last executing test programs:

2m2.362683682s ago: executing program 1 (id=569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

1m48.537857182s ago: executing program 1 (id=569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

1m37.354723187s ago: executing program 2 (id=775):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffd, 0x4, @empty, 0x10000}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6ddc, 0x4)
r1 = dup2(r0, r0)
write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46)

1m37.018999022s ago: executing program 2 (id=777):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m36.921959509s ago: executing program 2 (id=780):
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f00000020c0)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES8, @ANYRESDEC], 0x1f, 0x1cd, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sched_setscheduler(r2, 0x2, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r5, 0x4b45, 0x4)

1m35.488515075s ago: executing program 2 (id=785):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000400)={[{@allow_utime={'allow_utime', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x2}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x106}}, {@fmask={'fmask', 0x3d, 0x5}}, {@fmask={'fmask', 0x3d, 0x6}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x9)

1m34.353213019s ago: executing program 2 (id=788):
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r6, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

1m33.357868312s ago: executing program 2 (id=794):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket(0x10, 0x80002, 0x2)
connect$netlink(r1, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

1m33.012342048s ago: executing program 32 (id=794):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket(0x10, 0x80002, 0x2)
connect$netlink(r1, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

1m30.904568143s ago: executing program 1 (id=569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

1m6.207854905s ago: executing program 1 (id=569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

44.765128397s ago: executing program 4 (id=965):
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x8e0, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0)

44.057305s ago: executing program 4 (id=971):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="f933010100ff"})

43.833193286s ago: executing program 4 (id=975):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001c00070c000000000067e9de19000000", @ANYRES32=r1, @ANYBLOB="400000000a000200aaaaaaaaaa7e00000a000100"], 0x34}}, 0x8800)

43.700962306s ago: executing program 4 (id=976):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000840), 0x10, 0x4d3, &(0x7f0000000ec0)="$eJzs3c9rHG8ZAPBnNtlvf6UmVQ+1YFtsJS3a3aSxbfBQK4g9SEGt9xqTTQjZZEN20zahSIp3BREVPHnyIvgHCNI/QYSC3qWKItrqwYO6srOzmqa73XzpZqcknw9M531ndvZ53rb77rwzLzsBHFkXI+JORIxExNWIGM+2F7Llbquy037dq5dP5ltLEs3m/b8mkWTbOu+VZOtT7UPieER8/W7Et5I349a3tlfmqtXKRlYvN1bXy/Wt7WvLq3NLlaXK2szM9M3ZW7M3ZqcG0s6JiLj9pT/+8Hs/+/LtX3320e8f/PnKt1tpjWX7d7djkNpNL6Z/Fx2jEbFxEMFyMJKtiz32f3dkiMkAANBX6xz/oxHxqfT8fzxG0rNTAAAA4DBpfmEs/pVENAEAAIBDq5DOgU0KpWwuwFgUCqVSew7vx+NkoVqrNz6zWNtcW2jPlZ2IYmFxuVqZyuYKT0QxadWnszm2nfr1PfWZiDgTET8YP5HWS/O16kLeFz8AAADgiDi1Z/z/j/F0/H8s77wAAACAAZvIOwEAAADgwBn/AwAAwOFn/A8AAACH2lfv3Wstzc7zrxcebm2u1B5eW6jUV0qrm/Ol+drGemmpVltKf7Nvtd/7VWu19c/F2ubjcqNSb5TrW9sPVmuba40Hy689AhsAAAAYojMXnv0uiYidz59Il5YP8k4KGIqkz/70ISEvssofhpAQMDQjeScA5GY07wSA3BTzTgDIXb/rAD0n7/x68LkAAAAHY/ITve//uzYAh1sh7wQAgKFz/x+OrqIZgHDkfaTP/ne//99sfqiEAACAgRtLl6RQyu4FjkWhUCpFnE4fC1BMFperlalsfPDb8eKxVn06PTLpO2cYAAAAAAAAAAAAAAAAAAAAAAAAAGhrNpNoAgAAAIdaROFPSfpr/hGT45fH9l4f+CD553i6johHP7n/o8dzjcbGdGv73/63vfHjbPv1PK5gAAAAAHt1xumdcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNKrl0/mO8sw4/7lixEx0TX+hePp6ngUI+Lk35MY3XVcEhEjA4i/8zQiznaLn7TSioloZ9Et/okc4xci4tQA4sNR9qzV/9zp9vkrxMV03f3zN5ot76p3/1eITv83sit+MTuu1f+c3meMc89/Ue4Z/2nEudHu/U8nftKj/7u0z/jf/Mb2dq99zZ9GTHb9/klei1VurK6X61vb15ZX55YqS5W1mZnpm7O3Zm/MTpUXl6uV7M+uMb7/yV/+523tP9kj/kSf9l/eZ/v//fzxy4+1i8Vu8a9c6v79e/bN+F95lPX9rf8Tn87Krf2TnfJOu7zb+Z//5vzb2r/Qo/39/v2v7LP9V7/2nRf7fCkAMAT1re2VuWq1svHeF2In4j1IQ+GgCsfejzQU2oW8eyYAAGDQ/n/Sn3cmAAAAAAAAAAAAAAAAAAAAcHQN4+fE9sbcyaepAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv9d8AAAD//9u92ow=")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020)

