last executing test programs:

42.457939891s ago: executing program 4 (id=5):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000674744e0df8323431512dcf9cc10862c5300000000000000b9960b000048b800100000000000000f23c00f21f835010000000f23f8f3480f"], 0x67})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22880, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x10, 0x5, 0x8, '\x00', 0x1})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=ANY=[], 0x3d})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x3e, 0x2000002, 0x80000000, 0x2004c4, 0x0, 0x0, 0x68ff, 0xb, 0x0, 0x10000e57c, 0x1000003, 0x3], 0x1, 0x40a0a})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

42.009289978s ago: executing program 4 (id=26):
syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYRES64, @ANYRES8], 0x1, 0x712, &(0x7f0000001240)="$eJzs3UtsHGcdAPD/rNfr3SClTptHQZVqNVJBRCR2LAfMhYAQ8qFCVTlwthKnsbJxKttFToSIW+DOgROncvCt4oDKPRKcqSqhXn3gUAmpl3KxuBjN7Mw+7NmH42fb3y+amW++13zzn5d3V9EE8LW1cC2qzyKJhWtvbKTr21uzzbGt2Ym8uBkRtYioRFRbi0hWIiu9nU/xzTQzr5/02UwSy/NvffrF9met1Wo+ZfWTAe3K1PZnbeZTTEXEWL7cb7xPjx/t3XxPf3f69jeqzh6mAbtaBC7+dKhe4dB299lsl334r2w+qPlBrlvg7Ekf6umFPFZ2PU9GnIuIekTrqb8Zt9ptvsw2T3sAAAAAcFCNkrzq4CYv7MRObMT54xoSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBV1vf8/yd/vn6WnIine/1/LarTUTnWwfZW9CLHXJxOt5bPjHwwAAAAAAAAAHLtXd2InNuJ8sb6bZL/5v5b/7p/6Rrwba7EUq3E9NmIx1mM9VmMmIia7OqptLK6vr85kLSMuDmh5Mz4uaXmz/xhvH/E+AwAAAAAAAMAZVx9S/mB8f977sdD5/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6CJGKstcimi0V6MirViKgX9TYjPo6I2umO9kCSssxnJz8OAAAAOJR672pSH6HNC09jJzbifLG+m2Sf+S9nn5fr8W6sxHosx3o0Yynu5p+h00/9le2t2eb21uzDdNrf748/P9DQsx6j9d1D+ZZfzmo04l4sZznX404ksZup5L28vL01my4flo/rvXRMyY9yA0Yz1pW+m86ufJSl/9D7LUL1QLv4nCp9Syaz0vF2RKbzsaUtLhQRKI/E0KNTHbilmai0v/m52L2V/RHpifnu0yJ34MbfO7enVuk3N6dibyRuRqV9hC4PjnnEt//24S/vN1ce3L+3du3s7FKpp0Nr7I3EbFckrnyFIjHcdBaJS+31hfhZ/CKuxecTb8ZqLMevYjHWY2mqKF/Mz+d0Pjk4Up+c6157c9QRte5fZWOaip4xxVT8NEstxmvZMT0fy5HEo4hYilvZv5sx074bdI7wpcHjzq76ygh32tj5b+sWHnH1O1lGO0zR6N/qL6NG4mik97oLXXHtvudOZmWtnH+/n54NnSi9WBql4lk3+vOoS/VbeSLt4bcDnw8nrTsSxVOiGN1L/c6XVkj/vJvO15orD1bvL74z4vZez5fpdfT7Azwljj9i6RF+Mer5zl3I5kl2TU1nZS+1n7C98arlv7gU49xbdqndrnWl/jwexd2eK/X7MRdzMZ/VvpzVHt/3xErLrrR76r2Hp2XpX1rV9g873X9vPYpm6+8hAM62c989V2v8p/HPxgeN3zXuN96o/2TiBxOv1GL8H+M/rE6PvV55JflrfBC/6Xz+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt/a4ycPFpvNpdXyRKW8KBncarHZfuPbgDo9iSR/Vc4IlZO1x092h3Y4ODGRD+8ArSqjRezAieJtjV1FYxFRUnnq6Da6L/G/1uu4djs59eF7WoRkhE0k+wKeNn7uMRdb7uSMD221O14a1WNMTB2iebU3pzhhu+oc6OzNEo2y49XnZGsOuXGMHcHNBzhVN9YfvnNj7fGT7y0/XHx76e2llfG5ufnp+blbszfuLTeXplvzrgYn8vJb4CR0/znRVouIV4e3HfCiVgAAAAAAAAAAAOAYncT/hTjtfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+3BauRfVZJDEzfX06Xd/emm2mU5Hu1KxGRCUikl9HJH+PuB2tKSa7ukv6beePy/NvffrF9medvqpF/UrEZt92o9nMp5iKiLF8eVT93RneX62TnCgpTtqRSQN2tQhc/XCDhEP7fwAAAP//fu31Ow==")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]})

41.451596153s ago: executing program 4 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0)

40.028623779s ago: executing program 4 (id=40):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x10, 0x6, 0x4, 0xa, 0x6, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x3000, 0xa, 0x13, 0x1, 0x8, 0x3, 0x8, 0xfe, 0x46, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x3000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x3, 0x2, 0x3, 0x6}, {0x1, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0xc, 0x0, 0x81, 0x9}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x40019, 0x0, 0xd000, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000"], 0x5e})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x7, 0x8000000000, 0x184, 0x800, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x0, 0x3, 0x87, 0x0, 0x5, 0x0, 0xbdb], 0xd000, 0x3c4214})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000010c0)={[0x60000000003, 0x1000000000, 0x0, 0x10, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xffff, 0xfffffffffffffffb, 0x5, 0xffffffffffffffff, 0x7fffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc], 0x1, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

39.785482618s ago: executing program 32 (id=40):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x10, 0x6, 0x4, 0xa, 0x6, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x3000, 0xa, 0x13, 0x1, 0x8, 0x3, 0x8, 0xfe, 0x46, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x3000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x3, 0x2, 0x3, 0x6}, {0x1, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0xc, 0x0, 0x81, 0x9}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x40019, 0x0, 0xd000, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000"], 0x5e})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x7, 0x8000000000, 0x184, 0x800, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x0, 0x3, 0x87, 0x0, 0x5, 0x0, 0xbdb], 0xd000, 0x3c4214})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000010c0)={[0x60000000003, 0x1000000000, 0x0, 0x10, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xffff, 0xfffffffffffffffb, 0x5, 0xffffffffffffffff, 0x7fffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc], 0x1, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

33.146955697s ago: executing program 0 (id=94):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2)

32.474869282s ago: executing program 0 (id=97):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(0x0)
mkdir(0x0, 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
unlinkat(r0, 0x0, 0x200)
rmdir(0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66b2c000)
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
write(r2, &(0x7f0000000240)="94", 0x1)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013680)}], 0x1, 0x0)
tee(r1, r5, 0x8f5, 0x0)
write(r3, 0x0, 0x0)

32.016396319s ago: executing program 0 (id=100):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)={0x28, r1, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048005}, 0x0)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000340), 0x0, 0x20050050, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

31.721497473s ago: executing program 0 (id=102):
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc103, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1080030, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x29a00ae, 0x0)

30.600905244s ago: executing program 0 (id=110):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000100)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFFUcAPDvTH/Sqi3EqHiQJsZAorS0gCHGRLgTgj9uniotBFkooTVaJLEkeDExXjyYePIg/hdK4tWDVw9ePBkSYgwHMUTWzO5s2W53+3u7y+7nkwz73sx23pvSb9+b1/dmA+haY9k/acT+iLiaRIxUHeuN/OBY+X33/75xLtuSKBbf/SuJG58lS9XnSvLX4fyL/xuJ5Nc0Yl/P6nLnF69fmi4UZq/l+YmFy1cn5hevH754efrC7IXZK1OvT504fuz4ickj27q+6qJP3/rw45Evzrz//bcPk8kffj+TxMl4lL8hu67arx3YVsnZ92wsimUPqvdn39cT2zx3u/hnpPJz8lhSu4O2dT7/eXwmIp6Pkeip+t8cic/fbmnlgKYqJlFpo4Cuk2wp/gd3viLALqv0Ayr39vXug1dLm9wrAXbDvVPlAYBy7PdFRCX+e8tjgzEY2d6h+8mKcZ4kIrY3MleWlfHLz2duZVs0GIcDmmPpZmWUu7b9T0qxORqDpdzQ/XRF/KdVW7b/nS2WP1aTF/+we5ZuRsQLefvfH5uK/7Gq+P9gi+WLfwAAAAAAANg5d05FxGv15v+ly/N/+uvM/xmOiJM7UP76f/9L7+aJZAeKA6rcOxXxZt35v8tzfEd78tzTpfkAfcn5i4XZI/mawUPRN5Dla5f4plWvh7/c902j8qvn/2VbVn5lLmB+hru9NQtxZ6YXpnfi2qHb3bsZ8WJp/u+BfM/K+T9Z+5/Uaf+zuL66wTL2vXL7bKNj68c/0CzF7yIO1m3/H3e3k7WfzzFR6g9MVHoFq7306Vc/Nipf/EPrZO3/0NrxP5BUP69nfnPn74+Io4u9xUbHt9r/70/e66mcP/PJ9MLCtcmI/uT06v1Tm6szdKpKPFTiJYv/Qy+vPf633P+visM9EbG0wTKfezT8R6Nj2n9onSz+Z9Zu/0dXtv+bT0zdHv2pUflnN9T+Hyu16YfyPcb/oNrq53FsNEBbUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMKlEfFUJOn4cjpNx8cjhiPi2RhKC3PzC6+en/voykx2rPT5/2nlk35Hyvkky0+W0o/zUzX5oxGxNyK+7tlTyo+fmyvMtPriAQAAAAAAAAAAAAAAAAAAoE0Ml9b8Fwdq1/9n/uxpde2ApuvNX8U7dJ/edd/xsFhWu7840Kw6Abtj/fgHOtXG47+vqfUAdl/j+H/wsH6/H+gU+v/QvbYY//5cAB1A+w/daoNjeoPNrgfQCtp/AAAAAADoKHsP3PktiYilN/aUtkx/fsxkf+hsaasrALSMObzQvXrnWl0DoFXc4wPJcurfuov9G8/+T5pTIQAAAAAAAAAAAABglYP7rf+HbrX2+n9z+6GTrbH+v17we1wAdJDGH/2h7YdO5x4fWK+1t/4fAAAAAAAAAAAAANrA4PVL04XC7LX5xScv8VZ7VGNziaXptqjGjiYeNefMfRHRHhe424nKIzhaWI0W/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/R8AAP//nqEvTw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x801, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0)
sendto$inet_nvme_icreq_pdu(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x1968842, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(0x0, 0x0, 0x0, 0x80, &(0x7f0000000880))
open(0x0, 0x123f42, 0x1c0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x63)

29.517597372s ago: executing program 0 (id=116):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x8})
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffd, 0x19, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="b2c7550ffd1fc08e021daeae9a7d41c0a47da47f80a7c010c1", 0x0, 0x5, 0x20, 0x3, 0x0})

29.210715277s ago: executing program 33 (id=116):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x8})
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffd, 0x19, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="b2c7550ffd1fc08e021daeae9a7d41c0a47da47f80a7c010c1", 0x0, 0x5, 0x20, 0x3, 0x0})

25.805966214s ago: executing program 1 (id=132):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xc, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x2, 0x0, 0x4, r2, 0x3})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000100)={0xeeef0000, 0x1000})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

25.470794311s ago: executing program 1 (id=136):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
fanotify_init(0x1a, 0x800)
r1 = socket$inet6(0xa, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

25.317389163s ago: executing program 1 (id=137):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x4b)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

24.681341515s ago: executing program 1 (id=140):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x40a8, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1200009, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x400, 0x30)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x800, 0x1, 0x7, 0x1003})

24.293063606s ago: executing program 1 (id=142):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)

23.63753443s ago: executing program 1 (id=147):
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000ac0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe467}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@uni_xlate}, {@shortname_mixed}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@gid}, {@shortname_mixed}, {@shortname_win95}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}]}, 0x1, 0x373, &(0x7f0000000340)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==")

23.481552152s ago: executing program 34 (id=147):
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000ac0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe467}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@uni_xlate}, {@shortname_mixed}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@gid}, {@shortname_mixed}, {@shortname_win95}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}]}, 0x1, 0x373, &(0x7f0000000340)="$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")

