last executing test programs:

3m38.475975847s ago: executing program 4 (id=14):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2c}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x12, 0xfa00, {0x3, &(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r8}}, 0x18)

3m36.08507174s ago: executing program 4 (id=17):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r3)
r4 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prctl$PR_SET_SECCOMP(0x2, 0x1000000000000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040))

3m33.17930971s ago: executing program 4 (id=22):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m33.17828104s ago: executing program 4 (id=24):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r4)
r5 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x20}}, 0xc00)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040))

3m30.690548973s ago: executing program 4 (id=28):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f001, 0x6})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3001, 0x101, 0x20000000, 0x400, 0x800})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x65)
accept$alg(r4, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x16c, &(0x7f0000000480)="$eJzs2jFL80AYB/Dn7Wux9CM4Cc1QhzZpqiLoLAhObi5isXf1MDGSCNJOwS+gOMSPoKOrbn6Ezm5u6uIqKJEkl5omAaFSIvj/LXnIc/nflSs3XcO2zBZ3GkQL7sXWU2mNIrzFO7LcIKL5oBj6/mWTMnZH/aHvNjMDanfyWe95m7dcGEzPZgAAAAAAAAAAAAAAAAAAAAAA/BG1Z1lU9z3riguDtRJdpz846BgGs534jULyjg5xz1rlQmHtsbz6G5ES3t8R3vppkKeN9ZUgqeKHXik9n3psHqlOf9AQZqfHeuxQ19vL2qKmLelqmKXGif/ivHO5JqIKJd6P5rv5uk/0oGXvE1E1eszMCe/sJEwv5/3+SQo3r3X9HkX/KBnFtIp484tez3ZQPL4Q5Y+pyGUy2ykn/6v/ozErO2GroMV/+L9iK6dapM8P6s62a/fB+dHcs4zud+dH/PUkk5fkt6mTGaBonwEAAP//ZJomBQ==")
r5 = dup(r2)
r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x40, 0x0)
ftruncate(r6, 0x200004)
read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
sched_setscheduler(0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r7, &(0x7f0000003680)={0x2020}, 0x2020)

3m29.583303269s ago: executing program 4 (id=30):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0xa, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

3m13.744171986s ago: executing program 32 (id=30):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0xa, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

15.105792563s ago: executing program 2 (id=730):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$cont(0x20, r0, 0x9, 0xe73)

14.866102306s ago: executing program 2 (id=733):
r0 = syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1)
clock_gettime(0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x6410}, {r4, 0x1400}, {0xffffffffffffffff, 0x600}, {r0, 0x1008}, {r3, 0x8400}], 0x5, &(0x7f00000002c0), &(0x7f0000000300)={[0x3f16]}, 0x8)
r5 = socket(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x601c2, 0xa6)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20183, 0x24)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x1263, 0x0)
write(r5, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff80700", 0x12)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

7.164771901s ago: executing program 5 (id=748):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)

4.774382004s ago: executing program 5 (id=754):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

4.574615197s ago: executing program 1 (id=756):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getcwd(0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
close_range(r5, r5, 0x0)
socket$rds(0x15, 0x5, 0x0)
recvmsg(r5, &(0x7f00000032c0)={0x0, 0x0, 0x0}, 0x100)
bind$inet6(r5, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)

4.534449327s ago: executing program 5 (id=757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3.994803175s ago: executing program 3 (id=758):
r0 = syz_open_dev$usbfs(&(0x7f0000000680), 0x77, 0x1581)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0})

3.910690846s ago: executing program 5 (id=759):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
setresgid(0xee00, 0xee01, 0x0)
setregid(0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="af020000000002000ab9f1b668e8a6079810cc4f04c1a71e4964e3c830d66a8c431b1fb6e7651af9ce8a7348c0061413f4ca9ba12954"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

3.804512718s ago: executing program 3 (id=760):
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0xfffffffffffffffe)

3.739208348s ago: executing program 1 (id=761):
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_uring_setup(0x30df, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x4c)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(r3, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)

2.86804238s ago: executing program 1 (id=763):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x560d, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})

2.838907991s ago: executing program 5 (id=764):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000600)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10)

2.838481511s ago: executing program 2 (id=765):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
ioctl$LOOP_SET_STATUS(r0, 0x127c, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x14, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1]})

2.693009202s ago: executing program 1 (id=766):
unshare(0x400)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)

2.654674803s ago: executing program 5 (id=767):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)

2.649853533s ago: executing program 2 (id=768):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x1c0, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x1ac, 0x1, [@m_gact={0x140, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x111, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x68, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x39, 0x6, "bb192e7a8599ff96922fb05b4ef8d779be482e2bb0a9f7c1dda739b0c824775e85c394b0acb04472b8806eb4bfb9075ca8d45f638c"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x1c0}}, 0x20040800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.774424395s ago: executing program 3 (id=770):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x40}}]}, 0xff, 0xbb8, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, 0xffffffffffffffff)

1.767910035s ago: executing program 2 (id=771):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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")
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x82)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})

1.599424327s ago: executing program 0 (id=772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x44, "d8a062cc132f8c370f255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb73"}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

1.509096049s ago: executing program 3 (id=773):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x81012, r0, 0x0)

1.39065174s ago: executing program 0 (id=774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

393.923914ms ago: executing program 3 (id=775):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900ff0000000000000000000000000000000000080001000100"], 0x20}}, 0x4000000)

354.633345ms ago: executing program 0 (id=776):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0ae1", "0000fd9f", "b08068ebce17ab00"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c)

258.672796ms ago: executing program 3 (id=777):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x40001)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @empty}, {0x306, @broadcast}, 0x1e, {0x2, 0x4e21, @remote}, 'sit0\x00'})
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

258.286276ms ago: executing program 0 (id=778):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a01"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

193.665877ms ago: executing program 1 (id=779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x40}}, 0x4000800)

128.108058ms ago: executing program 2 (id=780):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)

70.777898ms ago: executing program 1 (id=781):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x8b, 0x2c4, &(0x7f00000003c0)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file4\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

70.506269ms ago: executing program 0 (id=782):
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
clock_nanosleep(0xfffffffa, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)