42.030178029s ago: executing program 4 (id=981):
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x8e0, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0)

40.832716328s ago: executing program 4 (id=986):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x1, 0xfe, 0x1, 0x5, 0x6, 0xfe, 0x4, 0x6, 0xfc, 0x7f, 0x4, 0xe4, 0x10, 0x0, 0x4, 0x3}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x32, 0x8, 0x101, 0x22000000000, 0x4, 0x0, 0x6c, 0x0, 0x8400000000000, 0x80000000000004, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x7ff], 0xdddd0000, 0x3c4210})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000b, 0x28011, r3, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.502325202s ago: executing program 33 (id=986):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x1, 0xfe, 0x1, 0x5, 0x6, 0xfe, 0x4, 0x6, 0xfc, 0x7f, 0x4, 0xe4, 0x10, 0x0, 0x4, 0x3}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x32, 0x8, 0x101, 0x22000000000, 0x4, 0x0, 0x6c, 0x0, 0x8400000000000, 0x80000000000004, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x7ff], 0xdddd0000, 0x3c4210})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000b, 0x28011, r3, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

39.115715514s ago: executing program 1 (id=569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

20.247053957s ago: executing program 1 (id=569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x23d)

15.115547875s ago: executing program 5 (id=1104):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==")
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000046, &(0x7f0000000840)={[{@init_itable}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b3}}, {@resgid}, {@grpquota}, {@minixdf}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x800003d, 0x7ff)
write$binfmt_script(r0, &(0x7f0000000340), 0x4)
lseek(r0, 0x0, 0x3)

14.741259353s ago: executing program 5 (id=1106):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000540)={[{@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x8a7}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time={'max_batch_time', 0x3d, 0xa92946e4000}}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10401, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x89)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)

13.258134412s ago: executing program 5 (id=1111):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = inotify_init1(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x4000000e)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x1, 0x2, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fa, 0x1}}, {0x0, 0x1f}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

11.709020256s ago: executing program 5 (id=1114):
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x8e0, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0)

10.885476567s ago: executing program 5 (id=1117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400004b}, 0x800)

10.661940763s ago: executing program 5 (id=1120):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)='1', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x0, r1, 0x0}])
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

7.305185091s ago: executing program 3 (id=1131):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
unshare(0x62040200)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c97d2abd7200fbdbdf2531000000080001002900000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00R\x00', @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)

6.633541881s ago: executing program 3 (id=1132):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000540)={[{@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x8a7}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time={'max_batch_time', 0x3d, 0xa92946e4000}}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10401, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x89)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)

6.342839892s ago: executing program 6 (id=1133):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x263, &(0x7f0000000940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
dup(0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff11"], 0x30}}, 0x0)
fchdir(0xffffffffffffffff)
umount2(0x0, 0x2)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @rand_addr, 0x2}, 0x1c)

