last executing test programs:

4m31.196220557s ago: executing program 0 (id=99):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x7, <r4=>r1, 'id0\x00'})
recvmsg$unix(r4, 0x0, 0x2121)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
socket(0x1e, 0x2, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

4m25.971722396s ago: executing program 0 (id=104):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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")
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000980), 0x80842, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
ioctl$RTC_PIE_ON(r0, 0x7005)

4m24.980001003s ago: executing program 0 (id=107):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
syz_open_pts(r1, 0x2000)
io_setup(0x1, &(0x7f0000002500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000380)="a3", 0x1}])
close_range(r0, 0xffffffffffffffff, 0x0)

4m24.483627232s ago: executing program 0 (id=112):
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8)

4m24.281723328s ago: executing program 0 (id=113):
unshare(0x4030400)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f00000000c0), 0x4)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300))
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r6, 0x0, 0x6, &(0x7f0000000080), 0x0)
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)

4m23.016641907s ago: executing program 0 (id=114):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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")
pipe2$9p(&(0x7f00000027c0), 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_buf(r4, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00', 0x20000000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000a05500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))

4m5.909549116s ago: executing program 32 (id=114):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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")
pipe2$9p(&(0x7f00000027c0), 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_buf(r4, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00', 0x20000000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000a05500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))

3m1.424074224s ago: executing program 3 (id=238):
setresgid(0xffffffffffffffff, 0xee01, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200898, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180))
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000400)={[{@journal_checksum}, {@nomblk_io_submit}, {@errors_continue}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x55f, &(0x7f0000000d00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(0xffffffffffffffff, 0xfffffffe)

2m56.502586499s ago: executing program 3 (id=242):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
preadv(r0, 0x0, 0x0, 0x401, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0xfff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
syz_io_uring_setup(0x4fc, 0x0, &(0x7f0000000340), 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0xc000)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404)

2m54.273699134s ago: executing program 3 (id=247):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000280)=[@decrefs, @request_death={0x400c6313}], 0x0, 0x0, 0x0})

2m53.001944343s ago: executing program 3 (id=250):
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
sendmsg$802154_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080)
sendmmsg$alg(r4, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x0, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x4, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400000, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x10000007, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x1, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x1, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x918)
r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0)

2m49.546356444s ago: executing program 3 (id=255):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
setsockopt$sock_int(r5, 0x1, 0x23, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000001500), 0x0, 0xf73, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r8, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(0x0, 0x107502, 0x0)
utimensat(r9, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000008c0)={{}, {0x0, 0x2710}}, 0x0)

2m35.361276764s ago: executing program 3 (id=274):
pipe2(0x0, 0x80000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
unshare(0x64000680)

2m35.239643744s ago: executing program 1 (id=275):
socket(0x10, 0x3, 0x0)
timer_create(0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xd0, 0xb9, 0xa7, 0x10, 0x1004, 0x61aa, 0x18b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20800, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f0000000000)={0x11, 0x4, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x1}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x200, 0xc3ad}, 0x0, 0x0)

2m31.812025472s ago: executing program 1 (id=279):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
preadv(r0, 0x0, 0x0, 0x401, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0xfff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
syz_io_uring_setup(0x4fc, 0x0, &(0x7f0000000340), 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0xc000)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404)

2m29.096287875s ago: executing program 1 (id=281):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x281, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2m24.745631485s ago: executing program 1 (id=284):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000001d80), &(0x7f0000001d40)=r5}, 0x20)
socket$inet6(0xa, 0x3, 0x8000000003c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='itimer_expire\x00', r7}, 0x18)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000a40)={[{@fat=@discard}, {@fat=@nocase}, {@nodots}, {@fat=@flush}, {@fat=@nfs}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@dots}, {@fat=@check_normal}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbac}}, {@fat=@usefree}, {@fat=@check_normal}]}, 0x1, 0x23d, &(0x7f0000000040)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI")

2m22.620778552s ago: executing program 1 (id=286):
syz_io_uring_setup(0x2b06, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008c}, 0x4004000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x2)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
r6 = accept4(r2, 0x0, 0x0, 0x80800)
socket$inet6_sctp(0xa, 0x801, 0x84)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {0x0}], 0x2}, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1})
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0)

2m19.109406997s ago: executing program 33 (id=274):
pipe2(0x0, 0x80000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
unshare(0x64000680)

2m16.752401761s ago: executing program 1 (id=291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket(0xa, 0x1, 0x84)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)

2m10.707209584s ago: executing program 4 (id=297):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/29, 0x1d, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x49, 0x0, &(0x7f0000000180))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/222, 0xde, 0x18000000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16004000002100000400000001b6b3f6c17f4b529423819cdc21376add3cb15ad3b8d08df9c49274fdeec157af115421f26d321bb1721ec8f1b20b03b6af466e07000000000000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000520001202abd7000000000000a000000080001007aae0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000075}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)

2m9.188929953s ago: executing program 4 (id=299):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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")
pipe2$9p(&(0x7f00000027c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_buf(r5, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000a05500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
fcntl$setlease(r4, 0x400, 0x1)

2m4.991489532s ago: executing program 4 (id=301):
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_io_uring_setup(0x48be, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f00000011c0), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f00000028c0)={0x7, 0x0, &(0x7f00000027c0)=[{0x0}], 0x0, 0x1}, 0x20)

2m2.830639291s ago: executing program 4 (id=304):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r6, &(0x7f0000000340), 0x0}, 0x20)
socket$inet6(0xa, 0x3, 0x8000000003c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='itimer_expire\x00', r7}, 0x18)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000a40)={[{@fat=@discard}, {@fat=@nocase}, {@nodots}, {@fat=@flush}, {@fat=@nfs}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@dots}, {@fat=@check_normal}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbac}}, {@fat=@usefree}, {@fat=@check_normal}]}, 0x1, 0x23d, &(0x7f0000000040)="$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")

1m59.528908849s ago: executing program 34 (id=291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket(0xa, 0x1, 0x84)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)

1m59.443963556s ago: executing program 4 (id=306):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
read(0xffffffffffffffff, &(0x7f0000000180)=""/109, 0x6d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = dup2(r4, r4)
write$P9_RSTATFS(r5, &(0x7f00000003c0)={0x43, 0x9, 0x2f00, {0x0, 0x0, 0x400000, 0x3be, 0x1, 0x4, 0xfffffffffffffffd, 0x100000001, 0x7ffffffc}}, 0x43)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket(0x6, 0x0, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x18)
listen(r6, 0x3)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x0, 0xffffffe4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

1m57.782413776s ago: executing program 4 (id=308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/211, 0xd3}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0)

1m41.897501579s ago: executing program 35 (id=308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/211, 0xd3}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0)

12.628527632s ago: executing program 2 (id=393):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d63703836342c756e695f786c6174653d312c636f6465706167653d313235302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836322c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c002aa220cdeeb5ba33c93123800bef80e5155d8840d88fc461c6"], 0x25, 0x336, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), 0x0}, 0x20)
request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0xfffffffffffffffc)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)
ftruncate(0xffffffffffffffff, 0x5)
epoll_create(0x5eb4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

11.351692232s ago: executing program 8 (id=395):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000200)='./file0\x00', 0x200081, 0x4c)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
fsync(0xffffffffffffffff)

10.832065652s ago: executing program 8 (id=396):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})
syz_emit_ethernet(0x35, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x13, 0x0, @gue={{0x2, 0x0, 0x1, 0x27}, "3f9c1d"}}}}}}, 0x0)

10.401969316s ago: executing program 8 (id=398):
socket$igmp6(0xa, 0x3, 0x2)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xd0, 0xb9, 0xa7, 0x10, 0x1004, 0x61aa, 0x18b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20800, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f0000000000)={0x11, 0x4, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x1}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x200, 0xc3ad}, 0x0, 0x0)

10.059063303s ago: executing program 2 (id=399):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r7, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7.967228377s ago: executing program 2 (id=401):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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")
pipe2$9p(&(0x7f00000027c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00', 0x20000000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000a05500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
fcntl$setlease(r4, 0x400, 0x1)

6.801408877s ago: executing program 6 (id=402):
r0 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)=<r3=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
read$char_usb(r5, 0x0, 0x0)
write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

5.677737606s ago: executing program 6 (id=403):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000009c0)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xe3, &(0x7f00000008c0)=""/227}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48)

5.539971887s ago: executing program 8 (id=404):
unshare(0x4030400)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f00000000c0), 0x4)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300))
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r6, 0x0, 0x6, &(0x7f0000000080), 0x0)
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")

4.761759207s ago: executing program 2 (id=405):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000000001f0001000000950f000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
futimesat(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8000, 0x8401, 0xfffffff9, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004800)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r4, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x301}, 0x14}}, 0x200448c0)
listen(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @local, 0xff000000, 0x0, 0x5, 0x3, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x8, 0x9, 0xd, 0x6140, '\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x181}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

4.523461436s ago: executing program 8 (id=406):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
r3 = gettid()
r4 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffb)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "c614c38689983153712d5046798f304d321e3f7c6ab91961b62303330de618531402383e5c412052dc8ddbec39c967fd569ba98ad16da71db7171f5774af2a54", 0x27}, 0x48, r4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x1adb8, 0x40, 0x200000, 0x80000, 0x10})
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_GET_DEVICE_ATTR_vm(r8, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x3ee40000, 0x2, &(0x7f0000000140)=0x80000000000})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

4.48090881s ago: executing program 6 (id=407):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000340), 0x0}, 0x20)
socket$inet6(0xa, 0x3, 0x8000000003c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='itimer_expire\x00', r6}, 0x18)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000a40)={[{@fat=@discard}, {@fat=@nocase}, {@nodots}, {@fat=@flush}, {@fat=@nfs}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@dots}, {@fat=@check_normal}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbac}}, {@fat=@usefree}, {@fat=@check_normal}]}, 0x1, 0x23d, &(0x7f0000000040)="$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")

3.438162701s ago: executing program 2 (id=408):
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
eventfd(0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8, 0x800)
inotify_rm_watch(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x2, 0x2}}, 0x2e)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nouid32}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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")

2.80516055s ago: executing program 6 (id=409):
r0 = socket$key(0xf, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
setitimer(0x2, &(0x7f0000000000)={{0x0, 0xea60}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
accept4$unix(r3, 0x0, 0x0, 0x80800)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0x1c, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0xc, 0x8, 0x298, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949509868d522a81c"}]}, 0xe0}, 0x1, 0x7}, 0x14)

366.828801ms ago: executing program 2 (id=410):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726)
write$tun(r0, &(0x7f0000000040)=ANY=[], 0x1043)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x143941, 0x18)

366.410931ms ago: executing program 6 (id=411):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000075981400000000003b810000850000007d000000760000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x5eba, 0x7127, 0x44, 0x0, 0x0)

365.439031ms ago: executing program 8 (id=412):
socket(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20800, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f0000000000)={0x11, 0x4, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x1}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x200, 0xc3ad}, 0x0, 0x0)

129.45733ms ago: executing program 7 (id=305):
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x400, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendmmsg$alg(r4, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x0, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x4, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400000, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x10000007, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x1, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x1, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x918)
r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0)

0s ago: executing program 6 (id=413):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
read(0xffffffffffffffff, &(0x7f0000000180)=""/109, 0x6d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r5 = dup2(r4, r4)
write$P9_RSTATFS(r5, &(0x7f00000003c0)={0x43, 0x9, 0x2f00, {0x0, 0x0, 0x400000, 0x3be, 0x1, 0x4, 0xfffffffffffffffd, 0x100000001, 0x7ffffffc}}, 0x43)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket(0x6, 0x0, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x18)
listen(r6, 0x3)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x0, 0xffffffe4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

kernel console output (not intermixed with test programs):


