last executing test programs:

44.818280393s ago: executing program 4 (id=368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

44.606768072s ago: executing program 4 (id=369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc0406618, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20000004)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
write$evdev(r1, &(0x7f0000000000), 0x100000008)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x80004509, 0x0)

28.845883398s ago: executing program 0 (id=400):
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
process_mrelease(0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000024c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@errors_continue}, {}, {@sys_tz}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee01}}, {@gid}], [{@appraise}]}, 0x9, 0x1505, &(0x7f0000000180)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)

28.416909977s ago: executing program 0 (id=402):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r4, 0x5)
r5 = openat(0xffffffffffffff9c, 0x0, 0x202000, 0x100)
flock(r5, 0x1)
flock(r5, 0x2)
dup3(r5, r4, 0x0)

26.964458171s ago: executing program 0 (id=407):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='kmem_cache_free\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x10000000, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000640))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r5, r1, 0x0, 0x0, 0x0}, 0x30)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000380))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
flock(0xffffffffffffffff, 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x202000, 0x100)
flock(r7, 0x1)
flock(r7, 0x2)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1f100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000"], 0x138}, 0x1, 0xe}, 0x0)

18.840776371s ago: executing program 2 (id=423):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x2010000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x54f8, &(0x7f0000010140)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r5, &(0x7f00000000c0), 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
getitimer(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

15.723262069s ago: executing program 2 (id=429):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
utime(&(0x7f0000000200)='./file0\x00', 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff)

14.300024741s ago: executing program 2 (id=433):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x33)

13.732844423s ago: executing program 2 (id=436):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x90)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15)
r7 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',wfd', @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB])
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
preadv(r8, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x0, 0x0)

12.651134773s ago: executing program 3 (id=437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

12.45869117s ago: executing program 3 (id=438):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x3e, 0x0})
r4 = socket(0x10, 0x803, 0x0)
write(r4, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0", 0x19)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x14, 0x1, 0x4, 0x5}, 0x14}}, 0x0)

11.525305287s ago: executing program 3 (id=439):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket(0x2, 0x3, 0x100000001)
r1 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_route(r1, 0x0, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
r7 = socket$inet6(0xa, 0x2, 0x3a)
r8 = dup(r7)
bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)

10.389634001s ago: executing program 3 (id=440):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000000100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000380)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @opaque="51e3ae2d3df7f90bfe6b063bb6b6c0a15afd4abf237e874165205143936033f24abf26a0cacba5e5991dc1df2dc9deb4817b8e0d92b71d3e57bda20487a6aa822ceaaacc77"}}}}}}, 0x0)

9.125778388s ago: executing program 3 (id=442):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000200)}, 0x20)
syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

8.750973482s ago: executing program 2 (id=443):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a80)={[], [{@uid_lt}, {@dont_appraise}, {@uid_gt}]}, 0x26, 0x756, &(0x7f00000002c0)="$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")
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
chdir(&(0x7f0000000000)='./file0\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)

7.937608878s ago: executing program 2 (id=444):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x33)

7.182754707s ago: executing program 1 (id=445):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f00000002c0)={[{@grpid}, {@resgid}, {@data_writeback}]}, 0x9, 0x61c, &(0x7f0000000700)="$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")

7.182394417s ago: executing program 4 (id=389):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000400), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000c50000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000064000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

6.882798245s ago: executing program 3 (id=446):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004)
ioctl$TIOCSTI(r5, 0x5412, 0x0)

5.864455869s ago: executing program 1 (id=447):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='kmem_cache_free\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x10000000, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000640))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r5, r1, 0x0, 0x1, &(0x7f0000000540)='\x00'}, 0x30)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getrusage(0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
flock(0xffffffffffffffff, 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x202000, 0x100)
flock(r7, 0x1)
flock(r7, 0x2)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1f100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000"], 0x138}, 0x1, 0xe}, 0x0)

4.916991776s ago: executing program 1 (id=448):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket(0x2, 0x3, 0x100000001)
r1 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_route(r1, 0x0, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
r7 = socket$inet6(0xa, 0x2, 0x3a)
r8 = dup(r7)
bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)

4.702719946s ago: executing program 4 (id=449):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x26108180, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r5, 0x0)

3.411395285s ago: executing program 1 (id=450):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x18)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040))
ioctl$TCSETSW(r4, 0x5403, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0xd)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r5}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r6 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e')
mkdir(0x0, 0x0)

2.879185485s ago: executing program 4 (id=451):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x90)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15)
r7 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',wfd', @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB])
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
preadv(r8, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x0, 0x0)

2.745613437s ago: executing program 0 (id=409):
open(0x0, 0x0, 0x20)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffccb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0xfffffffffffffef0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.170019292s ago: executing program 1 (id=452):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a80)={[], [{@uid_lt}, {@dont_appraise}, {@uid_gt}]}, 0x26, 0x756, &(0x7f00000002c0)="$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")
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
chdir(&(0x7f0000000000)='./file0\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)

1.166318373s ago: executing program 0 (id=453):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x10201, 0x6f)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000300)=""/56, 0x38)

1.161698253s ago: executing program 4 (id=454):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x33)

80.368552ms ago: executing program 0 (id=455):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000004c0)="f27b", 0x2, 0x7c6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r1, r1, 0x0, 0x80000000)

0s ago: executing program 1 (id=456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0x81cb347fd2a77fb3, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