5.613577596s ago: executing program 3 (id=1135):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x3, 0x42, 0x24010, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0xf, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan1\x00'})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e"], 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0x61, 0x0, 0x0, 0x900}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)

4.956225245s ago: executing program 6 (id=1137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480c4}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)

4.376123207s ago: executing program 0 (id=1138):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000010, &(0x7f0000020040)=ANY=[], 0x0, 0x6a7, &(0x7f00000000c0)="$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")

3.059509004s ago: executing program 0 (id=1139):
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000140)='devpts\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x8e0, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0)

2.963612892s ago: executing program 6 (id=1140):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x1, 0x3, 0x1, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a101177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x3]}})

2.797232624s ago: executing program 6 (id=1141):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_reply\x00', r3}, 0x18)
epoll_create1(0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='afs_make_fs_call2\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)

2.782554325s ago: executing program 0 (id=1142):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000001400)=ANY=[], 0x835, 0x2)

1.372649239s ago: executing program 0 (id=1143):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000020c0)="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", 0x3e1}, {0x0}], 0x2}}], 0x1, 0x40488e4)

1.241896679s ago: executing program 6 (id=1144):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.107361749s ago: executing program 3 (id=1145):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000540)={[{@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x8a7}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time={'max_batch_time', 0x3d, 0xa92946e4000}}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10401, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x89)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)

849.208588ms ago: executing program 0 (id=1146):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x259, &(0x7f0000000d40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x202bc1b, 0x0, 0x3, 0x0, &(0x7f0000000080))

690.803639ms ago: executing program 6 (id=1147):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

408.36512ms ago: executing program 0 (id=1148):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x6147, 0x70, 0xab8, 0xfffc, 0x7, 0x8000, 0x3ff, 0x98, 0x200, 0x0, 0xf, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

156.027809ms ago: executing program 3 (id=1149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x120, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf0, 0x2, {{}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xfffffffffffffe0c, 0x1, {0x5, 0xfffffff6, 0x8001, 0x1ff, 0xffffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0xe6, 0x63a5, 0x101, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0xacc, 0x5, 0x13f5, 0xd}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x1744, 0x3, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffffff, 0x2, 0x401, 0x2, 0xd}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x9, 0x2, 0x40100}}, @NETEM_LOSS_GI={0x18, 0x1, {0x54e71f4d, 0xc6a, 0x4, 0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x5000}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x800}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x120}}, 0x0)

0s ago: executing program 3 (id=1150):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49df, 0x0, 0x0, 0xbfff, 0x13, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44)

kernel console output (not intermixed with test programs):