[  207.580034][ T4454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.616537][ T5290] loop2: detected capacity change from 0 to 512
[  207.667337][ T5290] EXT4-fs: Ignoring removed i_version option
[  207.692638][ T5290] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  207.819278][ T5290] EXT4-fs (loop2): 1 truncate cleaned up
[  207.825600][ T5290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  208.010314][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  208.192287][ T5298] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  208.201267][ T5298] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  208.211213][ T5299] loop1: detected capacity change from 0 to 16
[  208.257353][ T5299] erofs: (device loop1): mounted with root inode @ nid 36.
[  208.273284][ T5299] syz.1.216: attempt to access beyond end of device
[  208.273284][ T5299] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  209.392847][ T5304] loop2: detected capacity change from 0 to 1024
[  209.400269][ T5304] EXT4-fs: Ignoring removed nobh option
[  209.405945][ T5304] EXT4-fs: Ignoring removed bh option
[  209.908548][ T5304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  210.095452][ T5304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  210.132571][   T14] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  210.151508][   T14] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  212.310152][ T5319] binder: BINDER_SET_CONTEXT_MGR already set
[  212.316427][ T5319] binder: 5314:5319 ioctl 4018620d 200000000040 returned -16
[  212.334249][ T5319] binder: 5314:5319 unknown command 1074553619
[  212.340811][ T5319] binder: 5314:5319 ioctl c0306201 2000000001c0 returned -22
[  212.605037][ T4454] bond0 (unregistering): Released all slaves
[  213.476064][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.487349][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.497642][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.508904][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.520782][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.534448][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.545917][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.626969][ T5330] loop1: detected capacity change from 0 to 512
[  213.667023][ T5330] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  213.825970][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.068342][ T4940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.196977][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.208252][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.219742][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.230537][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.242788][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.253616][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.253621][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  214.264571][ T4940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.280359][ T4940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.308683][ T4940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.389763][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  214.538903][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  214.572717][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  214.589212][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  214.649067][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  214.727744][ T4940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.743819][ T4940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.752795][ T4940] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.762004][ T4940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.157945][ T5339] loop3: detected capacity change from 0 to 16
[  216.415451][ T5339] erofs: (device loop3): mounted with root inode @ nid 36.
[  216.434493][ T5339] syz.3.226: attempt to access beyond end of device
[  216.434493][ T5339] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  216.835790][ T5346] loop2: detected capacity change from 0 to 512
[  216.882035][ T5346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  216.962385][ T5346] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  216.988667][ T5346] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.603405][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  217.822681][   T14] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  217.854755][   T14] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  218.124931][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.931506][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.484400][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  221.104112][ T5375] loop2: detected capacity change from 0 to 512
[  221.531082][ T5375] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  223.331032][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[  225.401974][ T5391] loop4: detected capacity change from 0 to 1024
[  225.436921][ T5391] EXT4-fs: Ignoring removed nobh option
[  225.442879][ T5391] EXT4-fs: Ignoring removed bh option
[  225.611302][ T5391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  225.736540][ T5395] loop3: detected capacity change from 0 to 512
[  225.743688][ T5395] EXT4-fs: Ignoring removed nomblk_io_submit option
[  227.397934][ T5391] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4.
[  227.412257][ T5395] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  228.344280][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  228.353563][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  228.362471][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  228.370400][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  228.378431][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  228.385917][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  229.686329][   T26] audit: type=1326 audit(1754545635.733:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  230.401190][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[  230.530832][   T26] audit: type=1326 audit(1754545635.733:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  230.573244][ T5421] binder: 5420:5421 unknown command 1074553620
[  230.650918][ T5421] binder: 5420:5421 ioctl c0306201 200000000640 returned -22
[  230.775782][   T26] audit: type=1326 audit(1754545635.743:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  230.838934][ T5430] loop2: detected capacity change from 0 to 512
[  230.911764][ T5430] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  231.340943][ T4684] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  231.377462][ T5427] binder: 5426:5427 unknown command 1074553619
[  231.558900][   T26] audit: type=1326 audit(1754545635.743:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  231.581619][ T5427] binder: 5426:5427 ioctl c0306201 2000000001c0 returned -22
[  231.621709][   T26] audit: type=1326 audit(1754545635.743:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  231.700978][ T4684] usb 2-1: Using ep0 maxpacket: 16
[  231.715477][ T4684] usb 2-1: config 0 has an invalid interface number: 176 but max is 0
[  231.768474][   T26] audit: type=1326 audit(1754545635.743:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  231.771023][ T4684] usb 2-1: config 0 has no interface number 0
[  231.896943][ T5435] loop2: detected capacity change from 0 to 512
[  231.977557][ T5435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  232.025920][ T4684] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  232.050765][ T4684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.058840][ T4684] usb 2-1: Product: syz
[  232.070754][ T4684] usb 2-1: Manufacturer: syz
[  232.075642][ T4684] usb 2-1: SerialNumber: syz
[  232.081322][   T26] audit: type=1326 audit(1754545635.743:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  232.104603][ T4684] usb 2-1: config 0 descriptor??
[  232.105272][ T5435] EXT4-fs (loop2): orphan cleanup on readonly fs
[  232.133063][ T4684] usb 2-1: bad CDC descriptors
[  232.445587][ T5435] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  232.481512][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[  232.795230][   T26] audit: type=1326 audit(1754545635.743:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746198ebe9 code=0x7ffc0000
[  232.817894][ T5435] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  232.856077][ T5435] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.248: Failed to acquire dquot type 1
[  232.926577][ T5435] EXT4-fs (loop2): 1 truncate cleaned up
[  233.063994][   T14] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  233.118123][ T5435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  233.262217][ T5396] chnl_net:caif_netlink_parms(): no params data found
[  233.340773][ T1169] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  233.537044][ T1169] usb 4-1: device descriptor read/64, error -71
[  233.830954][ T1169] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  234.030850][ T1169] usb 4-1: device descriptor read/64, error -71
[  234.161421][ T1169] usb usb4-port1: attempt power cycle
[  234.561145][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[  234.610854][ T1169] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  234.671700][ T1169] usb 4-1: device descriptor read/8, error -71
[  234.740491][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  235.010911][ T1169] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  235.061843][ T1169] usb 4-1: device descriptor read/8, error -71
[  235.145220][   T14] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  235.175717][ T4312] usb 2-1: USB disconnect, device number 4
[  235.231276][ T1169] usb usb4-port1: unable to enumerate USB device
[  235.275631][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.437800][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.456906][ T5396] device bridge_slave_0 entered promiscuous mode
[  235.694995][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.881967][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.097305][ T5467] loop3: detected capacity change from 0 to 128
[  236.271844][ T5396] device bridge_slave_1 entered promiscuous mode
[  236.393401][ T5467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  236.402295][ T5467] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.550167][ T5459] fido_id[5459]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  236.660830][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[  236.754643][ T4417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.988067][ T5478] loop4: detected capacity change from 0 to 512
[  237.078673][ T5478] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  237.768624][ T4417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.812584][ T5396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.817992][ T5482] binder: 5481:5482 unknown command 1074553619
[  237.838025][ T5482] binder: 5481:5482 ioctl c0306201 2000000001c0 returned -22
[  237.878776][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.026600][ T4417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.384645][ T5489] loop1: detected capacity change from 0 to 512
[  238.454815][ T5489] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  238.588166][ T5489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  238.596957][ T5489] System zones: 1-12
[  238.608370][ T5489] EXT4-fs (loop1): orphan cleanup on readonly fs
[  238.638900][ T5489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.260: bg 0: block 361: padding at end of block bitmap is not set
[  238.659636][ T5489] EXT4-fs (loop1): Remounting filesystem read-only
[  238.666402][ T5489] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  238.686333][ T5489] EXT4-fs (loop1): Remounting filesystem read-only
[  238.693185][ T5489] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.260: invalid indirect mapped block 12 (level 1)
[  238.715215][ T5489] EXT4-fs (loop1): Remounting filesystem read-only
[  238.722117][ T5489] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.260: invalid indirect mapped block 2 (level 2)
[  238.735940][ T5489] EXT4-fs (loop1): Remounting filesystem read-only
[  238.743023][ T5489] EXT4-fs (loop1): 1 truncate cleaned up
[  238.748823][ T5489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  238.808515][ T4417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.828664][ T5396] team0: Port device team_slave_0 added
[  238.854286][ T5396] team0: Port device team_slave_1 added
[  239.133191][ T5494] loop4: detected capacity change from 0 to 4096
[  239.192400][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  239.371146][ T5494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  239.407824][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.430809][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.551002][ T4341] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  239.578707][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.632389][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.639397][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.747115][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.780879][ T4341] usb 2-1: Using ep0 maxpacket: 16
[  239.798950][ T4341] usb 2-1: config 0 has an invalid interface number: 176 but max is 0
[  239.828909][ T4341] usb 2-1: config 0 has no interface number 0
[  239.848310][ T4341] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  239.889498][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.908997][ T4341] usb 2-1: Product: syz
[  239.918409][ T4341] usb 2-1: Manufacturer: syz
[  239.948881][ T4341] usb 2-1: SerialNumber: syz
[  239.965090][ T4341] usb 2-1: config 0 descriptor??
[  240.002500][ T4341] usb 2-1: bad CDC descriptors
[  240.208257][ T5396] device hsr_slave_0 entered promiscuous mode
[  240.217033][ T4341] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  240.254453][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  240.261146][ T5396] device hsr_slave_1 entered promiscuous mode
[  240.271660][ T4341] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  240.307314][ T5396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.373723][ T5396] Cannot create hsr debugfs directory
[  240.940925][ T4684] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  241.131166][ T4684] usb 5-1: device descriptor read/64, error -71
[  241.431070][ T4684] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  241.621018][ T4684] usb 5-1: device descriptor read/64, error -71
[  241.754202][ T4684] usb usb5-port1: attempt power cycle
[  242.170837][ T4684] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  242.231614][ T4684] usb 5-1: device descriptor read/8, error -71
[  242.551424][ T4684] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  242.611738][ T4684] usb 5-1: device descriptor read/8, error -71
[  242.801197][ T4684] usb usb5-port1: unable to enumerate USB device
[  243.382076][ T4312] usb 2-1: USB disconnect, device number 5
[  246.639841][ T4417] device hsr_slave_0 left promiscuous mode
[  246.691093][ T4417] device hsr_slave_1 left promiscuous mode
[  246.732073][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.739553][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.826316][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.885146][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.932322][ T4417] device bridge_slave_1 left promiscuous mode
[  246.981228][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.002895][ T4417] device bridge_slave_0 left promiscuous mode
[  247.030241][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.331109][ T4417] device veth1_macvtap left promiscuous mode
[  247.337279][ T4417] device veth0_macvtap left promiscuous mode
[  247.366779][ T4417] device veth1_vlan left promiscuous mode
[  247.398399][ T4417] device veth0_vlan left promiscuous mode
[  247.766192][ T5555] loop1: detected capacity change from 0 to 512
[  247.780012][ T5555] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  247.906073][ T5545] loop4: detected capacity change from 0 to 40427
[  247.954753][ T5545] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  248.013176][ T5545] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4
[  248.106089][ T5545] F2FS-fs (loop4): invalid crc value
[  248.184683][ T5545] F2FS-fs (loop4): Found nat_bits in checkpoint
[  248.372021][ T5545] F2FS-fs (loop4): Start checkpoint disabled!
[  248.452083][ T5545] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  249.475694][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  249.733494][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  249.794063][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  249.847416][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.918061][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.990773][ T4384] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  250.190944][ T4384] usb 2-1: Using ep0 maxpacket: 16
[  250.204405][ T4384] usb 2-1: config 0 has an invalid interface number: 176 but max is 0
[  250.228399][ T4384] usb 2-1: config 0 has no interface number 0
[  250.248488][ T4384] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  250.268667][ T4384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.301831][ T4384] usb 2-1: Product: syz
[  250.310585][ T4384] usb 2-1: Manufacturer: syz
[  250.319946][ T4384] usb 2-1: SerialNumber: syz
[  250.344811][ T4384] usb 2-1: config 0 descriptor??
[  250.360543][ T4384] usb 2-1: bad CDC descriptors
[  250.613711][ T4384] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  250.636928][ T4384] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  250.759845][ T5580] loop2: detected capacity change from 0 to 512
[  251.030588][ T5580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  251.040385][ T5580] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.215693][ T5580] 9pnet_fd: Insufficient options for proto=fd
[  252.887388][   T14] usb 2-1: USB disconnect, device number 6
[  252.933265][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  253.945042][ T4417] bond0 (unregistering): Released all slaves
[  255.699033][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.705723][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  257.847425][ T5396] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  257.912252][ T5396] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  258.541668][ T5396] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  258.846572][ T5396] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  258.960831][ T4376] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  259.150922][ T4376] usb 5-1: device descriptor read/64, error -71
