last executing test programs:

2m1.24784008s ago: executing program 3 (id=4):
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9)

2m1.171530552s ago: executing program 3 (id=7):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="005d22bf0007b1a91fec956fb6ba0f48c050dc5c6edb5f97c075de2b696897cc3565679bf28eb5db9d28ed1d9691867d8a030000005c15d8723c8c83"], 0x1, 0x173, &(0x7f0000000240)="$eJzs281KMlEcx/Hf+Po8Pi+9b1oFLWqTUyqUSy+gG2gnOok0VmQbJYgupTvpTroBhbqBJhyHSmkxzSFP6PcD6h/hN+cc8K9/FyMAC2s5fM7IUTasgiC43ZJ0chy+DWCOBXoJACyq9JPtHQCwY1hLh3PAgyM9Pt80BtEjG3N+GNZS48KRBh/yubj5Oyd83cxM5vOSfsWZX+7H+R1N5n9/cf3CVL4QOz8+/+72ZP6PpL+S/kn6L2kp+q+1Imn1k/WbU+tvxFwfMDH69BVN8wYXGHXPadv39hPms1H+IGE+F+VLhvlywnw+yhcbF34z4TWApFKW+z9t2P8Zw/4HFlm31z+r+753RUFBQfFW2P5mAvDd3OvOpdvt9ffanXrLa3nnpUr1qFIuVQ6rbjiXuybTOYCf7P1H3/ZOAAAAAAAAAAAAAABAUmuS1m1vAgAAAMBMzOJ2IttnBAAAAAAAAAAAAAAAAAAAAObFawAAAP//w0hQzg==")

2m1.031522604s ago: executing program 3 (id=8):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m0.62012711s ago: executing program 3 (id=13):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000480)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@dax_inode}, {@jqfmt_vfsv1}, {@bh}, {@discard}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

2m0.02136362s ago: executing program 3 (id=19):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20)
fsmount(0xffffffffffffffff, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
unshare(0x42000000)

1m53.093238394s ago: executing program 3 (id=33):
r0 = syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
fcntl$dupfd(r1, 0x406, r2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000002c0), 0x0}})
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xe4}}, 0x0)

1m52.972857356s ago: executing program 32 (id=33):
r0 = syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
fcntl$dupfd(r1, 0x406, r2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000002c0), 0x0}})
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xe4}}, 0x0)

12.591369304s ago: executing program 5 (id=467):
socket$pptp(0x18, 0x1, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x8000000001)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0))

7.485007787s ago: executing program 5 (id=488):
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06"], 0x9)

7.388829369s ago: executing program 5 (id=490):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20042000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

4.072712273s ago: executing program 1 (id=496):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x228, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1dc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x3c, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "4ac6768e05c6ec90b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x228}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

3.980212025s ago: executing program 5 (id=497):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20)

3.967968695s ago: executing program 1 (id=499):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv2(r0, &(0x7f0000001ac0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x899a, 0x4, 0x5)

3.868713217s ago: executing program 2 (id=500):
socket$pptp(0x18, 0x1, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x8000000001)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0))

3.868450807s ago: executing program 1 (id=501):
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06"], 0x9)

3.774574029s ago: executing program 1 (id=503):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5)

2.617603987s ago: executing program 4 (id=505):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)

1.561191045s ago: executing program 4 (id=508):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x2c011, r1, 0xadb38000)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x2000, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104)

1.313195399s ago: executing program 4 (id=510):
syz_io_uring_setup(0x3e03, &(0x7f0000000080)={0x0, 0x2, 0x10100}, &(0x7f0000000040), &(0x7f0000000140))
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
unshare(0x600)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffff8001, 0x9, 0x3, 0xfffffffffffffffe, 0x7ffeffff}, 0x0, 0x0)

1.144917171s ago: executing program 0 (id=512):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv2(r0, &(0x7f0000001ac0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x899a, 0x4, 0x5)

1.144592821s ago: executing program 4 (id=513):
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e060062"], 0x9)

1.122965072s ago: executing program 0 (id=514):
r0 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000002040), 0x2, 0x0)
write$apparmor_exec(r0, 0x0, 0xb)

1.071143843s ago: executing program 4 (id=515):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
connect$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x0, 0x8000}, 0xc)

996.841234ms ago: executing program 4 (id=516):
socket$pptp(0x18, 0x1, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x8000000001)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0300ffff0000", 0x6}])

957.595365ms ago: executing program 2 (id=517):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)=ANY=[])

907.246666ms ago: executing program 2 (id=518):
openat$nvme_fabrics(0xffffff9c, 0x0, 0x210000, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
readv(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)=""/103, 0x67}], 0x2)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
shutdown(r0, 0x1)

678.832989ms ago: executing program 0 (id=519):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="01000000020000004000000040"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x1000, r0}, 0x38)

676.601539ms ago: executing program 2 (id=520):
r0 = io_uring_setup(0x105, &(0x7f00000002c0))
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x74)
accept4$unix(r1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

635.94066ms ago: executing program 5 (id=521):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x228, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1dc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x3c, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "4ac6768e05c6ec90b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x228}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

581.21288ms ago: executing program 0 (id=522):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x5, 0x7ff, 0x2, 0x7fffffff, 0x55, "49ec6b1e007cd7db2fe6964be945f327c19326", 0x51, 0xc})
pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b702000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xffd, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r8, 0x200, 0x70bd25, 0x25d75bfa, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xf9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc0000000, 0x4}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4)
pread64(r1, &(0x7f00000013c0)=""/208, 0xd0, 0x800)
bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc)

579.904491ms ago: executing program 1 (id=523):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$eJzs3T9sG9UfAPDvXeJf/+VHigQSVB0qQCpSVScpLRSmdkUUVeqAxAKR40ZVnDiKHWiiDOleITogQF3KBgMjiIEBsTCysoCYkSoagdR0AKPznzRN7OC0TYziz0e6+L17Z3/f+fx99p3ucgH0rWPZnzTi2Yi4mEQMr2sbjGbjscZyqytLhXsrS4UkarVLvyeRRMTdlaVCa/mk+XgoIpYj4pmI+D4XcSLdHLeysDg1XioV55r1ker07EhlYfHklenxyeJkcealV149c/b0mbFTY+ufdq+2vpbb3rpe/+XGB9d/fP3WjS++PLpc+Gg8iXMx1Gxbvx6PU+M9ycW5DfNP70SwHkp63QEeykAzz7NUejqGY6CZ9e3Uhne1a8AOq+2LqAF9KpH/0KdavwOy/d/WtJu/P26fb+yAZHFXm1OjZbBxbCL21/dNDv6RPLBnku1vHt7NjrInLV+LiNHBwc2f/6T5+Xt4o4+jg+yo7843NtTm7Z+ujT/RZvwZah07fUSt8W910/h3P/5Ah/HvYpcx/nr71087xr8WcaRt/GQtftImfhoR73YZ/+Zb35zt1Fb7LOJ4tI/fkmx9fHjk8pVScbTxt22Mb48ffW2r9T/YIX7jmO3++tdMu/d/tsv1//qHr55b3iL+i89vvf3bvf8HIuLDLuM/effzNzq13b6W3Ml+BWx3+2fzbnUZ/+Vzx37uclEAAAAAAAAAAGAb0vq5bEmaXyunaT7fuIb3qTiYlsqV6onL5fmZicY5b4cjl7bOtBpu1JOsPtY8H7dVP7Whvnbu0MCBej1fKJcmervqAAAAAAAAAAAAAAAAAAAA8J9xaMP1/38O1K//33i7amCv6nzLb2Cvk//Qvx7M/6Rn/QB2n+9/6Fs1+Q/9S/5D/5L/0L/kP/SvDvmf2+1+ALvP9z/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74uKFC9lUu7eyVMjqE4ML81Pl905OFCtT+en5Qr5QnpvNT5bLk6VivlCe/rfXS8rl2dGYmb86Ui1WqiOVhcV3psvzM617ihb9T3EAAAAAAAAAAAAAAAAAAADYbKg+JWk+ItJ6OU3z+Yj/R8ThyCWXr5SKoxHxRET8NJDbl9XHet1pAAAAAAAAAAAAAAAAAAAA2GMqC4tT46VSca5PCoPbWTgilh9vN7JX3Pazcs1t1abpzSMdmxQUHqXQy1EJAAAAAAAAAAAAAAAAAAD60/2Lfrt9xt872yEAAAAAAAAAAAAAAAAAAADoS+lvSURk0/HhF4Y2tv4vWR2oP0bE+zcvfXx1vFqdG8vm31mbX/2kOf9UL/oPdKuVp608BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6rLCxOjZdKxbkdLPR6HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAexj8BAAD//+q51EI=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)

