][ T4969] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  136.547840][   T26] audit: type=1800 audit(1755882778.458:3): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.203" name="file1" dev="loop1" ino=18 res=0 errno=0
[  136.618107][ T4969] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  136.650035][ T4969] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  136.693440][ T4969] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  136.741739][ T4263] EXT4-fs (loop1): unmounting filesystem.
[  136.924756][ T4969] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.954542][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.129075][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.336251][ T4969] 8021q: adding VLAN 0 to HW filter on device team0
[  137.652473][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.788174][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.838991][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.846150][ T4556] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.875071][ T5122] loop0: detected capacity change from 0 to 32768
[  137.932179][ T5122] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  138.037039][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  138.143168][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  138.205163][ T5167] input: syz1 as /devices/virtual/input/input12
[  138.249994][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.414369][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.421636][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.819396][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.312223][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.397970][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'.
[  140.419329][ T5171] netlink: 'syz.1.210': attribute type 16 has an invalid length.
[  140.427134][ T5171] netlink: 'syz.1.210': attribute type 17 has an invalid length.
[  140.439982][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  140.447444][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  140.457052][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.464661][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.565326][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  140.629942][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  140.656539][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.689440][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.746145][ T4255] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  140.752479][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.809839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.838629][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.862885][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.896541][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.924713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.533262][ T5206] input: syz1 as /devices/virtual/input/input13
[  143.687915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.695552][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.743106][ T4969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.136239][ T5203] loop0: detected capacity change from 0 to 32768
[  144.205929][ T5203] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  144.604841][ T5232] netlink: 'syz.3.224': attribute type 16 has an invalid length.
[  144.626456][ T5232] netlink: 'syz.3.224': attribute type 17 has an invalid length.
[  144.641662][ T4255] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  144.798851][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  145.031232][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.039112][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.115069][ T5255] input: syz1 as /devices/virtual/input/input14
[  145.347428][ T4377] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  146.027310][ T4377] usb 5-1: Using ep0 maxpacket: 16
[  146.034493][ T4377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.072395][ T4377] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.156519][ T4377] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.197352][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.205392][ T4377] usb 5-1: Product: syz
[  146.226117][ T4377] usb 5-1: Manufacturer: syz
[  146.236289][ T4377] usb 5-1: SerialNumber: syz