[  259.441070][ T4376] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  259.540432][ T5619] loop2: detected capacity change from 0 to 512
[  259.621102][ T4376] usb 5-1: device descriptor read/64, error -71
[  259.739422][ T5619] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  259.753188][ T4376] usb usb5-port1: attempt power cycle
[  259.987079][ T5619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  260.118919][ T5619] System zones: 1-12
[  260.181120][ T4376] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  260.243421][ T4376] usb 5-1: device descriptor read/8, error -71
[  260.281002][ T5619] EXT4-fs (loop2): orphan cleanup on readonly fs
[  260.482027][ T5619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.283: bg 0: block 361: padding at end of block bitmap is not set
[  260.600844][ T4376] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  260.682745][ T4376] usb 5-1: device descriptor read/8, error -71
[  260.819715][ T5619] EXT4-fs (loop2): Remounting filesystem read-only
[  260.901791][ T4376] usb usb5-port1: unable to enumerate USB device
[  260.927545][ T5619] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  260.984706][ T5619] EXT4-fs (loop2): Remounting filesystem read-only
[  261.110308][ T5619] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.283: invalid indirect mapped block 12 (level 1)
[  261.143782][ T5619] EXT4-fs (loop2): Remounting filesystem read-only
[  261.150605][ T5619] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.283: invalid indirect mapped block 2 (level 2)
[  261.174975][ T5619] EXT4-fs (loop2): Remounting filesystem read-only
[  261.241749][ T5625] loop1: detected capacity change from 0 to 512
[  261.264510][ T5625] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  261.313205][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.340813][ T5619] EXT4-fs (loop2): 1 truncate cleaned up
[  261.376183][ T5619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  261.969653][ T5396] 8021q: adding VLAN 0 to HW filter on device team0
[  262.011870][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  262.019958][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  262.255937][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  262.262455][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  262.286877][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  262.539953][ T5632] loop4: detected capacity change from 0 to 512
[  263.515480][ T5632] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  264.529815][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.537108][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.056217][ T5632] EXT4-fs: failed to create workqueue
[  265.061781][ T5632] EXT4-fs (loop4): mount failed
[  265.091236][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  266.181767][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  266.277174][ T5644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'.
[  266.990127][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.997341][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.005214][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  267.066077][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  268.082823][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  268.093638][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  268.103011][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  268.111558][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  268.142900][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  268.227619][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  268.239392][ T5655] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  268.279957][ T5655] cramfs: wrong magic
[  268.282276][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  268.369637][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  268.429060][ T5396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  268.488349][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  270.221973][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  270.248850][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  270.961237][ T4887] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  271.141067][ T4887] usb 5-1: device descriptor read/64, error -71
[  271.233607][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.422280][ T4887] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  271.630942][ T4887] usb 5-1: device descriptor read/64, error -71
[  271.761365][ T4887] usb usb5-port1: attempt power cycle
[  271.952421][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.149777][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  272.160635][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  272.175492][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  272.190633][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  272.190990][ T4887] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  272.209214][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  272.219131][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  272.367757][ T4887] usb 5-1: device descriptor read/8, error -71
[  272.423168][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.680986][ T4887] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  272.731785][ T4887] usb 5-1: device descriptor read/8, error -71
[  272.781039][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.886984][ T4887] usb usb5-port1: unable to enumerate USB device
[  273.121711][ T5679] loop2: detected capacity change from 0 to 512
[  273.145145][ T5679] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  274.241395][ T4280] Bluetooth: hci1: command 0x0409 tx timeout
[  275.679335][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  275.691329][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  275.828213][ T5696] loop2: detected capacity change from 0 to 512
[  275.875230][ T5696] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  276.390824][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[  278.490874][ T4284] Bluetooth: hci1: command 0x040f tx timeout
[  278.501408][ T5696] EXT4-fs: failed to create workqueue
[  278.506844][ T5696] EXT4-fs (loop2): mount failed
[  278.909232][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.560971][ T4280] Bluetooth: hci1: command 0x0419 tx timeout
[  282.034100][ T5672] chnl_net:caif_netlink_parms(): no params data found
[  282.342127][ T5723] loop2: detected capacity change from 0 to 128
[  282.490505][ T5725] loop4: detected capacity change from 0 to 512
[  283.994730][ T5725] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  285.125745][ T5723] EXT4-fs: error -4 creating inode table initialization thread
[  285.134327][ T5723] EXT4-fs (loop2): mount failed
[  287.558581][ T5748] loop2: detected capacity change from 0 to 512
[  287.566047][ T5748] EXT4-fs: Ignoring removed nomblk_io_submit option
[  287.582873][ T5748] EXT4-fs (loop2): Test dummy encryption mode enabled
[  287.589766][ T5748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  290.503223][ T5748] EXT4-fs: error -4 creating inode table initialization thread
[  290.511206][ T5748] EXT4-fs (loop2): mount failed
[  291.093151][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  291.114455][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  291.122838][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  291.132001][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  291.146743][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  291.154162][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  291.405679][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.420624][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.506643][ T5761] loop2: detected capacity change from 0 to 16
[  292.525817][ T5672] device bridge_slave_0 entered promiscuous mode
[  293.221866][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  293.506478][ T5761] erofs: (device loop2): mounted with root inode @ nid 36.
[  293.536326][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  293.553005][ T5761] syz.2.309: attempt to access beyond end of device
[  293.553005][ T5761] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  293.810969][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  293.819485][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  293.828658][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  293.836284][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  293.844190][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  294.512993][ T5750] device syzkaller0 entered promiscuous mode
[  295.280801][ T4281] Bluetooth: hci5: command 0x041b tx timeout
[  295.599268][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.817213][ T5770] loop2: detected capacity change from 0 to 512
[  295.953526][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.972202][ T4281] Bluetooth: hci0: command 0x0409 tx timeout
[  296.074188][ T5770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  296.148740][ T5770] EXT4-fs (loop2): orphan cleanup on readonly fs
[  296.160882][ T5770] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.311: Block bitmap for bg 0 marked uninitialized
[  296.187327][ T5770] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  296.200393][ T5770] EXT4-fs (loop2): 1 orphan inode deleted
[  296.206351][ T5770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  297.074297][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  297.101957][ T5672] device bridge_slave_1 entered promiscuous mode
[  297.360851][ T4280] Bluetooth: hci5: command 0x040f tx timeout
[  298.447680][ T4280] Bluetooth: hci0: command 0x041b tx timeout
[  299.441816][ T4281] Bluetooth: hci5: command 0x0419 tx timeout
[  300.480871][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[  301.488744][ T5785] loop2: detected capacity change from 0 to 128
[  302.562278][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[  302.574866][ T5785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  302.601376][ T5785] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  303.681489][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.699256][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.708225][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.718129][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.725904][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  303.743851][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  304.686816][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  304.735421][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.791938][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.815421][ T5794] loop2: detected capacity change from 0 to 256
[  304.828752][ T5794] FAT-fs (loop2): Unrecognized mount option "iocha	" or missing value
[  304.845815][   T11] device hsr_slave_0 left promiscuous mode
[  304.852854][   T11] device hsr_slave_1 left promiscuous mode
[  304.862010][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.870615][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.879369][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.897343][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.933143][   T11] device bridge_slave_1 left promiscuous mode
[  304.949763][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.959252][   T11] device bridge_slave_0 left promiscuous mode
[  304.986110][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.047128][   T11] device veth1_macvtap left promiscuous mode
[  305.060970][   T11] device veth0_macvtap left promiscuous mode
[  305.122154][   T11] device veth1_vlan left promiscuous mode
[  305.128049][   T11] device veth0_vlan left promiscuous mode
[  305.907332][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  306.559506][   T11] team0 (unregistering): Port device team_slave_1 removed
[  306.600827][   T11] team0 (unregistering): Port device team_slave_0 removed
[  306.639062][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.682653][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.091218][   T11] bond0 (unregistering): Released all slaves
[  307.292115][ T5672] team0: Port device team_slave_0 added
[  307.409467][ T5672] team0: Port device team_slave_1 added
[  307.466033][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.473335][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.500502][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.584232][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.598724][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.664403][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.806557][ T5672] device hsr_slave_0 entered promiscuous mode
[  307.831448][ T5672] device hsr_slave_1 entered promiscuous mode
[  307.845055][ T5672] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.870617][ T5672] Cannot create hsr debugfs directory
[  307.877328][ T5790] chnl_net:caif_netlink_parms(): no params data found
[  307.921749][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  308.650463][ T5754] chnl_net:caif_netlink_parms(): no params data found
[  308.817017][ T5760] chnl_net:caif_netlink_parms(): no params data found
[  309.029846][ T4417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.170389][ T5845] loop2: detected capacity change from 0 to 512
[  309.530895][ T5845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  309.541084][ T5845] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.975353][ T4417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.044027][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[  310.155724][ T4417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.211829][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.218981][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.251043][ T5790] device bridge_slave_0 entered promiscuous mode
[  310.379951][ T4417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.404296][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.439704][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.450726][ T5790] device bridge_slave_1 entered promiscuous mode
[  310.630043][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.640068][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.657756][ T5754] device bridge_slave_0 entered promiscuous mode
[  310.670284][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.684661][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.698128][ T5754] device bridge_slave_1 entered promiscuous mode
[  310.756338][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.823299][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.860025][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.023174][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.115054][ T5754] team0: Port device team_slave_0 added
[  311.153938][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.172763][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.183005][ T5760] device bridge_slave_0 entered promiscuous mode
[  311.190423][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  311.279515][ T5790] team0: Port device team_slave_0 added
[  311.313732][ T5754] team0: Port device team_slave_1 added
[  311.342640][ T5790] team0: Port device team_slave_1 added
[  311.348802][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.365655][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.378102][ T5760] device bridge_slave_1 entered promiscuous mode
[  311.498552][ T5672] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  311.578755][ T4417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.608458][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.626392][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.663371][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.737693][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.753808][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.780945][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.793522][ T5672] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  311.806381][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.823674][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.904543][ T5873] loop2: detected capacity change from 0 to 16
[  311.936149][ T5873] erofs: (device loop2): mounted with root inode @ nid 36.
[  311.953523][ T5873] syz.2.321: attempt to access beyond end of device
[  311.953523][ T5873] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  312.074517][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.081956][ T4284] Bluetooth: hci2: command 0x0419 tx timeout
[  312.142584][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.520571][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.563464][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.570484][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.660790][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.693608][ T5672] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  312.777743][ T4417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.832056][ T5672] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  313.010400][ T4417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.060152][ T5760] team0: Port device team_slave_0 added
[  313.155196][ T5760] team0: Port device team_slave_1 added
[  313.189569][ T4417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.243707][ T5790] device hsr_slave_0 entered promiscuous mode
[  313.302074][ T5790] device hsr_slave_1 entered promiscuous mode
[  313.336688][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.349531][ T5790] Cannot create hsr debugfs directory
[  313.368344][ T5754] device hsr_slave_0 entered promiscuous mode
[  313.381511][ T5754] device hsr_slave_1 entered promiscuous mode
[  313.388455][ T5754] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.408586][ T5754] Cannot create hsr debugfs directory
[  313.539183][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.552084][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.578892][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.609246][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.626805][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.663023][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.966639][ T5760] device hsr_slave_0 entered promiscuous mode
[  313.981888][ T5760] device hsr_slave_1 entered promiscuous mode
[  313.989937][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.998262][ T5760] Cannot create hsr debugfs directory
[  314.064977][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.141941][ T4407] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  314.208446][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  314.223531][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  314.273665][ T5672] 8021q: adding VLAN 0 to HW filter on device team0