533.561272ms ago: executing program 5 (id=524):
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e08004500fc7400000000000190780a010101ac1414aa05009078e00000e0460000000000000000110000ac1414aa02070300443c"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8)
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @struct={0xfffffffd}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x0, 0xce82}, 0x4000, 0x3, [0x0, 0x8, 0x1000000000]}, {0xfffffffffffffffe, @usage=0x9, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x58a, @usage=0x6, 0x3, 0xa, [0x4, 0x1, 0x2, 0xfffffffffffffffc, 0x0, 0x1]}, {0x6, @struct={0x4, 0x8}, 0x0, 0x7, 0x80800, 0xfffffffffffffffe, 0x0, 0x2, 0x4a, @struct={0x0, 0x6}, 0xffffffff, 0x4, [0x0, 0x800004, 0x0, 0x3ff, 0x80]}})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0xc)

309.476595ms ago: executing program 0 (id=525):
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e060062"], 0x9)

309.191585ms ago: executing program 1 (id=526):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r1, 0x5607, 0x3)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x4)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000300)={0x9, 0x2, 0x3, 0x7fff})

270.618766ms ago: executing program 0 (id=527):
socket$pptp(0x18, 0x1, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x8000000001)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0))

201.931647ms ago: executing program 2 (id=528):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)=ANY=[])