0s ago: executing program 0 (id=783):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675", 0x2a}], 0x1}, 0x8400)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9dbe44f6", 0x4}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts.
[   38.689965][ T4014] cgroup: Unknown subsys name 'net'
[   38.958950][ T4014] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   39.302300][ T4014] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   41.212186][ T4025] chnl_net:caif_netlink_parms(): no params data found
[   41.303141][ T4028] chnl_net:caif_netlink_parms(): no params data found
[   41.325815][ T4024] chnl_net:caif_netlink_parms(): no params data found
[   41.333729][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.335827][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.338550][ T4025] device bridge_slave_0 entered promiscuous mode
[   41.360106][ T4026] chnl_net:caif_netlink_parms(): no params data found
[   41.365253][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.367348][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.370035][ T4025] device bridge_slave_1 entered promiscuous mode
[   41.428430][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.460237][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.474763][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.476894][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.479492][ T4028] device bridge_slave_0 entered promiscuous mode
[   41.501802][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.504096][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.506763][ T4028] device bridge_slave_1 entered promiscuous mode
[   41.530189][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.532275][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.535090][ T4024] device bridge_slave_0 entered promiscuous mode
[   41.546337][ T4025] team0: Port device team_slave_0 added
[   41.560976][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.563109][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.565810][ T4024] device bridge_slave_1 entered promiscuous mode
[   41.569208][ T4025] team0: Port device team_slave_1 added
[   41.571191][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.574523][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.577236][ T4026] device bridge_slave_0 entered promiscuous mode
[   41.581671][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.597214][ T4027] chnl_net:caif_netlink_parms(): no params data found
[   41.606493][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.608737][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.611511][ T4026] device bridge_slave_1 entered promiscuous mode
[   41.616170][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.631820][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.634141][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.641437][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.646409][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.648383][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.656141][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.680339][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.685181][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.734115][ T4024] team0: Port device team_slave_0 added
[   41.740969][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.752047][ T4028] team0: Port device team_slave_0 added
[   41.756224][ T4028] team0: Port device team_slave_1 added
[   41.760376][ T4024] team0: Port device team_slave_1 added
[   41.775174][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.804631][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.806725][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.809546][ T4027] device bridge_slave_0 entered promiscuous mode
[   41.864620][ T4025] device hsr_slave_0 entered promiscuous mode
[   41.902802][ T4025] device hsr_slave_1 entered promiscuous mode
[   41.954584][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.957258][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.959950][ T4027] device bridge_slave_1 entered promiscuous mode
[   41.968490][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.970470][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.978257][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.983374][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.985307][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.992666][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.996668][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.998502][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.006065][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.017056][ T4026] team0: Port device team_slave_0 added
[   42.021982][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.024183][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.031327][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.052712][ T4026] team0: Port device team_slave_1 added
[   42.067687][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.080123][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.082116][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.090325][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.095658][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.098646][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.100583][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.108545][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.194424][ T4024] device hsr_slave_0 entered promiscuous mode
[   42.233350][ T4024] device hsr_slave_1 entered promiscuous mode
[   42.272494][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.274964][ T4024] Cannot create hsr debugfs directory
[   42.314516][ T4028] device hsr_slave_0 entered promiscuous mode
[   42.352894][ T4028] device hsr_slave_1 entered promiscuous mode
[   42.402484][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.404668][ T4028] Cannot create hsr debugfs directory
[   42.408599][ T4027] team0: Port device team_slave_0 added
[   42.455069][ T4027] team0: Port device team_slave_1 added
[   42.534364][ T4026] device hsr_slave_0 entered promiscuous mode
[   42.582883][ T4026] device hsr_slave_1 entered promiscuous mode
[   42.642556][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.644756][ T4026] Cannot create hsr debugfs directory
[   42.681353][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.683722][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.690857][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.718044][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.720094][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.728175][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.834439][ T4027] device hsr_slave_0 entered promiscuous mode
[   42.892885][ T4027] device hsr_slave_1 entered promiscuous mode
[   42.932634][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.934779][ T4027] Cannot create hsr debugfs directory
[   43.003970][ T4032] Bluetooth: hci2: command 0x0409 tx timeout
[   43.005902][ T4032] Bluetooth: hci4: command 0x0409 tx timeout
[   43.008239][ T4032] Bluetooth: hci0: command 0x0409 tx timeout
[   43.013169][ T1535] Bluetooth: hci1: command 0x0409 tx timeout
[   43.082615][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   43.091553][ T4025] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   43.145577][ T4025] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   43.187214][ T4025] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   43.224407][ T4025] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   43.313799][ T4028] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   43.357358][ T4028] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   43.397666][ T4028] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   43.439279][ T4028] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   43.528970][ T4026] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   43.574611][ T4026] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   43.624401][ T4026] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   43.679925][ T4026] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   43.724700][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.753634][ T4024] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   43.794342][ T4024] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   43.836890][ T4024] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   43.881560][ T4025] 8021q: adding VLAN 0 to HW filter on device team0
[   43.894507][ T4024] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   43.925856][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   43.929613][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.954924][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.961475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.965014][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.967215][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.979025][ T4027] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   44.024501][ T4027] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   44.064670][ T4027] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   44.114832][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.122241][ T4027] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   44.188726][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.191961][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.195897][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.198033][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.228848][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.257061][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.267139][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.279671][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.284509][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.287396][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.306405][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.309100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.311862][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.316082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.321581][ T4028] 8021q: adding VLAN 0 to HW filter on device team0
[   44.336835][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.339916][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.343460][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.345526][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.348012][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.350891][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.354519][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.363492][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.368881][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.381989][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.387926][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.390977][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.394425][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.397195][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.399289][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.416276][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.428641][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.448489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.461485][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.470567][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.474656][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.477499][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.480182][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.483705][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.488989][ T4026] 8021q: adding VLAN 0 to HW filter on device team0
[   44.499715][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.503985][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.516665][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.519220][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.521998][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.530449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.536239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.540066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.543131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.546917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.549751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.555124][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.557124][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.561230][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.567305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.572310][ T4027] 8021q: adding VLAN 0 to HW filter on device team0
[   44.585891][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.588451][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.590995][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.596363][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.599103][  T410] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.601042][  T410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.611598][ T4024] 8021q: adding VLAN 0 to HW filter on device team0