[  314.331472][ T4407] usb 3-1: Using ep0 maxpacket: 32
[  314.339325][ T4407] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.368688][ T4407] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.380865][ T4407] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  314.389958][ T4407] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  314.404089][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  314.412501][ T4407] usb 3-1: Product: syz
[  314.416714][ T4407] usb 3-1: Manufacturer: syz
[  314.435656][ T4407] hub 3-1:4.0: USB hub found
[  314.440318][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  314.449667][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.456864][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.541546][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  314.562628][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  314.582890][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  314.596935][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.604177][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.652671][ T4407] hub 3-1:4.0: 2 ports detected
[  314.690829][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  314.701157][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  314.752194][ T5790] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  314.770278][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  314.793247][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  314.802535][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  314.812508][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  314.821837][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  314.830461][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  314.842324][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  314.850796][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  314.862742][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  314.888738][ T5790] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  314.922086][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  314.940251][ T5790] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  314.955564][ T5790] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  315.186112][ T4417] tipc: Disabling bearer <eth:macsec0>
[  315.200277][ T4417] tipc: Left network mode
[  315.294280][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.372780][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[  315.380914][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  315.389035][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  315.429658][ T4417] bridge0: port 3(ip6gretap1) entered disabled state
[  315.522772][ T4417] device ip6gretap1 left promiscuous mode
[  315.528628][ T4417] bridge0: port 3(ip6gretap1) entered disabled state
[  315.635973][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  315.661516][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  315.672222][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.679375][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.712758][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  315.731737][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  315.748593][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.755909][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.770412][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  315.893530][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  315.902611][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  315.914242][ T4407] hub 3-1:4.0: activate --> -90
[  315.916420][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  315.944275][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  316.071097][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  316.079939][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  316.102317][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  316.119827][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  316.129398][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  316.253760][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  316.270824][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  316.289297][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  316.298819][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  316.311580][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  316.317915][ T4407] usb 3-1-port2: cannot warm reset (err = -71)
[  316.326084][ T4376] usb 3-1: USB disconnect, device number 5
[  316.330075][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.648684][ T5760] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  316.775607][ T5760] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  316.795550][ T5760] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  316.816027][ T5760] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  317.140599][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.147012][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.434429][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.579087][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  317.597492][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  317.628278][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.646373][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.914622][ T5754] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  317.928414][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  317.956616][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  317.983939][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.031811][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  318.049700][ T5754] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  318.074885][ T5672] device veth0_vlan entered promiscuous mode
[  318.101258][ T5754] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  318.159376][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.592511][ T5754] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  318.687718][ T5672] device veth1_vlan entered promiscuous mode
[  318.847476][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  319.510269][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  319.551063][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  319.736959][ T5760] 8021q: adding VLAN 0 to HW filter on device team0
[  320.477003][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  320.546729][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  320.629617][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.636851][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.849959][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  321.288039][ T5672] device veth0_macvtap entered promiscuous mode
[  321.358617][ T4417] device hsr_slave_0 left promiscuous mode
[  321.390375][ T4417] device hsr_slave_1 left promiscuous mode
[  321.412368][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.420508][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.437398][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.449683][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.490960][ T4417] device bridge_slave_1 left promiscuous mode
[  321.498392][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.754123][ T5984] loop2: detected capacity change from 0 to 4096
[  321.886800][ T5984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  321.986256][ T4417] device bridge_slave_0 left promiscuous mode
[  321.993431][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.225382][ T4417] device hsr_slave_0 left promiscuous mode
[  323.251285][ T4417] device hsr_slave_1 left promiscuous mode
[  323.271067][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.281336][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.299667][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.329381][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.350893][ T4417] device bridge_slave_1 left promiscuous mode
[  323.357186][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.402336][ T4417] device bridge_slave_0 left promiscuous mode
[  323.420946][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.466153][ T4417] device hsr_slave_0 left promiscuous mode
[  323.492028][ T4417] device hsr_slave_1 left promiscuous mode
[  323.520023][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.549371][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.579345][ T4417] device bridge_slave_1 left promiscuous mode
[  323.601096][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.640371][ T4417] device bridge_slave_0 left promiscuous mode
[  323.651039][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.747464][ T4417] device veth1_macvtap left promiscuous mode
[  323.759852][ T4417] device veth0_macvtap left promiscuous mode
[  323.769869][ T4417] device veth1_vlan left promiscuous mode
[  323.787354][ T4417] device veth0_vlan left promiscuous mode
[  323.800031][ T4417] device veth1_macvtap left promiscuous mode
[  323.815109][ T4417] device veth0_macvtap left promiscuous mode
[  323.824921][ T4417] device veth1_vlan left promiscuous mode
[  323.832478][ T4417] device veth0_vlan left promiscuous mode
[  324.723978][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  324.765365][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  324.814340][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.858566][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  325.314668][ T4417] bond0 (unregistering): Released all slaves
[  325.786371][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  325.828631][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  325.872019][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  325.916895][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.391325][ T4417] bond0 (unregistering): Released all slaves
[  326.603694][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  326.653720][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  326.699103][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.744549][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.167524][ T4417] bond0 (unregistering): Released all slaves
[  327.236895][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  327.245809][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  327.254818][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.262000][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.269713][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  327.279858][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  327.289652][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  327.299272][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  327.485342][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  327.502041][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  327.523596][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  327.531913][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  327.552193][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  327.590795][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  327.612313][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  327.631600][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  327.725722][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  327.735004][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  327.754646][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  327.770470][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  327.792878][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  327.813734][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  327.850172][ T5790] device veth0_vlan entered promiscuous mode
[  327.868306][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  327.881709][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  327.924274][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.956914][ T5790] device veth1_vlan entered promiscuous mode
[  327.976739][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  327.994457][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  328.013432][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  328.657678][ T6030] loop2: detected capacity change from 0 to 1024
[  328.669250][ T6030] EXT4-fs: Ignoring removed nobh option
[  328.675078][ T6030] EXT4-fs: Ignoring removed bh option
[  328.760049][ T6030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  328.982259][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  328.992820][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  329.001339][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  329.009278][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  329.020621][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  329.029135][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  329.067857][ T6030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  329.099627][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  329.133947][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  329.142285][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  329.212676][ T5754] 8021q: adding VLAN 0 to HW filter on device team0
[  329.276459][ T5790] device veth0_macvtap entered promiscuous mode
[  329.290071][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  329.348998][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  329.362235][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  329.398174][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  329.489821][ T5790] device veth1_macvtap entered promiscuous mode
[  329.513841][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  329.531833][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  329.551709][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  329.603075][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.610272][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.631152][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  329.651105][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  329.667427][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.674682][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.701403][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  329.785595][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  329.806823][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  329.833143][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  329.854666][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  329.888378][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.911521][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.942422][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.959403][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  329.976107][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  329.997688][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  330.019796][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  330.043908][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  330.056050][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  330.078478][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  330.102309][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  330.131734][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  330.143903][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  330.193893][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.210812][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.247565][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.275016][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  330.294359][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  330.348352][ T5790] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.386007][ T5790] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.406843][ T5790] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.444537][ T5790] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.498446][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  330.520478][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  330.668374][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.902592][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.927079][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.950962][ T4887] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  330.957513][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  330.987852][ T4476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.000153][ T4476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.044771][ T6028] chnl_net:caif_netlink_parms(): no params data found
[  331.084940][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  331.122354][ T4280] Bluetooth: hci1: command 0x0409 tx timeout
[  331.140816][ T4887] usb 3-1: Using ep0 maxpacket: 32
[  331.148546][ T4887] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.201512][ T4887] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.228050][ T4887] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  331.255637][ T4887] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  331.269817][ T4887] usb 3-1: Product: syz
[  331.275248][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  331.285271][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  331.294694][ T4887] usb 3-1: Manufacturer: syz
[  331.306409][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.317068][ T4887] hub 3-1:4.0: USB hub found
[  331.521742][ T4887] hub 3-1:4.0: 2 ports detected
[  331.546772][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.575551][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.596924][ T6028] device bridge_slave_0 entered promiscuous mode
[  331.628177][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.654175][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.687381][ T6028] device bridge_slave_1 entered promiscuous mode
[  331.844084][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.891926][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.564950][ T6028] team0: Port device team_slave_0 added
[  332.794027][ T6028] team0: Port device team_slave_1 added
[  333.201137][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[  334.245588][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  334.305346][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  334.412431][ T4258] usb 3-1: USB disconnect, device number 6
[  334.510539][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.551329][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.703675][ T4887] hub 3-1:4.0: hub_ext_port_status failed (err = -71)