0s ago: executing program 2 (id=529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/12, 0xc}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xcb}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x10000, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts.
[   35.174555][ T4287] cgroup: Unknown subsys name 'net'
[   35.454406][ T4287] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   35.790148][ T4287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   36.916121][ T4301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   36.922555][ T4301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   36.925010][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   36.927647][ T4301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   36.940215][ T4304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   36.948025][ T4298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   36.952933][ T4306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   36.955317][ T4306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   36.959897][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   36.960832][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   36.962192][ T4309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   36.964823][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   36.966862][ T4309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   36.969878][ T4312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   36.972469][ T4313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   36.973540][ T4312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   36.975763][ T4313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   36.978964][ T4313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   36.983424][ T4314] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   36.983538][   T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   36.985769][ T4314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   36.989635][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   36.993320][ T4314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   36.995380][ T4304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.004187][ T4314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   37.006637][ T4304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   37.013194][ T4304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.015969][ T4304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   37.018095][ T4304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.024956][ T4304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   37.280978][ T4297] chnl_net:caif_netlink_parms(): no params data found
[   37.293528][ T4300] chnl_net:caif_netlink_parms(): no params data found
[   37.317775][ T4302] chnl_net:caif_netlink_parms(): no params data found
[   37.360352][ T4303] chnl_net:caif_netlink_parms(): no params data found
[   37.423434][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.425595][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.428296][ T4297] device bridge_slave_0 entered promiscuous mode
[   37.441326][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.443355][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.445957][ T4302] device bridge_slave_0 entered promiscuous mode
[   37.457894][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.460014][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.462629][ T4297] device bridge_slave_1 entered promiscuous mode
[   37.465549][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.467497][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.470536][ T4300] device bridge_slave_0 entered promiscuous mode
[   37.473227][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.475219][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.477894][ T4302] device bridge_slave_1 entered promiscuous mode
[   37.496649][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.498798][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.501263][ T4303] device bridge_slave_0 entered promiscuous mode
[   37.508024][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.510023][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.512598][ T4300] device bridge_slave_1 entered promiscuous mode
[   37.523648][ T4310] chnl_net:caif_netlink_parms(): no params data found
[   37.528451][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.531509][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.533520][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.536122][ T4303] device bridge_slave_1 entered promiscuous mode
[   37.555468][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.564325][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.573363][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.584930][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.594117][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.602508][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.612884][ T4302] team0: Port device team_slave_0 added
[   37.616004][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.639024][ T4302] team0: Port device team_slave_1 added
[   37.675464][ T4297] team0: Port device team_slave_0 added
[   37.683090][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.685189][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.687829][ T4310] device bridge_slave_0 entered promiscuous mode
[   37.692641][ T4300] team0: Port device team_slave_0 added
[   37.694531][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.696588][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.700144][ T4310] device bridge_slave_1 entered promiscuous mode
[   37.708792][ T4303] team0: Port device team_slave_0 added
[   37.711597][ T4297] team0: Port device team_slave_1 added
[   37.724250][ T4300] team0: Port device team_slave_1 added
[   37.732255][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.734195][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.741737][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.746929][ T4303] team0: Port device team_slave_1 added
[   37.774135][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.776119][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.783925][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.787850][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.790231][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.797339][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.801506][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.803446][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.811462][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.817058][ T4310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.828226][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.830340][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.837564][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.841478][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.843428][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.851131][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.856065][ T4310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.859650][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.861671][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.869335][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.873306][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.875187][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.882681][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.936986][ T4310] team0: Port device team_slave_0 added
[   37.970658][ T4302] device hsr_slave_0 entered promiscuous mode
[   38.020436][ T4302] device hsr_slave_1 entered promiscuous mode
[   38.100360][ T4297] device hsr_slave_0 entered promiscuous mode
[   38.139035][ T4297] device hsr_slave_1 entered promiscuous mode
[   38.178897][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.181208][ T4297] Cannot create hsr debugfs directory
[   38.194184][ T4310] team0: Port device team_slave_1 added
[   38.240329][ T4300] device hsr_slave_0 entered promiscuous mode
[   38.279470][ T4300] device hsr_slave_1 entered promiscuous mode
[   38.319316][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.321470][ T4300] Cannot create hsr debugfs directory
[   38.380462][ T4303] device hsr_slave_0 entered promiscuous mode
[   38.419034][ T4303] device hsr_slave_1 entered promiscuous mode
[   38.458850][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.461025][ T4303] Cannot create hsr debugfs directory
[   38.511144][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.513174][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.520685][ T4310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.543820][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.545798][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.553119][ T4310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.680352][ T4310] device hsr_slave_0 entered promiscuous mode
[   38.719058][ T4310] device hsr_slave_1 entered promiscuous mode
[   38.758818][ T4310] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.760946][ T4310] Cannot create hsr debugfs directory
[   38.881062][ T4300] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.914379][ T4300] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.950623][ T4300] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.004487][ T4300] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.053659][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.069035][ T4298] Bluetooth: hci4: command 0x0409 tx timeout
[   39.069045][ T4306] Bluetooth: hci2: command 0x0409 tx timeout
[   39.069203][ T4306] Bluetooth: hci0: command 0x0409 tx timeout
[   39.070877][ T4298] Bluetooth: hci3: command 0x0409 tx timeout
[   39.072551][ T4306] Bluetooth: hci1: command 0x0409 tx timeout
[   39.090668][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.130856][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.172203][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.279290][ T4303] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.333799][ T4303] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.383898][ T4303] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.421384][ T4303] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.473950][ T4302] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.510641][ T4302] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.559690][ T4302] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.593326][ T4302] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.651749][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.678084][ T4310] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   39.729730][ T4310] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   39.792188][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.794448][ T4310] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   39.835753][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.839717][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.842958][ T4310] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   39.886462][ T4300] 8021q: adding VLAN 0 to HW filter on device team0
[   39.911765][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.914517][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.917806][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.919906][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.923369][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   39.935315][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.938404][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.943452][ T4297] 8021q: adding VLAN 0 to HW filter on device team0
[   39.960030][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.962759][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.965262][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.967169][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.970148][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.972982][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.975591][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.977631][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.981111][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.000395][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.003096][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.005795][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.007782][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.011047][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.016456][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.038891][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.042059][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.045086][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.048486][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.051620][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.054529][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.058537][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.061527][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.064284][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.066929][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.085117][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.087814][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.090926][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.093935][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.097122][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.100285][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.104744][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.114827][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.117488][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.121557][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.124298][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.126990][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.138211][ T4303] 8021q: adding VLAN 0 to HW filter on device team0