type=1326 audit(1727287680.516:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.4.266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f740cff2ef9 code=0x0
[  116.857667][ T4187] bond0 (unregistering): Released all slaves
[  116.998922][ T4658] loop1: detected capacity change from 0 to 40427
[  117.033924][ T4658] F2FS-fs (loop1): invalid crc value
[  117.084029][ T4658] F2FS-fs (loop1): Found nat_bits in checkpoint
[  117.192810][ T4658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  117.406436][   T26] audit: type=1326 audit(1727287681.676:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  117.431053][ T4663] netlink: 72 bytes leftover after parsing attributes in process `syz.3.270'.
[  117.436991][   T26] audit: type=1326 audit(1727287681.676:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  117.499314][   T26] audit: type=1326 audit(1727287681.676:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  117.823193][   T26] audit: type=1326 audit(1727287681.676:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  118.027110][   T26] audit: type=1326 audit(1727287681.676:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  118.080811][ T3571] attempt to access beyond end of device
[  118.080811][ T3571] loop1: rw=524288, want=45072, limit=40427
[  118.089512][   T26] audit: type=1326 audit(1727287681.676:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  118.152273][ T3571] attempt to access beyond end of device
[  118.152273][ T3571] loop1: rw=0, want=45072, limit=40427
[  118.170632][   T26] audit: type=1326 audit(1727287681.676:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  118.275447][ T4679] loop3: detected capacity change from 0 to 1024
[  118.309165][   T26] audit: type=1326 audit(1727287681.676:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  118.524690][  T155] attempt to access beyond end of device
[  118.524690][  T155] loop1: rw=2049, want=45120, limit=40427
[  118.544233][ T4679] EXT4-fs (loop3): Test dummy encryption mode enabled
[  118.551225][ T4679] EXT4-fs (loop3): Ignoring removed orlov option
[  118.719923][ T4679] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  118.819499][   T26] audit: type=1326 audit(1727287681.676:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  119.016459][ T4691] loop4: detected capacity change from 0 to 256
[  119.945553][ T4519] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  120.010295][ T4519] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  120.090510][ T4519] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  120.173230][ T4519] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  121.260064][ T4519] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.311512][ T4519] 8021q: adding VLAN 0 to HW filter on device team0
[  121.368551][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  121.388779][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.452444][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  121.503053][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.548041][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.555404][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.606956][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  121.627416][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  121.646958][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.761305][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.769468][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.221718][ T4735] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  122.582435][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.595514][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.638338][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.655267][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.671702][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.692011][ T3621] Bluetooth: hci2: command 0x0409 tx timeout
[  122.698630][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.731261][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.760503][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.782700][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.840351][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.863270][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.905889][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.001707][ T4706] chnl_net:caif_netlink_parms(): no params data found
[  123.256396][ T4725] loop4: detected capacity change from 0 to 40427
[  123.301736][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.324927][ T4725] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  123.341985][ T4725] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  123.342807][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.378776][ T4725] F2FS-fs (loop4): invalid crc value
[  123.386189][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.402114][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.414795][ T4706] device bridge_slave_0 entered promiscuous mode
[  123.435237][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.451928][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.471215][ T4725] F2FS-fs (loop4): Found nat_bits in checkpoint
[  123.478294][ T4706] device bridge_slave_1 entered promiscuous mode
[  123.540894][ T4519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.593449][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.637479][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.649932][ T4725] F2FS-fs (loop4): Start checkpoint disabled!
[  123.681706][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.695600][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.763197][ T4725] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  123.802077][ T4725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  123.828324][ T4706] team0: Port device team_slave_0 added
[  123.858637][ T4519] device veth0_vlan entered promiscuous mode
[  123.886314][ T4706] team0: Port device team_slave_1 added
[  123.899180][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.938723][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.949561][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  123.949574][   T26] audit: type=1326 audit(1727287688.216:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  123.981586][ T4770] netlink: 72 bytes leftover after parsing attributes in process `syz.3.283'.
[  123.997872][ T4519] device veth1_vlan entered promiscuous mode
[  124.038070][   T26] audit: type=1326 audit(1727287688.216:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.064061][   T26] audit: type=1326 audit(1727287688.246:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.087982][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.092076][   T26] audit: type=1326 audit(1727287688.246:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.105880][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.149204][   T26] audit: type=1326 audit(1727287688.246:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.187144][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.245781][   T26] audit: type=1326 audit(1727287688.246:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.271063][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.278870][ T3569] attempt to access beyond end of device
[  124.278870][ T3569] loop4: rw=524288, want=45072, limit=40427
[  124.299299][ T3621] Bluetooth: hci5: command 0x1003 tx timeout
[  124.311053][   T26] audit: type=1326 audit(1727287688.246:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.312367][ T3585] Bluetooth: hci5: sending frame failed (-49)
[  124.337008][ T3569] attempt to access beyond end of device
[  124.337008][ T3569] loop4: rw=0, want=45072, limit=40427
[  124.361321][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.459668][   T26] audit: type=1326 audit(1727287688.246:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.498959][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.545006][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.562723][   T26] audit: type=1326 audit(1727287688.246:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.567651][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.642914][   T26] audit: type=1326 audit(1727287688.246:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc354efbef9 code=0x7ffc0000
[  124.662998][ T4296] attempt to access beyond end of device
[  124.662998][ T4296] loop4: rw=2049, want=41088, limit=40427
[  124.702012][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.731309][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  124.765458][ T4519] device veth0_macvtap entered promiscuous mode
[  124.772468][ T3621] Bluetooth: hci2: command 0x041b tx timeout
[  124.805312][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.828772][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.873549][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.000106][ T4519] device veth1_macvtap entered promiscuous mode
[  125.060130][ T4706] device hsr_slave_0 entered promiscuous mode
[  125.092914][ T4706] device hsr_slave_1 entered promiscuous mode
[  125.118804][ T4706] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.131934][ T4706] Cannot create hsr debugfs directory
[  125.148646][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.163775][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.173976][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.201874][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.216317][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.231376][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.250720][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.280011][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.312951][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.395493][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  125.414177][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.431438][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.451257][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.468767][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.479498][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.502014][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.520259][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.539778][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.550002][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.561053][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.607938][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.773018][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.781749][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.800196][ T4519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.844793][ T4800] loop3: detected capacity change from 0 to 2048
[  125.861926][ T4519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.868585][ T4800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.870651][ T4519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.919011][    C1] blk_update_request: operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0
[  125.935143][ T4519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.280500][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.312013][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.327302][ T4706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.362319][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.373692][ T3614] Bluetooth: hci5: command 0x1001 tx timeout
[  126.379866][ T3585] Bluetooth: hci5: sending frame failed (-49)
[  126.426861][ T4706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.521256][ T4187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.563028][ T3824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.591219][ T3824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.615321][ T4706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.654543][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.689073][ T4187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.795061][ T4706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.964483][ T4187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.984519][ T3558] Bluetooth: hci2: command 0x040f tx timeout
[  127.105402][ T4187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.164330][ T4834] syz.2.252[4834] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.164975][ T4834] syz.2.252[4834] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.939811][ T4817] chnl_net:caif_netlink_parms(): no params data found
[  128.034516][ T4187] tipc: Left network mode
[  128.233545][ T4706] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  128.396279][ T4706] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  128.425384][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'.
[  128.441907][   T21] Bluetooth: hci5: command 0x1009 tx timeout
[  128.469261][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.600362][ T4831] device bridge_slave_0 left promiscuous mode
[  128.613208][ T3612] Bluetooth: hci4: command 0x0409 tx timeout
[  128.619589][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.644747][ T4706] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  128.667519][ T4706] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  128.709953][ T4817] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.737162][ T4817] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.747277][ T4817] device bridge_slave_0 entered promiscuous mode
[  128.759906][ T4862] loop2: detected capacity change from 0 to 512
[  128.810162][ T4817] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.819926][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.837235][ T4817] device bridge_slave_1 entered promiscuous mode
[  128.880052][ T4862] EXT4-fs (loop2): 1 orphan inode deleted
[  128.902005][ T4862] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  128.951175][ T4862] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff)
[  129.082211][ T3615] Bluetooth: hci2: command 0x0419 tx timeout
[  129.123068][ T4817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.247648][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.287361][ T4870] syz.2.292[4870] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.287893][ T4870] syz.2.292[4870] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.419212][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  129.419290][   T26] audit: type=1804 audit(1727287693.656:83): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.292" name="/newroot/3/file1/bus" dev="loop2" ino=16 res=1 errno=0
[  129.986063][ T4817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.030536][   T26] audit: type=1804 audit(1727287693.756:84): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.292" name="/newroot/3/file1/bus" dev="loop2" ino=16 res=1 errno=0