[  334.886669][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.899532][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.906726][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.933656][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.104291][ T6028] device hsr_slave_0 entered promiscuous mode
[  335.151731][ T6028] device hsr_slave_1 entered promiscuous mode
[  335.290921][ T4280] Bluetooth: hci1: command 0x040f tx timeout
[  335.367071][ T5760] device veth0_vlan entered promiscuous mode
[  336.246720][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.257017][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.272416][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.291842][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.514038][ T5760] device veth1_vlan entered promiscuous mode
[  336.777010][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  336.796467][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  336.846255][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  337.196812][ T6116] loop2: detected capacity change from 0 to 1024
[  337.208503][ T6116] EXT4-fs: Ignoring removed nobh option
[  337.214240][ T6116] EXT4-fs: Ignoring removed bh option
[  337.253927][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  337.302920][ T6116] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  337.360829][ T4284] Bluetooth: hci1: command 0x0419 tx timeout
[  337.486921][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  337.508400][ T6116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  337.508461][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  337.553195][ T5754] device veth0_vlan entered promiscuous mode
[  337.883872][ T5754] device veth1_vlan entered promiscuous mode
[  338.047643][ T6129] binder: BINDER_SET_CONTEXT_MGR already set
[  338.053741][ T6129] binder: 6123:6129 ioctl 4018620d 200000000040 returned -16
[  338.061822][ T6129] binder: 6123:6129 unknown command 1074553619
[  338.068014][ T6129] binder: 6123:6129 ioctl c0306201 2000000001c0 returned -22
[  338.755196][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  339.100788][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  339.109558][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  339.123028][ T5760] device veth0_macvtap entered promiscuous mode
[  340.004669][ T5760] device veth1_macvtap entered promiscuous mode
[  340.064968][ T6143] loop8: detected capacity change from 0 to 256
[  340.108133][ T5754] device veth0_macvtap entered promiscuous mode
[  340.135491][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  340.162696][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  340.207597][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  340.208961][ T6143] FAT-fs (loop8): Directory bread(block 64) failed
[  340.241152][ T6143] FAT-fs (loop8): Directory bread(block 65) failed
[  340.260903][ T6143] FAT-fs (loop8): Directory bread(block 66) failed
[  340.267522][ T6143] FAT-fs (loop8): Directory bread(block 67) failed
[  340.309041][ T5754] device veth1_macvtap entered promiscuous mode
[  340.331166][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  340.345900][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.359903][ T6143] FAT-fs (loop8): Directory bread(block 68) failed
[  340.387087][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.390908][ T6143] FAT-fs (loop8): Directory bread(block 69) failed
[  340.417699][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.425893][ T6143] FAT-fs (loop8): Directory bread(block 70) failed
[  340.450777][ T6143] FAT-fs (loop8): Directory bread(block 71) failed
[  340.457463][ T6143] FAT-fs (loop8): Directory bread(block 72) failed
[  340.458971][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.482221][ T6143] FAT-fs (loop8): Directory bread(block 73) failed
[  340.502464][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.543768][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.590915][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.611188][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.632021][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.662505][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.707248][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.740500][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.754715][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  340.787884][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  340.801791][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  340.821209][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  340.876895][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.197062][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.238228][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.279438][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.347341][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.406125][ T5760] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.468305][ T5760] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.535258][ T5760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.554587][ T5760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.813563][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.846347][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.906638][ T6146] loop2: detected capacity change from 0 to 40427
[  341.935299][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  341.949766][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  341.968298][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  342.037356][ T6146] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff
[  342.091340][ T6146] F2FS-fs (loop2): invalid crc value
[  342.119489][ T6146] F2FS-fs (loop2): Found nat_bits in checkpoint
[  342.142378][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.173483][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.214434][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.274953][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.319922][ T5754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.341689][ T6146] F2FS-fs (loop2): Start checkpoint disabled!
[  342.372312][ T5754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.391040][ T6146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  342.440954][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.629806][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  342.730424][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  342.899655][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.920524][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.438155][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  345.212506][ T4476] kworker/u4:14: attempt to access beyond end of device
[  345.212506][ T4476] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  346.441682][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.452242][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.465294][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.473705][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.486980][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  346.494577][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  347.141421][ T6173] loop8: detected capacity change from 0 to 1024
[  347.152462][ T6173] EXT4-fs: Ignoring removed nobh option
[  347.158155][ T6173] EXT4-fs: Ignoring removed bh option
[  347.351833][ T6173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  347.521691][ T6173] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  347.797543][ T5790] EXT4-fs (loop8): unmounting filesystem.
[  347.811292][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  347.830195][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  347.849755][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  347.861005][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  347.868937][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  347.879115][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  348.339887][ T6028] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  348.501935][ T6199] x_tables: duplicate underflow at hook 1
[  348.572355][ T4284] Bluetooth: hci3: command 0x0409 tx timeout
[  349.169388][ T4417] device hsr_slave_0 left promiscuous mode
[  349.301221][ T4417] device hsr_slave_1 left promiscuous mode
[  349.318326][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.368211][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.377203][ T6207] loop8: detected capacity change from 0 to 256
[  349.401141][ T4417] device bridge_slave_1 left promiscuous mode
[  349.407441][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.701119][ T6209] loop2: detected capacity change from 0 to 4096
[  349.857088][ T6209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  349.945587][ T4281] Bluetooth: hci0: command 0x0409 tx timeout
[  350.005800][ T6207] FAT-fs (loop8): Directory bread(block 64) failed
[  350.112743][ T4417] device bridge_slave_0 left promiscuous mode
[  350.155329][ T6207] FAT-fs (loop8): Directory bread(block 65) failed
[  350.552857][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.570977][ T6207] FAT-fs (loop8): Directory bread(block 66) failed
[  350.577600][ T6207] FAT-fs (loop8): Directory bread(block 67) failed
[  350.648021][ T6207] FAT-fs (loop8): Directory bread(block 68) failed
[  350.691031][ T6207] FAT-fs (loop8): Directory bread(block 69) failed
[  350.722133][ T4417] device veth0_macvtap left promiscuous mode
[  350.734536][ T6207] FAT-fs (loop8): Directory bread(block 70) failed
[  350.770878][ T4417] device veth1_vlan left promiscuous mode
[  350.780983][ T6207] FAT-fs (loop8): Directory bread(block 71) failed
[  350.791285][ T4417] device veth0_vlan left promiscuous mode
[  350.810875][ T6207] FAT-fs (loop8): Directory bread(block 72) failed
[  350.817743][ T6207] FAT-fs (loop8): Directory bread(block 73) failed
[  350.871346][ T4281] Bluetooth: hci3: command 0x041b tx timeout
[  352.000954][ T4281] Bluetooth: hci0: command 0x041b tx timeout
[  352.203838][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  352.258640][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  352.330021][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.385568][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.889399][ T4281] Bluetooth: hci3: command 0x040f tx timeout
[  353.034527][ T4417] bond0 (unregistering): Released all slaves
[  353.143860][ T6028] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  353.156524][ T6028] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  353.166798][ T6028] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  353.337209][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  353.733997][ T6183] chnl_net:caif_netlink_parms(): no params data found
[  353.983964][ T6165] chnl_net:caif_netlink_parms(): no params data found
[  354.088119][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[  354.098237][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.196169][ T6238] loop2: detected capacity change from 0 to 16
[  354.278653][ T6238] erofs: (device loop2): mounted with root inode @ nid 36.
[  354.950394][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  354.960820][ T4281] Bluetooth: hci3: command 0x0419 tx timeout
[  354.977785][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  355.168210][ T6028] 8021q: adding VLAN 0 to HW filter on device team0
[  355.583726][ T6249] loop2: detected capacity change from 0 to 1024
[  355.596420][ T6249] EXT4-fs: Ignoring removed nobh option
[  355.602129][ T6249] EXT4-fs: Ignoring removed bh option
[  355.679998][ T6249] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  355.951685][ T6249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  356.056323][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  356.082366][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  356.100739][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.107898][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.152554][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  356.160921][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[  356.178535][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  356.183066][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  356.193434][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.200705][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.235622][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  356.318587][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.330781][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.367952][ T6183] device bridge_slave_0 entered promiscuous mode
[  356.377023][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.396038][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.421464][ T6183] device bridge_slave_1 entered promiscuous mode
[  356.429105][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.438246][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.447175][ T6165] device bridge_slave_0 entered promiscuous mode
[  356.462506][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  356.512377][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.519553][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.528470][ T6165] device bridge_slave_1 entered promiscuous mode
[  356.630323][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  356.666910][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  356.679574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  356.719156][ T4417] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.749673][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.773063][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.793149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  356.812402][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  356.854245][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  356.878482][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  356.904214][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  356.915432][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.947415][ T4417] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.966497][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.999502][ T6165] team0: Port device team_slave_0 added
[  357.045138][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  357.059989][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  357.086685][ T4417] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.106034][ T6165] team0: Port device team_slave_1 added
[  357.117672][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  357.132859][ T6183] team0: Port device team_slave_0 added
[  357.169920][ T6183] team0: Port device team_slave_1 added
[  357.241000][ T4417] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.283335][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.290424][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.317462][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.330248][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.338660][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.370368][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.384645][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.392037][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.418091][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.434712][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.443867][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.471567][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.566400][ T6183] device hsr_slave_0 entered promiscuous mode
[  357.607174][ T6183] device hsr_slave_1 entered promiscuous mode
[  357.622323][ T6183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  357.629960][ T6183] Cannot create hsr debugfs directory
[  357.729592][ T6165] device hsr_slave_0 entered promiscuous mode
[  357.780909][ T6165] device hsr_slave_1 entered promiscuous mode
[  357.798101][ T6165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  357.831319][ T6165] Cannot create hsr debugfs directory
[  358.121755][ T6274] loop8: detected capacity change from 0 to 16
[  358.286306][ T6278] loop2: detected capacity change from 0 to 1024
[  358.294168][ T6278] EXT4-fs: Ignoring removed nobh option
[  358.299959][ T6278] EXT4-fs: Ignoring removed bh option
[  358.406453][ T6274] erofs: (device loop8): mounted with root inode @ nid 36.
[  358.425731][ T6274] syz.8.357: attempt to access beyond end of device
[  358.425731][ T6274] loop8: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  358.462468][ T6278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  358.705390][ T6278] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  359.854398][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  359.881073][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  359.991891][ T6290] loop8: detected capacity change from 0 to 128
[  360.414753][ T6290] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  360.426002][ T6290] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  360.887340][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.114411][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  361.694519][ T6028] device veth0_vlan entered promiscuous mode
[  361.715715][ T6028] device veth1_vlan entered promiscuous mode
[  361.759839][ T6028] device veth0_macvtap entered promiscuous mode
[  361.779046][ T6028] device veth1_macvtap entered promiscuous mode
[  361.813267][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.831891][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.847727][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.860775][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.878879][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.889918][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.901027][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.911660][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.956467][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.121547][ T5790] EXT4-fs (loop8): unmounting filesystem.