[   40.157131][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.161956][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.170334][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.184628][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.187518][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.191080][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.193142][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.197176][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.212134][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.226312][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.230083][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.233093][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.235035][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.241900][ T4302] 8021q: adding VLAN 0 to HW filter on device team0
[   40.274554][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.277066][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.282697][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.287121][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.295557][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.297514][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.300444][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.303172][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.305746][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.307676][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.311309][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.314179][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.317209][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.320601][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.323673][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.326215][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.330354][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.341996][ T4310] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.348693][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.353731][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.357040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.362429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.367137][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.371852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.390668][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.393337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.395894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.405274][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.415308][ T4302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.418189][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.447529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.452576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.455355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.458026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.461583][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.464479][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.467182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.470597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.473379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.475485][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.477728][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.487302][ T4310] 8021q: adding VLAN 0 to HW filter on device team0
[   40.497938][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.514486][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.517352][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.525982][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.528498][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.539161][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.542478][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.555733][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.557697][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.575415][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.591930][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.594510][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.596712][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.605621][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.609528][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.631823][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.635004][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.638404][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.641843][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.644621][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.656488][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.660432][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.662587][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.664750][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.667614][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.689839][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.692536][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.701622][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.705396][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.707569][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.712791][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.715479][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.723464][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.726255][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.735644][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.739479][ T4300] device veth0_vlan entered promiscuous mode
[   40.743040][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.745579][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.751399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.754172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.771647][ T4300] device veth1_vlan entered promiscuous mode
[   40.774605][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.796773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.800803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.803438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.806041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.816559][ T4297] device veth0_vlan entered promiscuous mode
[   40.820500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.822994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.825599][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.833813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.836626][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.841106][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.879663][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.882494][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.885408][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   40.895191][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.898022][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.901562][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.905084][ T4297] device veth1_vlan entered promiscuous mode
[   40.909445][ T4300] device veth0_macvtap entered promiscuous mode
[   40.921520][ T4302] device veth0_vlan entered promiscuous mode
[   40.925244][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.927853][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   40.932386][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.935124][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.939362][ T4303] device veth0_vlan entered promiscuous mode
[   40.944997][ T4303] device veth1_vlan entered promiscuous mode
[   40.954183][ T4300] device veth1_macvtap entered promiscuous mode
[   40.966734][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.970006][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   40.972650][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.975184][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.977765][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.982254][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.995801][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.998057][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   41.015129][ T4302] device veth1_vlan entered promiscuous mode
[   41.028475][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.031941][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.034716][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.038156][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.041618][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.044464][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.051413][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.065318][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.067990][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.072867][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.084089][ T4297] device veth0_macvtap entered promiscuous mode
[   41.087277][ T4303] device veth0_macvtap entered promiscuous mode
[   41.093836][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.100668][ T4297] device veth1_macvtap entered promiscuous mode
[   41.104555][ T4303] device veth1_macvtap entered promiscuous mode
[   41.107583][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.110565][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.114026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.116733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.123557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.126536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.132755][ T4300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.135343][ T4300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.137760][ T4300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.141140][ T4300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.149688][ T4306] Bluetooth: hci1: command 0x041b tx timeout
[   41.151409][ T4306] Bluetooth: hci3: command 0x041b tx timeout
[   41.153061][ T4306] Bluetooth: hci0: command 0x041b tx timeout
[   41.154744][ T4306] Bluetooth: hci4: command 0x041b tx timeout
[   41.156407][ T4306] Bluetooth: hci2: command 0x041b tx timeout
[   41.185271][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.188328][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.193791][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.202294][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.205095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.207963][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.217679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.228101][ T4302] device veth0_macvtap entered promiscuous mode
[   41.241412][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.244332][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.247020][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.251879][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.255825][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.270046][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.272703][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.279588][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.283729][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.286709][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.298325][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.301456][ T4302] device veth1_macvtap entered promiscuous mode
[   41.305695][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.308529][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.313463][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.316349][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.321767][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.329533][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.332064][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.335026][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.337769][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.342361][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.362912][ T4303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.365384][ T4303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.367816][ T4303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.371916][ T4303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.378858][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.381326][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.383730][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.386133][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.417052][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.420179][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.422942][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.425783][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.428443][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.431632][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.435743][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.444192][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.446531][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.451001][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.453559][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.456395][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.460089][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.462834][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.469137][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.472014][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.474667][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.477538][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.482167][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.485046][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.490788][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.502007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.504822][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.534842][ T4302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.537361][ T4302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.540918][ T4302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.543440][ T4302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.560154][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.560164][ T4310] device veth0_vlan entered promiscuous mode