[  130.064463][   T26] audit: type=1804 audit(1727287693.806:85): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.292" name="/newroot/3/file1/bus" dev="loop2" ino=16 res=1 errno=0
[  130.202926][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.246864][ T4872] loop3: detected capacity change from 0 to 256
[  130.259494][ T4877] loop2: detected capacity change from 0 to 128
[  130.278077][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.297512][ T4817] team0: Port device team_slave_0 added
[  130.318494][ T4872] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  130.339916][ T4872] 9pnet: Insufficient options for proto=fd
[  130.368824][ T4817] team0: Port device team_slave_1 added
[  130.492857][ T4706] 8021q: adding VLAN 0 to HW filter on device team0
[  130.536220][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  130.590659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.621829][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.628964][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.652766][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  130.672486][ T4817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.682099][ T3579] Bluetooth: hci4: command 0x041b tx timeout
[  130.701882][ T4817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.723888][ T4887] loop2: detected capacity change from 0 to 512
[  130.761311][ T4817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.852077][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.852259][ T4887] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  130.872126][ T4887] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff)
[  130.882578][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.883085][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.897981][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.905853][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.914865][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.943407][ T4817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.950385][ T4817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.019185][ T4817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.318208][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  131.336079][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  131.345620][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  131.972061][   T26] audit: type=1800 audit(1727287695.686:86): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.296" name="bus" dev="loop2" ino=18 res=0 errno=0
[  132.008034][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.040759][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.067463][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.132313][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.140879][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.224916][ T4817] device hsr_slave_0 entered promiscuous mode
[  132.235391][ T4901] loop2: detected capacity change from 0 to 512
[  132.265340][ T4817] device hsr_slave_1 entered promiscuous mode
[  132.289602][ T4817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.444114][ T4817] Cannot create hsr debugfs directory
[  132.514195][ T4901] EXT4-fs (loop2): orphan cleanup on readonly fs
[  132.528052][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  132.709395][ T4901] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  132.761952][ T3579] Bluetooth: hci4: command 0x040f tx timeout
[  132.772188][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  133.055074][ T4901] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  133.192373][ T4901] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.298: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  133.225700][ T4901] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.298: couldn't read orphan inode 13 (err -117)
[  133.288061][ T4901] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  133.327771][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  133.363791][ T4901] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  133.388107][ T4901] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2
[  133.499844][ T4913] loop3: detected capacity change from 0 to 2048
[  133.626362][ T4913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.766033][ T4921] serio: Serial port ptm0
[  134.525744][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  134.541529][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  134.598029][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.773376][ T4909] chnl_net:caif_netlink_parms(): no params data found
[  134.812885][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  134.821718][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  134.842308][ T4707] Bluetooth: hci4: command 0x0419 tx timeout
[  134.943054][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  134.958362][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  134.988562][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  135.007658][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  135.039384][ T4706] device veth0_vlan entered promiscuous mode
[  135.142086][ T3614] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  135.194393][ T4706] device veth1_vlan entered promiscuous mode
[  135.290884][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.301944][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.311998][ T4909] device bridge_slave_0 entered promiscuous mode
[  135.323154][ T4909] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.330462][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.355720][ T4909] device bridge_slave_1 entered promiscuous mode
[  135.482033][ T3616] Bluetooth: hci1: command 0x0409 tx timeout
[  135.489859][ T4817] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  135.500295][ T4817] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  135.532544][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  135.554488][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.574102][ T3614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  135.598158][ T3614] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  135.611057][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.641337][ T3614] usb 4-1: config 0 descriptor??
[  135.657899][ T4909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.684858][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  135.694626][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  135.711303][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  135.732903][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  135.752110][ T4817] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  135.765916][ T4706] device veth0_macvtap entered promiscuous mode
[  135.783899][ T4909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.802578][ T4817] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  135.824277][ T4706] device veth1_macvtap entered promiscuous mode
[  135.938294][ T4909] team0: Port device team_slave_0 added
[  135.958049][ T4187] device hsr_slave_0 left promiscuous mode
[  135.982687][ T4187] device hsr_slave_1 left promiscuous mode
[  136.009714][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.040175][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.052905][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.079163][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.107654][ T4187] device bridge_slave_1 left promiscuous mode
[  136.122501][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.143596][ T4187] device bridge_slave_0 left promiscuous mode
[  136.149864][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.177016][ T4187] device hsr_slave_0 left promiscuous mode
[  136.192628][ T4187] device hsr_slave_1 left promiscuous mode
[  136.205773][ T3614] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0
[  136.222472][ T3614] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0
[  136.233540][ T3614] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0
[  136.240699][ T3614] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0
[  136.251908][ T3614] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0
[  136.284047][ T3614] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0
[  136.329931][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.338380][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.360922][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.379348][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.389264][ T4187] device bridge_slave_1 left promiscuous mode
[  136.402073][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.424532][ T4187] device bridge_slave_0 left promiscuous mode
[  136.430865][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.470983][ T4187] device veth1_macvtap left promiscuous mode
[  136.487225][ T4187] device veth0_macvtap left promiscuous mode
[  136.497105][ T4187] device veth1_vlan left promiscuous mode
[  136.509555][ T4187] device veth0_vlan left promiscuous mode
[  136.521194][ T3614] ntrig 0003:1B96:000A.0002: Firmware version: 7.15.22.15.1 (3e5f f1c1)
[  136.542310][ T4187] device veth1_macvtap left promiscuous mode
[  136.548383][ T4187] device veth0_macvtap left promiscuous mode
[  136.554612][ T4187] device veth1_vlan left promiscuous mode
[  136.560401][ T4187] device veth0_vlan left promiscuous mode
[  137.323234][ T3558] usb 4-1: USB disconnect, device number 2
[  137.562616][ T3579] Bluetooth: hci1: command 0x041b tx timeout
[  138.552209][ T4976] loop2: detected capacity change from 0 to 512
[  138.663017][ T4976] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz.2.309: iget: bad extended attribute block 128
[  138.692350][ T4976] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.309: couldn't read orphan inode 16 (err -117)
[  138.760685][ T4976] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  138.817259][ T4187] team0 (unregistering): Port device team_slave_1 removed
[  138.825423][ T4976] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff)
[  138.914559][ T4187] team0 (unregistering): Port device team_slave_0 removed
[  138.924025][ T4976] EXT4-fs error (device loop2): ext4_lookup:1856: inode #16: comm syz.2.309: iget: bad extended attribute block 128
[  138.975168][ T4977] loop3: detected capacity change from 0 to 40427
[  138.991023][ T4187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.054644][ T4977] F2FS-fs (loop3): Unrecognized mount option "0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value
[  139.066451][ T4187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.222554][ T4982] loop2: detected capacity change from 0 to 256
[  139.418500][ T4982] FAT-fs (loop2): Directory bread(block 64) failed
[  139.493283][ T4984] loop3: detected capacity change from 0 to 512
[  139.562126][ T4982] FAT-fs (loop2): Directory bread(block 65) failed
[  139.626228][ T4982] FAT-fs (loop2): Directory bread(block 66) failed
[  139.689014][ T4982] FAT-fs (loop2): Directory bread(block 67) failed
[  139.752156][ T4982] FAT-fs (loop2): Directory bread(block 68) failed
[  139.809389][ T4982] FAT-fs (loop2): Directory bread(block 69) failed
[  139.882291][ T4982] FAT-fs (loop2): Directory bread(block 70) failed
[  139.915327][ T4982] FAT-fs (loop2): Directory bread(block 71) failed
[  139.951979][ T4982] FAT-fs (loop2): Directory bread(block 72) failed
[  139.982778][ T4982] FAT-fs (loop2): Directory bread(block 73) failed
[  140.079540][ T4187] bond0 (unregistering): Released all slaves
[  140.081427][ T3616] Bluetooth: hci1: command 0x040f tx timeout
[  140.104202][ T4984] EXT4-fs (loop3): Unrecognized mount option "permit_directio" or missing value
[  140.594168][ T4187] team0 (unregistering): Port device team_slave_1 removed
[  140.630660][ T4187] team0 (unregistering): Port device team_slave_0 removed
[  140.659067][ T4187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.706109][ T4187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.831690][ T4187] bond0 (unregistering): Released all slaves
[  140.908888][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.924240][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.935183][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.950543][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.971348][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.992590][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.009234][ T4993] xt_hashlimit: size too large, truncated to 1048576
[  141.150593][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.190192][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.228003][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.263177][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.295116][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.332023][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.380146][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.453455][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.464915][ T4909] team0: Port device team_slave_1 added
[  141.472693][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.926361][ T5008] loop3: detected capacity change from 0 to 1024
[  142.152958][ T5008] JBD2: no valid journal superblock found
[  142.158907][ T5008] EXT4-fs (loop3): error loading journal
[  143.824650][ T4707] Bluetooth: hci1: command 0x0419 tx timeout
[  143.825408][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.852207][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.861229][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.879609][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.956148][ T4706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.970395][ T4706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.991639][ T4706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.007904][ T4706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.109537][ T4909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.141187][ T4909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.187341][ T4909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.257482][ T4909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.278203][ T4909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.305138][ T4909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.401967][ T4909] device hsr_slave_0 entered promiscuous mode
[  144.415971][ T4909] device hsr_slave_1 entered promiscuous mode
[  144.541847][ T5020] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  144.885165][ T4909] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.093444][ T4909] Cannot create hsr debugfs directory
[  145.168746][ T4817] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.274978][ T4817] 8021q: adding VLAN 0 to HW filter on device team0