4.869511795s ago: executing program 6 (id=282):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008040)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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")
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x4000)
fallocate(r3, 0x0, 0x0, 0x1000f4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, r5, 0x9, 0x7fff, 0x0, 0x6})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x80000c0)
r6 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
read$FUSE(r6, &(0x7f0000008fc0)={0x2020}, 0x2020)

3.563961881s ago: executing program 6 (id=292):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x101ff, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9001, 0x4, 0x3, 0xf8, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x69, 0x1000000003, 0xfffffffffffffffe, 0x2, 0x6, 0x27, 0x96, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x4, 0x8, 0x6, 0x6, 0x3, 0x0, 0x3, 0x8, 0xad, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffffa, 0x2, 0xe, 0x40, 0x0, 0x9, 0x200000000000101, 0x2, 0x9, 0x6, 0x6, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfbfffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xfffffffffffffffc, 0x2, 0x7, 0x2, 0x5, 0x10fff, 0x6, 0x4, 0xc, 0x5, 0x0, 0x4, 0xfff, 0x5, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x6, 0x200, 0x7, 0xe53f, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x5, 0xc6, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00003, 0xb, 0xe]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x8, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x36fb, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x3, 0xbdb], 0xffff1001, 0x120182})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x4, 0x3], 0x1, 0x202})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.32825141s ago: executing program 3 (id=295):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xc}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

3.205536199s ago: executing program 5 (id=297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x3, 0xa, 0x0, 0x54, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xfffffffd, 0x0, [{0xc, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x4, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x2}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xdc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x42, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x42}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.112995437s ago: executing program 6 (id=298):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
chdir(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

2.893851475s ago: executing program 2 (id=299):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0xb0003, 0x0, [0x4, 0xfd20, 0x93, 0x4, 0x6, 0x5, 0x4, 0x5]})

2.847529799s ago: executing program 3 (id=300):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x3004903, &(0x7f0000000100)=ANY=[], 0x1, 0x348, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, 0x0, 0x0, 0xe7c)

2.765602045s ago: executing program 6 (id=301):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008080)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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")

2.499535897s ago: executing program 5 (id=302):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0xffffffffffffff0f, 0x0, 0x1, 0x0, 0xd}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x200001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x0, 0x6, 0x9, '\x00', 0x1001})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.45398899s ago: executing program 7 (id=303):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x7fffffff, 0x1b)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x40, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

2.385550406s ago: executing program 3 (id=304):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\a\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xd82, 0x0, 0x3}}}}}}}, 0x0)

2.291709144s ago: executing program 6 (id=305):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0xffff, 0x5, 0x800077, 0x412, 0x6, 0x40006, 0x1000, 0xf67, 0x12})

2.259678447s ago: executing program 2 (id=306):
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

2.141567596s ago: executing program 7 (id=307):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128)
r1 = syz_clone(0x2200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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")
truncate(0x0, 0x8000)
write$cgroup_pid(r0, &(0x7f0000000200)=r1, 0x12)

2.057873963s ago: executing program 3 (id=308):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af96e4b38fe, 0x0)

2.038983225s ago: executing program 5 (id=309):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000a80)={[{@barrier_val}, {@resuid}, {@noblock_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001180)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

1.979455859s ago: executing program 2 (id=310):
openat$kvm(0xffffffffffffff9c, 0x0, 0x8101, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)

1.705599782s ago: executing program 2 (id=311):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
r0 = fanotify_init(0x20, 0x80000)
r1 = open(&(0x7f0000000280)='./file1\x00', 0x10fcc2, 0x10)
fanotify_mark(r0, 0x1, 0x23, r1, 0x0)
creat(&(0x7f0000000600)='./file0\x00', 0xe5)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

1.6053222s ago: executing program 7 (id=312):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")
socket(0x1, 0x5, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x42, 0x81)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

1.307338914s ago: executing program 2 (id=313):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@code={0x1, 0x51, {"660f388239f3430fc7350200000064440f22033e81080000000066b8e2000f00d866ba4300b8f6ff0000ef36660fd4f8450f0ff10d450f00ddc441bdf67ca900"}}], 0x51})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=ANY=[], 0x5e})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010400002200"])
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c8100, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000010000000000000085000000000700000000000000b8a2992d438e0f21f8350400f0000f23f848b866373fdf2a3145320f23d00f21f835100000030f23f8460f"], 0x9d})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161642, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1.067627763s ago: executing program 5 (id=314):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)

1.004303248s ago: executing program 7 (id=315):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x5e20, 0xffffffff, @empty, 0x5}, 0x1c)

881.382948ms ago: executing program 3 (id=316):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008010, &(0x7f0000000180)={[{@nodots}, {@fat=@gid}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}]}, 0x1, 0x11b9, &(0x7f00000040c0)="$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")
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120)
getdents64(r0, &(0x7f0000000600)=""/60, 0x48)
getdents64(r0, 0xfffffffffffffffe, 0x41)

689.240504ms ago: executing program 5 (id=317):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x40, 0x40000)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

673.743425ms ago: executing program 7 (id=318):
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f0000000000)="17", 0xfffffffffffffd9b, 0x10048085, 0x0, 0xffffffffffffff95)

500.736019ms ago: executing program 6 (id=319):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x74)
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f0000000000)="17", 0xfffffffffffffd9b, 0x10048085, 0x0, 0xffffffffffffff95)

445.667484ms ago: executing program 5 (id=320):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @remote})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @broadcast})

280.827447ms ago: executing program 2 (id=321):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000009f000040"])