[   41.564093][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.567864][ T4310] device veth1_vlan entered promiscuous mode
[   41.571301][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.573851][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.576538][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.580131][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.589503][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.592292][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.656379][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.663695][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.680972][ T4310] device veth0_macvtap entered promiscuous mode
[   41.687509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.691513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.694500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.697412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.712094][ T4310] device veth1_macvtap entered promiscuous mode
[   41.731916][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.734125][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.737714][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.741054][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.763263][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.765599][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.782338][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.838412][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.849053][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.852736][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.855703][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.858447][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.864710][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.867487][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.871799][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.875107][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.880836][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.882551][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.882696][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.883174][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.883700][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.906753][ T1781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.906789][ T1781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.907732][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.920126][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.921101][ T1781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.922863][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.924742][ T1781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.926687][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.947319][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.947336][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.947352][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.947362][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.947373][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.950290][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.954460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.955001][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.955459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.986880][ T4310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.986929][ T4310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.986950][ T4310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.986970][ T4310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.246886][ T1781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.247676][ T4391] loop3: detected capacity change from 0 to 64
[   42.260250][ T1781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.283060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   42.299807][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.302112][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.306765][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   42.315933][ T4291] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   42.458235][ T4398] loop4: detected capacity change from 0 to 64
[   42.574196][ T4398] hfs: request for non-existent node -129 in B*Tree
[   42.583102][ T4398] hfs: request for non-existent node -129 in B*Tree
[   42.938474][ T4411] loop3: detected capacity change from 0 to 4096
[   43.164381][ T4411] EXT4-fs: Ignoring removed bh option
[   43.169343][ T4411] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   43.171727][ T4411] EXT4-fs (loop3): Test dummy encryption mode enabled
[   43.192900][ T4411] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0043]
[   43.195313][ T4411] System zones: 0-5
[   43.220767][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   43.229249][ T4306] Bluetooth: hci2: command 0x040f tx timeout
[   43.231013][ T4306] Bluetooth: hci4: command 0x040f tx timeout
[   43.232606][ T4306] Bluetooth: hci0: command 0x040f tx timeout
[   43.234244][ T4306] Bluetooth: hci1: command 0x040f tx timeout
[   43.807088][ T4431] loop1: detected capacity change from 0 to 40427
[   43.831476][ T4431] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(15) root(3)
[   43.840054][ T4431] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   43.846678][ T4431] F2FS-fs (loop1): Unrecognized mount option "checkpoint=merge" or missing value
[   44.105877][ T4433] loop2: detected capacity change from 0 to 512
[   44.108228][ T4433] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.510023][ T4438] 9pnet_fd: Insufficient options for proto=fd
[   44.572810][ T4438] loop1: detected capacity change from 0 to 256
[   44.579833][ T4438] =======================================================
[   44.579833][ T4438] WARNING: The mand mount option has been deprecated and
[   44.579833][ T4438]          and is ignored by this kernel. Remove the mand
[   44.579833][ T4438]          option from the mount to silence this warning.
[   44.579833][ T4438] =======================================================
[   44.652694][ T4438] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   44.655864][ T4438] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   44.833635][ T4438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   45.130874][ T4433] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal
[   45.558734][ T4298] Bluetooth: hci1: command 0x0419 tx timeout
[   45.560495][ T4298] Bluetooth: hci0: command 0x0419 tx timeout
[   45.562062][ T4298] Bluetooth: hci4: command 0x0419 tx timeout
[   45.563719][ T4298] Bluetooth: hci2: command 0x0419 tx timeout
[   45.708584][    C0] sched: RT throttling activated
[   46.104181][ T4445] loop0: detected capacity change from 0 to 1024
[   47.199882][ T4445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   47.875675][ T4445] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 13)
[   47.898927][ T4445] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   47.902298][ T4445] EXT4-fs (loop0): This should not happen!! Data will be lost
[   47.902298][ T4445] 
[   47.996341][ T4445] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.006689][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   48.023649][ T4445] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.062701][ T4459] netlink: 'syz.1.25': attribute type 30 has an invalid length.
[   48.066586][ T4444] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.079898][ T4459] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.082515][ T4459] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.084811][ T4459] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.087337][ T4459] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   48.100539][ T4444] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.106336][ T4445] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.121252][ T4445] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.128096][ T4459] Zero length message leads to an empty skb
[   48.135455][ T4444] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.148361][ T4444] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.176926][ T4445] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.23: lblock 3 mapped to illegal pblock 3 (length 1)
[   48.647874][ T4297] EXT4-fs (loop0): unmounting filesystem.
[   49.473056][ T4471] loop4: detected capacity change from 0 to 1024
[   49.645478][ T4471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   49.665100][ T4471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   49.685519][ T4471] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28
[   49.689147][ T4471] EXT4-fs (loop4): This should not happen!! Data will be lost
[   49.689147][ T4471] 
[   49.692632][ T4471] EXT4-fs (loop4): Total free blocks count 0
[   49.695898][ T4471] EXT4-fs (loop4): Free/Dirty block details
[   49.697712][ T4471] EXT4-fs (loop4): free_blocks=4293918720
[   49.699667][ T4471] EXT4-fs (loop4): dirty_blocks=16
[   49.701196][ T4471] EXT4-fs (loop4): Block reservation details
[   49.703026][ T4471] EXT4-fs (loop4): i_reserved_data_blocks=1
[   49.724767][ T4310] EXT4-fs (loop4): unmounting filesystem.
[   49.948773][  T113] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   50.142180][  T113] usb 1-1: config 0 has an invalid interface number: 71 but max is 0
[   50.144740][  T113] usb 1-1: config 0 has no interface number 0
[   50.146659][  T113] usb 1-1: config 0 interface 71 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[   50.158899][  T113] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0
[   50.162643][  T113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.167006][  T113] usb 1-1: Product: syz
[   50.168960][  T113] usb 1-1: Manufacturer: syz
[   50.171459][  T113] usb 1-1: SerialNumber: syz
[   50.189952][  T113] usb 1-1: config 0 descriptor??
[   50.190332][ T4302] EXT4-fs (loop3): unmounting filesystem.
[   50.210881][  T113] kvaser_usb 1-1:0.71: Cannot get usb endpoint(s)
[   50.405865][ T4348] usb 1-1: USB disconnect, device number 2
[   50.627489][ T4304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   50.633172][ T4304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   50.635836][ T4304] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   50.641519][ T4304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   50.644004][ T4304] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   50.646153][ T4304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   50.878177][ T4493] loop2: detected capacity change from 0 to 40427
[   50.883502][ T4493] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(15) root(3)
[   50.885620][ T4493] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   50.888134][ T4493] F2FS-fs (loop2): Unrecognized mount option "checkpoint=merge" or missing value
[   51.562474][ T4298] Bluetooth: hci3: command 0x1003 tx timeout
[   51.565479][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   52.733313][ T4306] Bluetooth: hci5: command 0x0409 tx timeout
[   53.300247][ T4507] 9pnet_fd: Insufficient options for proto=fd
[   53.567732][ T4507] loop2: detected capacity change from 0 to 256
[   53.861857][ T4507] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.864831][ T4507] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   53.881307][ T4306] Bluetooth: hci6: command 0x1003 tx timeout
[   53.884217][ T4304] Bluetooth: hci6: Opcode 0x1003 failed: -110
[   54.213703][ T4507] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   54.643013][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.654083][ T4516] loop0: detected capacity change from 0 to 16
[   54.670000][ T4516] erofs: (device loop0): mounted with root inode @ nid 36.
[   54.697652][ T4513] loop1: detected capacity change from 0 to 2048
[   54.778818][ T4301] Bluetooth: hci5: command 0x041b tx timeout
[   54.817880][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.843588][ T4513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   55.000570][ T4300] EXT4-fs (loop1): unmounting filesystem.
[   55.082954][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.241402][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.444569][ T4494] chnl_net:caif_netlink_parms(): no params data found
[   55.507280][ T4544] binder: 4543:4544 tried to acquire reference to desc 0, got 1 instead
[   55.528397][ T4548] loop1: detected capacity change from 0 to 16
[   55.567203][ T4548] erofs: (device loop1): mounted with root inode @ nid 36.
[   55.626568][ T4544] binder: release 4543:4544 transaction 5 out, still active
[   55.629890][ T4544] binder: undelivered TRANSACTION_COMPLETE
[   55.646528][ T4347] binder: send failed reply for transaction 5, target dead
[   55.738820][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.744517][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.787481][ T4494] device bridge_slave_0 entered promiscuous mode
[   55.830879][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.914547][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.228995][ T4301] Bluetooth: hci5: command 0x040f tx timeout
[   57.244462][ T4494] device bridge_slave_1 entered promiscuous mode
[   57.410584][ T4494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.415309][ T4494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.439105][ T4573] loop2: detected capacity change from 0 to 64
[   57.444073][ T4564] loop0: detected capacity change from 0 to 1024