[   44.619758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.621967][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.626327][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.629150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.632067][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.634156][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.640854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.643637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.661430][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.665645][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.668524][ T1803] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.670595][ T1803] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.674474][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.677520][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.680211][ T1803] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.682236][ T1803] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.688339][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.691078][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.698378][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.710895][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.716621][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.719988][  T410] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.722010][  T410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.736777][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.740176][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.746386][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.749448][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.760622][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.764719][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.767605][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.770428][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.773924][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.790734][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.795380][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.798391][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.800559][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.803188][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.805865][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.809664][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.821449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.825195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.831705][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.842103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.846844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.849903][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.853986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.856949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.859696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.863580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.866328][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.869565][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.883753][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.886674][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.904485][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.909973][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.913651][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.916592][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.919332][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.922072][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.926854][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.938105][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.941854][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   44.951244][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.955401][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.958189][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.970143][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.981331][ T4025] device veth0_vlan entered promiscuous mode
[   44.998022][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.000964][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.015957][ T4025] device veth1_vlan entered promiscuous mode
[   45.033326][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.036034][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.041927][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.051080][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.069331][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.080484][ T4028] device veth0_vlan entered promiscuous mode
[   45.083084][ T4074] Bluetooth: hci1: command 0x041b tx timeout
[   45.084921][ T4074] Bluetooth: hci0: command 0x041b tx timeout
[   45.086685][ T4074] Bluetooth: hci4: command 0x041b tx timeout
[   45.099438][ T1535] Bluetooth: hci2: command 0x041b tx timeout
[   45.134466][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.143005][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   45.145343][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   45.154041][ T4028] device veth1_vlan entered promiscuous mode
[   45.162836][ T1962] Bluetooth: hci3: command 0x041b tx timeout
[   45.166511][ T4025] device veth0_macvtap entered promiscuous mode
[   45.173484][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.176313][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.179259][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.182575][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   45.184907][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   45.187119][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.191973][ T4025] device veth1_macvtap entered promiscuous mode
[   45.206495][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.221117][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.242275][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.248086][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.251160][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   45.260497][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   45.270615][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.289410][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.301739][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.308744][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.311957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.315649][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.318833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.328085][ T4028] device veth0_macvtap entered promiscuous mode
[   45.339160][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.342224][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.347157][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.354436][ T4025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.357121][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.359626][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.362133][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.375646][ T4028] device veth1_macvtap entered promiscuous mode
[   45.384596][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.387378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.390205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.421895][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.425450][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.433970][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.436575][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.448946][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.451932][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.474097][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.477252][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.481208][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.487594][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.490533][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.495179][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.499502][ T4024] device veth0_vlan entered promiscuous mode
[   45.503731][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.507019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.509931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.513838][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.516799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.519742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.544268][ T4028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.546749][ T4028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.549051][ T4028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.551516][ T4028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.588787][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.590043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.591078][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.600211][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.603370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.606221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.609156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.611953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.616144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.618843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.621500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.627602][ T4024] device veth1_vlan entered promiscuous mode
[   45.641793][ T4027] device veth0_vlan entered promiscuous mode
[   45.659406][ T4026] device veth0_vlan entered promiscuous mode
[   45.681175][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.688389][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.706430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.720228][ T4027] device veth1_vlan entered promiscuous mode
[   45.737870][ T4026] device veth1_vlan entered promiscuous mode
[   45.745111][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.748498][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.751236][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.756737][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.765586][  T410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.768041][  T410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.781031][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.784917][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.796057][ T4024] device veth0_macvtap entered promiscuous mode
[   45.845899][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.848257][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.851674][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.856694][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.884640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.887373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.892242][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.905635][ T4024] device veth1_macvtap entered promiscuous mode
[   45.911700][ T4027] device veth0_macvtap entered promiscuous mode
[   45.924681][ T4027] device veth1_macvtap entered promiscuous mode
[   45.945498][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.948429][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.951897][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.960714][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.966717][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.971157][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.980984][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.985672][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.988493][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.999695][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.005555][ T4027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.008083][ T4027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.010463][ T4027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.020052][ T4027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.104226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   46.107032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   46.109913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   46.116357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.119907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.917727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.920575][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.949377][ T4026] device veth0_macvtap entered promiscuous mode
[   46.953942][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.956297][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.984466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   46.987408][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.990264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.003311][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   47.015463][ T4026] device veth1_macvtap entered promiscuous mode
[   47.121876][  T410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.124986][  T410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.129177][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   47.133334][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.208916][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.211910][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.222016][   T13] Bluetooth: hci2: command 0x040f tx timeout
[   47.224224][   T13] Bluetooth: hci4: command 0x040f tx timeout
[   47.225962][   T13] Bluetooth: hci0: command 0x040f tx timeout
[   47.228079][   T13] Bluetooth: hci1: command 0x040f tx timeout
[   47.243399][   T13] Bluetooth: hci3: command 0x040f tx timeout
[   47.249810][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.253617][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.256369][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.259616][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.270722][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.422582][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   49.277364][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   49.279223][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   49.280967][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   49.282780][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   49.324406][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.328236][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.337067][ T4074] Bluetooth: hci3: command 0x0419 tx timeout
[   49.394822][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.397966][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.401121][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.408313][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.411827][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.417242][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.420029][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.420057][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.421637][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.433523][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.436449][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.460079][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.478215][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.481254][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.492644][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.495655][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.498573][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.521787][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.528842][ T4024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.531327][ T4024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.651462][ T4024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.658886][ T4024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.177243][ T4130] process 'syz.0.8' launched './file0' with NULL argv: empty string added