[  146.475244][ T4377] usb 5-1: 0:2 : does not exist
[  146.487644][ T4377] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  146.559591][ T4377] usb 5-1: USB disconnect, device number 3
[  146.578297][ T5265] process 'syz.1.235' launched './file0' with NULL argv: empty string added
[  146.616930][ T4255] udevd[4255]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.635974][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.655134][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.735516][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.754560][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.809057][ T4969] device veth0_vlan entered promiscuous mode
[  148.827818][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.871617][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.929782][ T4969] device veth1_vlan entered promiscuous mode
[  150.497367][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  150.505733][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  150.608014][ T4969] device veth0_macvtap entered promiscuous mode
[  150.648891][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  150.671311][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.725378][ T4969] device veth1_macvtap entered promiscuous mode
[  150.750835][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  150.776739][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  150.837151][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.887464][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.947415][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.987291][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.032649][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.087365][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.127460][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.167326][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.225381][ T5283] loop0: detected capacity change from 0 to 32768
[  151.258916][ T5283] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  151.273532][ T4969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.298600][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.338603][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.413616][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.497444][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.547416][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.622977][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.667963][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.713789][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.747257][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.787249][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.838961][ T4969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.866625][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.899357][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.916295][ T4255] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  151.958464][ T4969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.984682][ T4969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.027271][ T4969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.037907][ T4969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.323769][ T4935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.363330][ T4935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.413924][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.451377][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.536342][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.594083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.852998][ T5323] loop3: detected capacity change from 0 to 1024
[  152.869168][ T5323] EXT4-fs: Ignoring removed bh option
[  152.897396][   T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  153.004297][ T5323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  154.017314][   T27] usb 5-1: Using ep0 maxpacket: 16
[  154.051722][   T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.101602][ T5323] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2748: inode #15: comm syz.3.249: corrupted in-inode xattr
[  154.112984][   T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  154.156262][   T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  154.186535][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.219885][   T27] usb 5-1: Product: syz