[   57.447709][ T4564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   57.476750][ T4564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000]
[   57.508012][ T4564] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.54: lblock 2 mapped to illegal pblock 2 (length 1)
[   57.518105][ T4564] EXT4-fs (loop0): Remounting filesystem read-only
[   57.522607][ T4564] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   57.524941][ T4564] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.54: lblock 0 mapped to illegal pblock 48 (length 1)
[   57.535291][ T4564] EXT4-fs (loop0): Remounting filesystem read-only
[   57.537455][ T4564] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   57.547461][ T4303] hfs: node 4:3 still has 1 user(s)!
[   57.599684][ T4564] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.54: Failed to acquire dquot type 0
[   57.618940][ T4564] EXT4-fs (loop0): Remounting filesystem read-only
[   57.621033][ T4564] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   57.637995][ T4564] EXT4-fs (loop0): Remounting filesystem read-only
[   57.646170][ T4564] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.54: mark_inode_dirty error
[   57.651751][ T4564] EXT4-fs (loop0): Remounting filesystem read-only
[   57.653581][ T4564] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   57.660079][ T4564] EXT4-fs (loop0): 1 orphan inode deleted
[   57.661701][ T4564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   57.682343][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[   57.687653][ T4449] EXT4-fs (loop0): Remounting filesystem read-only
[   57.697766][ T4449] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   57.700687][ T4449] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:9: Failed to release dquot type 0
[   57.741309][ T4449] EXT4-fs (loop0): Remounting filesystem read-only
[   57.779679][ T4494] team0: Port device team_slave_0 added
[   57.785418][ T4297] EXT4-fs (loop0): unmounting filesystem.
[   57.787173][ T4297] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[   57.812974][ T4297] EXT4-fs (loop0): Remounting filesystem read-only
[   57.814850][ T4297] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   57.822073][ T4297] EXT4-fs (loop0): Remounting filesystem read-only
[   57.823848][ T4297] EXT4-fs error (device loop0): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error
[   57.827113][ T4297] EXT4-fs (loop0): Remounting filesystem read-only
[   57.856620][ T4494] team0: Port device team_slave_1 added
[   57.967589][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.969795][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.989796][ T4494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.013287][ T4596] loop0: detected capacity change from 0 to 16
[   58.028432][ T4596] erofs: (device loop0): mounted with root inode @ nid 36.
[   58.069515][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.071477][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.093207][ T4494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.157893][   T27] audit: type=1326 audit(58.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b5a7a8 code=0x7ffc0000
[   58.205726][   T27] audit: type=1326 audit(58.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6b5a7a8 code=0x7ffc0000
[   58.228748][   T27] audit: type=1326 audit(58.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b5a7a8 code=0x7ffc0000
[   58.252761][ T4604] loop0: detected capacity change from 0 to 16
[   58.260542][ T4604] erofs: (device loop0): mounted with root inode @ nid 36.
[   58.277323][   T27] audit: type=1326 audit(58.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6b5a7a8 code=0x7ffc0000
[   58.717057][   T27] audit: type=1326 audit(58.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b5a7a8 code=0x7ffc0000
[   58.829774][ T4306] Bluetooth: hci3: command 0x1003 tx timeout
[   58.831827][ T4304] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   59.004901][ T4494] device hsr_slave_0 entered promiscuous mode
[   59.008065][   T27] audit: type=1326 audit(58.180:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6b5a7a8 code=0x7ffc0000
[   59.014707][   T27] audit: type=1326 audit(58.190:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b5a7a8 code=0x7ffc0000
[   59.074142][ T4494] device hsr_slave_1 entered promiscuous mode
[   59.124205][ T4494] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.127277][ T4494] Cannot create hsr debugfs directory
[   59.300830][ T4626] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET)
[   59.328704][ T4304] Bluetooth: hci5: command 0x0419 tx timeout
[   59.693907][ T4639] loop4: detected capacity change from 0 to 2048
[   59.694098][ T4642] process 'syz.2.72' launched './file1' with NULL argv: empty string added
[   59.747873][ T4639] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[   59.875518][ T4494] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   59.898538][ T4653] loop4: detected capacity change from 0 to 16
[   59.918938][ T4653] erofs: (device loop4): mounted with root inode @ nid 36.
[   59.953177][ T4494] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   60.010524][ T4494] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   60.032327][ T4494] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   60.155736][ T4662] loop1: detected capacity change from 0 to 1024
[   60.256296][ T4662] hfsplus: bad catalog entry type
[   61.583700][   T36] hfsplus: b-tree write err: -5, ino 4
[   61.947314][ T4683] loop2: detected capacity change from 0 to 16
[   61.951608][ T4683] erofs: (device loop2): mounted with root inode @ nid 36.
[   62.198301][ T4688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.230261][ T4688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.642460][ T4494] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.667919][ T4494] 8021q: adding VLAN 0 to HW filter on device team0
[   62.989338][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.998553][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.381561][ T4304] Bluetooth: hci3: command 0x1003 tx timeout
[   63.384465][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   63.496638][    T9] device hsr_slave_0 left promiscuous mode
[   63.544904][ T4728] loop2: detected capacity change from 0 to 16
[   63.571054][ T4728] erofs: (device loop2): mounted with root inode @ nid 36.
[   63.589628][    T9] device hsr_slave_1 left promiscuous mode
[   63.635702][ T4732] loop0: detected capacity change from 0 to 128
[   63.659112][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.661322][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.670346][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.672330][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.680045][    T9] device bridge_slave_1 left promiscuous mode
[   63.687570][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.735284][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'.
[   63.754262][    T9] device bridge_slave_0 left promiscuous mode
[   63.756530][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.879727][    T9] device veth1_macvtap left promiscuous mode
[   63.881907][    T9] device veth0_macvtap left promiscuous mode
[   63.884619][    T9] device veth1_vlan left promiscuous mode
[   63.887732][    T9] device veth0_vlan left promiscuous mode
[   64.511275][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   64.513649][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   65.622504][    T9] team0 (unregistering): Port device team_slave_1 removed
[   65.801403][    T9] team0 (unregistering): Port device team_slave_0 removed
[   65.960162][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.161302][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.648296][    T9] bond0 (unregistering): Released all slaves
[   68.918800][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.922774][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.925416][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.927364][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.930311][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.933129][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.935727][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.937773][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.958961][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.962564][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.010039][ T4494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.013084][ T4494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.057049][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.060449][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.082745][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.115282][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.121567][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.128402][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.131658][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.136061][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.139335][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.148545][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.169185][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.193004][   T22] cfg80211: failed to load regulatory.db
[   70.544399][ T4771] loop2: detected capacity change from 0 to 64
[   70.662909][ T4771] hfs: request for non-existent node -129 in B*Tree
[   70.664780][ T4771] hfs: request for non-existent node -129 in B*Tree
[   70.936574][ T4783] futex_wake_op: syz.0.112 tries to shift op by -1; fix this program
[   70.945697][ T4783] loop0: detected capacity change from 0 to 512
[   70.955913][ T4783] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   70.960730][ T4783] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   71.053605][ T4783] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   71.057874][ T4783] EXT4-fs (loop0): 1 truncate cleaned up
[   71.060008][ T4783] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   71.238829][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.241089][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.262750][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.244220][ T4297] EXT4-fs (loop0): unmounting filesystem.
[   73.501961][ T4839] loop4: detected capacity change from 0 to 64
[   74.001477][ T1781] Bluetooth: Error in BCSP hdr checksum
[   74.324068][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.326862][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.412712][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.415737][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.419129][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.433104][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.462544][ T4494] device veth0_vlan entered promiscuous mode
[   74.496119][ T4494] device veth1_vlan entered promiscuous mode
[   74.614379][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'.
[   75.298475][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.301352][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.304357][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.307054][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.352729][ T4494] device veth0_macvtap entered promiscuous mode
[   75.358048][ T4494] device veth1_macvtap entered promiscuous mode
[   75.365596][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.368360][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.427841][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.448020][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.450870][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.453698][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.456388][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.479774][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.482688][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.485518][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.501032][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.511088][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.514104][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.516823][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.545672][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.548449][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.578723][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.581393][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.605076][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.615426][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.618134][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.642087][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.645814][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.616442][ T4301] Bluetooth: hci3: command 0x1003 tx timeout
[   76.619491][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   76.645686][ T4873] futex_wake_op: syz.1.130 tries to shift op by -1; fix this program
[   76.654216][ T4873] loop1: detected capacity change from 0 to 512
[   76.657479][ T4873] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   76.662362][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.691630][ T4873] EXT4-fs (loop1): 1 truncate cleaned up
[   76.693390][ T4873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   76.850747][ T4494] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.853188][ T4494] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.855494][ T4494] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.858053][ T4494] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.978438][ T4300] EXT4-fs (loop1): unmounting filesystem.
[   77.800605][ T4887] loop4: detected capacity change from 0 to 64
[   77.938996][ T4668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.941473][ T4668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.958935][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.930914][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'.