[  145.291727][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.310123][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.319814][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.340630][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.356726][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.363881][ T4906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.386113][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.416454][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  145.432458][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.451697][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  145.473824][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.491490][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.498739][ T4906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.517115][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  145.531391][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.600882][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  145.623178][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  145.647790][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  145.670638][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.706655][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  145.763783][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.799993][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.822713][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.874253][ T4909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.910187][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.931513][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.953880][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  145.976341][ T4904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.000352][ T4909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.011465][ T4904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.054657][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  146.166964][ T4909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.693812][ T3621] Bluetooth: hci5: command 0x1003 tx timeout
[  146.739459][ T3585] Bluetooth: hci5: sending frame failed (-49)
[  146.973721][ T4909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.174992][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  147.183425][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  147.213695][ T4817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.031752][ T4909] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.126773][ T4909] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.153713][ T4909] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  148.192662][ T4909] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  148.341526][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.364349][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.419285][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.463200][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.481554][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.489693][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.519998][ T4817] device veth0_vlan entered promiscuous mode
[  148.575758][ T4817] device veth1_vlan entered promiscuous mode
[  148.600433][ T4909] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.648167][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.672916][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.697164][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.732476][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.762569][ T3719] Bluetooth: hci5: command 0x1001 tx timeout
[  148.768675][ T3585] Bluetooth: hci5: sending frame failed (-49)
[  148.804200][ T4909] 8021q: adding VLAN 0 to HW filter on device team0
[  148.816235][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.842215][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.884346][ T4817] device veth0_macvtap entered promiscuous mode
[  148.905977][ T4817] device veth1_macvtap entered promiscuous mode
[  148.925666][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.942908][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.962335][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  148.975226][ T5065] loop1: detected capacity change from 0 to 40427
[  148.982365][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.000882][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.008026][ T4906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.026750][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.051056][ T5065] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  149.073112][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.081541][ T5065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  149.084559][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.137052][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.144211][ T4906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.171574][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.183725][ T5065] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  149.198503][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.219683][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.238944][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.260468][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.281292][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.300975][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.326147][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.337869][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.345456][ T5065] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  149.347182][ T5071] loop2: detected capacity change from 0 to 256
[  149.354299][ T5065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  149.377996][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.390022][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.399987][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.419885][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.438161][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.450439][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.465525][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.488858][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.500714][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.042707][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.093601][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.104359][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.122166][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.143013][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.160887][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.171096][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.189859][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.222319][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.260404][ T4817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.289749][ T4817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.330034][ T4817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.339525][ T4817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.351678][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.361153][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.369983][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  150.380499][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.462338][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.471326][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.483707][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.499275][ T5078] loop2: detected capacity change from 0 to 2048
[  150.641405][ T4904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.664962][ T4904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.693045][ T5078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.705988][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.716770][ T3824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.756650][ T3824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.786529][ T5078] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff)
[  150.817488][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.852256][ T3621] Bluetooth: hci5: command 0x1009 tx timeout
[  150.902472][ T5078] 9pnet: Insufficient options for proto=fd
[  151.040061][ T4909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.065292][ T4706] attempt to access beyond end of device
[  151.065292][ T4706] loop1: rw=2049, want=45104, limit=40427
[  151.109996][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  151.122265][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  151.962210][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.971156][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.035190][ T4909] device veth0_vlan entered promiscuous mode
[  152.153233][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.182137][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.224081][ T4909] device veth1_vlan entered promiscuous mode
[  153.134010][ T4909] device veth0_macvtap entered promiscuous mode
[  153.377316][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  153.388381][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  153.397029][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  153.405488][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  153.416790][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  153.425967][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  153.437407][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  154.243884][ T4909] device veth1_macvtap entered promiscuous mode
[  154.376090][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.466703][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.588423][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.651253][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.705074][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.737288][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.774591][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.801997][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.849010][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.897217][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.959491][ T4909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.018478][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.040484][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.051258][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.062898][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.073024][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.083599][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.093744][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.105886][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.115864][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.126444][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.189237][ T4909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.285055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  155.363795][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  155.410495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  155.431025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  155.443839][ T4909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.463483][ T4909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.482600][ T4909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.501716][ T4909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.678532][ T5123] loop4: detected capacity change from 0 to 512
[  156.808210][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.832173][ T5123] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  156.838342][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.854359][ T5123] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff)
[  156.922076][ T1078] Bluetooth: hci6: command 0x0409 tx timeout
[  157.056183][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  157.102513][ T4906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.148432][ T4906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.902962][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  158.104983][ T5116] chnl_net:caif_netlink_parms(): no params data found
[  158.130892][ T5135] loop0: detected capacity change from 0 to 256
[  158.269414][ T5137] loop2: detected capacity change from 0 to 2048
[  158.286140][ T5135] FAT-fs (loop0): Directory bread(block 64) failed
[  158.295311][ T5135] FAT-fs (loop0): Directory bread(block 65) failed
[  158.313556][ T5135] FAT-fs (loop0): Directory bread(block 66) failed
[  158.342383][ T5135] FAT-fs (loop0): Directory bread(block 67) failed
[  158.379458][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.392349][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.401077][ T5116] device bridge_slave_0 entered promiscuous mode
[  158.401420][ T5135] FAT-fs (loop0): Directory bread(block 68) failed
[  158.412817][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.421420][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.430355][ T5137] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.431261][ T5116] device bridge_slave_1 entered promiscuous mode
[  158.441620][ T3621] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  158.449235][ T5135] FAT-fs (loop0): Directory bread(block 69) failed
[  158.463984][ T5137] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff)
[  158.492080][ T5135] FAT-fs (loop0): Directory bread(block 70) failed
[  158.508987][ T5135] FAT-fs (loop0): Directory bread(block 71) failed
[  158.532267][ T5135] FAT-fs (loop0): Directory bread(block 72) failed
[  158.538848][ T5135] FAT-fs (loop0): Directory bread(block 73) failed
[  158.548240][ T5137] 9pnet: Insufficient options for proto=fd
[  158.612445][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.644760][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.013749][ T1078] Bluetooth: hci6: command 0x041b tx timeout
[  159.915198][ T5116] team0: Port device team_slave_0 added
[  159.982997][ T5116] team0: Port device team_slave_1 added
[  160.445822][ T3621] usb 5-1: Using ep0 maxpacket: 16
[  160.470596][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.084565][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.120943][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.152121][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.179007][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.212226][ T1078] Bluetooth: hci6: command 0x040f tx timeout
[  161.271940][ T3621] usb 5-1: unable to read config index 0 descriptor/start: -71
[  161.279576][ T3621] usb 5-1: can't read configurations, error -71
[  161.331664][ T5157] loop1: detected capacity change from 0 to 4096