[  154.235491][   T27] usb 5-1: Manufacturer: syz
[  154.268441][   T27] usb 5-1: SerialNumber: syz
[  154.277343][ T5323] EXT4-fs (loop3): Remounting filesystem read-only
[  154.283927][ T5323] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  154.428619][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  154.473156][ T5350] loop1: detected capacity change from 0 to 256
[  154.500943][   T27] usb 5-1: 0:2 : does not exist
[  154.534047][   T27] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  154.576670][ T4257] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  154.591695][ T5350] qrtr: Invalid version 0
[  154.604529][   T27] usb 5-1: USB disconnect, device number 4
[  154.674428][ T4270] Bluetooth: Wrong link type (-22)
[  154.680677][ T4270] Bluetooth: hci2: link tx timeout
[  154.685813][ T4270] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  154.694143][ T4270] Bluetooth: hci2: link tx timeout
[  154.699430][ T4270] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  154.927136][ T4255] udevd[4255]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.320817][ T5360] loop3: detected capacity change from 0 to 40427
[  155.331437][ T5360] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  155.340742][ T5360] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  155.353852][ T5360] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  155.362111][ T5360] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  155.416291][ T5360] F2FS-fs (loop3): invalid crc value
[  155.576651][ T5360] F2FS-fs (loop3): Found nat_bits in checkpoint
[  155.635350][ T5360] F2FS-fs (loop3): Start checkpoint disabled!
[  155.638697][ T5364] loop1: detected capacity change from 0 to 32768
[  155.654141][ T5364] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.260 (5364)
[  155.691463][ T5360] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  155.699105][ T5360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  155.722132][ T5364] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  155.732414][ T5364] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  155.741957][ T5364] BTRFS info (device loop1): using free space tree
[  156.785524][ T4270] Bluetooth: hci2: command 0x0406 tx timeout
[  157.006716][ T5364] BTRFS info (device loop1): enabling ssd optimizations
[  157.058667][ T5396] loop5: detected capacity change from 0 to 4096
[  157.087918][ T5396] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.122855][ T5396] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  157.392023][ T4263] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  157.437125][ T5406] loop3: detected capacity change from 0 to 256
[  157.986385][ T5406] qrtr: Invalid version 0
[  158.388224][ T4270] Bluetooth: Wrong link type (-22)
[  159.129710][ T5436] 9pnet_fd: Insufficient options for proto=fd
[  160.713150][ T5456] loop5: detected capacity change from 0 to 256
[  160.734275][ T5455] loop0: detected capacity change from 0 to 512
[  160.741889][ T5457] loop3: detected capacity change from 0 to 4096
[  160.745431][ T5451] loop1: detected capacity change from 0 to 4096
[  160.769238][ T5451] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.784788][ T5455] EXT4-fs: Ignoring removed nobh option
[  160.791108][ T5455] EXT4-fs: Ignoring removed oldalloc option
[  160.798417][ T5451] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  160.813831][ T5457] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.849078][ T5457] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  160.994266][ T5455] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  161.011711][ T5455] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  161.023015][ T4255] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  161.037871][ T5456] qrtr: Invalid version 0
[  163.251913][ T5467] loop0: detected capacity change from 0 to 1764
[  163.373471][ T4270] Bluetooth: Wrong link type (-22)
[  163.381869][ T5467] iso9660: Corrupted directory entry in block 2 of inode 1920
[  163.977868][ T5479] loop5: detected capacity change from 0 to 40427
[  163.988734][ T5479] F2FS-fs (loop5): build fault injection attr: rate: 691, type: 0x3ffff
[  164.006273][ T5479] F2FS-fs (loop5): invalid crc value
[  164.093233][ T5479] F2FS-fs (loop5): Found nat_bits in checkpoint