[   79.044174][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.046502][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.149647][ T4909] 9pnet_fd: Insufficient options for proto=fd
[   79.173081][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   82.094652][ T4304] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   82.097933][ T4304] Bluetooth: hci2: Injecting HCI hardware error event
[   82.100999][ T4298] Bluetooth: hci2: hardware error 0x00
[   82.283225][ T4948] loop5: detected capacity change from 0 to 64
[   82.692852][ T4969] 9pnet_fd: Insufficient options for proto=fd
[   82.801970][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.153'.
[   83.742733][ T4988] capability: warning: `syz.4.160' uses 32-bit capabilities (legacy support in use)
[   84.036954][ T5001] futex_wake_op: syz.4.161 tries to shift op by -1; fix this program
[   84.046169][ T5001] loop4: detected capacity change from 0 to 512
[   84.049288][ T5001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   84.084369][ T5001] EXT4-fs (loop4): 1 truncate cleaned up
[   84.086022][ T5001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   84.108834][ T4304] Bluetooth: hci3: command 0x1003 tx timeout
[   84.109015][ T4314] Bluetooth: hci6: command 0x1003 tx timeout
[   84.111486][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   84.115469][ T4301] Bluetooth: hci6: Opcode 0x1003 failed: -110
[   84.281771][ T4306] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   84.284833][ T4306] Bluetooth: hci4: Injecting HCI hardware error event
[   84.288228][ T4306] Bluetooth: hci4: hardware error 0x00
[   85.506308][ T4298] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   85.728152][ T4310] EXT4-fs (loop4): unmounting filesystem.
[   86.018875][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'.
[   86.215602][ T5044] 9pnet_fd: Insufficient options for proto=fd
[   87.818797][ T4306] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   90.327646][ T5110] 9pnet_fd: Insufficient options for proto=fd
[   90.685133][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'.
[   90.766508][ T4298] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   90.769464][ T4298] Bluetooth: hci1: Injecting HCI hardware error event
[   90.773592][ T4298] Bluetooth: hci1: hardware error 0x00
[   91.319432][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   91.643087][ T5138] device syz_tun entered promiscuous mode
[   93.073635][ T5138] device batadv_slave_0 entered promiscuous mode
[   93.628859][ T4298] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   93.993299][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[   94.002795][ T5161] 9pnet_fd: Insufficient options for proto=fd
[   94.029958][ T5159] futex_wake_op: syz.2.194 tries to shift op by -1; fix this program
[   94.037617][ T5159] loop2: detected capacity change from 0 to 512
[   94.058625][ T5159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   94.096452][ T5159] EXT4-fs (loop2): 1 truncate cleaned up
[   94.098112][ T5159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   94.686429][ T4298] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   94.689041][ T4298] Bluetooth: hci0: Injecting HCI hardware error event
[   94.692089][ T4298] Bluetooth: hci0: hardware error 0x00
[   94.736168][ T5181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'.
[   95.073348][ T4303] EXT4-fs (loop2): unmounting filesystem.
[   96.979012][ T4298] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   97.304194][ T5214] 9pnet_fd: Insufficient options for proto=fd
[   97.515371][ T5224] loop4: detected capacity change from 0 to 64
[   98.300058][ T4298] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[   98.302583][ T4298] Bluetooth: hci5: Injecting HCI hardware error event
[   98.306203][ T4304] Bluetooth: hci5: hardware error 0x00
[   98.707332][ T5239] futex_wake_op: syz.5.215 tries to shift op by -1; fix this program
[   98.710906][ T4298] Bluetooth: hci3: command 0x1003 tx timeout
[   98.713556][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   98.722197][ T5239] loop5: detected capacity change from 0 to 512
[   98.726494][ T5239] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   98.757062][ T5239] EXT4-fs (loop5): 1 truncate cleaned up
[   98.758689][ T5239] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   99.068637][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   99.848085][ T4494] EXT4-fs (loop5): unmounting filesystem.
[  100.622467][ T5284] loop5: detected capacity change from 0 to 64
[  101.453897][ T4304] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  102.063863][ T5312] futex_wake_op: syz.2.231 tries to shift op by -1; fix this program
[  102.130985][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[  102.381526][ T5312] loop2: detected capacity change from 0 to 512
[  102.485082][ T5312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  102.748711][ T5312] EXT4-fs (loop2): 1 truncate cleaned up
[  102.750439][ T5312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  103.204937][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  103.375933][ T5347] loop2: detected capacity change from 0 to 64
[  103.499066][ T1862] Bluetooth: Error in BCSP hdr checksum
[  105.018889][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'.
[  105.308780][ T4304] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  106.341588][ T5405] futex_wake_op: syz.5.250 tries to shift op by -1; fix this program
[  106.349412][ T5405] loop5: detected capacity change from 0 to 512
[  106.354730][ T5405] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  106.393215][ T5405] EXT4-fs (loop5): 1 truncate cleaned up
[  106.394814][ T5405] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  106.542220][ T5412] loop1: detected capacity change from 0 to 64
[  106.787742][ T4494] EXT4-fs (loop5): unmounting filesystem.
[  107.199774][ T5442] loop5: detected capacity change from 0 to 2048
[  107.310849][ T5442] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  107.543626][ T4494] EXT4-fs (loop5): unmounting filesystem.
[  108.542571][ T5468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'.
[  110.254223][ T5482] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  110.317885][ T5488] loop4: detected capacity change from 0 to 64
[  110.564462][ T5496] loop4: detected capacity change from 0 to 512
[  110.686604][ T5496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  111.012213][ T4310] EXT4-fs (loop4): unmounting filesystem.
[  111.115674][ T5504] futex_wake_op: syz.1.268 tries to shift op by -1; fix this program
[  111.135533][ T5504] loop1: detected capacity change from 0 to 512
[  111.143471][ T5504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  111.152629][ T5504] EXT4-fs (loop1): 1 truncate cleaned up
[  111.154707][ T5504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  111.739055][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  112.046416][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.081861][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.134813][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.175897][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.205499][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  112.210785][ T5514] overlayfs: unrecognized mount option ":" or missing value
[  112.536344][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'.
[  113.296537][ T5530] loop2: detected capacity change from 0 to 64
[  114.008093][ T5549] futex_wake_op: syz.2.293 tries to shift op by -1; fix this program
[  114.016860][ T5549] loop2: detected capacity change from 0 to 512
[  114.025573][ T5549] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.186087][ T5549] EXT4-fs (loop2): 1 truncate cleaned up
[  114.187979][ T5549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  114.896736][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  115.199859][   T27] kauditd_printk_skb: 20 callbacks suppressed
[  115.199871][   T27] audit: type=1326 audit(115.170:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  115.215878][   T27] audit: type=1326 audit(115.180:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  116.166770][ T5567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'.
[  116.538673][   T27] audit: type=1326 audit(115.180:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  116.550366][   T27] audit: type=1326 audit(115.180:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  116.561099][   T27] audit: type=1326 audit(115.180:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  117.563993][ T5584] loop4: detected capacity change from 0 to 16
[  117.579447][ T5584] erofs: (device loop4): mounted with root inode @ nid 36.
[  117.958021][ T5594] futex_wake_op: syz.1.308 tries to shift op by -1; fix this program
[  117.966087][ T5594] loop1: detected capacity change from 0 to 512
[  117.978936][ T5594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.058682][ T5594] EXT4-fs (loop1): 1 truncate cleaned up
[  118.060257][ T5594] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  118.376072][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'.
[  118.692523][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  118.728095][ T5608] 9pnet_fd: Insufficient options for proto=fd
[  118.750128][ T4304] Bluetooth: hci3: command 0x1003 tx timeout
[  118.752102][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  119.634371][ T5620] netlink: 108 bytes leftover after parsing attributes in process `syz.4.318'.
[  119.754781][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.759495][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.806736][ T5629] loop1: detected capacity change from 0 to 4096
[  119.839155][ T5629] ntfs3: Unknown parameter 'windows_names'
[  120.126956][ T5635] futex_wake_op: syz.2.324 tries to shift op by -1; fix this program
[  120.135448][ T5635] loop2: detected capacity change from 0 to 512
[  120.138127][ T5635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  120.153463][ T5635] EXT4-fs (loop2): 1 truncate cleaned up
[  120.155032][ T5635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  121.641889][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  121.941196][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'.
[  122.046175][ T5664] 9pnet_fd: Insufficient options for proto=fd
[  122.988839][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  123.362074][ T5687] 9pnet_fd: Insufficient options for proto=fd
[  123.764363][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[  125.559326][ T5721] futex_wake_op: syz.5.338 tries to shift op by -1; fix this program
[  125.579269][ T5682] loop5: detected capacity change from 0 to 512
[  125.588680][ T5682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  125.999566][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  126.001764][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  126.091035][ T4919] Bluetooth: Error in BCSP hdr checksum
[  126.324888][ T4304] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  126.326984][ T4306] Bluetooth: hci3: command 0x1003 tx timeout
[  126.375858][ T5682] EXT4-fs (loop5): 1 truncate cleaned up
[  126.377530][ T5682] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  126.738542][ T4494] EXT4-fs (loop5): unmounting filesystem.
[  127.011011][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'.
[  127.869461][ T4298] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  129.037946][ T5777] futex_wake_op: syz.0.372 tries to shift op by -1; fix this program
[  129.045905][ T5777] loop0: detected capacity change from 0 to 512
[  129.055372][ T5777] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  129.087913][ T5777] EXT4-fs (loop0): 1 truncate cleaned up
[  129.089839][ T5777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  130.146786][ T4297] EXT4-fs (loop0): unmounting filesystem.
[  130.205724][ T5802] loop2: detected capacity change from 0 to 512
[  130.236151][ T5802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  130.240283][ T5797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'.
[  130.255156][ T5802] EXT4-fs (loop2): 1 truncate cleaned up
[  130.257807][ T5802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  130.304809][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  130.668823][ T4304] Bluetooth: hci3: command 0x1003 tx timeout
[  130.671612][ T4312] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  130.813112][  T487] Bluetooth: Error in BCSP hdr checksum
[  131.002181][ T5823] device syzkaller0 entered promiscuous mode
[  131.032536][ T4919] Bluetooth: Error in BCSP hdr checksum
[  131.348045][ T5830] futex_wake_op: syz.1.395 tries to shift op by -1; fix this program
[  131.356647][ T5830] loop1: detected capacity change from 0 to 512
[  131.362480][ T5830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.446084][ T5830] EXT4-fs (loop1): 1 truncate cleaned up
[  131.447854][ T5830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  132.037849][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  132.588781][ T4298] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  132.588893][ T4312] Bluetooth: hci6: command 0x1003 tx timeout
[  133.882830][    T9] Bluetooth: Error in BCSP hdr checksum
[  135.134839][ T5870] futex_wake_op: syz.5.408 tries to shift op by -1; fix this program
[  135.142946][ T5870] loop5: detected capacity change from 0 to 512
[  135.148060][ T5870] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  135.165219][ T5870] EXT4-fs (loop5): 1 truncate cleaned up
[  135.166913][ T5870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  135.628707][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  135.628769][ T4312] Bluetooth: hci3: command 0x1003 tx timeout
[  135.839462][ T4494] EXT4-fs (loop5): unmounting filesystem.
[  136.509487][ T1862] Bluetooth: Error in BCSP hdr checksum
[  138.269404][ T4312] Bluetooth: hci3: command 0x1003 tx timeout