[   50.287316][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.290957][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.300605][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.306218][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.309234][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.313050][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.316010][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.319132][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.336045][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.338406][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.341566][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.350006][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.374028][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.501817][ T4026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.507432][ T4026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.511210][ T4026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.530746][ T4026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.873495][ T4136] sched: RT throttling activated
[   52.207506][ T4132] Bluetooth: hci5: command 0x1003 tx timeout
[   52.210348][ T4034] Bluetooth: hci5: sending frame failed (-49)
[   52.259946][  T557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.262287][  T557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.983332][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   53.008399][  T557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.010660][  T557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.014466][ T4131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.023008][ T4131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.029520][ T4116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   53.033288][ T4116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   53.065275][ T1637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.067854][ T1637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.071022][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   55.442328][ T4132] Bluetooth: hci5: command 0x1001 tx timeout
[   55.444624][ T4034] Bluetooth: hci5: sending frame failed (-49)
[   55.446606][ T4132] Bluetooth: hci6: command 0x1003 tx timeout
[   55.461877][ T4034] Bluetooth: hci6: sending frame failed (-49)
[   57.155404][ T4165] loop2: detected capacity change from 0 to 22
[   57.198213][ T4165] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   57.229524][ T4165] romfs: bad initial checksum on dev loop2.
[   57.557454][ T4074] Bluetooth: hci6: command 0x1001 tx timeout
[   57.560539][ T4034] Bluetooth: hci6: sending frame failed (-49)
[   57.562544][ T4074] Bluetooth: hci5: command 0x1009 tx timeout
[   57.863497][ T4174] loop3: detected capacity change from 0 to 22
[   57.991919][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'.
[   58.780520][ T4174] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   58.880991][ T4174] romfs: bad initial checksum on dev loop3.
[   59.643102][ T3607] Bluetooth: hci6: command 0x1009 tx timeout
[   59.646326][ T4179] Zero length message leads to an empty skb
[   60.263829][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'.
[   61.457998][ T4192] netlink: 'syz.3.19': attribute type 1 has an invalid length.
[   61.702205][ T4192] bond0: (slave veth3): Enslaving as an active interface with an up link
[   62.153468][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'.
[   63.840485][ T4196] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   64.059950][ T4192] device veth1 entered promiscuous mode
[   64.074231][ T4192] bond0: (slave vlan2): Enslaving as an active interface with an up link
[   65.077014][ T4228] loop4: detected capacity change from 0 to 22
[   65.207964][ T4228] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   65.219441][ T4228] romfs: bad initial checksum on dev loop4.
[   70.270739][ T4253] loop2: detected capacity change from 0 to 22
[   70.346266][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[   70.349066][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[   70.349722][ T4255] loop0: detected capacity change from 0 to 22
[   70.553130][ T4253] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   70.556810][ T4253] romfs: bad initial checksum on dev loop2.
[   70.583318][ T4255] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   70.586379][ T4255] romfs: bad initial checksum on dev loop0.
[   71.624379][ T4260] loop1: detected capacity change from 0 to 22
[   71.914065][ T4260] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   71.939809][ T4260] romfs: bad initial checksum on dev loop1.
[   75.320698][ T4272] loop2: detected capacity change from 0 to 22
[   75.477074][    T7] cfg80211: failed to load regulatory.db
[   76.195143][ T4272] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   76.198671][ T4272] romfs: bad initial checksum on dev loop2.
[   77.953797][ T4295] loop2: detected capacity change from 0 to 22
[   77.960838][ T4295] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   77.988276][ T4295] romfs: bad initial checksum on dev loop2.
[   81.997146][ T4328] loop2: detected capacity change from 0 to 512
[   82.048480][ T4328] EXT4-fs error (device loop2): ext4_fill_super:4841: inode #2: comm syz.2.54: iget: bad i_size value: -1
[   82.054345][ T4328] EXT4-fs (loop2): get root inode failed
[   82.056002][ T4328] EXT4-fs (loop2): mount failed
[   83.432611][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'.
[   85.575646][ T4364] binder: 4356:4364 ioctl 4018620d 0 returned -22
[   86.313882][ T4373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.316168][ T4373] IPv6: NLM_F_CREATE should be set when creating new route
[   86.404801][ T4375] loop2: detected capacity change from 0 to 512
[   86.442673][ T4072] Bluetooth: hci5: command 0x0409 tx timeout
[   86.489026][ T4375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.536736][ T4375] EXT4-fs (loop2): 1 orphan inode deleted
[   86.538361][ T4375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   87.620199][ T4371] loop1: detected capacity change from 0 to 32768
[   87.767807][ T4371] XFS (loop1): Mounting V5 Filesystem
[   87.770828][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.773698][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.877649][ T4371] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   87.897422][ T4392] loop0: detected capacity change from 0 to 512
[   87.926096][ T4371] XFS (loop1): Starting recovery (logdev: internal)
[   88.023280][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.222744][ T4371] XFS (loop1): Ending recovery (logdev: internal)
[   88.522603][    T7] Bluetooth: hci5: command 0x041b tx timeout
[   88.957877][ T4025] XFS (loop1): Unmounting Filesystem
[   89.157983][ T4400] loop0: detected capacity change from 0 to 16384
[   89.313800][ T4401] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.452216][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.538671][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.602766][ T4074] Bluetooth: hci5: command 0x040f tx timeout
[   91.947382][ T4423] loop1: detected capacity change from 0 to 40427
[   92.010329][ T4423] F2FS-fs (loop1): invalid crc value
[   92.026135][ T4423] F2FS-fs (loop1): Found nat_bits in checkpoint
[   92.050826][ T4423] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   92.164267][ T4367] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.166799][ T4367] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.169283][ T4367] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.171709][ T4367] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.279998][ T4427] attempt to access beyond end of device
[   92.279998][ T4427] loop1: rw=2049, want=53504, limit=40427
[   92.480840][ T4417] netlink: 'syz.0.73': attribute type 10 has an invalid length.
[   92.513667][ T4417] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.677516][ T4417] team0: Port device bond0 added
[   92.682906][ T4072] Bluetooth: hci5: command 0x0419 tx timeout
[   92.934850][ T4344] chnl_net:caif_netlink_parms(): no params data found
[   94.313141][ T4455] loop1: detected capacity change from 0 to 512
[   94.345017][ T4455] EXT4-fs (loop1): Ignoring removed oldalloc option
[   94.347035][ T4455] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   95.156106][ T4455] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.77: invalid indirect mapped block 4294967295 (level 0)
[   95.165718][ T4455] EXT4-fs (loop1): Remounting filesystem read-only
[   95.167638][ T4455] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.77: invalid indirect mapped block 4294967295 (level 1)
[   95.183566][ T4455] EXT4-fs (loop1): Remounting filesystem read-only
[   95.191353][ T4455] EXT4-fs (loop1): 1 orphan inode deleted
[   95.194263][ T4455] EXT4-fs (loop1): 1 truncate cleaned up
[   95.195682][ T4464] No such timeout policy "syz0"
[   95.198175][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,errors=remount-ro,init_itable,block_validity,block_validity,quota,. Quota mode: writeback.
[   95.249039][  T557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.291556][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.298539][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.301438][ T4344] device bridge_slave_0 entered promiscuous mode
[   95.306702][ T4468] loop2: detected capacity change from 0 to 128
[   95.314286][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.316250][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.319160][ T4344] device bridge_slave_1 entered promiscuous mode
[   95.388448][  T557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.408714][ T4344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.414603][ T4344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.461647][ T4468] attempt to access beyond end of device
[   95.461647][ T4468] loop2: rw=2049, want=1041, limit=128
[   95.504324][ T4344] team0: Port device team_slave_0 added
[   95.520704][ T4344] team0: Port device team_slave_1 added
[   95.549881][ T4474] loop3: detected capacity change from 0 to 8
[   95.575652][ T4468] attempt to access beyond end of device
[   95.575652][ T4468] loop2: rw=524288, want=369, limit=128
[   95.577135][  T557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.579673][ T4468] attempt to access beyond end of device
[   95.579673][ T4468] loop2: rw=0, want=153, limit=128
[   95.587986][ T4468] attempt to access beyond end of device
[   95.587986][ T4468] loop2: rw=0, want=153, limit=128
[   95.591077][ T4468] attempt to access beyond end of device
[   95.591077][ T4468] loop2: rw=0, want=153, limit=128
[   95.594887][ T4468] attempt to access beyond end of device
[   95.594887][ T4468] loop2: rw=0, want=153, limit=128
[   95.598308][ T4468] attempt to access beyond end of device
[   95.598308][ T4468] loop2: rw=0, want=153, limit=128
[   95.601385][ T4468] attempt to access beyond end of device
[   95.601385][ T4468] loop2: rw=0, want=153, limit=128
[   95.615137][ T4468] attempt to access beyond end of device
[   95.615137][ T4468] loop2: rw=0, want=153, limit=128
[   96.456387][ T4474] SQUASHFS error: xz decompression failed, data probably corrupt
[   96.458798][ T4474] SQUASHFS error: Failed to read block 0x108: -5
[   96.460498][ T4474] SQUASHFS error: Unable to read metadata cache entry [106]
[   96.489584][ T4474] SQUASHFS error: Unable to read inode 0x11f
[   96.515489][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.523731][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.541483][ T4344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.558092][  T557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.592254][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.594309][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.601372][ T4344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.687611][ T4344] device hsr_slave_0 entered promiscuous mode
[   96.714193][ T4344] device hsr_slave_1 entered promiscuous mode
[   96.752609][ T4344] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.754742][ T4344] Cannot create hsr debugfs directory
[   96.895815][ T4493] loop1: detected capacity change from 0 to 512
[   97.758281][ T4493] EXT2-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   97.761745][ T4493] EXT2-fs (loop1): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c]
[   97.910289][ T4503] loop3: detected capacity change from 0 to 1024
[   97.963745][ T4503] =======================================================
[   97.963745][ T4503] WARNING: The mand mount option has been deprecated and
[   97.963745][ T4503]          and is ignored by this kernel. Remove the mand
[   97.963745][ T4503]          option from the mount to silence this warning.
[   97.963745][ T4503] =======================================================
[   98.148727][ T4503] EXT4-fs (loop3): Ignoring removed nobh option
[   98.161851][ T4503] EXT4-fs (loop3): Ignoring removed bh option
[   98.188354][ T4503] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   98.852305][ T4503] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x0000000000000f06,nodelalloc,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   98.864012][ T4344] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   98.894967][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[   98.899603][ T4344] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   98.964818][ T4344] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   99.034366][ T4344] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  100.024173][ T4531] netlink: 'syz.0.106': attribute type 4 has an invalid length.
[  100.264970][ T4344] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.332947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.335937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.999946][ T4344] 8021q: adding VLAN 0 to HW filter on device team0