229.502121ms ago: executing program 7 (id=322):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0xfffffffffffffbff, 0x1, 0x3f24, 0x1, 0x6, 0x4, 0x5c45, 0x7fff, 0x7f, 0x8, 0x32, 0xfffffffffffffff9, 0x80, 0x8, 0xffffffffffffffff, 0x8000000000000001], 0x8080000, 0x180200})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 3 (id=323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020086f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
umount2(&(0x7f0000000580)='./file0\x00', 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18)
ioprio_get$uid(0x3, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x3d8, 0x0, 0x230, 0xffffffff, 0x300, 0x300, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'tunl0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x52}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7f, 0xc, [0xe, 0x22, 0x3e, 0x11, 0x1b, 0x7, 0x15, 0x31, 0x12, 0xe, 0x27, 0x18, 0x26, 0x38, 0x2a, 0x33], 0x0, 0x7fffffff, 0x81}}}, {{@ip={@loopback, @local, 0xffffffff, 0x0, 'caif0\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x64, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x78195242f88d37ad, @rand_addr=0x64010100, @broadcast, @icmp_id=0x67, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8)
ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000280)=""/6)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e23, 0x295, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffffc, 0x400, 0xb2, 0x6, 0x3, 0x5, 0x4, 0x800, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6]}, &(0x7f0000000180)=0x100)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x200, 0x4)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000002c0)={{r0}, r1, 0x4, @unused=[0x8, 0x9, 0x8, 0x100000000], @name="e5e7857a36b1edc61e196a76620a311a5c7dab19595c49340eb17df0e49c37d461f9136d1ad11e98ec12dc32d356843a3d17aeab57b32fc7c59cbc249c9dedf93f39deb98107e34427c90303518b76ab08dc085615f24eb99092f15237e058cc2fa9443d8bfe05cc1f990584cebf85638d0827e937e64293d17d1f717b28f382883d5aee52b748f6e418305bd10b5b0abf8901b478b67e0cb7c1f4a39bd66d3b229e873f143e31d967442bf8af6cd6846adbe06f855a2cb7e93463aceea8b55a4d12d651a3db6c1a8f942f578cb27e085bce4773bfd6b17ac98856308e229cb5b83ecc843160ca978e5e0f3c54c24c8b09de681275d0f56521dce36770afa7570c9bac5826515a38a317453a40a0e85374020b8769438ac88d589561f1339433c7f9dde12fb1b8d5620a4e95173d6b8fc448fd3ca70ae4ff2b95ab7a1c65be39dac200dc46c899ecbdd97852ecdace7da469aea40685a7b6211f58c065a05b46dc6d465aecc7ead357312ac29b5476bcad6f8cdde5bd98f30878266b4b82fe1306b8926ff21fab69cd643aad53cf7ddf39a65e3a040f764a0e1dae62331c90323777b32459b50496f61c210fd2ae32e8b37b58972c5c371b720fea7c576c65ffc7639713ce7b0d7edb646506acadc9375d657efc601e129f92bd9e79bf169f6f37a716cca239d144c98209d21b593de6621a4c21d060a81f29d026be0a38fcb3f339287ddb244f9e42a073b4df270c6a46fa68a5bce968f259353e9bd60aaeeed04cbfdea10322956bafe398724049664b768bddb387c644b61ee5c6724926c36c7caec0e55d5dd9d30e020e76e5af6ade58681e80a12974ae673b3f1cc562b3642ae3e456f34bc5cf8b96bbca96bbb8c487879fb735fcf984d5210e5ed329d7b5c0dca6ae03568505e4aafac2cfbd3b2ab563e92321e770058989d74a41c9bd19185fdf41e8549d14112100eea9c7980e40cec916a86e9429e76e59ef2b7a6291f8b9e395322857b57793b93cdccff207ef4dcffa110fdefcfbd5e12fa02f5175b853d0b3a914f6b8c31870841b215ff9385b8f8321468906bd25a4a989946084ea5a6160013a106455c9d62be0bc668fd3a9add708dc38d2a64d625c9482597d1d4b0c812803f887888cca4e54120abc17bf7eb4527eeb1dc2e071ba0ef602a417fbbc3d7e1e54a3c65a3988bfd52fa1d48e2390dac27eb6b67672bd1d3cbb068bb18e70dadacc8cf4a17bdf0518d7b66fb14d27e0bcd81e65ec87ee5fc982b1a169b7516f0b5f03d36a384cca62ee20b3fd83b19302811ab15fc75f810997fe2a91aab1bc0da5497ddc75b119be6d26c7bc6564e99e75bd6dd186a14aefa306559aba90007bc6c653a90aae65e727d11dd59ea12e2630d0dbe3df3c3aefd6aa995e3fefa57bdc4337a828b0ad7f69f8d3f258e029f3221467254c8c154d58d6ad5db54487b83ca527ccf852db7248dcdc8286bd981dac1f4fd1214290df84ca27e77828e487b79d38acfa0f25cbe0bffb19ac2a93c896b525014be1edc44ab1d3e462b88697476e2794fccaf8f5581cf039cc1de69d4824c98564718572c869ca516a48df79051f2a6a559aca8883b66e316d78d8cd3302ca9078858ef4e923754e52514a76278801fd5fc837c515f93d7e1c3e17b4c27de999dd81728ecf6ace73e2e00f6cd68f1cc0d5ad0eece8f06649124cdb31bb0c84bcf83a14cc239709ab1358afaf6e0153289c1d5c02b42b8df551f08dfa009be76108ded73d9ce7adc484a2f7b32c157bd5a5affa751a8b0e828160d6168066cc0ef36a796a998157b3344035c70733366814f553ad5c98a576735db31ce2231481bc23cd3e034095c017b9e6efd224b3080efd1283e67318f7e28937c383b27219dc9a3f77419812cccc553f8a8159ce968666024dbd830c626784fe109d0594cc3d855f597a4376519acd57f6019deea0b0442eec029c1277297224184cab6c8cc6e91c2406a0017bb2967bd054bc8e94decc9898b100e3f403a5cf3694e96872b86ebe3a692df5fabc9a5d6b5788d822229c56a12fa3f9f204bda38d238c068f7df3eacaf273a1f5b9ed26a7bdb0ae009cfe52ec83934957d3f31588cdd3eedb16fce6dfb455954446c1fbedfed30620aed241c55d4fe5317617a578cedd74423526b89274441db9343e6e7c60fe4241c00d28e690603ebd171ddeaa847405bd0a5ee5f7b3b2335f0774d879e235cd1f2f220af40f2116346145df17bfae07934548ede82e80d257e687051406bb5b9bc9891aa96f158b6aadf649619fe87f1a229bb45a246be0c1a7ef3d3bb5c5d28c1f19f7a73557c5fc0f32eb0416516f0fe34124b2b72a848a9f0dfadbb58457669becb5fce301baada5465e12867abeda75cc91e34a84e546ac893c17a4bb7e643db16417565966c117a238a590210e3d94a70f1f0af9f5633ae437a8ad4df75b29487c6d8061a50e6d92ba5aa9884027862bf33b10f8e19ba81d6a3c10ced04da34ec1fbd9f1d4b1835d75bd6ae76de3a2206010302cc3c81285847b08ea9d4aef4312a082db8e2f050f6f2989e5bb3b7cd4da4c7e9a0b5115c7cd4dabd89da2da6661992241a7854f946ed815ca97d5fd0660a7dcbde69ad659f90b2c3a84ad423fbe07743c0354b8bd9d867bd3c94f0542f3b32ac6c8bfabe2bd5095d5519310764911f3c9e1531f5a0b1f5ec9468eafec57fbe8cb18ddb6f521be28c9597d0df5c40a25cf216614d7d17d8e289d3300db63f695f5ce8703e4d0df6b5510444178194e6656e74ccbab99da1c3987bbea9c0ade5accab018f6f993a437ec1bf81c29312bc1d711fd65ffc83531ad9be44466c820e82dc58a4e9620f16381d1ef31ec4a43cf3ece4417854fe26794189bb62882a29ceeb904ce0c8cd46430a8f80f9c190b4291ec885b513a7080e7a1b3eda0e051423d0481c2cb72dda37e5573acfc05ddfc7f1df452a509a209ab3b39ec14615eeb786ed464a816cac1beb45a83eccbdf7c1ee5db17bd2c7e9a07cb9d4fad1324c91f537922639fe84be15895c2e2984136983e0dd898c42c59b935bf2f66dfdc32728e8c7f7d3ee552ce975b1bae0661dfeff7922950ce16c305c9fc6fbdef28bf82707ed19ecd839eac367bd1a84d20c20607b7d4c466fc8ea7033e0f6d23db947188e3c08e74f9feec5a7d4e1443f351fc9ba337a73af8bb38ea500a6754b3c40a7102dd03ab207ab8075aafa434f84c930819e03fbe989d51393ea85010e29213a996e7e8ff8baa5de7f3a1f79df848f900333848659ef54809f379019cc8aaa8d59acbd5dc0f5ff69a363bb478f66b9313edad78761b61a5e6b832d0ad055c0639afdaf676169f1e7570260bd1f06c3690a4abc08ec541aff8e66094efceabb8900e335f7dab286eb6cfce79a540edbc1fb470250c2e33ffa915e367aa81e1fbb99a7aad6381a623d6dc1538f903f6aac787d36d0e8b9ed01e67b1162bd240398d5d31ba1381bf0de9fdf8503522f8e4cdfc58b9f68ac0239c9a9b0cdaf99d4e00b5d3b9ddb45197d80aa2907c6069b9b37e847284519e57d75932cdc2c0a4dfc7fb055399b78e5319b9ac5b19b1a5da7bbe8fe4ec9dba5df81510df1d845535033666ee3663e9a1a540b04d46864116e06450858ac324260c81c44fed3ab30901f72ccbec9d7b1130262cba2d5e9fbc964b8a940b1dbcebeaeeacf3e56114211d6273de69e99d339528a47d247c442a4a51351ad8edaab7aa3b98b8be6eef253b5ea13894e2f5eaa80872799032609830fb6f6ddffe92ca129460becaf77de23dd28fe302afac89734601f93597010fe00c4f845f7d2ce16db2f07687e47c558f3c3ffa37d04a533aa2547cf597f12614951a5e38ad998a9b299b1b850e425c5df06fe8a2426c18c95f7d334e1191cb4bd95ea7d6276d87470761727cbed2f84632fbc367e72025a2f2f7493fa2a0ac71f15bc36a5ccd584f79778b83c93416595d5d5d687b39e0c9c9cd5dffdf9a5cece80acdeab51aecdfa4bde418eaf7d9fab0e2c57f79bf7e935a9608434f375ebc49ae57c497c665614a8d716de16900cf634f35c485c5b4468a92d1ec22041c4afda23276f73ac6724d78c55fb69ffdc1223a24a6733b82ab4c3326a0f767ef5873a716c79a3affee110a1f424adb3622fcc13b7d2ff53d005e48e9a5368a91dfeb5b060e64559341a616befe819d4abfbb02c59aee8ba25193cec276f41b1cfa3b0cbecf797043399b37444b9140813447f49809510c505a69a3405c62ba5210de156c16d632053eacb717c5300d4b65c686c2397c5b44636c306a866359aa70199ffa5ef6b74e9d6409231b7fdc3df9b3bb6f55196aa74647d9acbe7cae0212a20743e828aec67b64c6a8578d2d9b12c091d8823c5cf2f772452a448294bb488f2377271dd186d7c61868d8f82f0f59b19d381f42ead01f0d95972303bbd4cf5f483bc37ed3bdd95769a06641570752a1ebd8a65098d017228acf5ba0cd805221a7b4e7caa948146f9c2061640079d6754f93a442ab7b160adb276dd2076181bd90dc492a1be01bad422e5ab957a80443c9b4ef9ba7eacbf6133b3b42bbd79be4d5eba3359635edfa4c7d315619567bab63a1a1b564285bbc14d776bc29818c93a5c4969c1b2ef4bb287e37da54f83490c1181bb36fb55b4095ecaed63ffd57b54ad63f666db90753d2c85f02b8d8e6a013c7ca9949e1e0e1e10ebb0ca5e0c31401f40cfe9405d0e1535eaaf0c90bf2729ab98644417815f89814b9e95869746178680fefc393fa68f4b1e9277adaee34429b5e47337489df1f580b7994a100a584f784dcab3a5996991950672a15221cbcb0b70d6f9d7796b5598ff09e43ef5d7fd69db14d7884d51693aa537ac83144e7273e97393c92aa67df6fa8b2bcb374dd043b6aa80cb5a37c3918d6e2c6d4c0e355521eee526abe7f3e505ed5a2a5a67630bc2a621a2844bb62f1cb407d09c6097c6eeec841821110fd74993571da12b23b3bdcb5424955cb571251e25c7e5ddf22f48bc91b7d4da4cda4c26c24d38fa6cf8c6156b15b71ff947e4c10efb85a7ad5c4cb18bf5cc62659bc6a1fb313e36ed3414aec837d18263c900b9dea38c7ac0b45194eee7f7431bfb16552d9da17dea18fc8597024dd006d44c734ce300b33a1e45b2426f03ac38b1532d1eaf47e3e91920595d0e882f23ac7e7b79e54cc04ea10ff83f172233357960e693cb7396094e955d3daf24e4f0ce6ad9bb1047135f202eaa444faca0f5b163f0ec34764bc1e35002e10f2bb1330d78ea80c7e50bcfc57264ac71a5b3aaf4cd4aba2261d0cb6c425ccc7b9c45ed57fb7663844817f1c91550a894ca3040713cf4b929ea18af1370826dca11e41825175031bf719a6667dd757db5d148d392919b3640a0f2a285d006be4b8cf6c0f870c6a60689d44866b245c12a77ebd2ae73a13bcc48e362e1b6b00f6a9993357afd5c08b6e77950098b573383f81eface8b98d2a8dee9c3297503833a997f2798a065d877aab2ffa64ff7db4b0bab9bf3374b48c738ae1731842143b7ad2f3128dde1bb89b1846093aebf776c2c981bd477dd87aa266b011e8a4f554e2d571ee486f0a5baf41e2f6e93acde9d39a62f8f64f0710227ce935e1c67eaeadef8be8829119ecf789f01a657884a7e012032eba6c3fb8b2034841d90250945da3749b0676e9ddced2ddb3c423c"})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000021c0)={0x8, {"2cc1f79e4328e56f970befe1702f3402cd8a351e08846854e7f5a3af35b2ea28a750d23a0e2454c5f57cdd47c0f871a2be0bd4f9ec99fb7eaa96008c3e4b8842248b8a2c653151a75b5df5302eaef9a9ff85c8880675a79469d31812e94ed2c100dcc3846a54456a8f67019fdaefd505ab12a320dc4f5ab196bb924c29a706f4d7db4b07461ac59315d78c942b13a04c10b39ab9dbde4b54255ce9ebd89401913334fdd51021e21e783a07a77e39ac2c1901e674d376365436222e0f7876aa7d6131ee168956056d292cffde07f79ad0ded0b3f54027191bd53f12ef882d8f6d962282c3b1472b2f8aec13e597f0f0bcc8110bdc43880c3077dfeae5830aef802069ea1628573bda8a3814c15ae0c5ce9ba218b14570c65eb4942b49ac6b5cdea731f931d06f4195de6d4f2ef62be0adb554f16fd034b0a9c4078bb9e559e7f6a76289aca62e1a72b6768944084e9d0a4beed139bed557634374098dac49277868880eaa7f2553040f855a85ee5c0a718557ee8eb397eac593da3bb7a56b63031c2ad8ecddff5b7fbb4fd8813f3d192a0baee524b5a817323148a70910b8276bfc2d23d7044b3eb3e67f270b67aeee1a401f928bd378e1352eaf86744337edcd6f4a1667c6bae75465b97fb9897c40274ffff35cfce7435fd678af2c2ebc5ad864fa59bd216765c275d9d850ccf22b32e521d0fc4ec801470c40fa2a8a781590b26f443cc90187280e84956084e94cae9723cc3d9f7b52d3529e22d89b3c0125c8dbac82c32c0aefe8eb8a4d31c7977d8c2ca22a7b9f853d7b583a8254836ebbd0a194353197b781f86c462a1927d122e9b4db2467289bf900f3525cf922d5cacc438d1561a345ee6e33567abde04bf5039ea7172fe87a3afab2358f38d985b2c25791fcb2085de0417021fbaf170e220ff023c485d87e0516bbdc16cdc7803eb695db4b55064f728f2678d6b70a6227f1c4b6294cace0a886fe92105a3a6feef704a3fcdf18e2719d2f4f6064193c98e0126bf2b7216b7d0ff806a861907118039b063a77c17b5837620cdb3fce096b8cfeb4359c6cbc8b1e5fc4b1e4cd835e66e2f7e01d31e7798214e8786336a52f9299e317b3ff56bd4b3d930ed72e67addf853a5593a5e97cff527c2ad0360ce0f57bd1eda9dd48e02efadb137ac1342da00fef5372a6ce0f2a8f3ed173454036ccdc7dd7be3dc82f61e351c93509a7f18cd4cb047ba302253214b5ac3dbef1716de4f4d2852702f9829a7c02e61abef227fdd07786717d58a749e02bbb18863a07b3c6623162b221e8cd2a0754970db584989ccaf39f4a357ca0ffe4656ad2cb2c87cf9920ad6a93e699b4251fdf82caaf006f364ea0b1ef2de183806d64abf445e6925794cade764bd8e7f4ccc81c59c3b8fe48f212a127cde77a45e67bba7cc6e8c0bbe28ef4aca1de6b1d93673a0599afd6b980da20a20a466a2c5fd3e8c47ef86dca58ff66152908882caf51031479a801aad29a54bc77caf71d8a1856b7add2e2363cd605bff4af7eabe62b0e71db4f38f2550f9fbeb9074ba705a6f3194f710b3e1c73eedb5024b9c84a88d6f2a5101846d94566d7b3f644d5b381b73f1558116a80ce7655c355ed51e83fe3b94c1966b8ff9017eae50de8aec97d974b1fc9274b170baff9b1e2cc35af29d357db9be9f8f9e9e4ab8d2ef7432e26baf76a60bc04f38e994b29cffcf8073a359e0fba9c303d669bd9c73c1372056bd4866957179f1ec9daaba16371bb59f2176d4cd7e34560f1ab1fe76cd3960cdaea2b49e77d84207118b8e2aafe470d66b97112a13316c2320183d31ab52327f58e2cca4fd822666082a7a19c57c466cfc1dfc822f54de23b7004457869ed45ece9e427e49bb8cc3d1864b57d7358aefb305953b30d59f7b82f3c21018abe7af0969a708f84d55f119abe1d7eb9307489055afc4652297004ed70ef389c1dfeefb7688b8928cc462f03b11447041c041a2f96c54faea40f694a76a8407fbe87f51fd8341e071095487046e5c0206370feab385a0e1d99f2e51bd988f0b43f7bef60a0335973a736c219458edef72c4cd51846cb356438a7f5b4cb60de7b39b7f8aba283038d22583f5f1e73433ffa8cc35dfb8339cf9e119c2182f5828f2cd4e02d1f21133914a7121393ec1174272e198f6fc4e6b170246ba69458e28f64b2e032e6f8e13b54c32cc6e71d873fd402aac03e2c3a8527c3174fb089251dc42911c307c55b7a8a18c1b1bcdc2d6d35b56245ad9c262c8dca6e65e64b2fc25ad36877f642136ef0e8eb64d01b8d1f1e25b4f52f49464904af80b4a40587aa18035d4d83536910ab29d619167878644c6e020431118c34fa669aec7a7c0b658f345ad2dc69a785eb7b14283f2526ec66e99667fa276d115c1f35062a4e306826096417faaa664d390ce0c16cfd41b8fec851e106b14ca04ced9c99cd3cd3b3aaae04152d9edc9fe5071d4a78204e3064789ab1f8bceabb8cb26f29442b5cf20877240f7dc4ab85e6aac095d364c1b83e56a83808bb0a0b33fe8cbda0c1e455a24ee811f9cf81eba4febdb7cf6454da969fe77f41a0951178ba5e058d2431fa443fd630299543daa4f19dc3f113fae176b7407f10dea9a0da7bc3e09828afc37a10a08d8f941aaa4dffe22647904a76d0c08cda8a9875293123e96f38ebd0b14614b4e0c07f2269af65322756415c4c10e7c43c16a549b7f3e699db5f8fe165aa3858e72b15ac4501387ffea1f8f063138a64b3258f76017da3ab514a40b0e566568030d78aac42706db9f323a80760dcaf0ebf1341fc8fbd3dfa51b0a49a5eb7ee80ba6d90da18e67cf04ead1441efb7c5dd9ada7c4d81af4e5194f2b9a00db75a9873e616c3fb50d523b50f054cbf6206225d6a8be14478ccc6991dc31901332db6496b622eb241f517d24c7eb811a178662edc2e34b9929ab38917aedf8e928f4b8902442db76ab81a7d79d1632b86089dd2b46364e1eb401220b873a227b557e45fa12317bd48ec8e56cdaa9dd7f293a00f5276468aceb9a5777e291faf29b0f373d26bd3caed5ee9d18dbf2aa5b3f1d4f30cfa054a2cc6b5e3b07b5e217522abcb02711fd3cfb49855b78cfd171b0c7e058451423a0f6f9d664ad0bb4a377c025bf538fe67e968087c6dd85fce0a1b4cb07a1dd3b0f2f0215ef8ab5220633afd92127d52a7b8945710c92909e7cdbaf3b1cbfac4d47f81686bcab97ad0231297ba03810238fdc47791b919a506f64ec1929b53281f1a85db4d033f6d73c9c71e1d07d0d91b51598d32975f7b17c9840fbdfab8027a9fde8fe40e1f3263bfa58d93cdb9ce1ac0b0e52baa66de44072d414345ed00ba6ad9e25fa8d5c36ca3ab171a965fe84b8cabd5e6857a2ce07d5e8fed1bab2e4abcd4a92f17b2ff3f25daa599ded361ea898c7074dbd204b64e102f3413687d4c844b6376f5beba6ee48a22fe8950d4a93bc98aa6f6ab5dd5d9b6a1bcaaab11f94f9295317e66507727bb9a0d999efc8f39f195e4f695478b0ac4568cf36b62308ad2d840673d89a6e3bffc0c2f9d8682152418779f55f76308287613375c35468d526fb7a0ab8eb41f25a11ec6783fc60dff800964ba1d8d5b88c5bc4a7a837fdca815c2d169fe0b5d777e991c4795988dd479fff50aa04a22d886325e035f96594baa3ed732bd33064a3e7d4dd4d1e9f7902c3df9500eea289d4067101a3b7e691244d8e44a73969f9fa0275a09e8508f8d8ef164f5952573c60881a678a461175245f3a99e7b5f0e34a7fb4f495e7040d3a6f5aecfc3a1b88c0882c8138df4853c168822bb619645999a32794020e7049ec8dd4759ea4176825cd662ee32c0e94ee9421a99d2132cbd1642dfc16959e6dee863db1b3e420bc7caec83df28ca48de68130e1644703cfe3729f8c7354f8e73a3650091e23d97b8b2080734e8b348ca07c8f3fd776c85b3f47985572f04fa26a826449dc2a9c09d2b257008b24f35aa65cbda1f05540a5ee3baf549e16ce8e424839b31380926a927f9b6eff88789af3272aa482a0384206a99b0b1ab182ab15c7367e1198bedf9fb0a7712a9506a5ffbf7f6732032fcbf5843e913533842e0a3fef189516ae460313c7a822803d66bda9230d2685eec92e30f518094f6baa484dc5225b645e31df1a1b451c4fd4ed0b7b515e0328347461fd63b972d4ea56a67c0ef01ff68c386dde01f79fb8ac0e7fd71b20bc68dec8d9df3364b39be6bbf346ebc467a5071bcab31ee0e0c252e8f0d0015db5b641db061a9c0e5cab157b95344e612cd92816b334b917513ba9bf1ea9924ba00c7c7bab63c59dcde247cd271fe7450d2502227709e2597517f979057278d9414e9645aabc5c36c98ec40cb8f5c6122ab101961ebd72658796b3fc1248bc025d71bc922b656973d710eaca127d2c7a1ab332bfb34a2f5e5f7396b9a68fd1ff69539b18f18c282b7d8b650eb6960b213017cbbc27ca2be6c922fe158a37568f095aee163f94e84101bb6d7506bd09dd11d8b3773c54213b116ed4164e25c0e1058bc8f229b3f76853bbb8e7a0db10523cb5b2087ae30f077159661ea424c0b62979e0864ae37e908ca8b184fd8626748303953f40f446cdaac5010b0b2de0d37a5888518b7fa7a4d7e4df9d585bbd0d97c14f026322abc4dda4fee6d4276ff48a9132c1c9eac8cb15d185964cf32f30efb764a2490192a8b9cc77266158b984764ff0e396a4f5f8ef1375d80f43343cbd71fb12f472fa5ec37e1cba9df9e73a693e70e518ae39e5ba807dfe326241ca3626fd37c2bbd8b7ff0bad8b46a1ad03f0e31e61f75b9f925eaf25f13c0ac9ae19f55d7dcb589cb34060e61b5b7447fb7680cda9e7d71eb9fd97b1305db3fa6a0fabb58085cb03e7c98a46509c21519c8d4a1aba10c75f3bfca419f9ed84a3d289b46b68b2c135120d6a51b8a7204242656c81a78cb974344af577704e834d65dcc7bff3aa028ba120ba1f6f3e20934cfa71dcc370461c400d066f5958d0503c37d89a677ba6b4c3f4bcc1db08a9b9c025cc35a10fc6ec1ea9c7fba552d3177ffb06d9a09fcbe26873c1eff56d6823db99be704e718c764634a0787a7d5d1d21298d5bbb96a585d6cb41fc76b800a0e9f30f4cf12d808156f9e8e9b1eedc6b140381453419c1c59b11643f9ca7d4ade1d6b2a298ab8859a69a46d8d4ab3de6ba390315857be9a514aa48183b73b4e41aecb04b082a179f5632047d9f01118662bc7816dc576a3ca650b183c38919c647ebcc4de0f5ff4eeb08a45468cdc8ab7c5fb009de043025beaf835db079bf740d2614cd6ce4daeca29d7269184ea241726a2118a961b8904d67390b01b7a50256b0baedef9882539d6c8e2f161c47fda515bde9191791812daee12cad8f19c155c800cac41b631f187fad9472b6290bf675e7d4b0940ede5d681fd6afca239930e9db8d14841e5c6f112546dd7b93dca6ef2efdc142b84a210b45bb83a86e209789b1ded72b4e5a6dcbaadf44d2650e38ab3201a023c9555efbf8cfbdd95ec0e5a536431f2ee28cdb6ca6fa8c9fc7058da93b54ebaa3e210363116d4a3d64b25cfa29e6ac2a61e294282020177ea7e1a19ce7c33f7b246652d45ebf0b98f84bef913d5d3f8a814ff726deafc635cae40c7ed8f400acdeb74de6b63f9b0a7accac6f6e220129a3d2745dd58499cb436d8e02838298b5718e3d13838db48c86adb80327cb007080729de5287968b5a20f1202764b63ba9c6a1d17b2decb477dd47aff3077f9d066dd8dd1c8db1a2222fc4b1a33697d8540851", 0x1000}}, 0x1006)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4000000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0d010000003a90e2f02146726800200012800b00010067656e65766500001000977813000880040006000500040021ae8570304ace15fce57acc33268d42db23eb3f44c2c683"], 0x40}}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x200)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts.
[   66.200331][ T4172] cgroup: Unknown subsys name 'net'
[   66.340844][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.837087][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   69.398403][ T4182] chnl_net:caif_netlink_parms(): no params data found