835070][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.890428][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.913892][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.943729][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.985237][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.028053][ T6182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.054290][ T6182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.065850][ T6182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.090875][ T6182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.480414][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.502674][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  212.580307][ T6360] loop0: detected capacity change from 0 to 8
[  212.708027][ T6360] overlayfs: missing 'lowerdir'
[  212.765470][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.798223][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.823785][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.857352][ T6364] loop4: detected capacity change from 0 to 512
[  212.905454][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.919049][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.938491][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  212.969318][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  213.023959][ T6364] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.632: casefold flag without casefold feature
[  213.091461][ T6364] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.632: couldn't read orphan inode 15 (err -117)
[  213.161194][ T6364] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  213.526501][   T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.762967][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  213.886381][   T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  213.919881][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  213.947585][ T6377] autofs4:pid:6377:autofs_fill_super: called with bogus options
[  213.975764][   T23] usb 3-1: SerialNumber: syz
[  214.064119][ T6377] loop0: detected capacity change from 0 to 512
[  214.280921][ T6377] EXT4-fs (loop0): Unrecognized mount option "fsuuid=cd4a3aac-" or missing value
[  214.293539][   T23] usb 3-1: cannot find UAC_HEADER
[  214.347886][   T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  214.395288][   T23] usb 3-1: USB disconnect, device number 2
[  214.421574][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.787961][ T6390] loop0: detected capacity change from 0 to 2048
[  214.797871][ T6392] loop4: detected capacity change from 0 to 128
[  214.893773][ T6395] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.903221][ T6394] loop2: detected capacity change from 0 to 8
[  214.950861][ T6392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  215.009812][ T6394] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  215.018850][ T6392] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.106866][ T6394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  215.467802][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'.
[  215.487031][ T6401] xt_TCPMSS: Only works on TCP SYN packets
[  216.439169][ T6415] loop4: detected capacity change from 0 to 512
[  216.580920][ T6415] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.647: casefold flag without casefold feature
[  216.615529][ T6415] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.647: couldn't read orphan inode 15 (err -117)
[  216.645627][ T6420] autofs4:pid:6420:autofs_fill_super: called with bogus options
[  216.663082][ T6415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  216.849772][ T6406] chnl_net:caif_netlink_parms(): no params data found
[  216.858003][ T6420] loop0: detected capacity change from 0 to 512
[  216.941551][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'.
[  216.967392][ T6425] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  216.999646][ T6420] EXT4-fs (loop0): Unrecognized mount option "fsuuid=cd4a3aac-" or missing value
[  217.550332][ T6430] loop2: detected capacity change from 0 to 256
[  217.678372][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.694266][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.756978][ T6406] device bridge_slave_0 entered promiscuous mode
[  217.777174][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.799661][ T6430] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  217.820140][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.851032][ T6406] device bridge_slave_1 entered promiscuous mode
[  217.971852][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.984229][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.072416][ T6441] loop2: detected capacity change from 0 to 8
[  218.112360][ T6406] team0: Port device team_slave_0 added
[  218.124466][ T6406] team0: Port device team_slave_1 added
[  218.175858][ T4472] Bluetooth: hci0: command 0x0409 tx timeout
[  218.190102][ T6441] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  218.219534][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.226832][ T6441] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  218.238627][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.293049][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.314513][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.322468][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.355955][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.483181][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.587544][ T6406] device hsr_slave_0 entered promiscuous mode
[  218.605632][ T6406] device hsr_slave_1 entered promiscuous mode
[  218.619561][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.633370][ T6406] Cannot create hsr debugfs directory
[  218.816498][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.001823][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.050358][ T6468] loop4: detected capacity change from 0 to 8
[  219.184480][ T6468] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  219.217073][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.244262][ T6468] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  219.960085][ T6473] loop4: detected capacity change from 0 to 128
[  220.129914][ T6473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  220.187747][ T6473] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.258144][ T4205] Bluetooth: hci0: command 0x041b tx timeout
[  220.507581][ T6486] loop0: detected capacity change from 0 to 256
[  220.591700][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.667'.
[  220.608328][ T6487] xt_TCPMSS: Only works on TCP SYN packets
[  221.093409][ T6486] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  221.344686][ T6497] loop4: detected capacity change from 0 to 256
[  221.412790][ T6497] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.489853][ T6497] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  221.534067][ T6497] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdf21e5da, utbl_chksum : 0xe619d30d)
[  221.809100][ T6406] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  221.828361][ T6406] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  221.840291][ T6497] exFAT-fs (loop4): hint_cluster is invalid (17)
[  221.841486][ T6406] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  221.878080][ T6406] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  221.945435][ T6497] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  221.993092][ T6497] exFAT-fs (loop4): Filesystem has been set read-only
[  222.335656][ T4472] Bluetooth: hci0: command 0x040f tx timeout
[  222.613118][ T6524] loop4: detected capacity change from 0 to 256