[  101.040962][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.044111][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.047082][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.049141][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.169604][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.255243][ T4344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  101.258169][ T4344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.230459][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.234435][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.237387][ T1803] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.239432][ T1803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.247988][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.275389][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.286460][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.296395][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.305754][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.311284][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.318536][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.340885][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.356076][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.369996][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.442872][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.939115][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  104.207098][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.116'.
[  105.034825][ T4585] netem: change failed
[  105.121952][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.129337][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.161589][ T4344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.541250][ T4617] xt_CONNSECMARK: invalid mode: 0
[  106.468106][ T4629] device syzkaller0 entered promiscuous mode
[  108.067409][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.070463][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.088466][ T4344] device veth0_vlan entered promiscuous mode
[  108.094865][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.101075][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.172713][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.183326][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.796968][  T557] device hsr_slave_0 left promiscuous mode
[  108.853371][  T557] device hsr_slave_1 left promiscuous mode
[  108.865966][ T4664] loop2: detected capacity change from 0 to 64
[  108.938410][ T4665] loop1: detected capacity change from 0 to 512
[  108.983238][  T557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.985515][  T557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.988784][  T557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.990879][  T557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.015556][ T4665] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  109.320719][  T557] device bridge_slave_1 left promiscuous mode
[  109.395482][  T557] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.672867][  T557] device bridge_slave_0 left promiscuous mode
[  109.682901][  T557] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.693296][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback.
[  109.913422][  T557] device veth1_macvtap left promiscuous mode
[  109.915353][  T557] device veth0_macvtap left promiscuous mode
[  109.917099][  T557] device veth1_vlan left promiscuous mode
[  109.918792][  T557] device veth0_vlan left promiscuous mode
[  110.421567][ T4672] loop0: detected capacity change from 0 to 32768
[  110.531542][ T4672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.139 (4672)
[  110.632239][ T4672] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  110.640783][ T4672] BTRFS info (device loop0): force clearing of disk cache
[  110.650002][ T4672] BTRFS info (device loop0): force zlib compression, level 3
[  110.657681][ T4672] BTRFS info (device loop0): enabling auto defrag
[  110.665005][ T4672] BTRFS info (device loop0): max_inline at 0
[  110.669904][ T4672] BTRFS info (device loop0): using free space tree
[  110.678555][ T4672] BTRFS info (device loop0): has skinny extents
[  110.955484][  T557] team0 (unregistering): Port device team_slave_1 removed
[  110.961053][ T4672] BTRFS info (device loop0): enabling ssd optimizations
[  110.968456][ T4672] BTRFS info (device loop0): clearing free space tree
[  110.970607][ T4672] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  110.974703][ T4672] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  111.361195][  T557] team0 (unregistering): Port device team_slave_0 removed
[  111.400957][  T557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.415716][ T4672] BTRFS info (device loop0): creating free space tree
[  111.418883][ T4672] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  111.429572][ T4672] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  111.510386][  T557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.601907][ T1803] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  111.789449][  T557] bond0 (unregistering): Released all slaves
[  111.891239][ T4344] device veth1_vlan entered promiscuous mode
[  111.894697][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  112.003466][ T4715] loop1: detected capacity change from 0 to 256
[  112.020358][ T4344] device veth0_macvtap entered promiscuous mode
[  112.035338][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  112.046359][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  112.072968][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  112.085470][ T4344] device veth1_macvtap entered promiscuous mode
[  112.153430][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.163450][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.166271][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.210620][ T4715] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  112.236811][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.239719][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.442536][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.873590][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.876135][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  112.878869][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  112.881686][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  112.938062][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.941186][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.072437][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.075340][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.077996][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.128243][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.145525][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.148951][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  113.151913][ T1803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  113.199066][ T4344] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.208085][ T4344] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.214910][ T4344] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.220566][ T4344] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.348439][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.408787][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.419314][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  113.423964][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.427115][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.435795][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  114.370790][ T4720] loop2: detected capacity change from 0 to 32768
[  120.590444][ T4801] loop0: detected capacity change from 0 to 40427
[  120.644283][ T4801] F2FS-fs (loop0): invalid crc value
[  120.716233][ T4801] F2FS-fs (loop0): Found nat_bits in checkpoint
[  120.757714][ T4801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  120.979979][ T4826] handle_bad_sector: 596 callbacks suppressed
[  120.979993][ T4826] attempt to access beyond end of device
[  120.979993][ T4826] loop0: rw=2049, want=53504, limit=40427
[  121.979562][   T26] audit: type=1326 audit(121.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.3.172" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6770728 code=0x0
[  122.461365][ T4855] loop5: detected capacity change from 0 to 256
[  122.511311][ T4855] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  124.479616][ T4873] ODEBUG: Out of memory. ODEBUG disabled
[  124.963099][ T4873] syz.0.171 (4873): drop_caches: 2
[  125.002007][ T4870] loop5: detected capacity change from 0 to 1024
[  125.248459][ T4036] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  125.251296][ T4036] CPU: 0 PID: 4036 Comm: kworker/u5:4 Not tainted 5.15.180-syzkaller #0
[  125.253611][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  125.256290][ T4036] Workqueue: hci4 hci_rx_work
[  125.257569][ T4036] Call trace:
[  125.258512][ T4036]  dump_backtrace+0x0/0x43c
[  125.259746][ T4036]  show_stack+0x2c/0x3c
[  125.260967][ T4036]  __dump_stack+0x30/0x40
[  125.262161][ T4036]  dump_stack_lvl+0xf8/0x160
[  125.263421][ T4036]  dump_stack+0x1c/0x5c
[  125.264528][ T4036]  sysfs_create_dir_ns+0x22c/0x24c
[  125.265960][ T4036]  kobject_add_internal+0x590/0xc54
[  125.267419][ T4036]  kobject_add+0x134/0x1f8
[  125.268633][ T4036]  device_add+0x3f0/0xf94
[  125.269849][ T4036]  hci_conn_add_sysfs+0xbc/0x1cc
[  125.271190][ T4036]  le_conn_complete_evt+0x9a4/0x11bc
[  125.272572][ T4036]  hci_le_meta_evt+0x85c/0x3010
[  125.273907][ T4036]  hci_event_packet+0xd10/0x11bc
[  125.275203][ T4036]  hci_rx_work+0x1cc/0x880
[  125.276393][ T4036]  process_one_work+0x79c/0x1140
[  125.277799][ T4036]  worker_thread+0x8f4/0x101c
[  125.279171][ T4036]  kthread+0x374/0x454
[  125.280247][ T4036]  ret_from_fork+0x10/0x20
[  125.283612][ T4036] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  125.287286][ T4036] Bluetooth: hci4: failed to register connection device
[  125.415977][ T4870] EXT4-fs (loop5): Test dummy encryption mode enabled
[  125.436755][ T4870] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  125.638972][ T4870] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  125.689196][ T4903] syz.2.186 sent an empty control message without MSG_MORE.
[  126.184539][ T4917] mmap: syz.2.191 (4917) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  127.583545][ T4925] loop1: detected capacity change from 0 to 32768
[  127.641047][ T4925] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  127.649372][ T4925] JBD2: Ignoring recovery information on journal
[  127.699574][ T4925] (syz.1.193,4925,1):ocfs2_read_journal_inode:1564 ERROR: status = -13
[  127.702007][ T4925] (syz.1.193,4925,1):ocfs2_mark_dead_nodes:1849 ERROR: status = -13
[  127.704241][ T4925] (syz.1.193,4925,1):ocfs2_check_volume:2478 ERROR: status = -13
[  127.706419][ T4925] (syz.1.193,4925,1):ocfs2_check_volume:2490 ERROR: status = -13
[  127.708522][ T4925] (syz.1.193,4925,1):ocfs2_mount_volume:1824 ERROR: status = -13
[  127.722223][ T4925] (syz.1.193,4925,1):ocfs2_fill_super:1177 ERROR: status = -13
[  130.682731][ T4969] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.201'.
[  130.858805][ T4970] loop1: detected capacity change from 0 to 512
[  131.461210][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[  131.469677][ T4970] EXT4-fs (loop1): Test dummy encryption mode enabled
[  131.471600][ T4970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.475290][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[  131.479633][ T4972] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  131.530489][ T4968] loop3: detected capacity change from 0 to 4096
[  131.533302][ T4970] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.198: bad orphan inode 131083
[  131.537897][ T4970] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  131.572990][ T4968] ntfs3: Unknown parameter 'iocharsetXᦹÜuã"showmeta'
[  132.652942][ T4963] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  132.706719][   T25] Bluetooth: hci4: command 0x0406 tx timeout
[  132.766521][ T5001] loop0: detected capacity change from 0 to 64
[  132.782485][ T5001] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=08adface)
[  133.013767][ T5007] loop0: detected capacity change from 0 to 16
[  133.033440][ T5007] erofs: (device loop0): mounted with root inode @ nid 36.
[  133.044797][ T5004] loop3: detected capacity change from 0 to 8192
[  133.211973][ T5001] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  133.212035][ T5001] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36
[  133.212280][ T5001] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  133.212295][ T5001] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36
[  133.212417][ T5001] attempt to access beyond end of device
[  133.212417][ T5001] loop0: rw=524288, want=312, limit=16
[  133.212472][ T5001] attempt to access beyond end of device
[  133.212472][ T5001] loop0: rw=524288, want=1049280, limit=16
[  133.212566][ T5001] attempt to access beyond end of device
[  133.212566][ T5001] loop0: rw=524288, want=6536, limit=16
[  133.212604][ T5001] attempt to access beyond end of device
[  133.212604][ T5001] loop0: rw=524288, want=34359736344, limit=16
[  133.212662][ T5001] attempt to access beyond end of device
[  133.212662][ T5001] loop0: rw=524288, want=24, limit=16
[  133.212721][ T5001] attempt to access beyond end of device
[  133.212721][ T5001] loop0: rw=524288, want=736, limit=16
[  133.212900][ T5001] attempt to access beyond end of device
[  133.212900][ T5001] loop0: rw=524288, want=536576872, limit=16
[  134.278586][ T5004] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  134.391260][ T5004] REISERFS (device loop3): using ordered data mode
[  134.478392][ T5004] reiserfs: using flush barriers
[  134.594710][ T5004] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.622910][ T5004] REISERFS (device loop3): checking transaction log (loop3)
[  134.671444][ T5004] REISERFS (device loop3): Using r5 hash to sort names
[  134.731129][ T5004] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  134.851745][ T5045] loop1: detected capacity change from 0 to 1024
[  134.857513][ T5050] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3253, free_space(entry_count) 2
[  134.863222][ T5050] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 540. Fsck?
[  134.866158][ T5050] REISERFS (device loop3): Remounting filesystem read-only