[   69.421574][ T4195] chnl_net:caif_netlink_parms(): no params data found
[   69.449917][ T4193] chnl_net:caif_netlink_parms(): no params data found
[   69.501733][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   69.574749][ T4183] chnl_net:caif_netlink_parms(): no params data found
[   69.638022][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.646966][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.655565][ T4182] device bridge_slave_0 entered promiscuous mode
[   69.680482][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.687677][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.696587][ T4195] device bridge_slave_0 entered promiscuous mode
[   69.716326][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.723581][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.731586][ T4182] device bridge_slave_1 entered promiscuous mode
[   69.756044][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.763481][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.771826][ T4195] device bridge_slave_1 entered promiscuous mode
[   69.799266][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.806719][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.815179][ T4189] device bridge_slave_0 entered promiscuous mode
[   69.822748][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.830310][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.838764][ T4193] device bridge_slave_0 entered promiscuous mode
[   69.868030][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.876133][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.884315][ T4189] device bridge_slave_1 entered promiscuous mode
[   69.891692][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.899676][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.908295][ T4193] device bridge_slave_1 entered promiscuous mode
[   69.917901][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.946965][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.974287][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.984510][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.992090][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.000492][ T4183] device bridge_slave_0 entered promiscuous mode
[   70.010786][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.045768][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.053714][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.062213][ T4183] device bridge_slave_1 entered promiscuous mode
[   70.081340][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.092884][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.126283][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.137652][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.150271][ T4195] team0: Port device team_slave_0 added
[   70.169137][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.182314][ T4182] team0: Port device team_slave_0 added
[   70.206762][ T4195] team0: Port device team_slave_1 added
[   70.220523][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.239303][ T4182] team0: Port device team_slave_1 added
[   70.264433][ T4193] team0: Port device team_slave_0 added
[   70.293352][ T4189] team0: Port device team_slave_0 added
[   70.309397][ T4193] team0: Port device team_slave_1 added
[   70.325397][ T4183] team0: Port device team_slave_0 added
[   70.353365][ T4189] team0: Port device team_slave_1 added
[   70.360127][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.367561][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.395909][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.411818][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.419271][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.446866][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.460063][ T4183] team0: Port device team_slave_1 added
[   70.467949][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.475214][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.501829][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.522938][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.531170][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.558012][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.570260][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.578364][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.605735][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.625132][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.632145][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.659246][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.699290][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.706932][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.736492][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.750751][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.758984][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.789289][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.815436][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.825303][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.854691][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.868810][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.876784][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.903887][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.961687][ T4195] device hsr_slave_0 entered promiscuous mode
[   70.969176][ T4195] device hsr_slave_1 entered promiscuous mode
[   70.988971][ T4193] device hsr_slave_0 entered promiscuous mode
[   70.994407][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[   70.995769][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[   71.002628][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   71.009582][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[   71.022112][ T4193] device hsr_slave_1 entered promiscuous mode
[   71.029117][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.037444][ T4193] Cannot create hsr debugfs directory
[   71.063886][ T4182] device hsr_slave_0 entered promiscuous mode
[   71.071710][ T4182] device hsr_slave_1 entered promiscuous mode
[   71.079488][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[   71.086109][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.094594][ T4182] Cannot create hsr debugfs directory
[   71.130196][ T4183] device hsr_slave_0 entered promiscuous mode
[   71.137332][ T4183] device hsr_slave_1 entered promiscuous mode
[   71.145750][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.154251][ T4183] Cannot create hsr debugfs directory
[   71.193605][ T4189] device hsr_slave_0 entered promiscuous mode
[   71.200447][ T4189] device hsr_slave_1 entered promiscuous mode
[   71.207936][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.217919][ T4189] Cannot create hsr debugfs directory
[   71.555934][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.567551][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[   71.574387][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[   71.592933][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.602160][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.614214][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.679622][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.701759][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.715775][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.727162][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.788077][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.806641][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.817568][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.837395][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.856803][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.867722][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.881137][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.898382][ T4193] 8021q: adding VLAN 0 to HW filter on device team0
[   71.943780][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.955063][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.967011][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.974759][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.006034][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.015089][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.026530][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.036301][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.044236][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.052985][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.081472][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.090430][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.109316][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.119426][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.137576][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.149326][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.170409][ T4182] 8021q: adding VLAN 0 to HW filter on device team0
[   72.190455][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.200332][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.208755][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.222585][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.244866][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.254946][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.264266][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.272825][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.281824][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.298622][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.308010][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.316993][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.324141][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.340016][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.351941][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.375351][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.385247][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.394270][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.402705][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.412949][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.424461][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.431797][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.440498][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.481751][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.496466][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.539588][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.555212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.574290][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.583662][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.591827][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.601462][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.612103][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   72.628871][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.637484][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.655018][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.671075][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.694070][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.734751][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.744812][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.754887][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.762054][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.771718][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.779776][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.787780][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.796944][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.805535][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.812608][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.820417][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.847790][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.856795][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.866007][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.877521][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.886961][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.896787][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.916973][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.939503][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.951803][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.961780][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.970489][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.979712][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.989244][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.999143][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.028975][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.039319][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.049406][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.060113][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.075435][ T4240] Bluetooth: hci2: command 0x041b tx timeout
[   73.089307][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[   73.110999][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.113510][ T4233] Bluetooth: hci0: command 0x041b tx timeout
[   73.128358][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.144017][ T4233] Bluetooth: hci3: command 0x041b tx timeout
[   73.145470][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.160854][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.163888][ T4249] Bluetooth: hci4: command 0x041b tx timeout
[   73.179359][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.188973][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.209321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.220591][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.252131][ T4193] device veth0_vlan entered promiscuous mode
[   73.272967][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.319060][ T4193] device veth1_vlan entered promiscuous mode
[   73.355819][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.364858][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.379383][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.388146][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.403891][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.412239][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.436665][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.455419][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   73.467562][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.496560][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.506153][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.515453][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.522529][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.530524][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.539733][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.548692][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.555994][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.568920][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.577309][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.586249][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.598417][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.606611][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.628539][ T4193] device veth0_macvtap entered promiscuous mode
[   73.640724][ T4193] device veth1_macvtap entered promiscuous mode
[   73.650304][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.659670][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.668958][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.678155][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.687681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.695831][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.703869][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.731949][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   73.755750][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.764960][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.774732][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.785079][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.794174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.802956][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.812399][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.819722][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.829015][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.838173][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.865174][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.877289][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.894212][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.902578][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.911107][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.921362][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.931082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.940098][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.950445][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.959545][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.968364][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.977553][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.986506][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.995448][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.005977][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.018633][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.026830][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.036371][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.049761][ T4182] device veth0_vlan entered promiscuous mode
[   74.066491][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.079115][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.088594][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.104354][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.125854][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.133481][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.143705][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.152295][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.159677][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.168970][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.184528][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.239313][ T4182] device veth1_vlan entered promiscuous mode