[  138.272063][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  138.527464][ T5898] loop4: detected capacity change from 0 to 64
[  139.160369][ T4919] Bluetooth: Error in BCSP hdr checksum
[  139.188993][ T5906] futex_wake_op: syz.5.421 tries to shift op by -1; fix this program
[  139.197178][ T5906] loop5: detected capacity change from 0 to 512
[  139.200343][ T5906] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  139.216885][ T5906] EXT4-fs (loop5): 1 truncate cleaned up
[  139.218456][ T5906] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  139.418903][    T9] Bluetooth: Error in BCSP hdr checksum
[  139.879053][ T4494] EXT4-fs (loop5): unmounting filesystem.
[  140.918702][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  140.919122][ T4304] Bluetooth: hci3: command 0x1003 tx timeout
[  141.918855][   T36] Bluetooth: Error in BCSP hdr checksum
[  142.892941][ T5937] loop4: detected capacity change from 0 to 1024
[  142.896673][ T5937] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  142.901580][ T5937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  142.910370][ T5937] tmpfs: Bad value for 'nr_blocks'
[  142.926936][ T4310] EXT4-fs (loop4): unmounting filesystem.
[  143.154843][ T5941] futex_wake_op: syz.4.433 tries to shift op by -1; fix this program
[  143.163057][ T5941] loop4: detected capacity change from 0 to 512
[  143.166214][ T5941] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  143.174649][ T5941] EXT4-fs (loop4): 1 truncate cleaned up
[  143.176270][ T5941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  143.718755][ T4312] Bluetooth: hci3: command 0x1003 tx timeout
[  143.720749][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  143.845541][ T4310] EXT4-fs (loop4): unmounting filesystem.
[  145.680992][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'.
[  146.013892][ T5971] loop0: detected capacity change from 0 to 1024
[  146.105352][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  146.237935][ T4297] EXT4-fs (loop0): unmounting filesystem.
[  146.763116][ T5990] futex_wake_op: syz.2.445 tries to shift op by -1; fix this program
[  148.237759][ T5990] loop2: detected capacity change from 0 to 512
[  148.250811][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  148.253807][ T4306] Bluetooth: hci3: command 0x1003 tx timeout
[  148.405225][ T5990] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  148.735564][ T5990] EXT4-fs (loop2): 1 truncate cleaned up
[  148.737413][ T5990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  148.828899][ T4312] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  149.047877][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  149.419153][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'.
[  150.468687][ T6037] futex_wake_op: syz.5.463 tries to shift op by -1; fix this program
[  150.510818][ T6037] loop5: detected capacity change from 0 to 512
[  150.513619][ T6037] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  150.716478][ T6037] EXT4-fs (loop5): 1 truncate cleaned up
[  150.718064][ T6037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  150.801369][ T4494] EXT4-fs (loop5): unmounting filesystem.
[  152.957470][ T6072] loop1: detected capacity change from 0 to 512
[  153.005468][ T6074] loop2: detected capacity change from 0 to 512
[  153.022706][ T6072] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  153.025695][ T6072] EXT4-fs (loop1): orphan cleanup on readonly fs
[  153.040075][ T6072] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  153.043412][ T6072] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  153.074962][ T6074] EXT4-fs (loop2): orphan cleanup on readonly fs
[  153.084150][ T6074] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.473: bg 0: block 248: padding at end of block bitmap is not set
[  153.098839][ T6072] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  153.106791][ T6074] Quota error (device loop2): write_blk: dquota write failed
[  153.109382][ T6072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.472: bg 0: block 40: padding at end of block bitmap is not set
[  153.114582][ T6074] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  153.122268][ T6074] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.473: Failed to acquire dquot type 1
[  153.122826][ T6072] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  153.127639][ T6074] EXT4-fs (loop2): 1 truncate cleaned up
[  153.135205][ T6072] EXT4-fs (loop1): 1 truncate cleaned up
[  153.136846][ T6072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  153.161662][ T6074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  153.169579][ T4560] Bluetooth: Error in BCSP hdr checksum
[  153.198871][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  153.316377][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  153.684210][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'.
[  153.749444][ T6091] futex_wake_op: syz.1.478 tries to shift op by -1; fix this program
[  153.757765][ T6091] loop1: detected capacity change from 0 to 512
[  153.987468][ T6091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  153.992780][ T4312] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  154.622306][ T6091] EXT4-fs (loop1): 1 truncate cleaned up
[  154.623892][ T6091] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  154.826177][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  155.009911][ T4312] Bluetooth: hci6: command 0x1003 tx timeout
[  155.012279][ T4306] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  155.909842][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.912408][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.940519][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.946795][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.653075][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.490'.
[  156.830971][ T6125] futex_wake_op: syz.2.491 tries to shift op by -1; fix this program
[  156.849109][ T6125] loop2: detected capacity change from 0 to 512
[  156.870620][ T6125] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  159.241363][ T6125] EXT4-fs (loop2): 1 truncate cleaned up
[  159.243046][ T6125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  159.342592][ T6142] loop4: detected capacity change from 0 to 64
[  159.484059][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  159.788896][ T6161] loop4: detected capacity change from 0 to 2048
[  159.889143][ T6161] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  160.669088][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  160.790316][ T4310] EXT4-fs (loop4): unmounting filesystem.
[  161.799815][   T27] audit: type=1326 audit(161.770:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  161.815719][   T27] audit: type=1326 audit(161.780:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff81d58cd4 code=0x7ffc0000
[  161.876839][   T27] audit: type=1326 audit(161.840:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff81d5c30c code=0x7ffc0000
[  161.885135][   T27] audit: type=1326 audit(161.850:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  161.900577][   T27] audit: type=1326 audit(161.850:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff81d5c30c code=0x7ffc0000
[  161.906301][   T27] audit: type=1326 audit(161.850:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff81d590ac code=0x7ffc0000
[  161.933550][   T27] audit: type=1326 audit(161.850:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  161.953506][   T27] audit: type=1326 audit(161.850:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d5a7a8 code=0x7ffc0000
[  162.268796][ T4306] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  162.898552][ T6219] loop1: detected capacity change from 0 to 1024
[  162.965705][ T6219] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  163.030113][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  163.074285][ T6217] loop5: detected capacity change from 0 to 32768
[  163.080397][ T4766] Bluetooth: Error in BCSP hdr checksum
[  163.082403][ T6217] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.524 (6217)
[  163.094701][ T6217] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  163.097646][ T6217] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  163.100179][ T6217] BTRFS info (device loop5): force zlib compression, level 3
[  163.102203][ T6217] BTRFS info (device loop5): force clearing of disk cache
[  163.104077][ T6217] BTRFS info (device loop5): setting nodatasum
[  163.105662][ T6217] BTRFS info (device loop5): allowing degraded mounts
[  163.107429][ T6217] BTRFS info (device loop5): enabling disk space caching
[  163.109291][ T6217] BTRFS info (device loop5): disk space caching is enabled
[  163.389183][ T6217] BTRFS info (device loop5): rebuilding free space tree
[  163.841100][ T4611] Bluetooth: Error in BCSP hdr checksum
[  164.121628][ T6217] BTRFS info (device loop5): disabling free space tree
[  164.123560][ T6217] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  164.126321][ T6217] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  164.182328][ T6217] BTRFS info (device loop5): balance: start -susage=34359738372,drange=7..526336,limit=0..6
[  164.187762][ T6217] ------------[ cut here ]------------
[  164.189885][ T6217] WARNING: CPU: 0 PID: 6217 at fs/btrfs/block-group.c:2539 btrfs_create_pending_block_groups+0xb08/0xd64
[  164.192922][ T6217] Modules linked in:
[  164.193950][ T6217] CPU: 0 PID: 6217 Comm: syz.5.524 Not tainted 6.1.141-syzkaller #0
[  164.196095][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  164.198855][ T6217] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  164.201053][ T6217] pc : btrfs_create_pending_block_groups+0xb08/0xd64
[  164.202905][ T6217] lr : btrfs_create_pending_block_groups+0xb08/0xd64
[  164.204739][ T6217] sp : ffff800020f074c0
[  164.205907][ T6217] x29: ffff800020f076f0 x28: ffff0000f4ae21b8 x27: 1fffe0001c349049
[  164.208145][ T6217] x26: 1fffe0001e95c40b x25: 1fffe0001e95c40a x24: 0000000000000000
[  164.210388][ T6217] x23: dfff800000000000 x22: ffff0000f4ae2058 x21: 0000000000000000
[  164.212631][ T6217] x20: ffff0000f4ae2050 x19: 00000000ffffffe4 x18: ffff800011a7bce0
[  164.214842][ T6217] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000002
[  164.217045][ T6217] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000
[  164.219389][ T6217] x11: 00000000000632ae x10: ffff800033c4f000 x9 : 351694b542702900
[  164.221690][ T6217] x8 : 351694b542702900 x7 : 0000000000000001 x6 : 0000000000000001
[  164.224183][ T6217] x5 : ffff800020f06f58 x4 : ffff800015154700 x3 : ffff8000083115f4
[  164.226471][ T6217] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
[  164.228721][ T6217] Call trace:
[  164.229615][ T6217]  btrfs_create_pending_block_groups+0xb08/0xd64
[  164.231382][ T6217]  __btrfs_end_transaction+0x134/0x5fc
[  164.232864][ T6217]  btrfs_end_transaction+0x24/0x34
[  164.234341][ T6217]  btrfs_inc_block_group_ro+0x59c/0x634
[  164.235839][ T6217]  btrfs_relocate_block_group+0x314/0x970
[  164.237469][ T6217]  btrfs_relocate_chunk+0x104/0x364
[  164.238933][ T6217]  __btrfs_balance+0x1390/0x1af8
[  164.240285][ T6217]  btrfs_balance+0xa44/0xe20
[  164.241561][ T6217]  btrfs_ioctl_balance+0x3c0/0x5f8
[  164.243088][ T6217]  btrfs_ioctl+0xac4/0xbd0
[  164.244346][ T6217]  __arm64_sys_ioctl+0x14c/0x1c8
[  164.245689][ T6217]  invoke_syscall+0x98/0x2bc
[  164.247006][ T6217]  el0_svc_common+0x138/0x258
[  164.248345][ T6217]  do_el0_svc+0x58/0x13c
[  164.249581][ T6217]  el0_svc+0x58/0x138
[  164.250703][ T6217]  el0t_64_sync_handler+0x84/0xf0
[  164.252069][ T6217]  el0t_64_sync+0x18c/0x190
[  164.253379][ T6217] irq event stamp: 75706
[  164.254571][ T6217] hardirqs last  enabled at (75705): [<ffff800008307d18>] __up_console_sem+0xb4/0x100
[  164.257256][ T6217] hardirqs last disabled at (75706): [<ffff80001191c930>] el1_dbg+0x24/0x80
[  164.259633][ T6217] softirqs last  enabled at (75694): [<ffff8000081a8e70>] handle_softirqs+0xaf8/0xc6c
[  164.262258][ T6217] softirqs last disabled at (75547): [<ffff800008020164>] __do_softirq+0x14/0x20
[  164.264862][ T6217] ---[ end trace 0000000000000000 ]---
[  164.267030][ T6217] BTRFS info (device loop5: state A): dumping space info:
[  164.269103][ T6217] BTRFS info (device loop5: state A): space_info DATA+METADATA has 2240512 free, is full
[  164.272074][ T6217] BTRFS info (device loop5: state A): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0
[  164.275847][ T6217] BTRFS info (device loop5: state A): space_info SYSTEM has 8253440 free, is not full
[  164.278721][ T6217] BTRFS info (device loop5: state A): space_info total=12451840, used=4096, pinned=0, reserved=4096, may_use=0, readonly=4190208 zone_unusable=0
[  164.282776][ T6217] BTRFS info (device loop5: state A): global_block_rsv: size 983040 reserved 983040
[  164.285490][ T6217] BTRFS info (device loop5: state A): trans_block_rsv: size 0 reserved 0
[  164.287895][ T6217] BTRFS info (device loop5: state A): chunk_block_rsv: size 0 reserved 0
[  164.290292][ T6217] BTRFS info (device loop5: state A): delayed_block_rsv: size 0 reserved 0
[  164.292661][ T6217] BTRFS info (device loop5: state A): delayed_refs_rsv: size 196608 reserved 4096
[  164.295200][ T6217] BTRFS: error (device loop5: state A) in btrfs_create_pending_block_groups:2539: errno=-28 No space left
[  164.298326][ T6217] BTRFS info (device loop5: state EA): forced readonly
[  164.300607][ T6217] BTRFS: error (device loop5: state EA) in btrfs_create_pending_block_groups:2551: errno=-28 No space left
[  164.305019][ T6217] BTRFS info (device loop5: state EA): balance: ended with status: -30
[  164.438023][ T4494] BTRFS info (device loop5: state EA): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  164.748696][ T4306] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  165.628740][ T4298] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  165.628954][ T4306] Bluetooth: hci6: command 0x1003 tx timeout