[  161.365521][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.665595][ T5116] device hsr_slave_0 entered promiscuous mode
[  161.666424][ T5157] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.685306][ T5116] device hsr_slave_1 entered promiscuous mode
[  161.696004][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.711093][ T5116] Cannot create hsr debugfs directory
[  161.756365][   T26] audit: type=1800 audit(1727287726.026:87): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.334" name="bus" dev="loop1" ino=18 res=0 errno=0
[  162.744743][ T5183] loop0: detected capacity change from 0 to 2048
[  162.846065][ T5116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.885646][ T5183] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.912073][ T5183] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff)
[  162.994509][ T5183] 9pnet: Insufficient options for proto=fd
[  163.045171][ T5116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.145482][ T5187] loop2: detected capacity change from 0 to 512
[  163.221390][ T5187] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value
[  163.260895][ T5191] loop4: detected capacity change from 0 to 512
[  163.284178][ T5116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.298937][ T3558] Bluetooth: hci6: command 0x0419 tx timeout
[  163.688761][ T5191] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  164.358486][ T5191] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff)
[  164.465573][ T5200] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  164.924963][ T3614] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  165.501999][ T3614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.584151][ T5116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.607819][ T3614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.628080][ T3614] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  165.655971][ T3614] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  165.681866][ T3614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.732893][ T3614] usb 1-1: config 0 descriptor??
[  165.915054][ T5209] loop4: detected capacity change from 0 to 2048
[  165.974192][ T5116] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  166.007732][ T5207] loop2: detected capacity change from 0 to 2048
[  166.028378][ T5116] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  166.080055][ T5116] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  166.088139][ T5209] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.347: bad orphan inode 8192
[  166.099156][ T5209] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  166.102808][ T5207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.198793][    C1] blk_update_request: operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0
[  166.215889][ T5198] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  166.238590][ T5116] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  166.577615][ T4187] device hsr_slave_0 left promiscuous mode
[  166.592716][ T4187] device hsr_slave_1 left promiscuous mode
[  166.599922][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.983313][ T3614] acrux 0003:1A34:0802.0003: item fetching failed at offset 3/5
[  166.996289][ T3614] acrux 0003:1A34:0802.0003: parse failed
[  167.002621][ T3614] acrux: probe of 0003:1A34:0802.0003 failed with error -22
[  167.094288][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.117557][ T4187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.125689][ T4187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.141064][ T4187] device bridge_slave_1 left promiscuous mode
[  167.152459][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.458111][ T5218] loop4: detected capacity change from 0 to 256
[  167.490232][ T4187] device bridge_slave_0 left promiscuous mode
[  167.586812][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.686137][ T4187] device veth1_macvtap left promiscuous mode
[  167.742144][ T4187] device veth0_macvtap left promiscuous mode
[  167.748708][ T4187] device veth1_vlan left promiscuous mode
[  167.837334][ T4187] device veth0_vlan left promiscuous mode
[  168.360198][ T5231] loop1: detected capacity change from 0 to 128
[  168.582891][ T5233] attempt to access beyond end of device
[  168.582891][ T5233] loop1: rw=0, want=241, limit=128
[  168.757864][ T4906] attempt to access beyond end of device
[  168.757864][ T4906] loop1: rw=1, want=1041, limit=128
[  168.788689][ T4187] team0 (unregistering): Port device team_slave_1 removed
[  168.820800][ T4187] team0 (unregistering): Port device team_slave_0 removed
[  168.840545][ T4187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.920697][ T4187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.955845][ T5236] loop1: detected capacity change from 0 to 2048
[  169.139017][ T5236] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.145582][ T4187] bond0 (unregistering): Released all slaves
[  169.162452][ T5236] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff)
[  169.359061][ T4707] usb 1-1: USB disconnect, device number 2
[  169.481888][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.536872][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.545926][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.557381][ T5116] 8021q: adding VLAN 0 to HW filter on device team0
[  169.579128][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.589565][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.605750][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.612936][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.634224][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.643883][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.654450][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.683010][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.690129][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.713303][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.434030][ T5116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  170.482542][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.498453][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.539423][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  170.565046][ T5249] loop1: detected capacity change from 0 to 2048
[  170.575691][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.614841][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.635449][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.671922][ T5249] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  170.719640][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.728848][ T5249] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002]
[  170.738275][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.746980][ T5249] System zones: 0-19
[  170.754205][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.762993][ T5249] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.797363][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.839540][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.865802][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  171.912386][ T5267] syz.2.359[5267] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.912499][ T5267] syz.2.359[5267] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.286951][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.319601][ T5280] loop2: detected capacity change from 0 to 2048
[  172.392054][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.522195][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.580688][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  172.596021][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.168492][ T5280] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  173.320512][ T5280] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff)
[  173.407820][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.422984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.479449][ T5116] device veth0_vlan entered promiscuous mode
[  173.507243][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.592802][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.607388][ T5116] device veth1_vlan entered promiscuous mode
[  173.638020][   T26] audit: type=1326 audit(1727287737.906:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  173.730418][   T26] audit: type=1326 audit(1727287737.906:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  173.797785][ T5116] device veth0_macvtap entered promiscuous mode
[  173.884044][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.912517][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.969535][ T5116] device veth1_macvtap entered promiscuous mode
[  173.979627][   T26] audit: type=1326 audit(1727287737.906:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.225137][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.279335][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  174.365254][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.423663][   T26] audit: type=1326 audit(1727287737.906:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.503226][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.533776][   T26] audit: type=1326 audit(1727287737.906:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.566798][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.587735][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.602020][   T26] audit: type=1326 audit(1727287737.906:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.636724][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.667967][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.704236][   T26] audit: type=1326 audit(1727287737.906:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.733735][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.783059][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.820046][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.831365][   T26] audit: type=1326 audit(1727287737.906:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.863241][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.884722][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.893621][   T26] audit: type=1326 audit(1727287737.906:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.933334][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.962582][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.968884][   T26] audit: type=1326 audit(1727287737.906:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed26236ef9 code=0x7ffc0000
[  174.999277][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.031914][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.044406][ T5308] loop0: detected capacity change from 0 to 512
[  175.061841][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.082134][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.103410][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.126889][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.162482][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.193602][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.232670][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.271804][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.303618][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.311622][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  175.329396][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  175.390821][ T5116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.411107][ T5308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  175.422106][ T5116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.422144][ T5116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.422174][ T5116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.451552][ T5308] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff)
[  175.884982][ T5317] xt_SECMARK: invalid mode: 0
[  175.930246][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.975448][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.008726][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  176.039507][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.058823][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.119105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  178.386968][ T5332] loop1: detected capacity change from 0 to 1024
[  178.483195][ T5334] loop2: detected capacity change from 0 to 2048
[  178.584565][ T5332] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  178.691410][ T5334] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  178.840428][ T5334] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff)
[  178.999755][ T5340] syz.1.375[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  179.000326][ T5340] syz.1.375[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  179.869105][ T5348] device ip_vti0 entered promiscuous mode
[  179.921113][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  179.921129][   T26] audit: type=1326 audit(1727287744.186:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  179.972331][ T5348] device vlan2 entered promiscuous mode
[  179.986254][ T5348] device ip_vti0 left promiscuous mode
[  179.997891][   T26] audit: type=1326 audit(1727287744.186:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.074206][ T5343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'.
[  180.081378][   T26] audit: type=1326 audit(1727287744.226:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.121591][   T26] audit: type=1326 audit(1727287744.226:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.157298][   T26] audit: type=1326 audit(1727287744.226:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.188405][   T26] audit: type=1326 audit(1727287744.226:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.219096][   T26] audit: type=1326 audit(1727287744.226:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.251649][   T26] audit: type=1326 audit(1727287744.226:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.290076][   T26] audit: type=1326 audit(1727287744.226:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.320581][   T26] audit: type=1326 audit(1727287744.226:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5345 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  180.415733][ T5343] loop3: detected capacity change from 0 to 512
[  180.468825][ T5351] loop1: detected capacity change from 0 to 1024
[  180.557423][ T5351] EXT4-fs (loop1): Test dummy encryption mode enabled
[  180.585066][ T5351] EXT4-fs (loop1): Ignoring removed orlov option
[  180.749116][ T5351] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  181.073086][ T5357] loop0: detected capacity change from 0 to 512
[  181.595649][ T5343] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  181.640854][ T5357] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.381: invalid block