[   74.256949][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.270047][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.282464][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.292082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.302132][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.321663][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.383993][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.393130][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.402885][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.414748][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.424603][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.441362][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.455999][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.491204][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.512539][ T4182] device veth0_macvtap entered promiscuous mode
[   74.534805][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.551677][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.560403][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.572958][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.581697][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.589586][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.598787][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.608224][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.617758][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.626070][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.634182][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.653998][ T4182] device veth1_macvtap entered promiscuous mode
[   74.667753][ T4189] device veth0_vlan entered promiscuous mode
[   74.702974][ T4189] device veth1_vlan entered promiscuous mode
[   74.724813][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.737575][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.749976][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.774055][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.783639][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.794587][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.804597][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.835847][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.847338][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.859289][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.871896][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.880267][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.888103][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.897451][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.911595][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.925308][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.940318][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.950326][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.962145][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.981969][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.001493][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.017974][ T4183] device veth0_vlan entered promiscuous mode
[   75.032569][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.041012][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.042776][ T4189] device veth0_macvtap entered promiscuous mode
[   75.060131][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.068926][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.078748][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.087662][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.096392][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.105412][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.149895][ T4183] device veth1_vlan entered promiscuous mode
[   75.160959][ T4189] device veth1_macvtap entered promiscuous mode
[   75.169319][ T4248] Bluetooth: hci3: command 0x040f tx timeout
[   75.177098][ T4248] Bluetooth: hci0: command 0x040f tx timeout
[   75.191794][ T4248] Bluetooth: hci1: command 0x040f tx timeout
[   75.199316][ T4248] Bluetooth: hci2: command 0x040f tx timeout
[   75.213019][  T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.243957][ T4278] Bluetooth: hci4: command 0x040f tx timeout
[   75.261330][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.279376][  T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.289364][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.303064][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.315699][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.328174][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.351216][ T4183] device veth0_macvtap entered promiscuous mode
[   75.362480][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.371924][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.386636][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.399895][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.412112][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.422023][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.432195][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.442836][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.457384][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.468802][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.480941][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.491546][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.503553][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.516168][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.539524][ T4183] device veth1_macvtap entered promiscuous mode
[   75.558983][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.572876][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.582827][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.603834][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.611757][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.619973][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.621478][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.632745][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.647918][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.677032][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.727865][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.741345][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.766563][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.777367][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.788467][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.799679][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.814595][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.833988][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.867608][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.868267][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.880344][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.898365][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.909005][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.918449][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.928632][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.937854][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.950577][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.962604][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.972773][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.984479][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.995080][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.012194][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.025242][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.043303][ T4195] device veth0_vlan entered promiscuous mode
[   76.071297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.080735][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.089167][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.098596][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.108742][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.152847][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.194588][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.205087][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.214824][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.246502][ T4195] device veth1_vlan entered promiscuous mode
[   76.393875][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.402317][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   76.411878][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.425975][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.439906][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.454547][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.464534][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.517940][ T4195] device veth0_macvtap entered promiscuous mode
[   76.578808][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.588935][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.610672][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.641729][ T4195] device veth1_macvtap entered promiscuous mode
[   76.656787][ T4308] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   76.700918][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.720048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.741001][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.772630][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.795543][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.823338][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.850713][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.888492][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.906127][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.924995][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.940699][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.953410][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.966083][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.982646][  T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.005657][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.013753][  T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.028643][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.069923][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.112863][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.136822][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.157613][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.182105][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.212182][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.228268][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.239949][ T4249] Bluetooth: hci2: command 0x0419 tx timeout
[   77.264583][ T4249] Bluetooth: hci1: command 0x0419 tx timeout
[   77.275324][ T4249] Bluetooth: hci0: command 0x0419 tx timeout
[   77.277206][ T4327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   77.288024][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.311243][ T4249] Bluetooth: hci3: command 0x0419 tx timeout
[   77.330945][ T4278] Bluetooth: hci4: command 0x0419 tx timeout
[   77.363219][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.389831][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.419149][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.483010][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.498832][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.551026][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.561935][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.576936][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.802412][ T4346] bridge0: port 3(ip6gretap1) entered blocking state
[   77.826538][ T4346] bridge0: port 3(ip6gretap1) entered disabled state
[   77.846670][ T4346] device ip6gretap1 entered promiscuous mode
[   77.891713][  T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.932757][  T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.003138][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.082631][  T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.114792][  T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.138571][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.425973][ T4376] loop1: detected capacity change from 0 to 128
[   78.491529][ T4372] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   78.557142][ T4374] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   78.683331][ T4376] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   78.703523][ T4376] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   78.934875][ T4388] loop4: detected capacity change from 0 to 1024
[   79.085428][ T4386] device syzkaller0 entered promiscuous mode
[   79.254290][ T4388] loop4: detected capacity change from 1024 to 64
[   79.350140][ T4195] hfsplus: bad catalog entry type
[   79.547323][ T4399] kvm: pic: level sensitive irq not supported
[   79.547541][ T4399] kvm: pic: non byte read
[   79.600359][ T4399] kvm: pic: level sensitive irq not supported
[   79.600426][ T4399] kvm: pic: non byte read
[   79.621167][ T4399] kvm: pic: level sensitive irq not supported
[   79.621262][ T4399] kvm: pic: non byte read
[   79.656298][ T4399] kvm: pic: level sensitive irq not supported
[   79.656381][ T4399] kvm: pic: non byte read
[   79.681596][ T4399] kvm: pic: level sensitive irq not supported
[   79.681678][ T4399] kvm: pic: non byte read
[   79.696528][ T4399] kvm: pic: level sensitive irq not supported
[   79.696596][ T4399] kvm: pic: non byte read
[   79.732881][ T4399] kvm: pic: level sensitive irq not supported
[   79.732952][ T4399] kvm: pic: non byte read
[   79.751277][ T4399] kvm: pic: level sensitive irq not supported
[   79.751347][ T4399] kvm: pic: non byte read
[   79.763697][ T4399] kvm: pic: level sensitive irq not supported
[   79.763759][ T4399] kvm: pic: non byte read
[   80.013249][ T4418] loop1: detected capacity change from 0 to 16
[   80.077754][  T144] attempt to access beyond end of device
[   80.077754][  T144] loop4: rw=1, want=208, limit=64
[   80.097838][ T4418] erofs: (device loop1): mounted with root inode @ nid 36.
[   80.111662][  T144] Buffer I/O error on dev loop4, logical block 103, lost async page write
[   80.128781][  T144] attempt to access beyond end of device
[   80.128781][  T144] loop4: rw=1, want=210, limit=64
[   80.171574][ T4190] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -16 in[46, 4050] out[9000]
[   80.215185][ T4418] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -16 in[46, 4050] out[4096]
[   80.232952][  T144] Buffer I/O error on dev loop4, logical block 104, lost async page write
[   80.236722][   T26] audit: type=1800 audit(1754468033.869:2): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.34" name="file2" dev="loop1" ino=89 res=0 errno=0
[   80.241812][  T144] attempt to access beyond end of device
[   80.241812][  T144] loop4: rw=1, want=212, limit=64
[   80.272299][  T144] Buffer I/O error on dev loop4, logical block 105, lost async page write
[   80.281599][  T144] attempt to access beyond end of device
[   80.281599][  T144] loop4: rw=1, want=214, limit=64
[   80.292444][  T144] Buffer I/O error on dev loop4, logical block 106, lost async page write
[   80.314537][  T144] hfsplus: b-tree write err: -5, ino 4
[   80.328731][  T144] attempt to access beyond end of device
[   80.328731][  T144] loop4: rw=2049, want=208, limit=64
[   80.346056][  T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.354619][  T144] Buffer I/O error on dev loop4, logical block 103, lost async page write
[   80.391763][  T144] attempt to access beyond end of device
[   80.391763][  T144] loop4: rw=2049, want=210, limit=64
[   80.421880][  T144] Buffer I/O error on dev loop4, logical block 104, lost async page write
[   80.448082][  T144] attempt to access beyond end of device
[   80.448082][  T144] loop4: rw=2049, want=212, limit=64
[   80.461086][ T4426] tipc: Started in network mode
[   80.469229][ T4429] loop0: detected capacity change from 0 to 1024
[   80.478816][ T4426] tipc: Node identity 62ada0ce1d7a, cluster identity 4711
[   80.481672][  T144] Buffer I/O error on dev loop4, logical block 105, lost async page write
[   80.555339][  T144] attempt to access beyond end of device
[   80.555339][  T144] loop4: rw=2049, want=214, limit=64
[   80.570523][ T4429] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,abort,dioread_lock,jqfmt=vfsv0,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[   80.592089][ T4426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.613308][  T144] Buffer I/O error on dev loop4, logical block 106, lost async page write
[   80.653510][ T4195] attempt to access beyond end of device
[   80.653510][ T4195] loop4: rw=2049, want=1023, limit=64
[   80.671204][ T4427] device syzkaller0 entered promiscuous mode
[   80.797170][  T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.905051][ T4419] tipc: Resetting bearer <eth:syzkaller0>
[   81.016418][ T4419] tipc: Disabling bearer <eth:syzkaller0>
[   81.136478][  T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.286592][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.421660][ T4455] syz.2.45 uses obsolete (PF_INET,SOCK_PACKET)
[   81.851537][ T4467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer.
[   82.056421][ T4472] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   82.639316][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'.
[   82.684953][ T4494] device bridge_slave_1 left promiscuous mode
[   82.692704][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.762769][ T4494] device bridge_slave_0 left promiscuous mode
[   82.784146][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.974691][ T4506] netlink: 'syz.2.64': attribute type 4 has an invalid length.
[   82.998255][ T4460] chnl_net:caif_netlink_parms(): no params data found
[   83.014554][ T4516] tipc: Started in network mode
[   83.020590][ T4516] tipc: Node identity 028ef99c811f, cluster identity 4711
[   83.032585][ T4516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.198379][ T4518] device syzkaller0 entered promiscuous mode
[   83.222872][ T4523] kvm [4522]: vcpu0, guest rIP: 0x97 disabled perfctr wrmsr: 0xc1 data 0x0
[   83.258408][ T4523] kvm [4522]: vcpu0, guest rIP: 0x97 disabled perfctr wrmsr: 0xc2 data 0x0
[   83.298239][ T4523] kvm [4522]: vcpu0, guest rIP: 0x97 ignored wrmsr: 0x11e data 0x0
[   83.328293][ T4494] syz.0.53 (4494) used greatest stack depth: 20808 bytes left
[   83.414966][ T4507] tipc: Resetting bearer <eth:syzkaller0>
[   83.446568][ T4533] loop0: detected capacity change from 0 to 512
[   83.470598][ T4507] tipc: Disabling bearer <eth:syzkaller0>