[  164.144477][ T5479] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  164.433022][ T5485] 9pnet_fd: Insufficient options for proto=fd
[  164.733909][ T5492] loop1: detected capacity change from 0 to 512
[  164.831220][ T5492] EXT4-fs: Ignoring removed nobh option
[  164.865657][ T5492] EXT4-fs: Ignoring removed oldalloc option
[  164.912734][ T5501] loop5: detected capacity change from 0 to 256
[  164.923537][ T5492] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  164.957543][ T5492] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  164.997572][ T4581] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  165.013117][ T5501] qrtr: Invalid version 0
[  165.207326][ T4581] usb 1-1: Using ep0 maxpacket: 16
[  165.214328][ T4581] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.258562][ T5505] loop4: detected capacity change from 0 to 4096
[  165.272422][ T4581] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.298423][ T5505] EXT4-fs: Ignoring removed mblk_io_submit option
[  165.322178][ T4270] Bluetooth: Wrong link type (-22)
[  165.327733][ T4270] Bluetooth: hci0: link tx timeout
[  165.334471][ T4270] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.349409][ T5505] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  165.354733][ T4581] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.387427][ T4581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.403600][ T4581] usb 1-1: Product: syz
[  165.417311][ T4581] usb 1-1: Manufacturer: syz
[  165.422298][ T5514] 8021q: VLANs not supported on gre0
[  165.428221][ T4581] usb 1-1: SerialNumber: syz
[  165.657458][ T4581] usb 1-1: 0:2 : does not exist
[  166.396299][ T4581] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  166.461590][ T4581] usb 1-1: USB disconnect, device number 3
[  166.583156][ T5527] 9pnet_fd: Insufficient options for proto=fd
[  166.699934][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.777277][ T5532] overlayfs: missing 'lowerdir'
[  167.025855][ T5544] loop3: detected capacity change from 0 to 256
[  167.065010][ T5540] loop5: detected capacity change from 0 to 512
[  167.092792][ T5540] EXT4-fs: Ignoring removed nobh option
[  167.112192][ T5540] EXT4-fs: Ignoring removed oldalloc option
[  167.135166][ T5540] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  167.155488][ T4255] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  167.162189][ T5544] qrtr: Invalid version 0
[  167.181435][ T5540] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  167.311837][ T5549] loop0: detected capacity change from 0 to 2048
[  167.327901][ T4270] Bluetooth: Wrong link type (-22)
[  167.333227][ T4270] Bluetooth: hci1: link tx timeout
[  167.339411][ T4270] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  167.367605][ T4270] Bluetooth: hci0: command 0x0406 tx timeout
[  167.424782][ T4257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  168.178056][ T5563] 9pnet_fd: Insufficient options for proto=fd
[  168.965598][ T5584] loop1: detected capacity change from 0 to 128
[  169.144171][ T5586] loop3: detected capacity change from 0 to 512
[  169.247565][ T5586] EXT4-fs: Ignoring removed nobh option
[  169.263406][ T5586] EXT4-fs: Ignoring removed oldalloc option
[  169.331146][ T5586] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  170.090877][    C0] ------------[ cut here ]------------
[  170.096772][    C0] WARNING: CPU: 0 PID: 5591 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50
[  170.106893][    C0] Modules linked in:
[  170.111278][    C0] CPU: 0 PID: 5591 Comm: syz.4.316 Not tainted 6.1.148-syzkaller #0
[  170.119422][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  170.129540][    C0] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50
[  170.135902][    C0] Code: ff ff ff e8 40 21 e5 f7 0f 0b 48 8b 7c 24 20 e8 e4 cf 7f fe e9 dd e9 ff ff e8 2a 21 e5 f7 0f 0b e9 f1 ee ff ff e8 1e 21 e5 f7 <0f> 0b e9 61 f2 ff ff e8 12 21 e5 f7 48 c7 c7 70 5f fa 8d 4c 89 f6
[  170.155850][    C0] RSP: 0000:ffffc900000078a0 EFLAGS: 00010246
[  170.161998][    C0] RAX: ffffffff899b9d42 RBX: 0000000000000000 RCX: ffff88802ff60000
[  170.170034][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  170.178051][    C0] RBP: ffffc90000007aa8 R08: ffff88802ff60000 R09: 0000000000000003
[  170.186088][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff92000000f2c