[  362.124274][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  362.139811][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  362.149083][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  362.169954][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  362.192806][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  362.205276][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  362.214078][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  362.232178][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  362.241928][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  362.254116][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  362.283882][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  362.303207][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  362.339696][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  362.348609][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  362.382367][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.419112][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.449009][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.474095][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.485033][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.495653][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.506187][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.516910][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.528525][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.986285][ T6309] loop8: detected capacity change from 0 to 1024
[  363.000842][ T6309] EXT4-fs: Ignoring removed nobh option
[  363.006581][ T6309] EXT4-fs: Ignoring removed bh option
[  363.219669][ T6309] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  363.334635][ T6309] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  363.431334][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  363.445460][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  363.479526][ T6028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.496854][ T6028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.509390][ T6028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.526512][ T6028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.959411][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.998474][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.096406][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  364.176763][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.194677][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.211484][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  364.876162][   T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  364.887318][ T5790] EXT4-fs (loop8): unmounting filesystem.
[  365.049378][ T6316] netem: incorrect ge model size
[  365.073036][   T22] usb 7-1: Using ep0 maxpacket: 16
[  365.094331][ T6316] netem: change failed
[  365.099868][   T22] usb 7-1: config 0 has an invalid interface number: 176 but max is 0
[  365.121406][   T22] usb 7-1: config 0 has no interface number 0
[  365.131303][   T22] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  365.132559][ T6183] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  365.140378][   T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.140401][   T22] usb 7-1: Product: syz
[  365.140415][   T22] usb 7-1: Manufacturer: syz
[  365.140431][   T22] usb 7-1: SerialNumber: syz
[  365.172016][   T22] usb 7-1: config 0 descriptor??
[  365.182013][   T22] usb 7-1: bad CDC descriptors
[  365.203662][ T6183] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  365.276651][ T6183] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  365.303065][ T6183] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  365.386493][ T4319] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  365.421369][ T4319] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  365.758525][ T4417] device hsr_slave_0 left promiscuous mode
[  365.803485][ T4417] device hsr_slave_1 left promiscuous mode
[  365.819424][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.860505][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.868980][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.884604][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.912140][ T4417] device bridge_slave_1 left promiscuous mode
[  365.918453][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.937095][ T4417] device bridge_slave_0 left promiscuous mode
[  365.949612][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.970530][   T22] usb 7-1: USB disconnect, device number 2
[  365.974222][ T6327] fido_id[6327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  366.021440][ T4417] device hsr_slave_0 left promiscuous mode
[  366.031350][ T4417] device hsr_slave_1 left promiscuous mode
[  366.038011][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.046191][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.060995][ T4407] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  366.061462][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.077820][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.087091][ T4417] device bridge_slave_1 left promiscuous mode
[  366.101100][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.117841][ T4417] device bridge_slave_0 left promiscuous mode
[  366.125292][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.198225][ T4417] device veth1_macvtap left promiscuous mode
[  366.204424][ T4417] device veth0_macvtap left promiscuous mode
[  366.213462][ T4417] device veth1_vlan left promiscuous mode
[  366.219366][ T4417] device veth0_vlan left promiscuous mode
[  366.226972][ T4417] device veth1_macvtap left promiscuous mode
[  366.233343][ T4417] device veth0_macvtap left promiscuous mode
[  366.239743][ T4417] device veth1_vlan left promiscuous mode
[  366.246811][ T4417] device veth0_vlan left promiscuous mode
[  366.263400][ T4407] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.282942][ T4407] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  366.308179][ T4407] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  366.342863][ T4407] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  366.362347][ T4407] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  366.382384][ T4407] usb 9-1: Manufacturer: syz
[  366.402346][ T4407] usb 9-1: config 0 descriptor??
[  366.417098][ T4407] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  367.152899][ T6335] loop6: detected capacity change from 0 to 512
[  367.227371][ T6335] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  367.365096][ T6335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  367.373930][ T6335] System zones: 1-12
[  367.419962][ T6335] EXT4-fs (loop6): orphan cleanup on readonly fs
[  367.433920][ T6335] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.364: bg 0: block 361: padding at end of block bitmap is not set
[  367.457403][ T6335] EXT4-fs (loop6): Remounting filesystem read-only
[  367.464165][ T6335] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  367.476157][ T6335] EXT4-fs (loop6): Remounting filesystem read-only
[  367.482893][ T6335] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.364: invalid indirect mapped block 12 (level 1)
[  367.504320][ T6335] EXT4-fs (loop6): Remounting filesystem read-only
[  367.511209][ T6335] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.364: invalid indirect mapped block 2 (level 2)
[  367.532950][ T6335] EXT4-fs (loop6): Remounting filesystem read-only
[  367.540681][ T6335] EXT4-fs (loop6): 1 truncate cleaned up
[  367.546464][ T6335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  367.822216][ T6028] EXT4-fs (loop6): unmounting filesystem.
[  368.306337][ T6345] loop2: detected capacity change from 0 to 512
[  368.323060][ T6346] loop6: detected capacity change from 0 to 1024
[  368.330512][ T6346] EXT4-fs: Ignoring removed nobh option
[  368.336597][ T6346] EXT4-fs: Ignoring removed bh option
[  368.362074][ T6346] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  368.564844][ T6345] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  368.574566][ T6345] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.049173][ T4384] usb 9-1: USB disconnect, device number 2
[  369.802702][ T6346] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  370.309352][ T6356] loop8: detected capacity change from 0 to 512
[  370.347831][ T6356] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  370.377546][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  370.402848][ T6356] EXT4-fs (loop8): orphan cleanup on readonly fs
[  370.415048][ T6356] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6).
[  370.425546][ T6356] EXT4-fs warning (device loop8): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  370.795512][ T6356] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  370.806856][ T6356] EXT4-fs (loop8): 1 truncate cleaned up
[  370.813011][ T6356] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  371.303326][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  371.402550][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  371.480361][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.572890][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.269810][ T5790] EXT4-fs (loop8): unmounting filesystem.
[  373.279732][ T6365] loop8: detected capacity change from 0 to 1024
[  373.287301][ T6365] EXT4-fs: Ignoring removed nobh option
[  373.292986][ T6365] EXT4-fs: Ignoring removed bh option
[  373.318881][ T6365] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  373.373369][ T6365] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  373.438386][ T4417] bond0 (unregistering): Released all slaves
[  374.063098][ T4417] team0 (unregistering): Port device team_slave_1 removed
[  374.108470][ T4417] team0 (unregistering): Port device team_slave_0 removed
[  374.153319][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.199358][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  374.632854][ T4417] bond0 (unregistering): Released all slaves
[  374.733877][ T6165] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  375.015756][ T6028] EXT4-fs (loop6): unmounting filesystem.
[  375.023621][ T5790] EXT4-fs (loop8): unmounting filesystem.
[  375.080832][ T6165] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  375.411378][ T4408] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  375.625080][ T4408] usb 7-1: Using ep0 maxpacket: 16
[  375.638579][ T4408] usb 7-1: config 0 has an invalid interface number: 176 but max is 0
[  375.647066][ T4408] usb 7-1: config 0 has no interface number 0
[  375.655982][ T4408] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  375.665672][ T4408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.673978][ T4408] usb 7-1: Product: syz
[  375.678306][ T4408] usb 7-1: Manufacturer: syz
[  375.683326][ T4408] usb 7-1: SerialNumber: syz
[  375.701619][ T4408] usb 7-1: config 0 descriptor??
[  375.718229][ T4408] usb 7-1: bad CDC descriptors
[  375.921687][ T4408] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  375.951025][ T4408] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  376.297990][ T4408] usb 7-1: USB disconnect, device number 3
[  376.555052][ T6395] loop8: detected capacity change from 0 to 256
[  376.807567][ T6395] FAT-fs (loop8): Unrecognized mount option "uni_xlate91" or missing value
[  377.738213][ T6399] loop6: detected capacity change from 0 to 8192
[  377.820412][ T6399]  loop6: p4 < >
[  378.564704][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.571150][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  382.144493][ T6165] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  382.264239][ T6165] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  382.718990][ T6415] loop8: detected capacity change from 0 to 256
[  382.741018][ T6415] FAT-fs (loop8): Directory bread(block 64) failed
[  382.747807][ T6415] FAT-fs (loop8): Directory bread(block 65) failed
[  382.761953][ T6415] FAT-fs (loop8): Directory bread(block 66) failed
[  382.768572][ T6415] FAT-fs (loop8): Directory bread(block 67) failed
[  382.776547][ T6415] FAT-fs (loop8): Directory bread(block 68) failed
[  382.796605][ T6415] FAT-fs (loop8): Directory bread(block 69) failed
[  382.818698][ T6415] FAT-fs (loop8): Directory bread(block 70) failed
[  382.859305][ T6415] FAT-fs (loop8): Directory bread(block 71) failed
[  382.901674][ T6415] FAT-fs (loop8): Directory bread(block 72) failed
[  382.908299][ T6415] FAT-fs (loop8): Directory bread(block 73) failed
[  383.691730][ T6417] loop6: detected capacity change from 0 to 512
[  384.110845][ T6417] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  384.425060][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.886751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  384.916117][ T6427] loop2: detected capacity change from 0 to 1024
[  384.924040][ T6427] EXT4-fs: Ignoring removed nobh option
[  384.929641][ T6427] EXT4-fs: Ignoring removed bh option
[  384.941258][ T6427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  385.008141][ T6427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  385.094776][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  385.218044][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.243303][ T6183] 8021q: adding VLAN 0 to HW filter on device team0
[  385.275818][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  385.372903][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  385.412590][ T6165] 8021q: adding VLAN 0 to HW filter on device team0
[  385.455420][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  385.481408][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  385.506817][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.514100][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.608748][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  385.635694][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  385.688411][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  385.719395][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.726632][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.747128][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  385.756330][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  385.782968][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  385.791529][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  385.854668][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.861884][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.890204][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  385.903789][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  385.912977][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.920117][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.938850][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  386.150930][ T4408] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  386.290994][ T6442] loop2: detected capacity change from 0 to 1024
[  386.298506][ T6442] EXT4-fs: Ignoring removed nobh option
[  386.304366][ T6442] EXT4-fs: Ignoring removed bh option
[  386.307996][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  386.416468][ T6444] loop8: detected capacity change from 0 to 16
[  386.569165][ T6444] erofs: (device loop8): mounted with root inode @ nid 36.
[  386.625712][ T6444] syz.8.385: attempt to access beyond end of device
[  386.625712][ T6444] loop8: rw=0, sector=8, nr_sectors = 16 limit=16
[  386.748272][ T6442] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  387.423677][ T4408] usb 7-1: Using ep0 maxpacket: 16
[  387.458760][ T4408] usb 7-1: config 0 has an invalid interface number: 176 but max is 0
[  387.474260][ T4408] usb 7-1: config 0 has no interface number 0
[  387.484576][ T4408] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  387.504046][ T4408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.533934][ T4408] usb 7-1: Product: syz
[  387.544074][ T4408] usb 7-1: Manufacturer: syz
[  387.549819][ T6442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  387.614180][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  387.650477][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  387.801726][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  387.837906][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  387.858334][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  387.880467][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  387.929181][ T6183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  387.946775][ T6183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  388.373849][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.394789][ T4408] usb 7-1: SerialNumber: syz
[  388.405879][ T4408] usb 7-1: config 0 descriptor??
[  388.414295][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  388.422994][ T4408] usb 7-1: bad CDC descriptors
[  388.447130][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  388.465868][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  388.499156][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  388.518196][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  388.610199][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  388.629565][ T4408] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  388.661509][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  388.682585][ T4408] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  388.703751][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  388.761414][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  388.769021][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  388.833489][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  388.861696][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  388.901854][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  388.964673][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  389.024283][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  390.164309][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  390.203714][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  390.214231][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  390.220433][ T6472] loop2: detected capacity change from 0 to 1024
[  390.243946][ T6165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  390.274287][ T4887] usb 7-1: USB disconnect, device number 4
[  390.301722][ T6472] EXT4-fs: Ignoring removed i_version option
[  390.307879][ T6472] EXT4-fs: inline encryption not supported
[  390.357305][ T6472] EXT4-fs (loop2): Test dummy encryption mode enabled
[  390.427103][ T6472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  390.916603][ T6484] binder: 6478:6484 unknown command 1074553619
[  390.923284][ T6484] binder: 6478:6484 ioctl c0306201 2000000001c0 returned -22
[  391.875807][ T6472] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  392.066436][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  392.086819][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  392.167652][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  392.188337][ T6183] device veth0_vlan entered promiscuous mode
[  392.237709][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  392.273309][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  392.314005][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  392.349822][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  392.398317][ T6507] loop2: detected capacity change from 0 to 256