[  181.736861][ T5343] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  181.787627][ T5357] EXT4-fs (loop0): Remounting filesystem read-only
[  181.821191][ T5357] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.381: couldn't read orphan inode 11 (err -117)
[  181.860600][ T5357] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,quota,errors=remount-ro,acl,. Quota mode: writeback.
[  181.988883][ T5357] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.381: Directory hole found for htree leaf block 0
[  182.008510][ T5357] EXT4-fs (loop0): Remounting filesystem read-only
[  182.077006][ T5364] loop2: detected capacity change from 0 to 2048
[  182.231567][ T5364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.718073][    C1] blk_update_request: operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0
[  183.230950][ T5370] xt_SECMARK: invalid mode: 0
[  183.961613][ T5374] loop2: detected capacity change from 0 to 2048
[  184.091116][ T5374] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value
[  184.621243][ T5382] loop2: detected capacity change from 0 to 2048
[  184.651256][ T5380] loop3: detected capacity change from 0 to 2048
[  184.823414][ T5382] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  184.889461][ T5380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  184.981536][ T5380] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff)
[  185.987919][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  185.987935][   T26] audit: type=1326 audit(1727287750.256:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.083148][ T5399] loop2: detected capacity change from 0 to 256
[  186.089883][   T26] audit: type=1326 audit(1727287750.256:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.112585][   T26] audit: type=1326 audit(1727287750.286:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.137385][   T26] audit: type=1326 audit(1727287750.286:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.162200][   T26] audit: type=1326 audit(1727287750.286:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.201166][   T26] audit: type=1326 audit(1727287750.286:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.204150][ T5389] chnl_net:caif_netlink_parms(): no params data found
[  186.242870][ T5399] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  186.262410][ T5401] loop1: detected capacity change from 0 to 1024
[  186.291203][   T26] audit: type=1326 audit(1727287750.286:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.341421][   T26] audit: type=1326 audit(1727287750.286:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.398799][   T26] audit: type=1326 audit(1727287750.286:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  186.459565][ T5401] EXT4-fs (loop1): Ignoring removed nobh option
[  186.468240][ T5401] EXT4-fs (loop1): Ignoring removed orlov option
[  186.509192][   T26] audit: type=1326 audit(1727287750.286:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca32aef9 code=0x7ffc0000
[  187.002454][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[  187.010125][ T5401] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000001ff,nobh,block_validity,orlov,user_xattr,init_itable=0x0000000000000400,,errors=continue. Quota mode: none.
[  187.116232][ T5407] loop3: detected capacity change from 0 to 512
[  187.485585][ T5407] EXT4-fs (loop3): Mount option "data_err=ignore" incompatible with ext2
[  188.189570][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.219451][ T5415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.394'.
[  188.255149][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.265769][ T5389] device bridge_slave_0 entered promiscuous mode
[  188.274936][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.289755][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.300060][ T5389] device bridge_slave_1 entered promiscuous mode
[  188.420727][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'.
[  188.513320][ T5407] device hsr_slave_1 left promiscuous mode
[  188.626033][ T5389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.650227][ T5389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.714002][ T5418] loop1: detected capacity change from 0 to 2048
[  188.764501][ T5418] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.783776][    C0] blk_update_request: operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0
[  188.808874][ T4296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.259845][ T5389] team0: Port device team_slave_0 added
[  190.268167][   T21] Bluetooth: hci0: command 0x041b tx timeout
[  190.289467][ T5429] loop3: detected capacity change from 0 to 2048
[  190.324345][ T5389] team0: Port device team_slave_1 added
[  190.391535][ T5432] loop0: detected capacity change from 0 to 256
[  190.418221][ T5430] loop2: detected capacity change from 0 to 2048
[  190.427527][ T5432] exfat: Unknown parameter 'sys_tz'
[  190.459607][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.472550][ T5429] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  190.491835][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.521736][ T5430] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value
[  190.571090][ T5429] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff)
[  190.639155][ T5389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.676082][ T4296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.720961][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.732014][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.795898][ T5389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.814703][ T5437] netlink: 164 bytes leftover after parsing attributes in process `syz.1.401'.
[  191.069414][ T5441] loop3: detected capacity change from 0 to 512
[  191.183197][ T5441] EXT4-fs (loop3): orphan cleanup on readonly fs
[  191.340326][ T5441] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  191.571099][ T5441] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  191.694612][ T5441] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.403: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  191.873437][ T5441] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.403: couldn't read orphan inode 13 (err -117)
[  191.913260][ T4296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.925691][ T5441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  191.981298][ T5389] device hsr_slave_0 entered promiscuous mode
[  192.005848][   T26] kauditd_printk_skb: 31 callbacks suppressed
[  192.005867][   T26] audit: type=1326 audit(1727287756.276:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5445 comm="syz.2.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x0
[  192.034814][ T5389] device hsr_slave_1 entered promiscuous mode
[  192.036230][ T5441] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  192.056300][ T5389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.070242][ T5389] Cannot create hsr debugfs directory
[  192.081010][ T5441] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  192.119045][ T4296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.373192][ T3719] Bluetooth: hci0: command 0x040f tx timeout
[  193.473790][ T5462] loop3: detected capacity change from 0 to 2048
[  193.489365][ T5462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.503960][    C0] blk_update_request: operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0
[  193.745873][ T5467] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  194.043798][ T5449] loop1: detected capacity change from 0 to 40427
[  194.254677][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  194.301553][ T5449] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  194.329325][ T5449] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  194.421513][ T5449] F2FS-fs (loop1): invalid crc value
[  194.455881][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[  194.467422][ T5449] F2FS-fs (loop1): Found nat_bits in checkpoint
[  194.571594][ T5490] loop3: detected capacity change from 0 to 2048
[  194.573412][ T5485] loop2: detected capacity change from 0 to 8192
[  194.655093][ T5490] EXT4-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value
[  194.679213][ T5485] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  194.716006][ T5389] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.729359][ T5485] REISERFS (device loop2): using ordered data mode
[  194.743060][ T5449] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  194.744939][ T5389] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.757173][ T5485] reiserfs: using flush barriers
[  194.764637][ T5485] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  194.784077][ T5485] REISERFS (device loop2): checking transaction log (loop2)
[  194.798481][ T5449] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  194.820040][ T5389] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.954640][ T5389] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.985166][ T5460] chnl_net:caif_netlink_parms(): no params data found
[  195.032355][ T5485] REISERFS (device loop2): Using tea hash to sort names
[  195.101596][ T5485] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  195.861995][ T3612] Bluetooth: hci1: command 0x0409 tx timeout
[  196.524507][ T4706] attempt to access beyond end of device
[  196.524507][ T4706] loop1: rw=2049, want=45112, limit=40427
[  196.818394][ T5512] loop3: detected capacity change from 0 to 512
[  196.841009][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.881686][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.943607][ T5460] device bridge_slave_0 entered promiscuous mode
[  196.985615][ T5512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  197.001295][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.009079][ T5512] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff)
[  197.213713][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.222118][ T5460] device bridge_slave_1 entered promiscuous mode
[  197.271360][   T26] audit: type=1326 audit(1727287761.536:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  197.302934][   T26] audit: type=1326 audit(1727287761.536:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  197.326155][   T26] audit: type=1326 audit(1727287761.536:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  198.100280][ T5460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.178932][ T5460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.215275][   T26] audit: type=1326 audit(1727287761.536:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  198.251221][ T4296] device hsr_slave_0 left promiscuous mode
[  198.267869][   T26] audit: type=1326 audit(1727287761.536:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  198.290606][ T4296] device hsr_slave_1 left promiscuous mode
[  198.395906][   T26] audit: type=1326 audit(1727287761.536:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  198.437054][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.595267][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.733019][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.791261][   T26] audit: type=1326 audit(1727287761.536:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  198.869324][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.027968][ T4296] device bridge_slave_1 left promiscuous mode
[  199.072216][ T3612] Bluetooth: hci1: command 0x041b tx timeout
[  199.109367][   T26] audit: type=1326 audit(1727287761.536:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  199.153747][   T26] audit: type=1326 audit(1727287761.536:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  199.183090][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.227489][   T26] audit: type=1326 audit(1727287761.536:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067217ef9 code=0x7ffc0000
[  199.275323][ T4296] device bridge_slave_0 left promiscuous mode
[  199.292501][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.510753][ T4296] device veth1_macvtap left promiscuous mode
[  199.518255][ T4296] device veth0_macvtap left promiscuous mode
[  199.539150][ T4296] device veth1_vlan left promiscuous mode
[  199.552148][ T5544] loop2: detected capacity change from 0 to 2048
[  199.565261][ T4296] device veth0_vlan left promiscuous mode
[  199.567932][ T5544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.592856][    C0] blk_update_request: operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0
[  199.865246][ T5548] loop1: detected capacity change from 0 to 2048
[  199.958095][ T5548] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value
[  200.578540][ T4296] team0 (unregistering): Port device team_slave_1 removed
[  201.083997][ T3621] Bluetooth: hci1: command 0x040f tx timeout
[  201.303925][ T4296] team0 (unregistering): Port device team_slave_0 removed
[  201.483936][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.532075][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.638644][ T5558] loop1: detected capacity change from 0 to 8192
[  201.705330][ T5558] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  201.732353][ T5558] REISERFS (device loop1): using ordered data mode
[  201.735463][ T4296] bond0 (unregistering): Released all slaves
[  201.739748][ T5558] reiserfs: using flush barriers
[  201.761880][ T5558] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  201.782573][ T5558] REISERFS (device loop1): checking transaction log (loop1)
[  202.025495][ T5552] loop2: detected capacity change from 0 to 40427
[  202.089263][ T5389] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.103211][ T5558] REISERFS (device loop1): Using tea hash to sort names
[  202.112497][ T5558] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  202.116359][ T5460] team0: Port device team_slave_0 added
[  202.133941][ T5552] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  202.153104][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.170737][ T5552] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  202.172990][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.233096][ T5552] F2FS-fs (loop2): invalid crc value
[  202.242700][ T5460] team0: Port device team_slave_1 added
[  202.292492][ T5552] F2FS-fs (loop2): Found nat_bits in checkpoint
[  202.297080][ T5389] 8021q: adding VLAN 0 to HW filter on device team0