[  135.042583][ T5050] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  135.082636][ T5045] EXT4-fs (loop1): Ignoring removed orlov option
[  136.283715][ T5057] loop0: detected capacity change from 0 to 128
[  137.072679][ T5057] EXT4-fs (loop0): Test dummy encryption mode enabled
[  137.076461][ T5057] EXT4-fs (loop0): Test dummy encryption mode enabled
[  137.557574][ T5057] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none.
[  137.857309][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000008,grpid,orlov,,errors=continue. Quota mode: none.
[  138.118631][ T5069] syz.2.224 uses obsolete (PF_INET,SOCK_PACKET)
[  138.835372][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'.
[  139.785425][ T5089] loop3: detected capacity change from 0 to 32768
[  139.843064][ T5089] gfs2: Unknown parameter 'statfs_quaotum'
[  139.878299][ T5094] loop1: detected capacity change from 0 to 764
[  140.522436][ T5103] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.230'.
[  141.409178][ T5109] rock: directory entry would overflow storage
[  141.411101][ T5109] rock: sig=0x4f50, size=4, remaining=3
[  141.412738][ T5109] iso9660: Corrupted directory entry in block 6 of inode 1792
[  141.632506][ T4428] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  142.529385][ T5125] loop1: detected capacity change from 0 to 128
[  142.663630][ T4428] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  143.432657][ T4428] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  143.435401][ T4428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.437608][ T4428] usb 1-1: Product: syz
[  143.438929][ T4428] usb 1-1: Manufacturer: syz
[  143.440216][ T4428] usb 1-1: SerialNumber: syz
[  143.553352][ T5105] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.600796][ T5156] loop3: detected capacity change from 0 to 128
[  145.287195][ T4428] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8
[  145.362766][ T4428] usb 1-1: USB disconnect, device number 2
[  145.456898][ T4428] usblp0: removed
[  146.878971][ T5184] loop1: detected capacity change from 0 to 512
[  147.104966][ T5184] EXT4-fs (loop1): orphan cleanup on readonly fs
[  147.132591][ T5184] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.249: bg 0: block 248: padding at end of block bitmap is not set
[  147.168544][ T5184] Quota error (device loop1): write_blk: dquota write failed
[  147.179387][ T5184] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  147.195391][ T5184] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.249: Failed to acquire dquot type 1
[  147.231253][ T5184] EXT4-fs (loop1): 1 truncate cleaned up
[  147.256327][ T5184] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback.
[  147.323026][ T5184] EXT4-fs error (device loop1): ext4_remount:5855: comm syz.1.249: Abort forced by user
[  147.339873][ T5184] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  147.707607][ T5205] loop5: detected capacity change from 0 to 4096
[  149.540929][ T5223] netlink: 68 bytes leftover after parsing attributes in process `syz.3.257'.
[  151.051373][ T5229] loop3: detected capacity change from 0 to 4096
[  151.287367][ T5240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.731097][ T5247] loop1: detected capacity change from 0 to 32768
[  151.824818][ T5247] JBD2: Ignoring recovery information on journal
[  151.891971][ T5247] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  151.943553][ T5244] loop5: detected capacity change from 0 to 32768
[  152.100789][ T4025] ocfs2: Unmounting device (7,1) on (node local)
[  152.105409][ T5244] XFS (loop5): Mounting V5 Filesystem
[  152.137017][ T5244] XFS (loop5): Ending clean mount
[  152.144244][ T5244] XFS (loop5): Quotacheck needed: Please wait.
[  153.096022][ T5244] XFS (loop5): Quotacheck: Done.
[  154.392193][ T4344] XFS (loop5): Unmounting Filesystem
[  154.599696][ T5287] loop1: detected capacity change from 0 to 256
[  155.651875][ T5296] binder: 5290:5296 ioctl 4018620d 0 returned -22
[  156.330894][ T5287] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  156.645988][ T5300] loop3: detected capacity change from 0 to 40427
[  156.761754][ T5300] F2FS-fs (loop3): invalid crc value
[  156.872086][ T5308] device geneve2 entered promiscuous mode
[  156.941172][ T5300] F2FS-fs (loop3): Found nat_bits in checkpoint
[  156.952872][ T5287] exFAT-fs (loop1): hint_cluster is invalid (17)
[  156.979657][ T5300] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  157.414160][ T5313] attempt to access beyond end of device
[  157.414160][ T5313] loop3: rw=2049, want=53504, limit=40427
[  159.494523][ T5323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  160.210704][ T5331] loop5: detected capacity change from 0 to 512
[  160.370986][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.280: corrupted inode contents
[  160.395818][ T5331] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #16: comm syz.5.280: mark_inode_dirty error
[  160.503144][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.280: corrupted inode contents
[  160.556592][ T5331] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.280: mark_inode_dirty error
[  160.568767][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.280: corrupted inode contents
[  160.601304][ T5331] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  160.606399][ T5342] netlink: 'syz.1.284': attribute type 1 has an invalid length.
[  160.874391][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.280: corrupted inode contents
[  160.935026][ T5331] EXT4-fs error (device loop5): ext4_truncate:4272: inode #16: comm syz.5.280: mark_inode_dirty error
[  161.327614][ T5331] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  161.351164][ T5331] EXT4-fs (loop5): 1 truncate cleaned up
[  161.352917][ T5331] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.378413][ T5342] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.540312][ T5346] bond1: (slave veth3): Enslaving as an active interface with a down link
[  161.750320][ T5364] binder: 5354:5364 transaction failed 29189/-22, size 0-0 line 2917
[  161.784235][ T4428] binder: undelivered TRANSACTION_ERROR: 29189
[  162.720165][ T5379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.291'.
[  162.722952][ T5379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.291'.
[  162.725740][ T5371] netlink: 60 bytes leftover after parsing attributes in process `syz.1.291'.
[  162.749224][ T5371] netlink: 60 bytes leftover after parsing attributes in process `syz.1.291'.
[  163.207810][ T5374] loop5: detected capacity change from 0 to 32768
[  163.726492][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'.
[  164.168694][    C0] vxcan1: j1939_tp_rxtimer: 0x000000000f53fd72: rx timeout, send abort
[  164.170407][    C0] vxcan1: j1939_xtp_rx_abort_one: 0x000000000f53fd72: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  164.363047][ T4428] Bluetooth: hci4: command 0x0406 tx timeout
[  164.383468][ T4428] Bluetooth: hci0: command 0x0406 tx timeout
[  164.434785][ T4428] Bluetooth: hci1: command 0x0406 tx timeout
[  164.436586][ T4428] Bluetooth: hci2: command 0x0406 tx timeout
[  166.709532][   T21] Bluetooth: hci3: command 0x1003 tx timeout
[  166.711449][ T4040] Bluetooth: hci3: sending frame failed (-49)
[  166.817766][ T5466] netlink: 252 bytes leftover after parsing attributes in process `syz.5.311'.
[  167.109368][ T5477] netlink: 96 bytes leftover after parsing attributes in process `syz.2.314'.
[  167.810048][ T5461] loop0: detected capacity change from 0 to 32768
[  167.910961][ T5493] loop1: detected capacity change from 0 to 8192
[  168.101141][ T5461] XFS (loop0): Mounting V5 Filesystem
[  168.952976][ T5461] XFS (loop0): Ending clean mount
[  168.957454][   T25] Bluetooth: hci3: command 0x1001 tx timeout
[  168.959292][ T4040] Bluetooth: hci3: sending frame failed (-49)
[  169.010495][ T4028] XFS (loop0): Unmounting Filesystem
[  171.401302][ T4428] Bluetooth: hci3: command 0x1009 tx timeout
[  174.801787][ T5574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'.
[  175.805362][ T5584] loop5: detected capacity change from 0 to 1024
[  177.125112][ T5584] EXT4-fs (loop5): Test dummy encryption mode enabled
[  177.241038][ T5584] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,barrier,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  177.335653][ T5612] loop0: detected capacity change from 0 to 764
[  177.351273][ T5608] device vlan0 entered promiscuous mode
[  177.393735][ T5612] Symlink component flag not implemented
[  177.395854][ T5612] Symlink component flag not implemented (7)
[  177.415415][ T5584] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  177.430130][ T5608] team0: Failed to send port change of device vlan0 via netlink (err -105)
[  177.447359][ T5608] team0: Failed to send options change via netlink (err -105)
[  177.449504][ T5608] team0: Port device vlan0 added
[  178.396289][ T5621] loop0: detected capacity change from 0 to 512
[  178.442816][ T5621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  178.472039][ T5628] udc-core: couldn't find an available UDC or it's busy
[  178.490014][ T5621] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  178.510463][ T5628] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  178.513525][ T5621] EXT4-fs (loop0): 1 truncate cleaned up
[  178.515313][ T5621] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  180.665913][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'.
[  180.668885][ T5646] device bridge_slave_1 left promiscuous mode
[  180.672328][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.694754][ T5646] device bridge_slave_0 left promiscuous mode
[  180.696764][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.178458][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[  181.181164][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[  181.187595][ T5682] netlink: 2 bytes leftover after parsing attributes in process `syz.0.368'.
[  181.190256][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[  181.193472][ T5682] netlink: 2 bytes leftover after parsing attributes in process `syz.0.368'.
[  181.196741][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[  181.200244][ T5682] netlink: 2 bytes leftover after parsing attributes in process `syz.0.368'.
[  181.252154][ T5686] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[  181.261403][ T5686] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[  181.275297][ T5686] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[  181.288357][ T5686] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[  181.298522][ T5686] netlink: 'syz.2.370': attribute type 29 has an invalid length.
[  181.685651][ T5729] netlink: 'syz.2.389': attribute type 2 has an invalid length.
[  181.687813][ T5729] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.389'.
[  182.249526][ T5789] netlink: 'syz.2.415': attribute type 25 has an invalid length.
[  182.630148][ T5832] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.433'.
[  182.963512][ T5862] tc_dump_action: action bad kind
[  183.080574][ T5878] device syzkaller0 entered promiscuous mode
[  183.371274][ T5905] loop5: detected capacity change from 0 to 128
[  183.378524][ T5907] loop1: detected capacity change from 0 to 512
[  183.413804][ T5905] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.420562][ T5905] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  183.504078][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.528844][ T4166] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.662894][ T5932] device syzkaller1 entered promiscuous mode
[  187.104726][ T5934] ubi31: attaching mtd0
[  187.177874][ T5936] loop5: detected capacity change from 0 to 512
[  187.296748][ T5936] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  188.442896][ T5936] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  188.507963][ T5936] EXT4-fs (loop5): 1 truncate cleaned up
[  188.509724][ T5936] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,acl,mblk_io_submit,bsdgroups,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none.
[  190.514104][ T5956] loop1: detected capacity change from 0 to 256
[  190.525008][ T5959] loop0: detected capacity change from 0 to 64
[  190.864943][ T5954] overlayfs: unrecognized mount option "ˆ¼bnë›	" or missing value
[  190.882411][ T5963] loop5: detected capacity change from 0 to 512
[  190.955588][ T5963] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  191.041420][ T5965] loop3: detected capacity change from 0 to 4096
[  191.416588][ T5970] overlayfs: './file2' not a directory
[  191.998357][ T5976] loop0: detected capacity change from 0 to 128
[  192.024848][ T5965] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  192.122677][ T5976] VFS: Found a Xenix FS (block size = 512) on device loop0
[  192.140413][ T5973] sysv_free_block: trying to free block not in datazone
[  192.891881][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[  192.893792][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[  193.344708][ T4028] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  193.699577][ T5990] binder: 5989:5990 got reply transaction with no transaction stack
[  193.701895][ T5990] binder: 5989:5990 transaction failed 29201/-71, size 0-0 line 2822
[  193.714184][   T25] binder: undelivered TRANSACTION_ERROR: 29201
[  193.719477][ T5995] loop1: detected capacity change from 0 to 256
[  193.788514][ T6004] netlink: 'syz.5.498': attribute type 13 has an invalid length.
[  193.847008][ T5995] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  193.937282][ T6008] __nla_validate_parse: 4 callbacks suppressed
[  193.937296][ T6008] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.501'.
[  194.071180][ T6010] loop3: detected capacity change from 0 to 16
[  195.151330][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.505'.
[  195.250632][ T6010] erofs: (device loop3): mounted with root inode @ nid 36.
[  195.676182][ T6037] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.585174][ T6042] loop1: detected capacity change from 0 to 512
[  196.861330][ T6042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  196.864338][   T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  196.886472][ T6053] loop5: detected capacity change from 0 to 256
[  196.896131][ T6042] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.512: iget: bad extended attribute block 512
[  196.899922][ T6042] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.512: couldn't read orphan inode 15 (err -117)