[  392.471766][ T6183] device veth1_vlan entered promiscuous mode
[  392.488566][ T6507] FAT-fs (loop2): Directory bread(block 64) failed
[  392.498168][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  392.504171][ T6507] FAT-fs (loop2): Directory bread(block 65) failed
[  392.522242][ T6507] FAT-fs (loop2): Directory bread(block 66) failed
[  392.525194][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  392.536231][ T6507] FAT-fs (loop2): Directory bread(block 67) failed
[  392.536341][ T6507] FAT-fs (loop2): Directory bread(block 68) failed
[  392.568441][ T6507] FAT-fs (loop2): Directory bread(block 69) failed
[  392.589501][ T6507] FAT-fs (loop2): Directory bread(block 70) failed
[  392.603416][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  392.604352][ T6507] FAT-fs (loop2): Directory bread(block 71) failed
[  392.652950][ T6507] FAT-fs (loop2): Directory bread(block 72) failed
[  392.667664][ T6507] FAT-fs (loop2): Directory bread(block 73) failed
[  392.716179][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.735952][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  392.765920][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  392.974538][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  393.415437][ T6183] device veth0_macvtap entered promiscuous mode
[  393.478878][ T6183] device veth1_macvtap entered promiscuous mode
[  393.628186][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  393.708390][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.782112][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  393.830491][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.870824][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  393.913890][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.964288][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.995471][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  394.058692][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  394.217695][ T6524] loop6: detected capacity change from 0 to 512
[  394.299327][ T6524] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.397: casefold flag without casefold feature
[  394.383594][ T6524] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.397: couldn't read orphan inode 15 (err -117)
[  394.467308][ T6524] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  394.765377][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  394.775915][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.785832][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  394.796455][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.806647][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  394.817542][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.829368][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.900437][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  394.916673][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  394.974003][ T4319] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  394.996749][ T6540] loop2: detected capacity change from 0 to 128
[  395.089459][ T6183] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.218085][ T6540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  395.227741][ T6540] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  395.373802][ T6183] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.585341][ T6183] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.820787][ T6183] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.981799][ T6028] EXT4-fs (loop6): unmounting filesystem.
[  396.881032][ T4319] usb 9-1: Using ep0 maxpacket: 16
[  396.888730][ T4319] usb 9-1: config 0 has an invalid interface number: 176 but max is 0
[  396.900173][ T4319] usb 9-1: config 0 has no interface number 0
[  396.900424][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  396.909526][ T4319] usb 9-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[  397.016993][ T6165] device veth0_vlan entered promiscuous mode
[  397.037099][ T6165] device veth1_vlan entered promiscuous mode
[  397.074773][ T6165] device veth0_macvtap entered promiscuous mode
[  397.092908][ T6165] device veth1_macvtap entered promiscuous mode
[  397.103202][ T4319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.112139][ T4319] usb 9-1: Product: syz
[  397.116354][ T4319] usb 9-1: Manufacturer: syz
[  397.121978][ T4319] usb 9-1: SerialNumber: syz
[  397.151036][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  397.169862][ T4319] usb 9-1: config 0 descriptor??
[  397.249472][ T6549] binder: 6545:6549 unknown command 1074553619
[  397.255859][ T6549] binder: 6545:6549 ioctl c0306201 2000000001c0 returned -22
[  397.336944][ T4319] usb 9-1: bad CDC descriptors
[  397.361144][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  397.594246][   T22] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  397.842297][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  397.906985][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  398.012538][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  398.071073][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  398.097878][   T22] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  398.118658][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  398.157944][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  398.236401][ T6556] loop2: detected capacity change from 0 to 16
[  398.269145][ T6556] erofs: (device loop2): mounted with root inode @ nid 36.
[  398.288703][ T6556] syz.2.401: attempt to access beyond end of device
[  398.288703][ T6556] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  398.468154][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  398.861566][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  398.886501][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  398.941030][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  399.063676][ T4684] usb 9-1: USB disconnect, device number 3
[  399.217722][ T6555] fido_id[6555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  399.256397][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.318081][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.363719][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.415549][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.643593][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.664979][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.715745][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.922970][ T6572] loop8: detected capacity change from 0 to 1024
[  399.930370][ T6572] EXT4-fs: Ignoring removed nobh option
[  399.936065][ T6572] EXT4-fs: Ignoring removed bh option
[  399.970195][ T6572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  400.017537][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.078850][ T6572] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  400.154626][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  400.240048][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  400.311325][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  400.378038][ T5790] EXT4-fs (loop8): unmounting filesystem.
[  400.879688][ T6584] x_tables: duplicate underflow at hook 1
[  401.255956][ T6586] loop6: detected capacity change from 0 to 512
[  401.436853][ T6586] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  402.170894][ T6594] loop2: detected capacity change from 0 to 512
[  402.188115][ T6594] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  402.842694][ T6594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  402.852712][ T6594] System zones: 1-12
[  402.857755][ T6594] EXT4-fs (loop2): orphan cleanup on readonly fs
[  402.877020][ T6594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.408: bg 0: block 361: padding at end of block bitmap is not set
[  402.897556][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.909050][ T6594] EXT4-fs (loop2): Remounting filesystem read-only
[  402.915730][ T6594] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  402.934406][ T6594] EXT4-fs (loop2): Remounting filesystem read-only
[  402.941065][ T6594] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.408: invalid indirect mapped block 12 (level 1)
[  402.955786][ T6594] EXT4-fs (loop2): Remounting filesystem read-only
[  402.962666][ T6594] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.408: invalid indirect mapped block 2 (level 2)
[  402.976961][ T6594] EXT4-fs (loop2): Remounting filesystem read-only
[  402.983779][ T6594] EXT4-fs (loop2): 1 truncate cleaned up
[  402.989546][ T6594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  403.012954][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.083361][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.108940][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.126066][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.137167][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.147090][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.157734][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.170446][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.183461][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  404.250145][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  404.268100][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  404.286871][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.327976][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.387903][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  404.395696][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.414231][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.529440][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  404.549202][ T6285] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  404.558724][ T6611] loop2: detected capacity change from 0 to 512
[  404.579377][ T6285] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  404.716538][ T6611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  404.823436][ T6611] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.411584][ T6617] fido_id[6617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  405.577773][ T6611] 
[  405.580177][ T6611] ======================================================
[  405.587223][ T6611] WARNING: possible circular locking dependency detected
[  405.594288][ T6611] 6.1.147-syzkaller #0 Not tainted
[  405.599426][ T6611] ------------------------------------------------------
[  405.606463][ T6611] syz.2.410/6611 is trying to acquire lock:
[  405.612402][ T6611] ffff888070dd8c90 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60
[  405.621977][ T6611] 
[  405.621977][ T6611] but task is already holding lock:
[  405.629350][ T6611] ffff888056e04208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190
[  405.638957][ T6611] 
[  405.638957][ T6611] which lock already depends on the new lock.
[  405.638957][ T6611] 
[  405.649386][ T6611] 
[  405.649386][ T6611] the existing dependency chain (in reverse order) is:
[  405.658404][ T6611] 
[  405.658404][ T6611] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  405.666511][ T6611]        down_read+0x42/0x2d0
[  405.671226][ T6611]        v2_read_dquot+0x4a/0x110
[  405.676271][ T6611]        dquot_acquire+0x152/0x520
[  405.681399][ T6611]        ext4_acquire_dquot+0x2d9/0x4a0
[  405.686963][ T6611]        dqget+0x778/0xeb0
[  405.691395][ T6611]        __dquot_initialize+0x3b6/0xcb0
[  405.696950][ T6611]        ext4_xattr_set+0xbd/0x320
[  405.702081][ T6611]        __vfs_setxattr+0x3e0/0x420
[  405.707316][ T6611]        __vfs_setxattr_noperm+0x129/0x5e0
[  405.713141][ T6611]        vfs_setxattr+0x168/0x2f0
[  405.718223][ T6611]        setxattr+0x2b2/0x2d0
[  405.722938][ T6611]        path_setxattr+0x142/0x280
[  405.728082][ T6611]        __x64_sys_lsetxattr+0xb4/0xd0
[  405.733562][ T6611]        do_syscall_64+0x4c/0xa0
[  405.738506][ T6611]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  405.744937][ T6611] 
[  405.744937][ T6611] -> #1 (&dquot->dq_lock){+.+.}-{3:3}:
[  405.752594][ T6611]        __mutex_lock+0x120/0xaf0
[  405.757636][ T6611]        dquot_commit+0x5a/0x410
[  405.762580][ T6611]        ext4_write_dquot+0x1f0/0x360
[  405.767959][ T6611]        mark_all_dquot_dirty+0xf9/0x400
[  405.773603][ T6611]        __dquot_free_space+0x7ec/0xbc0
[  405.779156][ T6611]        ext4_free_blocks+0x1bab/0x2640
[  405.784718][ T6611]        ext4_ext_remove_space+0x1f0d/0x4490
[  405.790713][ T6611]        ext4_ext_truncate+0x211/0x370
[  405.796186][ T6611]        ext4_truncate+0xa0b/0x1230
[  405.801418][ T6611]        ext4_evict_inode+0xb35/0x1100
[  405.806981][ T6611]        evict+0x485/0x870
[  405.811411][ T6611]        do_unlinkat+0x377/0x560
[  405.816362][ T6611]        __x64_sys_unlink+0x45/0x50
[  405.821573][ T6611]        do_syscall_64+0x4c/0xa0
[  405.826522][ T6611]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  405.832953][ T6611] 
[  405.832953][ T6611] -> #0 (&ei->i_data_sem/2){++++}-{3:3}:
[  405.840796][ T6611]        __lock_acquire+0x2cf8/0x7c50
[  405.846185][ T6611]        lock_acquire+0x1b4/0x490
[  405.851230][ T6611]        down_write+0x36/0x60
[  405.855938][ T6611]        ext4_map_blocks+0x903/0x1b60
[  405.861353][ T6611]        ext4_getblk+0x1ab/0x6d0
[  405.866332][ T6611]        ext4_bread+0x26/0x170
[  405.871141][ T6611]        ext4_quota_write+0x230/0x570
[  405.876528][ T6611]        find_free_dqentry+0x673/0xc20
[  405.882004][ T6611]        do_insert_tree+0x70d/0x1040
[  405.887328][ T6611]        do_insert_tree+0x9ae/0x1040
[  405.892641][ T6611]        do_insert_tree+0x9ae/0x1040
[  405.897944][ T6611]        do_insert_tree+0x9ae/0x1040
[  405.903244][ T6611]        qtree_write_dquot+0x48d/0x5b0
[  405.908714][ T6611]        v2_write_dquot+0x108/0x190
[  405.913950][ T6611]        dquot_acquire+0x2d5/0x520
[  405.919084][ T6611]        ext4_acquire_dquot+0x2d9/0x4a0
[  405.924669][ T6611]        dqget+0x778/0xeb0
[  405.929110][ T6611]        __dquot_initialize+0x328/0xcb0
[  405.934669][ T6611]        ext4_create+0x8c/0x460
[  405.939541][ T6611]        path_openat+0x1187/0x2e70
[  405.944681][ T6611]        do_filp_open+0x1c1/0x3c0
[  405.949721][ T6611]        do_sys_openat2+0x142/0x490
[  405.954940][ T6611]        __x64_sys_openat+0x135/0x160
[  405.960336][ T6611]        do_syscall_64+0x4c/0xa0
[  405.965291][ T6611]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  405.971734][ T6611] 
[  405.971734][ T6611] other info that might help us debug this:
[  405.971734][ T6611] 
[  405.981974][ T6611] Chain exists of:
[  405.981974][ T6611]   &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem
[  405.981974][ T6611] 
[  405.995637][ T6611]  Possible unsafe locking scenario:
[  405.995637][ T6611] 
[  406.003124][ T6611]        CPU0                    CPU1
[  406.008491][ T6611]        ----                    ----
[  406.013857][ T6611]   lock(&s->s_dquot.dqio_sem);
[  406.018717][ T6611]                                lock(&dquot->dq_lock);
[  406.025659][ T6611]                                lock(&s->s_dquot.dqio_sem);
[  406.033129][ T6611]   lock(&ei->i_data_sem/2);
[  406.037758][ T6611] 
[  406.037758][ T6611]  *** DEADLOCK ***
[  406.037758][ T6611] 
[  406.045910][ T6611] 4 locks held by syz.2.410/6611:
[  406.050937][ T6611]  #0: ffff888056e04460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  406.060109][ T6611]  #1: ffff888070dde850 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x7c2/0x2e70
[  406.070306][ T6611]  #2: ffff888054230268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520
[  406.079723][ T6611]  #3: ffff888056e04208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190
[  406.090017][ T6611] 
[  406.090017][ T6611] stack backtrace:
[  406.095928][ T6611] CPU: 0 PID: 6611 Comm: syz.2.410 Not tainted 6.1.147-syzkaller #0
[  406.103913][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  406.113994][ T6611] Call Trace:
[  406.117282][ T6611]  <TASK>
[  406.120239][ T6611]  dump_stack_lvl+0x168/0x22e
[  406.124951][ T6611]  ? load_image+0x3b0/0x3b0
[  406.129496][ T6611]  ? show_regs_print_info+0x12/0x12
[  406.134717][ T6611]  ? print_circular_bug+0x12b/0x1a0
[  406.139941][ T6611]  check_noncircular+0x274/0x310
[  406.144903][ T6611]  ? add_chain_block+0x940/0x940
[  406.149859][ T6611]  ? lockdep_lock+0xdc/0x1e0
[  406.154487][ T6611]  ? __lock_acquire+0x13c0/0x7c50
[  406.159532][ T6611]  ? _find_first_zero_bit+0xcf/0x100
[  406.164856][ T6611]  __lock_acquire+0x2cf8/0x7c50
[  406.169743][ T6611]  ? verify_lock_unused+0x140/0x140
[  406.174978][ T6611]  ? verify_lock_unused+0x140/0x140
[  406.180207][ T6611]  lock_acquire+0x1b4/0x490
[  406.184733][ T6611]  ? ext4_map_blocks+0x903/0x1b60
[  406.189781][ T6611]  ? __might_sleep+0xd0/0xd0
[  406.194392][ T6611]  ? read_lock_is_recursive+0x10/0x10
[  406.199779][ T6611]  ? percpu_counter_add_batch+0x13b/0x160
[  406.205519][ T6611]  ? rcu_is_watching+0x11/0xa0
[  406.210303][ T6611]  ? ext4_es_lookup_extent+0x443/0xb20
[  406.215809][ T6611]  down_write+0x36/0x60
[  406.219986][ T6611]  ? ext4_map_blocks+0x903/0x1b60
[  406.225026][ T6611]  ext4_map_blocks+0x903/0x1b60
[  406.229905][ T6611]  ? ext4_es_lookup_extent+0x443/0xb20
[  406.235385][ T6611]  ? ext4_issue_zeroout+0x250/0x250
[  406.240602][ T6611]  ? kasan_set_track+0x4b/0x70
[  406.245382][ T6611]  ? find_free_dqentry+0x55/0xc20
[  406.250424][ T6611]  ? do_insert_tree+0x70d/0x1040
[  406.255380][ T6611]  ? do_insert_tree+0x9ae/0x1040
[  406.260330][ T6611]  ? ext4_issue_zeroout+0x250/0x250
[  406.265560][ T6611]  ? v2_write_dquot+0x108/0x190
[  406.270438][ T6611]  ext4_getblk+0x1ab/0x6d0
[  406.274871][ T6611]  ? __x64_sys_openat+0x135/0x160
[  406.279907][ T6611]  ? do_syscall_64+0x4c/0xa0
[  406.284517][ T6611]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  406.290607][ T6611]  ? ext4_get_block_unwritten+0x100/0x100
[  406.296353][ T6611]  ? ext4_getblk+0x2a8/0x6d0
[  406.300958][ T6611]  ? ext4_get_block_unwritten+0x100/0x100
[  406.306696][ T6611]  ext4_bread+0x26/0x170
[  406.311046][ T6611]  ext4_quota_write+0x230/0x570
[  406.315915][ T6611]  ? ext4_quota_read+0x380/0x380
[  406.320869][ T6611]  ? ext4_quota_read+0x305/0x380
[  406.325819][ T6611]  ? check_dquot_block_header+0x212/0x2f0
[  406.331558][ T6611]  ? ext4_quota_read+0x380/0x380
[  406.336510][ T6611]  find_free_dqentry+0x673/0xc20
[  406.341467][ T6611]  do_insert_tree+0x70d/0x1040
[  406.346247][ T6611]  do_insert_tree+0x9ae/0x1040
[  406.351030][ T6611]  do_insert_tree+0x9ae/0x1040
[  406.355811][ T6611]  do_insert_tree+0x9ae/0x1040
[  406.360595][ T6611]  qtree_write_dquot+0x48d/0x5b0