[   83.534279][ T4532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   83.616513][ T4533] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback.
[   83.671579][ T4533] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.719150][ T4240] Bluetooth: hci4: command 0x0409 tx timeout
[   83.761080][ T4543] loop1: detected capacity change from 0 to 4096
[   83.768728][ T4460] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.803955][ T4543] EXT4-fs (loop1): Test dummy encryption mode enabled
[   83.809820][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.831272][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[   83.834869][ T4545] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   83.876304][ T4460] device bridge_slave_0 entered promiscuous mode
[   83.946450][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.961178][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.969758][ T4460] device bridge_slave_1 entered promiscuous mode
[   84.002011][   T26] audit: type=1800 audit(1754468037.629:3): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.61" name="bus" dev="loop0" ino=18 res=0 errno=0
[   84.092694][ T4460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.309009][ T4560] loop0: detected capacity change from 0 to 512
[   84.335066][ T4460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.365142][ T4543] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   84.440557][ T4560] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.65: iget: bad i_size value: 38620345925642
[   84.551775][ T4551] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[   84.634889][ T4551] overlayfs: upper fs does not support tmpfile.
[   84.642148][ T4560] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.65: couldn't read orphan inode 15 (err -117)
[   84.660172][ T4460] team0: Port device team_slave_0 added
[   84.701838][ T4551] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4
[   84.725309][ T4560] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   84.811304][ T4460] team0: Port device team_slave_1 added
[   84.829626][ T4560] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.65: iget: bad i_size value: 38620345925642
[   84.885679][ T4585] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   84.886921][ T4560] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.65: iget: bad i_size value: 38620345925642
[   84.952643][  T154] device hsr_slave_0 left promiscuous mode
[   84.962742][  T154] device hsr_slave_1 left promiscuous mode
[   84.988511][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.030700][ T4590] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.65: iget: bad i_size value: 38620345925642
[   85.043344][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.054282][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.062364][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.109994][  T154] device bridge_slave_1 left promiscuous mode
[   85.120027][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.242300][ T4601] loop3: detected capacity change from 0 to 512
[   85.278226][ T4600] loop1: detected capacity change from 0 to 512
[   85.278698][  T154] device bridge_slave_0 left promiscuous mode
[   85.303524][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.367896][  T154] device veth1_macvtap left promiscuous mode
[   85.386497][ T4600] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   85.400762][ T4600] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   85.404310][ T4601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   85.423989][  T154] device veth0_macvtap left promiscuous mode
[   85.430819][  T154] device veth1_vlan left promiscuous mode
[   85.487717][ T4601] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.517902][  T154] device veth0_vlan left promiscuous mode
[   85.532694][ T4600] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000]
[   85.649057][ T4600] EXT4-fs (loop1): 1 truncate cleaned up
[   85.670498][ T4293] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[   85.681821][ T4600] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[   85.698565][ T4621] loop0: detected capacity change from 0 to 512
[   85.743438][ T4293] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 1
[   85.811791][ T4186] Bluetooth: hci4: command 0x041b tx timeout
[   86.034012][ T4629] block device autoloading is deprecated and will be removed.
[   86.168944][ T4630] loop2: detected capacity change from 0 to 2048
[   86.285846][ T4630] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.385476][ T4639] loop3: detected capacity change from 0 to 2048
[   86.411307][ T4642] loop0: detected capacity change from 0 to 512
[   86.472305][ T4183] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   86.529455][ T4639] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.558441][ T4183] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   86.635813][  T154] team0 (unregistering): Port device team_slave_1 removed
[   86.658464][  T154] team0 (unregistering): Port device team_slave_0 removed
[   86.680569][ T4642] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.85: corrupted inode contents
[   86.745289][ T4642] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.85: mark_inode_dirty error
[   86.789157][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.804688][ T4642] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.85: corrupted inode contents
[   86.885588][ T4642] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.85: mark_inode_dirty error
[   86.916212][ T1324] cfg80211: failed to load regulatory.db
[   86.928365][ T4658] loop3: detected capacity change from 0 to 512
[   86.973533][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.999367][ T4642] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.85: corrupted inode contents
[   87.004882][ T4658] =======================================================
[   87.004882][ T4658] WARNING: The mand mount option has been deprecated and
[   87.004882][ T4658]          and is ignored by this kernel. Remove the mand
[   87.004882][ T4658]          option from the mount to silence this warning.
[   87.004882][ T4658] =======================================================
[   87.051059][ T4642] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   87.077554][ T4664] loop1: detected capacity change from 0 to 128
[   87.098666][ T4642] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.85: corrupted inode contents
[   87.146657][ T4642] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.85: mark_inode_dirty error
[   87.181898][ T4658] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   87.260066][ T4642] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   87.286027][ T4658] block device autoloading is deprecated and will be removed.
[   87.309436][ T4658] EXT4-fs (loop3): couldn't read superblock of external journal
[   87.324194][ T4642] EXT4-fs (loop0): 1 truncate cleaned up
[   87.347062][ T4642] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   87.405305][ T4642] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.472257][ T4666] loop1: detected capacity change from 0 to 512
[   87.518647][  T154] bond0 (unregistering): Released all slaves
[   87.535453][ T4666] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   87.558764][ T4642] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.85: iget: bad i_size value: 360287970189639690
[   87.616224][ T4666] EXT4-fs (loop1): 1 truncate cleaned up
[   87.644453][ T4666] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[   87.742837][ T4666] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.92: corrupted in-inode xattr
[   87.819108][ T4666] EXT4-fs (loop1): Remounting filesystem read-only
[   87.862170][ T4666] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1760: inode #15: comm syz.1.92: unable to update i_inline_off
[   87.866856][ T4460] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.889589][ T4674] loop0: detected capacity change from 0 to 512
[   87.901218][   T13] Bluetooth: hci4: command 0x040f tx timeout
[   87.908311][ T4460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.908344][ T4460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.922548][ T4460] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.980158][ T4666] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   88.046165][ T4674] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   88.073963][ T4674] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.087678][ T4460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.140836][   T26] audit: type=1326 audit(1754468041.769:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.2.95" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd64524be9 code=0x0
[   88.165406][ T4460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.230963][ T4674] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.94: Directory hole found for htree leaf block 0
[   88.231429][ T4666] syz.1.92 (4666) used greatest stack depth: 20360 bytes left
[   88.319775][ T4679] /dev/loop0: Can't open blockdev
[   88.342191][ T4460] device hsr_slave_0 entered promiscuous mode
[   88.386684][ T4460] device hsr_slave_1 entered promiscuous mode
[   88.789647][ T4697] loop3: detected capacity change from 0 to 512
[   88.856006][ T4697] EXT4-fs (loop3): Ignoring removed orlov option
[   88.892308][ T4697] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   88.989351][ T4697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[   89.022555][ T4697] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.99: corrupted in-inode xattr
[   89.062386][ T4697] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.99: couldn't read orphan inode 15 (err -117)
[   89.109843][ T4708] loop0: detected capacity change from 0 to 512
[   89.123650][ T4697] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   89.198746][ T4460] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   89.203392][ T4713] loop1: detected capacity change from 0 to 512
[   89.233210][ T4708] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   89.243467][ T4460] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   89.266200][ T4708] EXT4-fs (loop0): invalid journal inode
[   89.272234][ T4708] EXT4-fs (loop0): can't get journal size
[   89.299843][ T4460] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   89.330271][ T4460] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   89.332403][ T4713] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   89.357969][ T4708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[   89.416368][ T4708] System zones: 1-12, 13-13
[   89.514452][ T4708] EXT4-fs (loop0): 1 truncate cleaned up
[   89.573920][ T4708] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[   89.621182][ T4713] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   89.635061][ T4726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1268758650 (2537517300 ns) > initial count (625258754 ns). Using initial count to start timer.
[   89.727671][ T4713] FAT-fs (loop1): Filesystem has been set read-only
[   89.777546][ T4460] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.791118][ T4729] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   89.911907][ T4460] 8021q: adding VLAN 0 to HW filter on device team0
[   89.923669][ T4708] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[   89.942619][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.980504][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.006650][ T4735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   90.036900][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[   90.051185][ T4737] loop3: detected capacity change from 0 to 512
[   90.106927][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.123908][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.132539][ T4737] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   90.164321][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.166761][ T4739] loop1: detected capacity change from 0 to 512
[   90.171619][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.189430][ T4193] EXT4-fs error (device loop0): __ext4_iget:4894: inode #11: block 1828716567: comm syz-executor: invalid block
[   90.215074][ T4193] EXT4-fs error (device loop0): __ext4_iget:4894: inode #11: block 1828716567: comm syz-executor: invalid block
[   90.229011][ T4737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   90.258948][ T4737] EXT4-fs (loop3): orphan cleanup on readonly fs
[   90.336378][ T4737] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.107: bad orphan inode 267
[   90.349505][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.406249][ T4737] EXT4-fs (loop3): Remounting filesystem read-only
[   90.411228][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.453729][ T4737] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none.
[   90.492501][ T4739] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.510331][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.518159][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.552403][ T4739] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.576344][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.587812][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.732431][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.783101][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.831306][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.879061][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.921906][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.959456][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.006941][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.076063][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.145820][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.195220][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.399536][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.429000][ T4761] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   91.549605][ T4761] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   91.678790][ T4776] loop3: detected capacity change from 0 to 1024
[   91.753368][ T4776] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   91.861248][ T4776] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[   91.924045][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.934168][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   92.038079][ T4460] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.304209][ T4789] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns
[   92.526578][ T4786] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   92.591264][ T4786] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   92.925922][ T4793] chnl_net:caif_netlink_parms(): no params data found
[   93.129393][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.150074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.384861][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.411517][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.432077][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.451342][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.466119][ T4825] loop1: detected capacity change from 0 to 512
[   93.505252][ T4460] device veth0_vlan entered promiscuous mode
[   93.525239][ T4793] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.543503][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.552093][ T4793] device bridge_slave_0 entered promiscuous mode
[   93.582026][ T4828] loop3: detected capacity change from 0 to 512
[   93.596862][ T4825] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   93.628530][ T4793] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.665251][ T4828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   93.698858][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.709470][ T4793] device bridge_slave_1 entered promiscuous mode
[   93.786547][ T4828] EXT4-fs (loop3): 1 truncate cleaned up
[   93.792287][ T4828] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[   93.831938][ T4460] device veth1_vlan entered promiscuous mode
[   93.899914][ T4793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.970437][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.987155][ T4828] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none.
[   93.994702][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   94.034351][ T4793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.064922][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.084699][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.146378][ T4460] device veth0_macvtap entered promiscuous mode
[   94.193489][ T4186] Bluetooth: hci3: command 0x0409 tx timeout
[   94.277431][ T4460] device veth1_macvtap entered promiscuous mode
[   94.374232][ T4793] team0: Port device team_slave_0 added
[   94.434903][ T4793] team0: Port device team_slave_1 added
[   94.543675][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.596085][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.648441][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.693740][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.728716][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.763307][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.774414][ T4854] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   94.783564][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.795552][ T4854] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   94.804524][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.832965][ T4460] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.876616][  T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.907166][ T4793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.923443][ T4793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.000143][ T4793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.029200][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   95.074182][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.115503][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.140092][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.224477][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.246427][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.323255][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.355089][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.371356][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.386300][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.397142][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.409001][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.420934][ T4460] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.455745][  T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.527168][ T4793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.547000][ T4793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.548969][ T4880] loop2: detected capacity change from 0 to 7