[  202.394628][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.417199][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.440684][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.447876][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.469063][ T5552] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  202.487671][ T5552] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  202.496729][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.509553][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.564806][ T5460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.589403][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.642045][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.769916][ T5460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.370526][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  203.370545][   T26] audit: type=1326 audit(1727287767.266:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370591][   T26] audit: type=1326 audit(1727287767.266:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370635][   T26] audit: type=1326 audit(1727287767.266:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370676][   T26] audit: type=1326 audit(1727287767.266:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370720][   T26] audit: type=1326 audit(1727287767.266:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370761][   T26] audit: type=1326 audit(1727287767.266:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370804][   T26] audit: type=1326 audit(1727287767.266:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370844][   T26] audit: type=1326 audit(1727287767.266:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370885][   T26] audit: type=1326 audit(1727287767.266:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.370926][   T26] audit: type=1326 audit(1727287767.266:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  203.371445][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.405814][ T3621] Bluetooth: hci1: command 0x0419 tx timeout
[  203.464276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.467262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.469092][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.469137][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.481572][ T4519] attempt to access beyond end of device
[  203.481572][ T4519] loop2: rw=2049, want=45112, limit=40427
[  203.764554][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  204.327641][ T5576] loop2: detected capacity change from 0 to 512
[  204.480708][ T5460] device hsr_slave_0 entered promiscuous mode
[  204.523645][ T5460] device hsr_slave_1 entered promiscuous mode
[  204.539597][ T5460] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.564869][ T5460] Cannot create hsr debugfs directory
[  204.583414][ T5576] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  204.609112][ T5576] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff)
[  204.740820][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  204.754484][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  204.765230][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  204.961697][ T5389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  205.059500][ T5590] loop3: detected capacity change from 0 to 2048
[  205.071566][ T5389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.147385][ T5590] EXT4-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value
[  205.169542][ T5592] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  205.244530][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  205.299948][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  205.310110][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  205.319602][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  205.340972][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  205.383515][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  205.423247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  205.531961][ T1075] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  205.615877][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  205.739690][ T5607] loop3: detected capacity change from 0 to 256
[  205.877268][ T5607] exfat: Unknown parameter 'ÿÿ0xffffffffffffffff'
[  206.433287][ T5460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.536380][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.544787][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.582201][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.619954][ T5460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.692186][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.745407][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.899966][ T1075] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  207.090851][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.320400][ T1075] usb 2-1: config 0 descriptor??
[  207.614816][ T5460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.836311][ T5460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.707747][ T1075] hid (null): unknown global tag 0xd
[  208.739490][ T1075] lg-g15 0003:046D:C222.0004: unknown global tag 0xd
[  208.761405][ T1075] lg-g15 0003:046D:C222.0004: item 0 1 1 13 parsing failed
[  208.770518][ T1075] lg-g15: probe of 0003:046D:C222.0004 failed with error -22
[  208.780997][ T1075] usb 2-1: USB disconnect, device number 3
[  208.916688][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.933736][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.002381][ T5460] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  209.047951][ T5460] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  209.066534][ T5460] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  209.913121][ T5389] device veth0_vlan entered promiscuous mode
[  209.980480][ T5460] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  210.011418][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.037603][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.057147][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  210.079970][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  210.098693][ T5389] device veth1_vlan entered promiscuous mode
[  210.183680][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  210.192223][ T3612] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  210.219666][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  210.243970][ T5389] device veth0_macvtap entered promiscuous mode
[  210.279872][ T5389] device veth1_macvtap entered promiscuous mode
[  210.312033][ T3621] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  210.331583][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.362555][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.382009][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.402012][ T5634] loop2: detected capacity change from 0 to 2048
[  210.402784][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.431296][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.451972][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.470534][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.481443][ T3612] usb 2-1: Using ep0 maxpacket: 32
[  210.495963][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.509818][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.526405][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.547829][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.572176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  210.590451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  210.603345][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  210.612256][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.632713][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  210.635109][ T5634] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value
[  210.648299][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.667078][ T5460] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.678483][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.695783][ T3612] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  210.705355][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.715465][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.723860][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.743406][ T3612] usb 2-1: config 0 descriptor??
[  210.755380][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.765918][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.776852][ T3621] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  210.786149][ T3612] hub 2-1:0.0: USB hub found
[  210.801950][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.812229][ T3621] usb 4-1: config 0 has no interface number 0
[  210.818358][ T3621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.829475][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.840385][ T3621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.850307][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.861263][ T3621] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  210.870568][ T5389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.881209][ T3621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.890589][ T5389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.901053][ T3621] usb 4-1: config 0 descriptor??
[  210.911555][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.920203][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  210.932866][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.969519][ T5389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.980497][ T5389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.989898][ T5389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.000828][ T5389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.102714][ T5460] 8021q: adding VLAN 0 to HW filter on device team0
[  211.110256][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.122734][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.132273][ T3612] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  211.235147][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.254985][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  211.278359][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.278596][ T5636] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  211.285578][ T3640] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.301211][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.310529][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.319586][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.326742][ T3640] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.340179][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.370907][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  211.392378][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  211.426707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  211.449344][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  211.457670][ T3612] usbhid 2-1:0.0: can't add hid device: -71
[  211.464929][ T3612] usbhid: probe of 2-1:0.0 failed with error -71
[  211.482415][ T3621] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0005/input/input5
[  211.504839][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.534203][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.545840][ T3612] usb 2-1: USB disconnect, device number 4
[  211.563746][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.576701][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  211.602549][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  211.623042][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  211.632345][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.650384][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.674055][ T3621] holtek_kbd 0003:04D9:A055.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1
[  211.678352][ T5460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.706418][ T3621] usb 4-1: USB disconnect, device number 3
[  211.707805][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.735931][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.744903][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.766842][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.797414][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.811247][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  212.075787][ T5642] loop1: detected capacity change from 0 to 1024
[  212.193785][ T5460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.202440][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.229763][ T5642] JBD2: no valid journal superblock found
[  212.246269][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.255934][ T5642] EXT4-fs (loop1): error loading journal
[  212.379803][ T5460] device veth0_vlan entered promiscuous mode
[  212.438891][ T5460] device veth1_vlan entered promiscuous mode
[  212.517610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  212.926789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  213.219129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  213.252779][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  213.303138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  213.322408][ T3621] Bluetooth: hci4: command 0x1003 tx timeout
[  213.328635][ T3585] Bluetooth: hci4: sending frame failed (-49)
[  213.343669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  213.364264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  213.379746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  213.391650][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  213.391667][   T26] audit: type=1326 audit(1727287777.656:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.425767][ T5654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.447'.
[  213.461210][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  213.475295][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  213.487203][   T26] audit: type=1326 audit(1727287777.656:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.513430][ T5460] device veth0_macvtap entered promiscuous mode
[  213.547830][ T5460] device veth1_macvtap entered promiscuous mode
[  213.549051][   T26] audit: type=1326 audit(1727287777.656:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.589523][   T26] audit: type=1326 audit(1727287777.656:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.601036][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.622090][   T26] audit: type=1326 audit(1727287777.656:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.645656][   T26] audit: type=1326 audit(1727287777.696:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.668543][   T26] audit: type=1326 audit(1727287777.696:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.670464][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.705043][   T26] audit: type=1326 audit(1727287777.696:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.710705][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.750622][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.751851][   T26] audit: type=1326 audit(1727287777.696:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.769469][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.803434][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.811863][   T26] audit: type=1326 audit(1727287777.696:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082de51ef9 code=0x7ffc0000