[  170.194116][    C0] R13: dffffc0000000000 R14: ffff888030406258 R15: ffff88802ffe8c00
[  170.202149][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  170.211143][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.217925][    C0] CR2: fffffffffffffed0 CR3: 000000000c88e000 CR4: 00000000003506f0
[  170.225925][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  170.233966][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  170.241987][    C0] Call Trace:
[  170.245287][    C0]  <IRQ>
[  170.248178][    C0]  ? verify_lock_unused+0x140/0x140
[  170.253390][    C0]  ? __ieee80211_beacon_get+0xad/0x1f50
[  170.258971][    C0]  ? ieee80211_beacon_get_template+0x40/0x40
[  170.264982][    C0]  ieee80211_beacon_get_tim+0x5b/0x4d0
[  170.270483][    C0]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  170.276038][    C0]  ? read_lock_is_recursive+0x10/0x10
[  170.281452][    C0]  __iterate_interfaces+0x243/0x500
[  170.286655][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  170.292927][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  170.300238][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  170.306480][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  170.313534][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[  170.318774][    C0]  __hrtimer_run_queues+0x554/0xd60
[  170.323982][    C0]  ? hw_scan_work+0xf30/0xf30
[  170.328697][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  170.333812][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  170.339999][    C0]  hrtimer_run_softirq+0x183/0x2a0
[  170.345160][    C0]  handle_softirqs+0x2a1/0x920
[  170.350791][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  170.355688][    C0]  ? do_softirq+0x200/0x200
[  170.360252][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  170.365470][    C0]  __irq_exit_rcu+0x12f/0x220
[  170.370187][    C0]  ? irq_exit_rcu+0x20/0x20
[  170.374720][    C0]  irq_exit_rcu+0x5/0x20
[  170.379005][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  170.384649][    C0]  </IRQ>
[  170.387602][    C0]  <TASK>
[  170.390555][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  170.396542][    C0] RIP: 0010:rcu_is_watching+0x2/0xa0
[  170.401860][    C0] Code: eb 99 e8 91 54 ab 08 48 c7 c7 e0 18 b3 8c 4c 89 f6 e8 e2 16 c3 02 e9 53 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 <41> 56 53 65 ff 05 cc 71 97 7e e8 0f 69 ab 08 89 c3 83 f8 08 73 60
[  170.421517][    C0] RSP: 0000:ffffc90005af7438 EFLAGS: 00000202
[  170.427618][    C0] RAX: ffffffff81db147d RBX: ffffffff81db144d RCX: 0000000000000000
[  170.435603][    C0] RDX: ffff88802ff60000 RSI: 0000000000000001 RDI: 0000000000000000
[  170.443638][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215bc49
[  170.451658][    C0] R10: fffffbfff215bc49 R11: 1ffffffff215bc48 R12: dffffc0000000000
[  170.459671][    C0] R13: ffffea00019bcd00 R14: 0000000000066f34 R15: ffff88813fff9180
[  170.467884][    C0]  ? pfn_valid+0xcd/0x420
[  170.472253][    C0]  ? pfn_valid+0xfd/0x420
[  170.476707][    C0]  pfn_valid+0x106/0x420
[  170.481008][    C0]  page_table_check_clear+0x1e/0x6b0
[  170.486305][    C0]  ? __page_table_check_pte_clear+0x3f/0x70
[  170.492244][    C0]  unmap_page_range+0x1924/0x2500
[  170.497320][    C0]  unmap_vmas+0x22c/0x330
[  170.501671][    C0]  ? unmap_vmas+0x189/0x330
[  170.506179][    C0]  ? unmap_page_range+0x2500/0x2500
[  170.511411][    C0]  ? __lock_acquire+0x7c50/0x7c50
[  170.516441][    C0]  ? mas_next_entry+0xdf9/0xea0
[  170.521331][    C0]  ? mlock_page_drain_local+0x75/0x490
[  170.526814][    C0]  ? memset+0x1e/0x40
[  170.530884][    C0]  exit_mmap+0x1cc/0x8e0
[  170.535179][    C0]  ? vm_brk+0x20/0x20
[  170.539232][    C0]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  170.544900][    C0]  ? exit_mm+0x1d6/0x2c0
[  170.549288][    C0]  ? uprobe_clear_state+0x274/0x290
[  170.554520][    C0]  ? mm_update_next_owner+0x525/0x650
[  170.559946][    C0]  __mmput+0x118/0x3c0
[  170.564052][    C0]  exit_mm+0x1e6/0x2c0
[  170.568184][    C0]  ? do_exit+0x2400/0x2400
[  170.572624][    C0]  ? taskstats_exit+0x35a/0x9d0
[  170.577545][    C0]  do_exit+0x8c1/0x2400
[  170.581735][    C0]  ? put_task_struct+0x80/0x80
[  170.586524][    C0]  ? lock_chain_count+0x20/0x20
[  170.591454][    C0]  do_group_exit+0x217/0x2d0