[  196.914692][ T6042] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  197.106875][ T6046] netlink: 'syz.5.514': attribute type 1 has an invalid length.
[  198.905627][   T25] usb 1-1: device descriptor read/64, error -71
[  201.546485][ T6087] overlayfs: missing 'lowerdir'
[  203.401596][ T6098] loop3: detected capacity change from 0 to 8
[  203.465271][ T6099] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[  203.474785][ T6101] loop5: detected capacity change from 0 to 128
[  203.482878][ T6099] netlink: 68 bytes leftover after parsing attributes in process `syz.1.529'.
[  204.629565][ T6111] loop1: detected capacity change from 0 to 16
[  205.720283][ T6111] erofs: (device loop1): mounted with root inode @ nid 36.
[  205.728081][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.746350][ T6110] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851]
[  205.751086][ T6110] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  205.756748][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.759563][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36
[  205.761977][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36
[  205.764547][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.767029][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36
[  205.769462][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36
[  205.771985][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36
[  205.774572][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.777108][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36
[  205.779631][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36
[  205.782020][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36
[  205.784659][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  205.787360][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36
[  205.789814][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36
[  205.792394][ T6110] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  205.795006][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  205.797453][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  205.800298][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  205.802802][ T6110] attempt to access beyond end of device
[  205.802802][ T6110] loop1: rw=524288, want=848, limit=16
[  205.805889][ T6110] attempt to access beyond end of device
[  205.805889][ T6110] loop1: rw=524288, want=13478624104, limit=16
[  205.809465][ T6110] attempt to access beyond end of device
[  205.809465][ T6110] loop1: rw=524288, want=13478624080, limit=16
[  205.814059][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[  205.816882][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36
[  205.819313][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36
[  205.821822][ T6110] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36
[  205.824576][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 85 @ nid 36
[  205.827057][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36
[  205.829907][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36
[  205.832444][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36
[  205.835310][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36
[  205.837899][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.840390][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36
[  205.842954][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 81 @ nid 36
[  205.845474][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36
[  205.848005][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36
[  205.850572][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36
[  205.853190][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36
[  205.855739][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36
[  205.858568][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36
[  205.861253][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.863946][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36
[  205.866577][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36
[  205.869340][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36
[  205.871791][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 73 @ nid 36
[  205.874363][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36
[  205.876823][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36
[  205.879336][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36
[  205.882139][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36
[  205.884832][ T6110] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36
[  205.887450][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 65 @ nid 36
[  205.889958][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36
[  205.892705][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36
[  205.895249][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36
[  205.897966][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36
[  205.900602][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36
[  205.903210][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36
[  205.905711][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36
[  205.908241][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.910784][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36
[  205.913706][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36
[  205.916354][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36
[  205.918905][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 55 @ nid 36
[  205.921270][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36
[  205.923831][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36
[  205.926502][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36
[  205.928984][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36
[  205.931745][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36
[  205.934253][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36
[  205.936944][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36
[  205.939292][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36
[  205.942006][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36
[  205.944503][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 204799 of nid 36
[  205.947089][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 49 @ nid 36
[  205.949517][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36
[  205.952205][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36
[  205.954756][ T6110] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36
[  205.957650][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36
[  205.960091][ T6110] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  205.962722][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36
[  205.965245][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36
[  205.967691][ T6110] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36
[  205.970265][ T6110] attempt to access beyond end of device
[  205.970265][ T6110] loop1: rw=524288, want=40, limit=16
[  205.973340][ T6110] attempt to access beyond end of device
[  205.973340][ T6110] loop1: rw=524288, want=96, limit=16
[  205.976387][ T6110] attempt to access beyond end of device
[  205.976387][ T6110] loop1: rw=524288, want=32, limit=16
[  206.710905][ T6118] dccp_close: ABORT with 64 bytes unread
[  207.036797][ T6131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.539'.
[  208.392164][ T6117] loop0: detected capacity change from 0 to 32768
[  208.475345][ T6117] read_mapping_page failed!
[  208.476890][ T6117] jfs_create: dtInsert returned -EIO
[  208.478648][ T6117] ERROR: (device loop0): txAbort: 
[  208.478648][ T6117] 
[  208.492564][ T6117] ERROR: (device loop0): remounting filesystem as read-only
[  208.540966][  T241] read_mapping_page failed!
[  209.168678][ T6157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  209.467008][ T6164] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  210.158274][ T6187] xt_nfacct: accounting object `syz1' does not exists
[  210.381637][   T13] Bluetooth: hci5: command 0x0406 tx timeout
[  212.656555][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[  213.956059][ T6226] loop0: detected capacity change from 0 to 512
[  214.376405][ T6226] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (4740)
[  214.465265][ T6226] loop0: detected capacity change from 0 to 128
[  214.593473][ T6226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  214.812126][ T6243] xt_time: invalid argument - start or stop time greater than 23:59:59
[  214.815982][ T6243] Soft offlining pfn 0x1b1f86 at process virtual address 0x20ffc000
[  214.831455][ T6243] Memory failure: 0x1b1f86: unhandlable page.
[  215.232064][ T6252] loop0: detected capacity change from 0 to 2048
[  215.279165][ T6230] loop1: detected capacity change from 0 to 32768
[  215.316496][ T6230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.573 (6230)
[  215.336673][ T6252] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  215.371720][ T6230] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  215.374592][ T6230] BTRFS info (device loop1): setting nodatacow, compression disabled
[  215.376781][ T6230] BTRFS info (device loop1): enabling auto defrag
[  215.378518][ T6230] BTRFS info (device loop1): max_inline at 0
[  215.380213][ T6230] BTRFS info (device loop1): using free space tree
[  215.382040][ T6230] BTRFS info (device loop1): has skinny extents
[  215.787364][ T6283] device wg2 entered promiscuous mode
[  215.883124][ T6264] loop3: detected capacity change from 0 to 32768
[  216.138696][ T6290] tipc: Started in network mode
[  216.140348][ T6290] tipc: Node identity 6, cluster identity 4711
[  216.142230][ T6290] tipc: Node number set to 6
[  216.959033][ T6264] XFS (loop3): Mounting V5 Filesystem
[  217.047221][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'.
[  217.057316][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'.
[  217.070292][ T6264] XFS (loop3): Ending clean mount
[  217.373654][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  217.846077][ T4026] XFS (loop3): Unmounting Filesystem
[  219.460271][ T6333] loop1: detected capacity change from 0 to 512
[  219.511054][ T6330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.604077][ T6333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  219.815926][ T6330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.940458][ T6330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.069647][ T6330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.104809][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.604'.
[  220.119873][ T6349] loop1: detected capacity change from 0 to 8192
[  220.165892][ T6349] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  220.168564][ T6349] REISERFS (device loop1): using ordered data mode
[  220.170335][ T6349] reiserfs: using flush barriers
[  220.178477][ T6349] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  220.183252][ T6349] REISERFS (device loop1): checking transaction log (loop1)
[  220.198012][ T6349] REISERFS (device loop1): Using r5 hash to sort names
[  220.203316][ T6349] REISERFS (device loop1): using 3.5.x disk format
[  220.214093][ T6349] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  220.349556][ T6330] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.388508][ T6330] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.511252][ T6330] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.547079][ T6330] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.379835][ T6368] loop5: detected capacity change from 0 to 1024
[  221.406665][ T6366] loop1: detected capacity change from 0 to 4096
[  221.421998][ T6370] loop3: detected capacity change from 0 to 512
[  221.481330][ T6370] EXT4-fs (loop3): Ignoring removed bh option
[  221.483657][ T6370] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  221.486727][ T6368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.487368][ T6366] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  221.490467][ T6370] EXT4-fs (loop3): Unrecognized mount option "=" or missing value
[  223.634350][ T6390] loop1: detected capacity change from 0 to 1024
[  223.676471][ T6390] EXT4-fs (loop1): inline encryption not supported
[  223.713464][ T6390] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,jqfmt=vfsv1,nojournal_checksum,delalloc,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback.
[  224.880764][ T6400] delete_channel: no stack
[  224.895141][ T6384] loop3: detected capacity change from 0 to 32768
[  224.953383][ T6384] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.613 (6384)
[  224.971406][ T6407] tipc: Enabled bearer <udp:syz2>, priority 10
[  224.980203][ T6407] loop0: detected capacity change from 0 to 16
[  225.027685][ T6384] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  225.030241][ T6384] BTRFS info (device loop3): enabling auto defrag
[  225.032142][ T6384] BTRFS info (device loop3): doing ref verification
[  225.042146][ T6407] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected
[  225.063757][ T6384] BTRFS info (device loop3): max_inline at 0
[  225.065532][ T6384] BTRFS info (device loop3): force clearing of disk cache
[  225.067612][ T6384] BTRFS info (device loop3): disabling free space tree
[  225.069597][ T6384] BTRFS info (device loop3): has skinny extents
[  225.220319][ T6407] loop0: detected capacity change from 0 to 4096
[  225.260851][ T6407] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  225.273973][ T6407] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks
[  225.280422][   T26] audit: type=1326 audit(225.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  225.746654][ T6407] EXT4-fs warning (device loop0): ext4_resize_fs:2004: can't shrink FS - resize aborted
[  226.020057][   T26] audit: type=1326 audit(225.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.049865][   T26] audit: type=1326 audit(225.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.077227][   T26] audit: type=1326 audit(225.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.157283][   T26] audit: type=1326 audit(225.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.212641][   T26] audit: type=1326 audit(225.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.250386][   T26] audit: type=1326 audit(225.990:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.272589][   T26] audit: type=1326 audit(225.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.309718][   T26] audit: type=1326 audit(225.990:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  226.321772][   T26] audit: type=1326 audit(225.990:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb62f9728 code=0x7fc00000