[  213.821053][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.857543][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.870671][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.891828][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.901693][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.912412][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.929238][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.961968][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  213.974502][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  213.984162][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  213.994378][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  214.007662][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.019375][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.033232][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.045457][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.058847][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.070054][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.080478][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.091562][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.102103][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.113703][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.124912][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.137628][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.150095][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.162803][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  214.176827][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  214.207379][ T5460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.221947][ T5460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.247465][ T5460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.328364][ T5460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.772233][ T3621] Bluetooth: hci5: command 0x1003 tx timeout
[  214.781636][ T3585] Bluetooth: hci5: sending frame failed (-49)
[  215.145132][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.164143][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.183537][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.202940][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.249763][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  215.273496][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  216.066217][ T1078] Bluetooth: hci4: command 0x1001 tx timeout
[  216.076092][ T3585] Bluetooth: hci4: sending frame failed (-49)
[  216.888994][ T3621] Bluetooth: hci5: command 0x1001 tx timeout
[  216.923064][ T3585] Bluetooth: hci5: sending frame failed (-49)
[  217.968859][ T5678] loop1: detected capacity change from 0 to 2048
[  218.062744][ T5678] EXT4-fs (loop1): Unrecognized mount option "uid<00000000000000000000" or missing value
[  218.291844][ T3621] Bluetooth: hci4: command 0x1009 tx timeout
[  219.130630][ T5687] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  219.159174][ T5689] loop0: detected capacity change from 0 to 4096
[  219.221078][ T5691] ------------[ cut here ]------------
[  219.230355][ T5691] WARNING: CPU: 0 PID: 5691 at net/wireless/core.h:220 wdev_lock+0x96/0xc0
[  219.244516][ T5691] Modules linked in:
[  219.248477][ T5691] CPU: 1 PID: 5691 Comm: syz.1.456 Not tainted 5.15.167-syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  219.271079][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  219.291956][ T5691] RIP: 0010:wdev_lock+0x96/0xc0
[  219.310745][ T5689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  219.312289][ T5691] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b
[  219.466103][ T5691] RSP: 0018:ffffc90002da6ee0 EFLAGS: 00010287
[  219.475682][ T5691] RAX: ffffffff89adb996 RBX: ffff8880181c8c90 RCX: 0000000000040000
[  219.481966][ T1075] Bluetooth: hci5: command 0x1009 tx timeout
[  219.484914][ T5691] RDX: ffffc900035aa000 RSI: 00000000000007bc RDI: 00000000000007bd
[  219.497978][ T5691] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100fc1d812
[  219.506168][ T5691] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888076f2ec80
[  219.514274][ T5691] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e0ec014
[  219.522325][ T5691] FS:  00007f082c2ca6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  219.533186][ T5691] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.552883][ T5691] CR2: 00007fff1da93f58 CR3: 0000000057e3b000 CR4: 00000000003506e0
[  219.561572][ T5691] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  219.584580][ T5691] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  219.601835][ T5691] Call Trace:
[  219.605266][ T5691]  <TASK>
[  219.608216][ T5691]  ? __warn+0x15b/0x300
[  219.621815][ T5691]  ? wdev_lock+0x96/0xc0
[  219.626184][ T5691]  ? report_bug+0x1b7/0x2e0
[  219.630725][ T5691]  ? handle_bug+0x3d/0x70
[  219.639640][ T5691]  ? exc_invalid_op+0x16/0x40
[  219.649444][ T5691]  ? asm_exc_invalid_op+0x16/0x20
[  219.654891][ T5691]  ? wdev_lock+0x6f/0xc0
[  219.660129][ T5691]  ? wdev_lock+0x96/0xc0
[  219.673497][ T5691]  ? wdev_lock+0x96/0xc0
[  219.677808][ T5691]  nl80211_send_iface+0x763/0xe10
[  219.683968][ T5691]  ? nl80211_notify_iface+0x160/0x160
[  219.689413][ T5691]  ? slab_free_freelist_hook+0xdd/0x160
[  219.706723][ T5691]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  219.713409][ T5691]  ? kfree+0xf1/0x270
[  219.717440][ T5691]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  219.731446][ T5691]  ? nl80211_dump_wiphy_done+0x40/0x40
[  219.737811][ T5691]  nl80211_dump_interface+0x490/0x6a0
[  219.752025][ T5691]  ? nl80211_get_interface+0x1f0/0x1f0
[  219.757635][ T5691]  ? __alloc_skb+0x397/0x590
[  219.771117][ T5691]  netlink_dump+0x5a4/0xca0
[  219.776123][ T5691]  ? netlink_lookup+0x1d0/0x1d0
[  219.781010][ T5691]  ? genl_start+0x144/0x490
[  219.794746][ T5691]  ? genl_start+0x2e1/0x490
[  219.799322][ T5691]  __netlink_dump_start+0x50f/0x6d0
[  219.813356][ T5691]  genl_rcv_msg+0xd89/0x14a0
[  219.818048][ T5691]  ? genl_bind+0x420/0x420
[  219.832184][ T5691]  ? local_bh_enable+0x5/0x20
[  219.836925][ T5691]  ? _local_bh_enable+0xa0/0xa0
[  219.850783][ T5691]  ? __lock_acquire+0x1295/0x1ff0
[  219.856309][ T5691]  ? genl_rcv_msg+0x14a0/0x14a0
[  219.861191][ T5691]  ? nl80211_get_interface+0x1f0/0x1f0
[  219.868821][ T5691]  ? genl_lock_done+0xd0/0xd0
[  219.873931][ T5691]  ? nl80211_set_wiphy+0x28c0/0x28c0
[  219.879343][ T5691]  ? nl80211_get_interface+0x1f0/0x1f0
[  219.885296][ T5691]  netlink_rcv_skb+0x1cf/0x410
[  219.890110][ T5691]  ? genl_bind+0x420/0x420
[  219.895111][ T5691]  ? netlink_ack+0xb10/0xb10
[  219.899879][ T5691]  ? down_read+0x1b3/0x2e0
[  219.904827][ T5691]  ? genl_rcv+0x9/0x40
[  219.908952][ T5691]  genl_rcv+0x24/0x40
[  219.916230][ T5691]  netlink_unicast+0x7b6/0x980
[  219.921055][ T5691]  ? netlink_detachskb+0x90/0x90
[  219.929365][ T5691]  ? __virt_addr_valid+0x3bb/0x460
[  219.935049][ T5691]  ? 0xffffffff81000000
[  219.939264][ T5691]  ? __check_object_size+0x300/0x410
[  219.945070][ T5691]  ? bpf_lsm_netlink_send+0x5/0x10
[  219.950259][ T5691]  netlink_sendmsg+0xa30/0xd60
[  219.955677][ T5691]  ? netlink_getsockopt+0x5b0/0x5b0
[  219.960920][ T5691]  ? futex_wait+0x634/0x740
[  219.969124][ T5691]  ? aa_sock_msg_perm+0x91/0x150
[  219.974894][ T5691]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  219.980387][ T5691]  ? security_socket_sendmsg+0x7d/0xa0
[  219.986386][ T5691]  ? netlink_getsockopt+0x5b0/0x5b0
[  219.992243][ T5691]  ____sys_sendmsg+0x59e/0x8f0
[  219.997058][ T5691]  ? iovec_from_user+0x300/0x390
[  220.002596][ T5691]  ? __sys_sendmsg_sock+0x30/0x30
[  220.007696][ T5691]  ___sys_sendmsg+0x252/0x2e0
[  220.012782][ T5691]  ? __sys_sendmsg+0x260/0x260
[  220.017755][ T5691]  ? __fdget+0x191/0x220
[  220.025241][ T5691]  __se_sys_sendmsg+0x19a/0x260
[  220.030167][ T5691]  ? __x64_sys_sendmsg+0x80/0x80
[  220.035200][ T5691]  ? syscall_enter_from_user_mode+0x2e/0x240
[  220.041216][ T5691]  ? lockdep_hardirqs_on+0x94/0x130
[  220.048060][ T5691]  ? syscall_enter_from_user_mode+0x2e/0x240
[  220.054206][ T5691]  do_syscall_64+0x3b/0xb0
[  220.058686][ T5691]  ? clear_bhb_loop+0x15/0x70
[  220.063439][ T5691]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  220.070827][ T5691] RIP: 0033:0x7f082de51ef9
[  220.075642][ T5691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.095531][ T5691] RSP: 002b:00007f082c2ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.104158][ T5691] RAX: ffffffffffffffda RBX: 00007f082e009f80 RCX: 00007f082de51ef9
[  220.112233][ T5691] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003
[  220.120356][ T5691] RBP: 00007f082dec4b76 R08: 0000000000000000 R09: 0000000000000000
[  220.129678][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.140506][ T5691] R13: 0000000000000000 R14: 00007f082e009f80 R15: 00007fffac379478
[  220.148730][ T5691]  </TASK>
[  220.152239][ T5691] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  220.159550][ T5691] CPU: 1 PID: 5691 Comm: syz.1.456 Not tainted 5.15.167-syzkaller #0
[  220.167639][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  220.177992][ T5691] Call Trace:
[  220.181390][ T5691]  <TASK>
[  220.184356][ T5691]  dump_stack_lvl+0x1e3/0x2d0
[  220.189044][ T5691]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  220.194682][ T5691]  ? panic+0x860/0x860
[  220.198784][ T5691]  ? rdev_set_ap_chanwidth+0x260/0x260
[  220.204278][ T5691]  ? rdev_set_ap_chanwidth+0x260/0x260
[  220.209778][ T5691]  panic+0x318/0x860
[  220.213712][ T5691]  ? __warn+0x16a/0x300
[  220.217894][ T5691]  ? fb_is_primary_device+0xd0/0xd0
[  220.223125][ T5691]  ? wdev_lock+0x96/0xc0
[  220.227369][ T5691]  __warn+0x2b2/0x300
[  220.231352][ T5691]  ? wdev_lock+0x96/0xc0
[  220.235600][ T5691]  report_bug+0x1b7/0x2e0
[  220.239966][ T5691]  handle_bug+0x3d/0x70
[  220.244154][ T5691]  exc_invalid_op+0x16/0x40
[  220.248692][ T5691]  asm_exc_invalid_op+0x16/0x20
[  220.253823][ T5691] RIP: 0010:wdev_lock+0x96/0xc0
[  220.258706][ T5691] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b
[  220.278402][ T5691] RSP: 0018:ffffc90002da6ee0 EFLAGS: 00010287
[  220.284511][ T5691] RAX: ffffffff89adb996 RBX: ffff8880181c8c90 RCX: 0000000000040000
[  220.292497][ T5691] RDX: ffffc900035aa000 RSI: 00000000000007bc RDI: 00000000000007bd
[  220.300486][ T5691] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100fc1d812
[  220.308467][ T5691] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888076f2ec80
[  220.316453][ T5691] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e0ec014
[  220.324453][ T5691]  ? wdev_lock+0x6f/0xc0
[  220.328731][ T5691]  ? wdev_lock+0x96/0xc0
[  220.332988][ T5691]  nl80211_send_iface+0x763/0xe10
[  220.338050][ T5691]  ? nl80211_notify_iface+0x160/0x160
[  220.343463][ T5691]  ? slab_free_freelist_hook+0xdd/0x160
[  220.349021][ T5691]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  220.354757][ T5691]  ? kfree+0xf1/0x270
[  220.358780][ T5691]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  220.364523][ T5691]  ? nl80211_dump_wiphy_done+0x40/0x40
[  220.370246][ T5691]  nl80211_dump_interface+0x490/0x6a0
[  220.375759][ T5691]  ? nl80211_get_interface+0x1f0/0x1f0
[  220.381548][ T5691]  ? __alloc_skb+0x397/0x590
[  220.386189][ T5691]  netlink_dump+0x5a4/0xca0
[  220.390715][ T5691]  ? netlink_lookup+0x1d0/0x1d0
[  220.395589][ T5691]  ? genl_start+0x144/0x490
[  220.400135][ T5691]  ? genl_start+0x2e1/0x490
[  220.404674][ T5691]  __netlink_dump_start+0x50f/0x6d0
[  220.409920][ T5691]  genl_rcv_msg+0xd89/0x14a0
[  220.414532][ T5691]  ? genl_bind+0x420/0x420
[  220.418972][ T5691]  ? local_bh_enable+0x5/0x20
[  220.423652][ T5691]  ? _local_bh_enable+0xa0/0xa0
[  220.428515][ T5691]  ? __lock_acquire+0x1295/0x1ff0
[  220.433559][ T5691]  ? genl_rcv_msg+0x14a0/0x14a0
[  220.438436][ T5691]  ? nl80211_get_interface+0x1f0/0x1f0
[  220.444007][ T5691]  ? genl_lock_done+0xd0/0xd0
[  220.448693][ T5691]  ? nl80211_set_wiphy+0x28c0/0x28c0
[  220.453983][ T5691]  ? nl80211_get_interface+0x1f0/0x1f0
[  220.459603][ T5691]  netlink_rcv_skb+0x1cf/0x410
[  220.464503][ T5691]  ? genl_bind+0x420/0x420
[  220.468936][ T5691]  ? netlink_ack+0xb10/0xb10
[  220.473636][ T5691]  ? down_read+0x1b3/0x2e0
[  220.478076][ T5691]  ? genl_rcv+0x9/0x40
[  220.482183][ T5691]  genl_rcv+0x24/0x40
[  220.486195][ T5691]  netlink_unicast+0x7b6/0x980
[  220.491096][ T5691]  ? netlink_detachskb+0x90/0x90
[  220.496067][ T5691]  ? __virt_addr_valid+0x3bb/0x460
[  220.501265][ T5691]  ? 0xffffffff81000000
[  220.505450][ T5691]  ? __check_object_size+0x300/0x410
[  220.510768][ T5691]  ? bpf_lsm_netlink_send+0x5/0x10
[  220.515892][ T5691]  netlink_sendmsg+0xa30/0xd60
[  220.520692][ T5691]  ? netlink_getsockopt+0x5b0/0x5b0
[  220.525933][ T5691]  ? futex_wait+0x634/0x740
[  220.530455][ T5691]  ? aa_sock_msg_perm+0x91/0x150
[  220.535418][ T5691]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  220.540734][ T5691]  ? security_socket_sendmsg+0x7d/0xa0
[  220.546194][ T5691]  ? netlink_getsockopt+0x5b0/0x5b0
[  220.551400][ T5691]  ____sys_sendmsg+0x59e/0x8f0
[  220.556170][ T5691]  ? iovec_from_user+0x300/0x390
[  220.561142][ T5691]  ? __sys_sendmsg_sock+0x30/0x30
[  220.566210][ T5691]  ___sys_sendmsg+0x252/0x2e0
[  220.570923][ T5691]  ? __sys_sendmsg+0x260/0x260
[  220.575744][ T5691]  ? __fdget+0x191/0x220
[  220.580012][ T5691]  __se_sys_sendmsg+0x19a/0x260
[  220.584878][ T5691]  ? __x64_sys_sendmsg+0x80/0x80
[  220.589839][ T5691]  ? syscall_enter_from_user_mode+0x2e/0x240
[  220.595834][ T5691]  ? lockdep_hardirqs_on+0x94/0x130
[  220.601076][ T5691]  ? syscall_enter_from_user_mode+0x2e/0x240
[  220.607083][ T5691]  do_syscall_64+0x3b/0xb0
[  220.611514][ T5691]  ? clear_bhb_loop+0x15/0x70
[  220.616200][ T5691]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  220.622218][ T5691] RIP: 0033:0x7f082de51ef9
[  220.626655][ T5691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.646607][ T5691] RSP: 002b:00007f082c2ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.655221][ T5691] RAX: ffffffffffffffda RBX: 00007f082e009f80 RCX: 00007f082de51ef9
[  220.663216][ T5691] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003
[  220.671434][ T5691] RBP: 00007f082dec4b76 R08: 0000000000000000 R09: 0000000000000000
[  220.679423][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.687420][ T5691] R13: 0000000000000000 R14: 00007f082e009f80 R15: 00007fffac379478
[  220.695423][ T5691]  </TASK>
[  220.698684][ T5691] Kernel Offset: disabled
[  220.703321][ T5691] Rebooting in 86400 seconds..