[  170.596081][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  170.601343][    C0]  get_signal+0x1272/0x1350
[  170.605903][    C0]  arch_do_signal_or_restart+0xb0/0x1230
[  170.611629][    C0]  ? force_sig_fault+0xc4/0x110
[  170.616514][    C0]  ? force_sig_fault_to_task+0x110/0x110
[  170.622225][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  170.628360][    C0]  ? get_sigframe_size+0x10/0x10
[  170.633322][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  170.639355][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  170.644830][    C0]  exit_to_user_mode_loop+0x70/0x110
[  170.650154][    C0]  exit_to_user_mode_prepare+0xb1/0x140
[  170.655712][    C0]  irqentry_exit_to_user_mode+0x5/0x30
[  170.661208][    C0]  exc_page_fault+0x88/0x100
[  170.665808][    C0]  asm_exc_page_fault+0x22/0x30
[  170.670698][    C0] RIP: 0033:0x7f47d298ebf1
[  170.675146][    C0] Code: Unable to access opcode bytes at 0x7f47d298ebc7.
[  170.682198][    C0] RSP: 002b:fffffffffffffed0 EFLAGS: 00010217
[  170.688291][    C0] RAX: 0000000000000000 RBX: 00007f47d2bb6180 RCX: 00007f47d298ebe9
[  170.696262][    C0] RDX: 0000000000000000 RSI: fffffffffffffed0 RDI: 0000000000008200
[  170.704340][    C0] RBP: 00007f47d2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  170.712378][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  170.720472][    C0] R13: 00007f47d2bb6218 R14: 00007f47d2bb6180 R15: 00007ffc17b819f8
[  170.728579][    C0]  </TASK>
[  170.731614][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  170.738906][    C0] CPU: 0 PID: 5591 Comm: syz.4.316 Not tainted 6.1.148-syzkaller #0
[  170.746897][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  170.756961][    C0] Call Trace:
[  170.760246][    C0]  <IRQ>
[  170.763101][    C0]  dump_stack_lvl+0x168/0x22e
[  170.767783][    C0]  ? memcpy+0x3c/0x60
[  170.771773][    C0]  ? show_regs_print_info+0x12/0x12
[  170.776969][    C0]  ? load_image+0x3b0/0x3b0
[  170.781486][    C0]  panic+0x2c9/0x710
[  170.785398][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  170.789916][    C0]  __warn+0x2f8/0x4f0
[  170.793898][    C0]  ? __ieee80211_beacon_get+0x1952/0x1f50
[  170.799622][    C0]  ? __ieee80211_beacon_get+0x1952/0x1f50
[  170.805346][    C0]  report_bug+0x2ba/0x4f0
[  170.809681][    C0]  ? __ieee80211_beacon_get+0x1952/0x1f50
[  170.815426][    C0]  handle_bug+0x3a/0x70
[  170.819580][    C0]  exc_invalid_op+0x16/0x40
[  170.824092][    C0]  asm_exc_invalid_op+0x16/0x20
[  170.828958][    C0] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50
[  170.835295][    C0] Code: ff ff ff e8 40 21 e5 f7 0f 0b 48 8b 7c 24 20 e8 e4 cf 7f fe e9 dd e9 ff ff e8 2a 21 e5 f7 0f 0b e9 f1 ee ff ff e8 1e 21 e5 f7 <0f> 0b e9 61 f2 ff ff e8 12 21 e5 f7 48 c7 c7 70 5f fa 8d 4c 89 f6
[  170.855080][    C0] RSP: 0000:ffffc900000078a0 EFLAGS: 00010246
[  170.861147][    C0] RAX: ffffffff899b9d42 RBX: 0000000000000000 RCX: ffff88802ff60000
[  170.869119][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  170.877084][    C0] RBP: ffffc90000007aa8 R08: ffff88802ff60000 R09: 0000000000000003
[  170.885066][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff92000000f2c
[  170.893036][    C0] R13: dffffc0000000000 R14: ffff888030406258 R15: ffff88802ffe8c00
[  170.901014][    C0]  ? __ieee80211_beacon_get+0x1952/0x1f50
[  170.906760][    C0]  ? verify_lock_unused+0x140/0x140
[  170.911961][    C0]  ? __ieee80211_beacon_get+0xad/0x1f50
[  170.917519][    C0]  ? ieee80211_beacon_get_template+0x40/0x40
[  170.923517][    C0]  ieee80211_beacon_get_tim+0x5b/0x4d0
[  170.928985][    C0]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  170.934541][    C0]  ? read_lock_is_recursive+0x10/0x10
[  170.939927][    C0]  __iterate_interfaces+0x243/0x500
[  170.945121][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  170.951362][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  170.958561][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  170.964803][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  170.971841][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[  170.977039][    C0]  __hrtimer_run_queues+0x554/0xd60
[  170.982246][    C0]  ? hw_scan_work+0xf30/0xf30
[  170.986939][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  170.992048][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  170.998122][    C0]  hrtimer_run_softirq+0x183/0x2a0