[  406.365565][ T6611]  ? qtree_entry_unused+0xe0/0xe0
[  406.370617][ T6611]  ? rwsem_write_trylock+0x12f/0x1b0
[  406.375922][ T6611]  ? trace_contention_end+0x5f/0x170
[  406.381234][ T6611]  ? preempt_count_add+0x8d/0x190
[  406.386280][ T6611]  v2_write_dquot+0x108/0x190
[  406.390974][ T6611]  dquot_acquire+0x2d5/0x520
[  406.395663][ T6611]  ext4_acquire_dquot+0x2d9/0x4a0
[  406.400701][ T6611]  dqget+0x778/0xeb0
[  406.404607][ T6611]  __dquot_initialize+0x328/0xcb0
[  406.409646][ T6611]  ? dquot_initialize+0x20/0x20
[  406.414502][ T6611]  ? d_splice_alias+0x110/0x320
[  406.419380][ T6611]  ? ext4_lookup+0x2ce/0x6d0
[  406.423990][ T6611]  ext4_create+0x8c/0x460
[  406.428346][ T6611]  ? ext4_lookup+0x6d0/0x6d0
[  406.432955][ T6611]  ? inode_permission+0xef/0x480
[  406.437911][ T6611]  ? bpf_lsm_inode_create+0x5/0x10
[  406.443040][ T6611]  ? security_inode_create+0xb3/0x100
[  406.448442][ T6611]  ? ext4_lookup+0x6d0/0x6d0
[  406.453048][ T6611]  path_openat+0x1187/0x2e70
[  406.457657][ T6611]  ? do_filp_open+0x3c0/0x3c0
[  406.462354][ T6611]  do_filp_open+0x1c1/0x3c0
[  406.466873][ T6611]  ? vfs_tmpfile+0x480/0x480
[  406.471483][ T6611]  ? _raw_spin_unlock+0x24/0x40
[  406.476355][ T6611]  ? alloc_fd+0x58f/0x630
[  406.480789][ T6611]  do_sys_openat2+0x142/0x490
[  406.485487][ T6611]  ? do_sys_open+0xe0/0xe0
[  406.489919][ T6611]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  406.495919][ T6611]  ? lock_chain_count+0x20/0x20
[  406.500805][ T6611]  __x64_sys_openat+0x135/0x160
[  406.505683][ T6611]  do_syscall_64+0x4c/0xa0
[  406.510129][ T6611]  ? clear_bhb_loop+0x60/0xb0
[  406.514838][ T6611]  ? clear_bhb_loop+0x60/0xb0
[  406.519525][ T6611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  406.525440][ T6611] RIP: 0033:0x7f754ad8ebe9
[  406.529877][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.549517][ T6611] RSP: 002b:00007f754bcd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  406.557971][ T6611] RAX: ffffffffffffffda RBX: 00007f754afb5fa0 RCX: 00007f754ad8ebe9
[  406.565957][ T6611] RDX: 0000000000143941 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  406.573947][ T6611] RBP: 00007f754ae11e19 R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  406.581932][ T6611] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000
[  406.589913][ T6611] R13: 00007f754afb6038 R14: 00007f754afb5fa0 R15: 00007fff241ed818
[  406.597900][ T6611]  </TASK>
[  406.611705][ T4408] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  406.823281][ T6611] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.410: Invalid inode table block 3874091957 in block_group 0
[  406.834787][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  406.876452][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  406.880732][ T4408] usb 8-1: device descriptor read/64, error -71
[  406.899888][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  406.907720][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  406.918199][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  406.926652][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  407.013314][ T6611] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  407.170983][ T4408] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  407.419327][ T6611] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #4: comm syz.2.410: mark_inode_dirty error
[  407.454272][ T6611] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 146187263
[  407.481630][ T6611] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.410: Invalid inode table block 3874091957 in block_group 0
[  407.497039][ T6611] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  407.534914][ T6611] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #4: comm syz.2.410: mark_inode_dirty error
[  407.581354][ T6611] Quota error (device loop2): write_blk: dquota write failed
[  407.588985][ T6611] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  407.603328][ T6611] Quota error (device loop2): qtree_write_dquot: Error -12 occurred while creating quota
[  407.620300][ T6611] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.410: Failed to acquire dquot type 1
[  407.675510][ T4417] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm kworker/u4:9: Invalid inode table block 3874091957 in block_group 0
[  407.700235][ T6611] EXT4-fs (loop2): unmounting filesystem.
[  407.717000][ T6611] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.410: Invalid inode table block 3874091957 in block_group 0
[  407.733362][ T6611] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  407.967804][ T6629] chnl_net:caif_netlink_parms(): no params data found
[  408.138914][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.150125][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.158152][ T6629] device bridge_slave_0 entered promiscuous mode
[  408.175080][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.187624][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.196617][ T6629] device bridge_slave_1 entered promiscuous mode
[  408.240505][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.254475][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.290112][ T6629] team0: Port device team_slave_0 added
[  408.301983][ T6629] team0: Port device team_slave_1 added
[  408.336640][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.344215][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.374525][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.399348][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.408015][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.437377][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.506438][ T6629] device hsr_slave_0 entered promiscuous mode
[  408.514973][ T6629] device hsr_slave_1 entered promiscuous mode
[  408.522039][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  408.529633][ T6629] Cannot create hsr debugfs directory
[  408.960743][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  408.979472][ T4520] device hsr_slave_0 left promiscuous mode
[  408.986109][ T4520] device hsr_slave_1 left promiscuous mode
[  408.996540][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.004366][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.014643][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.022948][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.033821][ T4520] device bridge_slave_1 left promiscuous mode
[  409.040082][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.048887][ T4520] device bridge_slave_0 left promiscuous mode
[  409.057642][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.068552][ T4520] device veth1_macvtap left promiscuous mode
[  409.079395][ T4520] device veth0_macvtap left promiscuous mode
[  409.085694][ T4520] device veth1_vlan left promiscuous mode
[  409.091594][ T4520] device veth0_vlan left promiscuous mode
[  409.245367][ T4520] team0 (unregistering): Port device team_slave_1 removed
[  409.271720][ T4520] team0 (unregistering): Port device team_slave_0 removed
[  409.298645][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.325402][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.374270][ T4520] bond0 (unregistering): Released all slaves
[  409.727369][ T6629] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  409.751199][ T6629] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  409.770258][ T6629] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  409.782954][ T6629] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  409.862820][ T4520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.899787][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.912689][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  409.920438][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  409.933584][ T6629] 8021q: adding VLAN 0 to HW filter on device team0
[  409.946262][ T4520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.977325][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  409.986295][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  409.996653][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.003825][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.015566][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  410.024983][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  410.034067][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.041291][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.049076][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  410.058559][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  410.080127][ T4520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.092861][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  410.103396][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  410.112250][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  410.121357][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  410.132005][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  410.141367][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  410.149859][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  410.160364][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  410.174209][ T4520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.190202][ T6629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  410.204371][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  410.212521][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  410.221872][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  410.310546][ T4520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.365951][ T4520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.435884][ T4520] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.487610][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  410.495423][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  410.508568][ T6629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.525613][ T4520] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.638925][ T4520] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.716473][ T4520] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.776060][ T4520] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.828768][ T4520] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.866479][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  410.878021][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  410.918588][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  410.927297][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  410.952994][ T6629] device veth0_vlan entered promiscuous mode
[  410.961038][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  410.968908][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  410.983542][ T6629] device veth1_vlan entered promiscuous mode
[  411.007916][ T4520] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.034250][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  411.044911][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[  411.051869][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  411.063071][ T6629] device veth0_macvtap entered promiscuous mode
[  411.073742][ T6629] device veth1_macvtap entered promiscuous mode
[  411.086711][ T4520] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.106306][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.117890][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.130200][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.143436][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.153324][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.163957][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.173913][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.184464][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.195403][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.216775][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  411.228310][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  411.238735][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  411.248148][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  411.262715][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.275924][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.285912][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.298829][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.308871][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.319478][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.330260][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.341078][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.352169][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.363233][ T4520] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.376461][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  411.387869][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  411.399018][ T6629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.409862][ T6629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.422872][ T6629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.432647][ T6629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.448204][ T4520] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.485323][ T6629] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'
[  411.540151][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.557033][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.572807][ T6629] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht'
[  411.588219][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  411.611210][ T4520] tipc: Left network mode
[  411.629659][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.639263][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.651107][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  413.046332][ T4520] device hsr_slave_0 left promiscuous mode
[  413.052944][ T4520] device hsr_slave_1 left promiscuous mode
[  413.059331][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.069089][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.078804][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.086562][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.094472][ T4520] device bridge_slave_1 left promiscuous mode
[  413.100892][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.109035][ T4520] device bridge_slave_0 left promiscuous mode
[  413.115530][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.127380][ T4520] device hsr_slave_0 left promiscuous mode
[  413.133823][ T4520] device hsr_slave_1 left promiscuous mode
[  413.140330][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.148395][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.156416][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.164319][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.173222][ T4520] device bridge_slave_1 left promiscuous mode
[  413.179448][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.188794][ T4520] device bridge_slave_0 left promiscuous mode
[  413.196320][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.210245][ T4520] device hsr_slave_0 left promiscuous mode
[  413.217982][ T4520] device hsr_slave_1 left promiscuous mode
[  413.226318][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.235125][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.244678][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.253582][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.262271][ T4520] device bridge_slave_1 left promiscuous mode
[  413.268964][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.278783][ T4520] device bridge_slave_0 left promiscuous mode
[  413.286070][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.297732][ T4520] device hsr_slave_0 left promiscuous mode
[  413.304331][ T4520] device hsr_slave_1 left promiscuous mode
[  413.312586][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.320035][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.328075][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.338564][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.346824][ T4520] device bridge_slave_1 left promiscuous mode
[  413.355845][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.364530][ T4520] device bridge_slave_0 left promiscuous mode
[  413.373167][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.388612][ T4520] device veth1_macvtap left promiscuous mode
[  413.396700][ T4520] device veth0_macvtap left promiscuous mode
[  413.403229][ T4520] device veth1_vlan left promiscuous mode
[  413.409068][ T4520] device veth0_vlan left promiscuous mode
[  413.416998][ T4520] device veth1_macvtap left promiscuous mode
[  413.423222][ T4520] device veth0_macvtap left promiscuous mode
[  413.429334][ T4520] device veth1_vlan left promiscuous mode
[  413.435552][ T4520] device veth0_vlan left promiscuous mode
[  413.443189][ T4520] device veth1_macvtap left promiscuous mode
[  413.449266][ T4520] device veth0_macvtap left promiscuous mode
[  413.455842][ T4520] device veth1_vlan left promiscuous mode
[  413.461905][ T4520] device veth0_vlan left promiscuous mode
[  413.468796][ T4520] device veth1_macvtap left promiscuous mode
[  413.475820][ T4520] device veth0_macvtap left promiscuous mode
[  413.482048][ T4520] device veth1_vlan left promiscuous mode
[  413.487880][ T4520] device veth0_vlan left promiscuous mode
[  413.801192][ T4520] team0 (unregistering): Port device team_slave_1 removed
[  413.813245][ T4520] team0 (unregistering): Port device team_slave_0 removed
[  413.837993][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.865188][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.915534][ T4520] bond0 (unregistering): Released all slaves
[  414.068820][ T4520] team0 (unregistering): Port device team_slave_1 removed
[  414.080423][ T4520] team0 (unregistering): Port device team_slave_0 removed
[  414.110866][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.138993][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.189238][ T4520] bond0 (unregistering): Released all slaves
[  414.322114][ T4520] team0 (unregistering): Port device team_slave_1 removed
[  414.333433][ T4520] team0 (unregistering): Port device team_slave_0 removed
[  414.361867][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.388699][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.450005][ T4520] bond0 (unregistering): Released all slaves
[  414.557660][ T4520] team0 (unregistering): Port device team_slave_1 removed
[  414.589468][ T4520] team0 (unregistering): Port device team_slave_0 removed
[  414.615400][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.642121][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.694893][ T4520] bond0 (unregistering): Released all slaves