[  222.673634][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.821714][ T4286] device hsr_slave_0 left promiscuous mode
[  222.849748][ T6524] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  222.866616][ T4286] device hsr_slave_1 left promiscuous mode
[  222.873892][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.881877][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.894135][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.905079][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.946510][ T4286] device bridge_slave_1 left promiscuous mode
[  222.952800][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.987676][ T4286] device bridge_slave_0 left promiscuous mode
[  222.993924][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.057452][ T4286] device veth1_macvtap left promiscuous mode
[  223.063562][ T4286] device veth0_macvtap left promiscuous mode
[  223.095194][ T4286] device veth1_vlan left promiscuous mode
[  223.144614][ T4286] device veth0_vlan left promiscuous mode
[  223.311469][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'.
[  223.344347][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[  223.822267][ T6549] loop2: detected capacity change from 0 to 1024
[  223.883608][ T6549] JBD2: no valid journal superblock found
[  223.905899][ T6549] EXT4-fs (loop2): error loading journal
[  223.939230][ T4286] team0 (unregistering): Port device team_slave_1 removed
[  223.959890][ T4286] team0 (unregistering): Port device team_slave_0 removed
[  224.031466][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.058441][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.155235][ T4286] bond0 (unregistering): Released all slaves
[  224.257520][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  224.269102][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  224.289513][ T6406] 8021q: adding VLAN 0 to HW filter on device team0
[  224.343262][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  224.367090][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  224.405275][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.412436][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.415576][ T4430] Bluetooth: hci0: command 0x0419 tx timeout
[  224.436650][ T6553] loop4: detected capacity change from 0 to 8
[  224.462518][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  224.482254][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  224.491063][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.498213][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.516955][ T6553] overlayfs: missing 'workdir'
[  224.527816][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  224.554703][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  224.586164][ T6551] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.602916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  224.675905][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  224.717618][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  224.812072][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  224.832874][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  224.853395][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  224.874291][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  224.903297][ T6406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.929020][ T6406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  224.946702][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  224.959493][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  224.972397][ T6570] loop2: detected capacity change from 0 to 8
[  224.980053][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  225.255200][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'.
[  225.336112][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'.
[  225.482687][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  225.503725][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  225.524176][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.656044][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  225.685104][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  225.722100][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  225.748412][ T6597] loop4: detected capacity change from 0 to 1024
[  225.753864][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  225.792916][ T6406] device veth0_vlan entered promiscuous mode
[  225.812885][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  225.850807][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  225.881974][ T6406] device veth1_vlan entered promiscuous mode
[  225.998871][ T6406] device veth0_macvtap entered promiscuous mode
[  226.007461][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  226.030358][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  226.048151][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  226.063803][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  226.075179][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  226.103831][ T6406] device veth1_macvtap entered promiscuous mode
[  226.119538][ T6603] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  226.144337][ T6602] tipc: Disabling bearer <eth:syzkaller0>
[  226.170222][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.175956][ T4472] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  226.190942][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.221601][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.236670][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.253071][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.264216][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.289313][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.300906][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.313827][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.325627][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  226.333843][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  226.344200][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  226.407710][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.424005][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.445550][ T4472] usb 5-1: Using ep0 maxpacket: 32
[  226.469110][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.492881][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'.
[  226.506816][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.518416][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'.
[  226.530549][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.544201][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.554240][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.564924][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.567014][ T4472] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  226.576876][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.604255][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  226.620892][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.635321][ T6406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.652841][ T6406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.662870][ T6406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.679297][ T6406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.752211][ T6620] loop0: detected capacity change from 0 to 128
[  226.766058][ T4472] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  226.795627][ T4472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.804001][ T4472] usb 5-1: Product: syz
[  226.815749][ T4472] usb 5-1: Manufacturer: syz
[  226.820392][ T4472] usb 5-1: SerialNumber: syz
[  226.875239][ T4472] usb 5-1: config 0 descriptor??