[  171.003245][    C0]  handle_softirqs+0x2a1/0x920
[  171.008020][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  171.012879][    C0]  ? do_softirq+0x200/0x200
[  171.017391][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  171.022600][    C0]  __irq_exit_rcu+0x12f/0x220
[  171.027283][    C0]  ? irq_exit_rcu+0x20/0x20
[  171.031799][    C0]  irq_exit_rcu+0x5/0x20
[  171.036135][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  171.041785][    C0]  </IRQ>
[  171.044735][    C0]  <TASK>
[  171.047697][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  171.053738][    C0] RIP: 0010:rcu_is_watching+0x2/0xa0
[  171.059057][    C0] Code: eb 99 e8 91 54 ab 08 48 c7 c7 e0 18 b3 8c 4c 89 f6 e8 e2 16 c3 02 e9 53 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 <41> 56 53 65 ff 05 cc 71 97 7e e8 0f 69 ab 08 89 c3 83 f8 08 73 60
[  171.078671][    C0] RSP: 0000:ffffc90005af7438 EFLAGS: 00000202
[  171.084758][    C0] RAX: ffffffff81db147d RBX: ffffffff81db144d RCX: 0000000000000000
[  171.092729][    C0] RDX: ffff88802ff60000 RSI: 0000000000000001 RDI: 0000000000000000
[  171.100702][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215bc49
[  171.108684][    C0] R10: fffffbfff215bc49 R11: 1ffffffff215bc48 R12: dffffc0000000000
[  171.116691][    C0] R13: ffffea00019bcd00 R14: 0000000000066f34 R15: ffff88813fff9180
[  171.124671][    C0]  ? pfn_valid+0xcd/0x420
[  171.129027][    C0]  ? pfn_valid+0xfd/0x420
[  171.133367][    C0]  pfn_valid+0x106/0x420
[  171.137623][    C0]  page_table_check_clear+0x1e/0x6b0
[  171.142914][    C0]  ? __page_table_check_pte_clear+0x3f/0x70
[  171.148814][    C0]  unmap_page_range+0x1924/0x2500
[  171.153888][    C0]  unmap_vmas+0x22c/0x330
[  171.158228][    C0]  ? unmap_vmas+0x189/0x330
[  171.162740][    C0]  ? unmap_page_range+0x2500/0x2500
[  171.167956][    C0]  ? __lock_acquire+0x7c50/0x7c50
[  171.172984][    C0]  ? mas_next_entry+0xdf9/0xea0
[  171.177857][    C0]  ? mlock_page_drain_local+0x75/0x490
[  171.183320][    C0]  ? memset+0x1e/0x40
[  171.187321][    C0]  exit_mmap+0x1cc/0x8e0
[  171.191568][    C0]  ? vm_brk+0x20/0x20
[  171.195551][    C0]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  171.201196][    C0]  ? exit_mm+0x1d6/0x2c0
[  171.205453][    C0]  ? uprobe_clear_state+0x274/0x290
[  171.210664][    C0]  ? mm_update_next_owner+0x525/0x650
[  171.216049][    C0]  __mmput+0x118/0x3c0
[  171.220138][    C0]  exit_mm+0x1e6/0x2c0
[  171.224218][    C0]  ? do_exit+0x2400/0x2400
[  171.228643][    C0]  ? taskstats_exit+0x35a/0x9d0
[  171.233501][    C0]  do_exit+0x8c1/0x2400
[  171.237670][    C0]  ? put_task_struct+0x80/0x80
[  171.242447][    C0]  ? lock_chain_count+0x20/0x20
[  171.247312][    C0]  do_group_exit+0x217/0x2d0
[  171.251906][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  171.257115][    C0]  get_signal+0x1272/0x1350
[  171.261638][    C0]  arch_do_signal_or_restart+0xb0/0x1230
[  171.267281][    C0]  ? force_sig_fault+0xc4/0x110
[  171.272135][    C0]  ? force_sig_fault_to_task+0x110/0x110
[  171.277771][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  171.283759][    C0]  ? get_sigframe_size+0x10/0x10
[  171.288702][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  171.294695][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  171.300164][    C0]  exit_to_user_mode_loop+0x70/0x110
[  171.305452][    C0]  exit_to_user_mode_prepare+0xb1/0x140
[  171.311002][    C0]  irqentry_exit_to_user_mode+0x5/0x30
[  171.316464][    C0]  exc_page_fault+0x88/0x100
[  171.321067][    C0]  asm_exc_page_fault+0x22/0x30
[  171.325929][    C0] RIP: 0033:0x7f47d298ebf1
[  171.330344][    C0] Code: Unable to access opcode bytes at 0x7f47d298ebc7.
[  171.337354][    C0] RSP: 002b:fffffffffffffed0 EFLAGS: 00010217
[  171.343417][    C0] RAX: 0000000000000000 RBX: 00007f47d2bb6180 RCX: 00007f47d298ebe9
[  171.351385][    C0] RDX: 0000000000000000 RSI: fffffffffffffed0 RDI: 0000000000008200
[  171.359352][    C0] RBP: 00007f47d2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  171.367421][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  171.375412][    C0] R13: 00007f47d2bb6218 R14: 00007f47d2bb6180 R15: 00007ffc17b819f8
[  171.383490][    C0]  </TASK>
[  171.386906][    C0] Kernel Offset: disabled
[  171.391282][    C0] Rebooting in 86400 seconds..