[   95.592928][ T4793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.604145][ T4402] Dev loop2: unable to read RDB block 7
[   95.610310][ T4402]  loop2: AHDI p1 p2 p3
[   95.617794][ T4402] loop2: partition table partially beyond EOD, truncated
[   95.627247][ T4876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'.
[   95.630158][ T4402] loop2: p1 start 1601398130 is beyond EOD, truncated
[   95.644424][ T4402] loop2: p2 start 1702059890 is beyond EOD, truncated
[   95.666760][ T4876] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   95.683334][ T4880] Dev loop2: unable to read RDB block 7
[   95.689056][ T4880]  loop2: AHDI p1 p2 p3
[   95.693661][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.724626][ T4880] loop2: partition table partially beyond EOD, truncated
[   95.727532][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.735621][ T4880] loop2: p1 start 1601398130 is beyond EOD, truncated
[   95.780038][ T4460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.806258][ T4460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.834681][ T4880] loop2: p2 start 1702059890 is beyond EOD, truncated
[   95.861395][ T4460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.890758][ T4460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.925973][  T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.016034][ T4885] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   96.042128][ T4885] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   96.094162][ T4887] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   96.132140][ T4887] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   96.150864][ T4890] loop1: detected capacity change from 0 to 512
[   96.162274][  T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.196359][ T4890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.236878][ T4890] EXT4-fs (loop1): 1 truncate cleaned up
[   96.275611][ T4186] Bluetooth: hci3: command 0x041b tx timeout
[   96.286825][ T4890] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[   96.310956][ T4793] device hsr_slave_0 entered promiscuous mode
[   96.360989][ T4793] device hsr_slave_1 entered promiscuous mode
[   96.388453][ T4793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.424022][ T4793] Cannot create hsr debugfs directory
[   96.513982][ T4182] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   96.705471][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.751171][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.777179][ T4901] loop2: detected capacity change from 0 to 512
[   96.890713][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   96.971773][ T4901] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback.
[   97.008523][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.056208][ T4901] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.082892][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.114288][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.303015][ T4793] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   97.387290][ T4793] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   97.436862][ T4793] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   97.543457][ T4793] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   98.716780][ T4186] Bluetooth: hci3: command 0x040f tx timeout
[   99.119867][ T4793] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.129955][   T26] audit: type=1326 audit(1754468052.759:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.214159][ T4793] 8021q: adding VLAN 0 to HW filter on device team0
[   99.227749][   T26] audit: type=1326 audit(1754468052.789:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.259039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   99.259810][   T26] audit: type=1326 audit(1754468052.789:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.289625][   T26] audit: type=1326 audit(1754468052.789:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.291272][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.317792][   T26] audit: type=1326 audit(1754468052.789:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.383216][   T26] audit: type=1326 audit(1754468052.789:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.435022][ T4964] netlink: 32 bytes leftover after parsing attributes in process `syz.5.159'.
[   99.475753][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   99.504457][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.508671][   T26] audit: type=1326 audit(1754468052.789:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.553425][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.562201][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.618079][   T26] audit: type=1326 audit(1754468052.789:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.649079][   T26] audit: type=1326 audit(1754468052.789:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcc00cbe9 code=0x7ffc0000
[   99.679959][   T26] audit: type=1326 audit(1754468052.789:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3dcc00b550 code=0x7ffc0000
[   99.695085][ T4989] loop5: detected capacity change from 0 to 1024
[   99.792877][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   99.819561][ T4993] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[   99.838175][ T4993] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   99.844294][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   99.951152][ T4998] loop3: detected capacity change from 0 to 128
[   99.970450][ T4989] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   99.982291][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   99.991931][ T4989] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.031335][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.033750][ T4240] Bluetooth: hci0: command 0x0409 tx timeout
[  100.038522][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.062173][ T4998] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.094283][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  100.202467][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  100.257252][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  100.272538][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  100.285268][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  100.490935][ T5013] loop2: detected capacity change from 0 to 512
[  100.504489][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  100.530473][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  100.540046][ T5015] overlayfs: conflicting options: metacopy=on,redirect_dir=off
[  100.540122][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  100.557072][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  100.578205][ T5013] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  100.599942][ T4793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.622703][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  100.642706][ T5013] EXT4-fs (loop2): 1 truncate cleaned up
[  100.669732][ T5013] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  100.694315][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  100.724122][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.796233][ T4186] Bluetooth: hci3: command 0x0419 tx timeout
[  100.842637][  T154] device hsr_slave_0 left promiscuous mode
[  100.865184][  T154] device hsr_slave_1 left promiscuous mode
[  100.891158][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.923391][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.996260][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.025878][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.110336][  T154] device veth1_macvtap left promiscuous mode
[  101.116702][  T154] device veth0_macvtap left promiscuous mode
[  101.138193][  T154] device veth1_vlan left promiscuous mode
[  101.144781][  T154] device veth0_vlan left promiscuous mode
[  101.295697][ T5007] loop3: detected capacity change from 0 to 128
[  101.748333][  T154] team0 (unregistering): Port device team_slave_1 removed
[  101.781906][  T154] team0 (unregistering): Port device team_slave_0 removed
[  101.808976][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.839495][ T5034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  101.886556][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.942172][ T5036] loop2: detected capacity change from 0 to 128
[  102.039480][ T5036] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  102.096126][  T154] bond0 (unregistering): Released all slaves
[  102.113571][ T4232] Bluetooth: hci0: command 0x041b tx timeout
[  102.157567][ T4945] chnl_net:caif_netlink_parms(): no params data found
[  102.472564][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.490107][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.581076][ T4793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.713363][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.721173][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.795149][ T4945] device bridge_slave_0 entered promiscuous mode
[  102.850105][ T5060] loop3: detected capacity change from 0 to 512
[  102.851752][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.940541][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.966269][ T4945] device bridge_slave_1 entered promiscuous mode
[  102.978896][ T5060] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback.
[  103.013448][ T5060] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.101937][ T5075] loop5: detected capacity change from 0 to 1024
[  103.140791][ T5075] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  103.232612][ T5075] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,nomblk_io_submit,auto_da_alloc,minixdf,,errors=continue. Quota mode: none.
[  103.267968][ T4945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.408974][ T4945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.468526][ T5087] loop3: detected capacity change from 0 to 256
[  103.660432][ T4945] team0: Port device team_slave_0 added
[  103.746819][ T4945] team0: Port device team_slave_1 added
[  103.909819][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  103.954447][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.982842][ T5094] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  103.992405][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.001448][ T5094] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  104.018880][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.171390][ T4945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.198452][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.205843][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.206414][ T4186] Bluetooth: hci0: command 0x040f tx timeout
[  104.233564][ T4945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.365538][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.391248][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.415275][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.467260][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.544685][ T4793] device veth0_vlan entered promiscuous mode
[  104.779025][ T4945] device hsr_slave_0 entered promiscuous mode
[  104.806958][ T4945] device hsr_slave_1 entered promiscuous mode
[  104.830800][ T4945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.863053][ T4945] Cannot create hsr debugfs directory
[  104.898811][ T4793] device veth1_vlan entered promiscuous mode
[  105.158943][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.204035][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.261656][ T4793] device veth0_macvtap entered promiscuous mode
[  105.339319][ T4793] device veth1_macvtap entered promiscuous mode
[  105.391869][ T5135] loop2: detected capacity change from 0 to 2368
[  105.410469][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.454129][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.488027][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.530563][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.577636][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.619909][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.639048][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.673896][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.686606][ T5146] loop3: detected capacity change from 0 to 128
[  105.720601][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.740049][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.761942][ T4793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.830394][ T5146] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback.
[  105.840576][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.859403][ T5135] loop2: detected capacity change from 0 to 512
[  105.871345][ T5146] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.890651][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.939951][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.994599][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.027970][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.070505][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.085239][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.102916][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.132218][ T4793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.174662][ T5135] FAT-fs (loop2): Unrecognized mount option "shortnameŇęeŽ95" or missing value
[  106.196409][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.226126][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.283717][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.354617][ T4186] Bluetooth: hci0: command 0x0419 tx timeout
[  106.365931][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.391933][ T4793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.464721][ T4793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.522537][ T4793] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.553262][ T4793] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.817246][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.817314][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.822773][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.875035][ T4945] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  106.970401][ T4945] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  106.973792][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.007552][ T4945] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  107.073293][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.102231][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.163385][ T4945] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  107.609336][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.682490][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.704425][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.716740][ T4945] 8021q: adding VLAN 0 to HW filter on device team0
[  107.818246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.837815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  107.923521][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.930661][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.027203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.116823][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.144084][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.151236][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.200673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.243382][ T5226] loop2: detected capacity change from 0 to 512
[  108.294917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.334444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  108.371521][ T5231] loop6: detected capacity change from 0 to 256
[  108.419024][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.454617][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.464417][ T5226] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.216: corrupted inode contents
[  108.512866][  T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.578436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.598442][ T5226] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #16: comm syz.2.216: mark_inode_dirty error
[  108.615796][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.644429][ T5226] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.216: corrupted inode contents
[  108.665284][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.676815][ T5226] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.216: mark_inode_dirty error
[  108.704834][  T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.728549][ T5226] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.216: corrupted inode contents
[  108.764938][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.802326][ T5226] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  108.812488][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  108.834030][ T5240] loop6: detected capacity change from 0 to 512
[  108.838705][ T5226] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.216: corrupted inode contents
[  108.855799][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  108.874484][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  108.895911][ T5226] EXT4-fs error (device loop2): ext4_truncate:4273: inode #16: comm syz.2.216: mark_inode_dirty error
[  108.926948][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  108.927044][ T5240] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  108.951550][ T5226] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  108.963417][ T5240] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.998995][  T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.071261][ T5226] EXT4-fs (loop2): 1 truncate cleaned up
[  109.115693][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.123433][ T5226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.215415][ T5226] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.331931][ T5226] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.216: iget: bad i_size value: 360287970189639690
[  109.399119][ T5248] loop6: detected capacity change from 0 to 256
[  109.456114][ T5251] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.216: iget: bad i_size value: 360287970189639690
[  109.618973][ T5248] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  109.671347][  T154] device ip6gretap1 left promiscuous mode