[  226.925807][ T6597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  226.942211][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.961802][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.044976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.052943][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.070850][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.113856][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.193253][ T4992] usb 5-1: USB disconnect, device number 2
[  227.653459][ T6634] overlayfs: failed to clone lowerpath
[  228.614815][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'.
[  228.629746][ T6650] loop2: detected capacity change from 0 to 512
[  228.646082][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'.
[  228.764402][ T6650] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.722: casefold flag without casefold feature
[  228.797740][ T6650] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.722: couldn't read orphan inode 15 (err -117)
[  228.819788][ T6650] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  229.587738][ T6637] loop0: detected capacity change from 0 to 256
[  229.810751][ T6667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.727'.
[  229.915575][ T6667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.727'.
[  229.942941][ T6637] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  229.946878][ T6667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.727'.
[  231.537799][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'.
[  231.547157][ T6689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'.
[  231.561724][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'.
[  231.599651][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'.
[  231.636261][ T6674] chnl_net:caif_netlink_parms(): no params data found
[  231.793245][ T6695] loop2: detected capacity change from 0 to 2048
[  231.870689][ T6702] capability: warning: `syz.4.738' uses 32-bit capabilities (legacy support in use)
[  231.898957][ T6695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  231.956223][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.018219][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.033086][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.042722][ T6674] device bridge_slave_0 entered promiscuous mode
[  232.053365][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.061009][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.069715][ T6674] device bridge_slave_1 entered promiscuous mode
[  232.099835][ T6674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.130225][ T6674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.174185][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.336634][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[  232.413732][ T6674] team0: Port device team_slave_0 added
[  232.472006][ T6674] team0: Port device team_slave_1 added
[  233.035105][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.398687][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.409599][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.535023][ T6674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.548009][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.555010][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.589584][ T6674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.637572][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.823650][ T6674] device hsr_slave_0 entered promiscuous mode
[  233.839203][ T6674] device hsr_slave_1 entered promiscuous mode
[  233.863434][ T6674] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.012504][ T6674] Cannot create hsr debugfs directory
[  234.126036][ T6727] tipc: Started in network mode
[  234.131439][ T6727] tipc: Node identity , cluster identity 4711
[  234.412498][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'.
[  234.425409][ T6727] tipc: Failed to obtain node identity
[  234.445421][ T6727] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  234.722048][   T13] Bluetooth: hci0: command 0x041b tx timeout
[  236.179975][ T6755] kvm [6751]: vcpu1, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xbe
[  236.735328][ T4472] Bluetooth: hci0: command 0x040f tx timeout
[  236.824814][ T6674] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  236.889630][ T6674] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  236.914113][ T6674] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  236.938172][ T6674] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  237.027357][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'.
[  237.938648][ T4286] device hsr_slave_0 left promiscuous mode
[  237.956116][ T4286] device hsr_slave_1 left promiscuous mode
[  237.971934][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.993041][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.016050][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.023512][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.041650][ T4286] device bridge_slave_1 left promiscuous mode
[  238.052314][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.077070][ T4286] device bridge_slave_0 left promiscuous mode
[  238.083634][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.123269][ T4286] device veth1_macvtap left promiscuous mode
[  238.136878][ T4286] device veth0_macvtap left promiscuous mode
[  238.156893][ T4286] device veth1_vlan left promiscuous mode
[  238.169819][ T4286] device veth0_vlan left promiscuous mode
[  238.526270][ T4286] team0 (unregistering): Port device team_slave_1 removed
[  238.543508][ T4286] team0 (unregistering): Port device team_slave_0 removed
[  238.560446][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.578669][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.720783][ T4286] bond0 (unregistering): Released all slaves
[  238.784965][ T6796] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.815598][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[  238.871040][ T6674] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.981791][ T6674] 8021q: adding VLAN 0 to HW filter on device team0
[  238.999094][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  239.016005][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.064410][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.075880][ T6820] loop0: detected capacity change from 0 to 128
[  239.117714][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.154849][ T6820] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  239.166027][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.173177][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.184646][ T6820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.185488][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.232764][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.245905][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.253054][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.262261][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  239.271534][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  239.293203][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  239.365397][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.421666][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.447252][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.644810][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.653607][ T6829] loop0: detected capacity change from 0 to 2048