[  227.295278][ T4103] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  227.444202][ T6384] BTRFS error (device loop3): open_ctree failed: -22
[  227.532757][ T4103] usb 1-1: Using ep0 maxpacket: 8
[  228.172743][ T4103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.176633][ T4103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.179335][ T4103] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  228.258122][ T4103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.271066][ T4103] usb 1-1: config 0 descriptor??
[  228.384085][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  228.492194][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  229.209190][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  229.257074][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  229.261675][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  229.265890][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  229.270318][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  229.322588][ T4103] usbhid 1-1:0.0: can't add hid device: -71
[  229.324356][ T4103] usbhid: probe of 1-1:0.0 failed with error -71
[  229.361832][ T4103] usb 1-1: USB disconnect, device number 5
[  229.969169][ T6473] loop0: detected capacity change from 0 to 32768
[  230.067451][ T6473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.635 (6473)
[  230.126961][ T6473] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  230.139888][ T6473] BTRFS info (device loop0): force clearing of disk cache
[  230.155214][ T6473] BTRFS info (device loop0): force zlib compression, level 3
[  230.169344][ T6473] BTRFS info (device loop0): enabling auto defrag
[  230.180459][ T6473] BTRFS info (device loop0): max_inline at 0
[  230.187611][ T6473] BTRFS info (device loop0): enabling disk space caching
[  230.194947][ T6473] BTRFS info (device loop0): disk space caching is enabled
[  230.199135][ T6473] BTRFS info (device loop0): has skinny extents
[  230.478855][ T6473] BTRFS info (device loop0): enabling ssd optimizations
[  230.481729][ T6473] BTRFS info (device loop0): clearing free space tree
[  230.484178][ T6473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  230.487104][ T6473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  230.917838][ T6509] binder: 6508:6509 tried to acquire reference to desc 0, got 1 instead
[  230.934367][ T6453] binder: release 6508:6509 transaction 7 out, still active
[  230.962640][ T6453] binder: undelivered TRANSACTION_COMPLETE
[  231.002827][ T6453] binder: send failed reply for transaction 7, target dead
[  231.034360][ T6499] loop1: detected capacity change from 0 to 32768
[  231.128424][ T6499] XFS (loop1): Mounting V5 Filesystem
[  231.320895][ T6499] XFS (loop1): Starting recovery (logdev: internal)
[  231.321656][ T6521] loop3: detected capacity change from 0 to 512
[  231.340889][ T6499] XFS (loop1): Ending recovery (logdev: internal)
[  231.405346][ T6521] EXT4-fs (loop3): Ignoring removed oldalloc option
[  231.407383][ T6521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  231.456361][ T6521] EXT4-fs (loop3): 1 truncate cleaned up
[  231.458006][ T6521] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  231.467700][ T4025] XFS (loop1): Unmounting Filesystem
[  231.806820][ T6531] netlink: 36 bytes leftover after parsing attributes in process `syz.3.648'.
[  232.010419][ T6535] netlink: 12 bytes leftover after parsing attributes in process `wg1'.
[  232.108082][ T6538] loop1: detected capacity change from 0 to 2048
[  232.196523][ T6541] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.240711][ T6533] loop3: detected capacity change from 0 to 32768
[  233.724754][ T6533] XFS (loop3): Mounting V5 Filesystem
[  234.230542][ T6533] XFS (loop3): Ending clean mount
[  234.268248][ T6533] XFS (loop3): Quotacheck needed: Please wait.
[  234.316063][ T6570] loop1: detected capacity change from 0 to 256
[  234.387809][ T6533] XFS (loop3): Quotacheck: Done.
[  234.411825][ T4026] XFS (loop3): Unmounting Filesystem
[  234.620294][ T6579] loop1: detected capacity change from 0 to 16
[  234.735815][ T6579] erofs: Unknown parameter 'ÿÿÿÿ	!¸üo°þ±W_‘K'
[  234.844988][ T6585] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  234.847319][ T6585] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  237.920959][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'.
[  239.331037][ T6614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.675'.
[  239.339533][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.341853][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.982914][ T6642] fuse: Bad value for 'fd'
[  244.038548][ T6644] loop5: detected capacity change from 0 to 128
[  244.153905][ T6644] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  244.223031][ T6644] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  245.186082][ T6652] input: syz0 as /devices/virtual/input/input2
[  246.795049][ T6667] loop1: detected capacity change from 0 to 4096
[  247.664584][ T6667] __ntfs_warning: 17 callbacks suppressed
[  247.664597][ T6667] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  247.671688][ T6667] ntfs: (device loop1): parse_options(): The show_sys_files option requires a boolean argument.
[  249.577236][ T6689] hub 2-0:1.0: USB hub found
[  249.582873][ T6689] hub 2-0:1.0: 8 ports detected
[  250.610490][ T6694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.396322][ T6707] loop3: detected capacity change from 0 to 512
[  252.548004][ T6707] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.677518][ T6722] overlayfs: './file2' not a directory
[  253.812441][   T26] audit: type=1326 audit(253.690:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.0.709" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffabc32728 code=0x0
[  254.068254][ T6742] loop3: detected capacity change from 0 to 40427
[  254.106077][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[  254.108123][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[  254.853685][ T6742] F2FS-fs (loop3): invalid crc value
[  254.880867][ T6742] F2FS-fs (loop3): Found nat_bits in checkpoint
[  255.004437][ T6752] netlink: 256 bytes leftover after parsing attributes in process `syz.0.716'.
[  255.024167][ T6752] netlink: 56 bytes leftover after parsing attributes in process `syz.0.716'.
[  255.053491][ T6742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  257.490459][ T6773] loop3: detected capacity change from 0 to 8192
[  257.499989][ T6764] loop0: detected capacity change from 0 to 8192
[  257.548531][ T6764] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  257.551487][ T6764] REISERFS (device loop0): using ordered data mode
[  257.555566][ T6764] reiserfs: using flush barriers
[  257.560055][ T6764] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  257.593263][ T6773] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  257.596091][ T6773] REISERFS (device loop3): using ordered data mode
[  257.598043][ T6773] reiserfs: using flush barriers
[  257.603929][ T6773] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  257.612635][ T6764] REISERFS (device loop0): checking transaction log (loop0)
[  257.613470][ T6773] REISERFS (device loop3): checking transaction log (loop3)
[  257.697258][ T6773] REISERFS (device loop3): Using tea hash to sort names
[  257.701906][ T6773] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  258.772666][ T6764] REISERFS (device loop0): Using tea hash to sort names
[  258.774948][ T6764] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  258.953039][ T6777] loop1: detected capacity change from 0 to 32768
[  260.402439][ T6777] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.723 (6777)
[  260.477640][ T6797] loop5: detected capacity change from 0 to 256
[  260.481036][ T6777] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  260.484196][ T6777] BTRFS info (device loop1): enabling auto defrag
[  260.486185][ T6777] BTRFS info (device loop1): doing ref verification
[  260.503207][ T6777] BTRFS info (device loop1): use no compression
[  260.505064][ T6777] BTRFS info (device loop1): force clearing of disk cache
[  260.507083][ T6777] BTRFS info (device loop1): max_inline at 4096
[  260.509048][ T6777] BTRFS info (device loop1): disabling free space tree
[  260.511011][ T6777] BTRFS info (device loop1): has skinny extents
[  260.695533][ T6777] BTRFS error (device loop1): open_ctree failed: -12
[  260.710481][ T6797] FAT-fs (loop5): Directory bread(block 64) failed
[  260.717240][ T6797] FAT-fs (loop5): Directory bread(block 65) failed
[  260.721383][ T6797] FAT-fs (loop5): Directory bread(block 66) failed
[  260.730824][ T4018] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4018)
[  260.758127][ T6797] FAT-fs (loop5): Directory bread(block 67) failed
[  260.760308][ T6797] FAT-fs (loop5): Directory bread(block 68) failed
[  260.790609][ T6797] FAT-fs (loop5): Directory bread(block 69) failed
[  260.792633][ T6797] FAT-fs (loop5): Directory bread(block 70) failed
[  260.794489][ T6797] FAT-fs (loop5): Directory bread(block 71) failed
[  260.796365][ T6797] FAT-fs (loop5): Directory bread(block 72) failed
[  260.798172][ T6797] FAT-fs (loop5): Directory bread(block 73) failed
[  262.753645][   T26] audit: type=1326 audit(262.700:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.0.736" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffabc32728 code=0x0
[  264.055474][ T6855] loop3: detected capacity change from 0 to 2048
[  264.106874][ T6855] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  264.145668][ T6857] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.146970][ T6855] attempt to access beyond end of device
[  264.146970][ T6855] loop3: rw=524288, want=33554432, limit=2048
[  268.547923][ T6882] loop3: detected capacity change from 0 to 2048
[  271.088058][ T6904] netlink: 44 bytes leftover after parsing attributes in process `syz.3.755'.
[  272.054897][ T6913] loop3: detected capacity change from 0 to 2048
[  272.473540][ T6913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  273.771614][ T6942] loop0: detected capacity change from 0 to 512
[  275.329568][ T6962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.778'.
[  275.483471][ T6970] loop1: detected capacity change from 0 to 64
[  275.651874][ T6970] ==================================================================
[  275.654499][ T6970] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read+0x184/0x464
[  275.656738][ T6970] Write of size 94 at addr ffff0000e72c8a00 by task syz.1.781/6970
[  275.659075][ T6970] 
[  275.659757][ T6970] CPU: 0 PID: 6970 Comm: syz.1.781 Not tainted 5.15.180-syzkaller #0
[  275.662046][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  275.664866][ T6970] Call trace:
[  275.665815][ T6970]  dump_backtrace+0x0/0x43c
[  275.667065][ T6970]  show_stack+0x2c/0x3c
[  275.668233][ T6970]  __dump_stack+0x30/0x40
[  275.669493][ T6970]  dump_stack_lvl+0xf8/0x160
[  275.670800][ T6970]  print_address_description+0x78/0x30c
[  275.672379][ T6970]  kasan_report+0xec/0x15c
[  275.673625][ T6970]  kasan_check_range+0x270/0x2b0
[  275.675123][ T6970]  memcpy+0xb4/0xe8
[  275.676181][ T6970]  hfs_bnode_read+0x184/0x464
[  275.677453][ T6970]  hfs_bnode_read_key+0x13c/0x1ec
[  275.678918][ T6970]  hfs_brec_insert+0x650/0x96c
[  275.680292][ T6970]  hfs_cat_create+0x2d8/0x758
[  275.681696][ T6970]  hfs_create+0x6c/0xe0
[  275.682917][ T6970]  path_openat+0x1144/0x26e4
[  275.684241][ T6970]  do_filp_open+0x164/0x330
[  275.685551][ T6970]  do_sys_openat2+0x128/0x3d8
[  275.686885][ T6970]  __arm64_sys_openat+0x120/0x154
[  275.688300][ T6970]  invoke_syscall+0x98/0x2b8
[  275.689569][ T6970]  el0_svc_common+0x138/0x258
[  275.690868][ T6970]  do_el0_svc+0x58/0x14c
[  275.692003][ T6970]  el0_svc+0x78/0x1e0
[  275.693153][ T6970]  el0t_64_sync_handler+0xcc/0xe4
[  275.694546][ T6970]  el0t_64_sync+0x1a0/0x1a4
[  275.695806][ T6970] 
[  275.696424][ T6970] Allocated by task 6970:
[  275.697621][ T6970]  __kasan_kmalloc+0xb0/0xf0
[  275.699037][ T6970]  __kmalloc+0x298/0x44c
[  275.700174][ T6970]  hfs_find_init+0x88/0x1c8
[  275.701481][ T6970]  hfs_cat_create+0x164/0x758
[  275.702840][ T6970]  hfs_create+0x6c/0xe0
[  275.704039][ T6970]  path_openat+0x1144/0x26e4
[  275.705322][ T6970]  do_filp_open+0x164/0x330
[  275.706552][ T6970]  do_sys_openat2+0x128/0x3d8
[  275.707894][ T6970]  __arm64_sys_openat+0x120/0x154
[  275.709293][ T6970]  invoke_syscall+0x98/0x2b8
[  275.710550][ T6970]  el0_svc_common+0x138/0x258
[  275.711898][ T6970]  do_el0_svc+0x58/0x14c
[  275.713113][ T6970]  el0_svc+0x78/0x1e0
[  275.714227][ T6970]  el0t_64_sync_handler+0xcc/0xe4
[  275.715629][ T6970]  el0t_64_sync+0x1a0/0x1a4
[  275.716872][ T6970] 
[  275.717536][ T6970] The buggy address belongs to the object at ffff0000e72c8a00
[  275.717536][ T6970]  which belongs to the cache kmalloc-128 of size 128
[  275.721477][ T6970] The buggy address is located 0 bytes inside of
[  275.721477][ T6970]  128-byte region [ffff0000e72c8a00, ffff0000e72c8a80)
[  275.725150][ T6970] The buggy address belongs to the page:
[  275.726734][ T6970] page:00000000bb7a8583 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1272c8
[  275.729607][ T6970] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff)
[  275.731838][ T6970] raw: 05ffc00000000200 fffffc000396f480 0000000700000007 ffff0000c0002300
[  275.734143][ T6970] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  275.736524][ T6970] page dumped because: kasan: bad access detected
[  275.738369][ T6970] 
[  275.739042][ T6970] Memory state around the buggy address:
[  275.740602][ T6970]  ffff0000e72c8900: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.742879][ T6970]  ffff0000e72c8980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.745097][ T6970] >ffff0000e72c8a00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[  275.747331][ T6970]                                               ^
[  275.749146][ T6970]  ffff0000e72c8a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.751425][ T6970]  ffff0000e72c8b00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  275.753866][ T6970] ==================================================================
[  275.756120][ T6970] Disabling lock debugging due to kernel taint