[  109.713092][  T154] bridge0: port 3(ip6gretap1) entered disabled state
[  109.820012][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  109.853917][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  109.937916][ T4945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.392911][ T5290] loop2: detected capacity change from 0 to 256
[  110.848054][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  110.866620][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  110.920801][ T5311] loop5: detected capacity change from 0 to 2048
[  111.012495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  111.035062][ T5311] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  111.035220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  111.061733][ T4945] device veth0_vlan entered promiscuous mode
[  111.070407][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  111.081249][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  111.101996][   T26] kauditd_printk_skb: 27 callbacks suppressed
[  111.102011][   T26] audit: type=1800 audit(1754468064.729:42): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.235" name="bus" dev="loop5" ino=18 res=0 errno=0
[  111.121224][ T4945] device veth1_vlan entered promiscuous mode
[  111.213201][ T5311] EXT4-fs (loop5): shut down requested (0)
[  111.349459][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  111.365530][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  111.398915][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  111.409888][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  111.507912][ T4945] device veth0_macvtap entered promiscuous mode
[  111.731734][  T154] device hsr_slave_0 left promiscuous mode
[  111.745502][  T154] device hsr_slave_1 left promiscuous mode
[  111.752110][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.760835][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.769020][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.788796][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.808992][  T154] device bridge_slave_1 left promiscuous mode
[  111.825983][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.855900][  T154] device bridge_slave_0 left promiscuous mode
[  111.862587][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.901319][  T154] device veth1_macvtap left promiscuous mode
[  111.927102][  T154] device veth0_macvtap left promiscuous mode
[  111.942794][  T154] device veth1_vlan left promiscuous mode
[  111.951648][  T154] device veth0_vlan left promiscuous mode
[  112.038394][ T5350] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  112.049862][ T5350] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  112.828016][  T154] team0 (unregistering): Port device team_slave_1 removed
[  112.878130][  T154] team0 (unregistering): Port device team_slave_0 removed
[  112.946300][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.993239][ T5390] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  113.001563][ T5390] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  113.026503][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.260739][  T154] bond0 (unregistering): Released all slaves
[  113.328738][ T5407] loop2: detected capacity change from 0 to 512
[  113.378664][ T5407] EXT4-fs (loop2): Ignoring removed bh option
[  113.406229][ T5407] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  113.442752][ T4945] device veth1_macvtap entered promiscuous mode
[  113.463948][ T5407] EXT4-fs (loop2): 1 truncate cleaned up
[  113.469843][ T5407] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  113.491074][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  113.509934][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  113.551069][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.589871][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.619902][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.632348][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.670215][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.709752][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.751898][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.772567][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.812218][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.832251][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  113.857603][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  113.988983][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.037233][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.068146][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.082845][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.095143][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.110635][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.148525][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.180285][ T5439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  114.211645][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.223767][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.334134][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.358832][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.386063][ T4945] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.398724][ T4945] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.412661][ T5442] loop6: detected capacity change from 0 to 1024
[  114.415066][ T4945] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.442131][ T4945] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.500621][ T5442] EXT4-fs (loop6): Ignoring removed oldalloc option
[  114.617256][ T5442] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  114.718779][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.751316][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.770501][ T5452] loop3: detected capacity change from 0 to 1024
[  114.864399][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  114.879046][ T5452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  114.939631][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.956021][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.975399][ T5452] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.025772][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  115.067051][ T5461] loop6: detected capacity change from 0 to 1024
[  115.091414][   T26] audit: type=1800 audit(1754468324.714:43): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.271" name="file1" dev="loop3" ino=15 res=0 errno=0
[  115.121367][ T5452] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.271: lblock 0 mapped to illegal pblock 0 (length 1)
[  115.179009][ T5461] EXT4-fs (loop6): Ignoring removed bh option
[  115.232671][ T5452] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.271: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  115.266072][ T5470] loop5: detected capacity change from 0 to 256
[  115.306490][ T5461] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  115.487136][   T26] audit: type=1800 audit(1754468325.114:44): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.273" name="file1" dev="loop6" ino=15 res=0 errno=0
[  115.760324][ T5486] loop7: detected capacity change from 0 to 256
[  116.119002][ T5502] loop6: detected capacity change from 0 to 2048
[  116.174994][ T5508] loop7: detected capacity change from 0 to 1024
[  116.191856][ T5512] loop3: detected capacity change from 0 to 128
[  116.329157][ T5502] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.353393][ T5512] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none.
[  116.393442][ T5508] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.404719][ T5512] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.438244][ T5508] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.460772][ T5521] loop5: detected capacity change from 0 to 1024
[  116.490591][   T26] audit: type=1800 audit(1754468326.114:45): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.282" name="bus" dev="loop6" ino=18 res=0 errno=0
[  116.530715][ T5521] EXT4-fs (loop5): Ignoring removed oldalloc option
[  116.653238][   T26] audit: type=1800 audit(1754468326.144:46): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.282" name="bus" dev="loop6" ino=18 res=0 errno=0
[  116.656000][ T5502] EXT4-fs (loop6): shut down requested (0)
[  116.708567][ T5521] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  116.868095][ T5534] loop2: detected capacity change from 0 to 128
[  117.078268][ T5534] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none.
[  117.131574][ T5534] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.772082][ T5571] loop6: detected capacity change from 0 to 16
[  117.844573][ T5571] erofs: (device loop6): mounted with root inode @ nid 36.
[  117.969928][ T5563] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  118.014208][ T5563] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  118.041212][ T5581] loop3: detected capacity change from 0 to 512
[  118.157429][ T5585] loop6: detected capacity change from 0 to 512
[  118.211780][ T5585] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  118.252537][ T5578] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  118.284691][ T5578] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  118.313305][ T5585] EXT4-fs (loop6): group descriptors corrupted!
[  118.408979][ T5590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  118.656810][ T5598] loop6: detected capacity change from 0 to 1024
[  118.765531][ T5602] loop7: detected capacity change from 0 to 512
[  118.777579][ T5598] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6)
[  118.868862][ T5598] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  118.899148][ T5598] EXT4-fs error (device loop6): ext4_acquire_dquot:6207: comm syz.6.305: Failed to acquire dquot type 0
[  118.951154][ T5598] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  119.002259][ T5614] loop5: detected capacity change from 0 to 2048
[  119.013269][ T5598] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #13: comm syz.6.305: corrupted inode contents
[  119.038266][ T5602] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[  119.056229][ T5598] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #13: comm syz.6.305: mark_inode_dirty error
[  119.084661][ T5602] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.160364][ T5598] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #13: comm syz.6.305: corrupted inode contents
[  119.162056][ T5614] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none.
[  119.263479][ T5598] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #13: comm syz.6.305: mark_inode_dirty error
[  119.388940][ T5598] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #13: comm syz.6.305: corrupted inode contents
[  119.429563][ T5598] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  119.451306][ T5633] loop7: detected capacity change from 0 to 512
[  119.475238][ T5614] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.309: bg 0: block 2: invalid block bitmap
[  119.508890][ T5598] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #13: comm syz.6.305: corrupted inode contents
[  119.567776][ T5633] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  119.615476][ T5598] EXT4-fs error (device loop6): ext4_truncate:4273: inode #13: comm syz.6.305: mark_inode_dirty error
[  119.628681][ T5614] EXT4-fs (loop5): Remounting filesystem read-only
[  119.633556][ T5633] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.738647][ T5598] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  119.803438][ T5598] EXT4-fs (loop6): 1 truncate cleaned up
[  119.809292][ T5598] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  119.967471][ T5598] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6)
[  120.061025][ T5598] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  120.162735][ T5598] EXT4-fs error (device loop6): ext4_acquire_dquot:6207: comm syz.6.305: Failed to acquire dquot type 0
[  120.575264][ T5654] loop3: detected capacity change from 0 to 8192
[  120.709589][ T5665] device team_slave_0 entered promiscuous mode
[  120.733108][ T5669] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer.
[  120.763983][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  120.823346][ T5675] ------------[ cut here ]------------
[  120.850491][ T5675] WARNING: CPU: 0 PID: 5675 at arch/x86/kvm/x86.c:10351 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  120.864481][   T26] audit: type=1326 audit(1754468330.494:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b547be9 code=0x7ffc0000
[  120.927494][ T5675] Modules linked in:
[  120.937231][ T5675] CPU: 0 PID: 5675 Comm: syz.7.322 Not tainted 5.15.189-syzkaller #0
[  120.971486][   T26] audit: type=1326 audit(1754468330.524:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b547be9 code=0x7ffc0000
[  121.005595][ T5677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.323'.
[  121.038336][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  121.067977][ T5675] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  121.121172][ T5675] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c
[  121.160460][   T26] audit: type=1326 audit(1754468330.524:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f595b547be9 code=0x7ffc0000
[  121.213557][   T26] audit: type=1326 audit(1754468330.524:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b547be9 code=0x7ffc0000
[  121.265152][ T5675] RSP: 0018:ffffc9000360fc30 EFLAGS: 00010287
[  121.293280][ T5675] RAX: ffffffff810eefd4 RBX: ffff888060728000 RCX: 0000000000080000
[  121.310574][ T5675] RDX: ffffc9000f785000 RSI: 000000000000055b RDI: 000000000000055c
[  121.334127][ T5675] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6
[  121.363560][ T5675] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff88802b9e7001
[  121.396689][ T5675] R13: 1ffff1100c0e501e R14: ffff8880607280f0 R15: ffff88802b9e7000
[  121.416717][ T5675] FS:  00007f16fc07b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  121.437359][ T5675] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.465479][ T5675] CR2: 000000110c3016bd CR3: 000000005bbd8000 CR4: 00000000003526f0
[  121.516468][ T5675] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000
[  121.553449][ T5675] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  121.561507][ T5675] Call Trace:
[  121.577431][ T5675]  <TASK>
[  121.580434][ T5675]  ? __lock_acquire+0x7c60/0x7c60
[  121.593360][ T5675]  kvm_vcpu_ioctl+0x887/0xb80
[  121.598245][ T5675]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  121.623318][ T5675]  ? bpf_lsm_file_ioctl+0x5/0x10
[  121.628336][ T5675]  ? security_file_ioctl+0x7c/0xa0
[  121.653313][ T5675]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  121.659229][ T5675]  __se_sys_ioctl+0xfa/0x170
[  121.693355][ T5675]  do_syscall_64+0x4c/0xa0
[  121.697946][ T5675]  ? clear_bhb_loop+0x30/0x80
[  121.702761][ T5675]  ? clear_bhb_loop+0x30/0x80
[  121.745523][ T5675]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  121.751664][ T5675] RIP: 0033:0x7f16fe234be9
[  121.776788][ T5675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.863366][ T5675] RSP: 002b:00007f16fc07b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.871873][ T5675] RAX: ffffffffffffffda RBX: 00007f16fe45c090 RCX: 00007f16fe234be9
[  121.923683][ T5675] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  121.931728][ T5675] RBP: 00007f16fe2b7e19 R08: 0000000000000000 R09: 0000000000000000
[  121.973260][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.981311][ T5675] R13: 00007f16fe45c128 R14: 00007f16fe45c090 R15: 00007fff98675148
[  122.028546][ T5675]  </TASK>
[  122.031659][ T5675] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  122.039089][ T5675] CPU: 0 PID: 5675 Comm: syz.7.322 Not tainted 5.15.189-syzkaller #0
[  122.047199][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  122.057321][ T5675] Call Trace:
[  122.060630][ T5675]  <TASK>
[  122.063656][ T5675]  dump_stack_lvl+0x168/0x230
[  122.068374][ T5675]  ? show_regs_print_info+0x20/0x20
[  122.073614][ T5675]  ? load_image+0x3b0/0x3b0
[  122.078276][ T5675]  panic+0x2c9/0x7f0
[  122.082228][ T5675]  ? bpf_jit_dump+0xd0/0xd0
[  122.086875][ T5675]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  122.092812][ T5675]  __warn+0x248/0x2b0
[  122.096836][ T5675]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  122.102693][ T5675]  report_bug+0x1b7/0x2e0
[  122.107069][ T5675]  handle_bug+0x3a/0x70
[  122.111398][ T5675]  exc_invalid_op+0x16/0x40
[  122.116124][ T5675]  asm_exc_invalid_op+0x16/0x20
[  122.121014][ T5675] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  122.127496][ T5675] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c
[  122.147143][ T5675] RSP: 0018:ffffc9000360fc30 EFLAGS: 00010287
[  122.153257][ T5675] RAX: ffffffff810eefd4 RBX: ffff888060728000 RCX: 0000000000080000
[  122.161262][ T5675] RDX: ffffc9000f785000 RSI: 000000000000055b RDI: 000000000000055c
[  122.169269][ T5675] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6
[  122.177498][ T5675] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff88802b9e7001
[  122.185529][ T5675] R13: 1ffff1100c0e501e R14: ffff8880607280f0 R15: ffff88802b9e7000
[  122.193573][ T5675]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  122.199562][ T5675]  ? __lock_acquire+0x7c60/0x7c60
[  122.204771][ T5675]  kvm_vcpu_ioctl+0x887/0xb80
[  122.209526][ T5675]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  122.215266][ T5675]  ? bpf_lsm_file_ioctl+0x5/0x10
[  122.220358][ T5675]  ? security_file_ioctl+0x7c/0xa0
[  122.225525][ T5675]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  122.231258][ T5675]  __se_sys_ioctl+0xfa/0x170
[  122.236086][ T5675]  do_syscall_64+0x4c/0xa0
[  122.240550][ T5675]  ? clear_bhb_loop+0x30/0x80
[  122.245321][ T5675]  ? clear_bhb_loop+0x30/0x80
[  122.250054][ T5675]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  122.256003][ T5675] RIP: 0033:0x7f16fe234be9
[  122.260465][ T5675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.280201][ T5675] RSP: 002b:00007f16fc07b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.288671][ T5675] RAX: ffffffffffffffda RBX: 00007f16fe45c090 RCX: 00007f16fe234be9
[  122.296695][ T5675] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  122.304870][ T5675] RBP: 00007f16fe2b7e19 R08: 0000000000000000 R09: 0000000000000000
[  122.312886][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.320901][ T5675] R13: 00007f16fe45c128 R14: 00007f16fe45c090 R15: 00007fff98675148
[  122.329012][ T5675]  </TASK>
[  122.332408][ T5675] Kernel Offset: disabled
[  122.336978][ T5675] Rebooting in 86400 seconds..