[  239.673248][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.146023][ T6829] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  240.186960][ T6846] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.233778][ T6829] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  240.318517][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.341793][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.387932][ T6829] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  240.417895][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.433034][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.452487][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.461370][ T6856] loop2: detected capacity change from 0 to 8
[  240.469386][ T6829] EXT4-fs (loop0): This should not happen!! Data will be lost
[  240.469386][ T6829] 
[  240.498034][ T6829] EXT4-fs (loop0): Total free blocks count 0
[  240.504159][ T6829] EXT4-fs (loop0): Free/Dirty block details
[  240.522927][ T6829] EXT4-fs (loop0): free_blocks=2415919104
[  240.546578][ T6829] EXT4-fs (loop0): dirty_blocks=16
[  240.566916][ T6862] loop4: detected capacity change from 0 to 512
[  240.573354][ T6829] EXT4-fs (loop0): Block reservation details
[  240.585862][ T6829] EXT4-fs (loop0): i_reserved_data_blocks=1
[  240.608962][ T6850] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  240.649861][ T6856] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  240.670371][ T6856] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  240.689534][ T6850] EXT4-fs (loop0): This should not happen!! Data will be lost
[  240.689534][ T6850] 
[  240.712489][ T6862] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.781: casefold flag without casefold feature
[  240.785672][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.794075][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.822657][ T6862] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.781: couldn't read orphan inode 15 (err -117)
[  240.862480][ T6674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.906586][ T6862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  240.953495][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  241.103016][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  241.188496][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  241.216707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.225836][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.278500][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.577101][ T6674] device veth0_vlan entered promiscuous mode
[  241.639006][ T6674] device veth1_vlan entered promiscuous mode
[  242.624346][ T6880] loop2: detected capacity change from 0 to 256
[  242.666696][ T6880] exfat: Deprecated parameter 'namecase'
[  242.686357][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  242.706192][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  242.724158][ T6880] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  242.758606][ T6674] device veth0_macvtap entered promiscuous mode
[  242.798225][ T6674] device veth1_macvtap entered promiscuous mode
[  242.862936][ T6882] loop4: detected capacity change from 0 to 256
[  242.874397][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.902495][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.919559][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.932868][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.949328][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.962880][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.981291][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.993581][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.011821][ T6674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.069202][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  243.082512][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  243.109963][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  243.154670][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.211661][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.256728][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.285073][ T6882] loop4: detected capacity change from 0 to 512
[  243.292007][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.319326][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.354100][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.381302][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.425261][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.451124][ T6674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.532283][ T4170] bridge0: port 3(syz_tun) entered disabled state
[  243.608709][ T4170] device syz_tun left promiscuous mode
[  243.624564][ T4170] bridge0: port 3(syz_tun) entered disabled state
[  243.684518][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  243.704664][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  243.767881][ T6674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.795248][ T6674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.812119][ T6674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.821444][ T6674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.841590][ T6890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.105885][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.122341][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.189179][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  244.253366][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.274653][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.323371][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  244.485479][ T6906] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  246.120820][ T6904] loop4: detected capacity change from 0 to 1024
[  246.473960][ T6908] chnl_net:caif_netlink_parms(): no params data found
[  246.757155][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.783514][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.851355][ T6908] device bridge_slave_0 entered promiscuous mode
[  246.888837][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.901721][ T4472] Bluetooth: hci1: command 0x0409 tx timeout
[  246.919319][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.934527][ T6908] device bridge_slave_1 entered promiscuous mode
[  246.999610][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.021205][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.117673][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.213969][ T6908] team0: Port device team_slave_0 added
[  247.284957][ T6936] tipc: Started in network mode
[  247.316002][ T6936] tipc: Node identity , cluster identity 4711
[  247.322122][ T6936] tipc: Failed to obtain node identity
[  247.333465][ T6936] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  247.349145][ T6908] team0: Port device team_slave_1 added
[  247.721738][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.882894][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.941931][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.032725][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.045838][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.052932][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.079652][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.252210][ T6951] loop0: detected capacity change from 0 to 1024
[  248.322028][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.567594][ T6908] device hsr_slave_0 entered promiscuous mode
[  249.377638][ T6959] loop4: detected capacity change from 0 to 1024
[  249.439807][   T13] Bluetooth: hci1: command 0x041b tx timeout
[  249.604615][ T6959] hfsplus: failed to load root directory
[  249.732009][ T6908] device hsr_slave_1 entered promiscuous mode
[  249.767229][ T6908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.869153][ T6908] Cannot create hsr debugfs directory
[  250.015199][ T4205] Bluetooth: hci0: command 0x0409 tx timeout
[  250.075439][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.472668][ T6943] chnl_net:caif_netlink_parms(): no params data found
[  250.568976][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.649202][ T6983] loop4: detected capacity change from 0 to 8
[  250.668320][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.675856][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.684041][ T6943] device bridge_slave_0 entered promiscuous mode
[  250.707661][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.716831][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.003086][ T6983] SQUASHFS error: lzo decompression failed, data probably corrupt
[  251.015277][ T6943] device bridge_slave_1 entered promiscuous mode
[  251.032080][ T6983] SQUASHFS error: Failed to read block 0x91: -5
[  251.049281][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.065202][ T6983] SQUASHFS error: Unable to read metadata cache entry [8f]
[  251.082209][ T6983] SQUASHFS error: Unable to read inode 0x11f
[  251.170080][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.225133][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.266276][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.346867][ T6992] loop0: detected capacity change from 0 to 512
[  251.353848][ T6943] team0: Port device team_slave_0 added
[  251.368217][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.479743][ T6943] team0: Port device team_slave_1 added
[  251.516810][ T6992] EXT4-fs (loop0): Ignoring removed orlov option
[  251.607745][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.615216][ T6992] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,bsddf,,errors=continue. Quota mode: writeback.
[  251.631464][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.660390][ T6992] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.935275][ T4472] Bluetooth: hci1: command 0x040f tx timeout
[  252.024709][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.095430][ T4472] Bluetooth: hci0: command 0x041b tx timeout
[  252.110281][ T6992] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.822: invalid size
[  252.207983][ T7006] loop4: detected capacity change from 0 to 512
[  252.245793][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.259693][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.351798][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.401367][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.413221][ T7006] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.419429][ T6943] device hsr_slave_0 entered promiscuous mode
[  253.428951][ T6943] device hsr_slave_1 entered promiscuous mode
[  253.460437][ T6943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.559637][ T6943] Cannot create hsr debugfs directory
[  253.570602][ T4286] tipc: Disabling bearer <udp:syz0>
[  253.600989][ T4286] tipc: Left network mode
[  254.437961][ T4472] Bluetooth: hci1: command 0x0419 tx timeout
[  254.444263][ T4472] Bluetooth: hci0: command 0x040f tx timeout
[  255.137613][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.144041][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.220714][ T6908] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  255.312477][ T7037] loop4: detected capacity change from 0 to 1024
[  255.419867][ T6908] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  256.402876][ T6908] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  256.481664][ T6908] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  256.496065][ T4472] Bluetooth: hci0: command 0x0419 tx timeout
[  257.845196][ T4244] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  257.858264][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.899918][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  257.930314][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  257.949088][ T6908] 8021q: adding VLAN 0 to HW filter on device team0
[  258.009564][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  258.027620][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  258.055296][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.062421][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.105657][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  258.189755][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  258.202169][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  258.222594][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.229859][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.256079][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  258.276400][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  258.293713][ T4244] usb 1-1: config 0 interface 0 altsetting 190 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.319209][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  258.335362][ T4244] usb 1-1: config 0 interface 0 altsetting 190 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.343400][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  258.355418][ T4244] usb 1-1: config 0 interface 0 has no altsetting 0
[  258.362074][ T4244] usb 1-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  258.385114][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.385622][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  258.397693][ T4244] usb 1-1: config 0 descriptor??
[  258.499742][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  258.516616][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  258.537466][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  258.556149][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  258.564715][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  258.583926][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  258.614504][ T6908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  258.635348][ T6943] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  258.709245][ T6943] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  258.726150][ T6943] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  258.771777][ T6943] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  258.942192][ T4244] wacom 0003:056A:00E3.0001: unknown main item tag 0x2
[  258.974618][ T4244] wacom 0003:056A:00E3.0001: unknown main item tag 0xe
[  259.012393][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  259.029261][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  259.041698][ T4244] wacom 0003:056A:00E3.0001: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.0-1/input0
[  259.084376][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.132761][ T4244] usb 1-1: USB disconnect, device number 3
[  259.332845][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.402457][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  259.411218][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  259.472381][ T6943] 8021q: adding VLAN 0 to HW filter on device team0
[  259.501864][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  259.520675][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.552090][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.559244][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.585293][ T4472] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  259.585785][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.636631][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.670929][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.706691][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.713849][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.818850][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  259.845136][ T4472] usb 5-1: Using ep0 maxpacket: 8
[  259.850537][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.895365][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.922285][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.932227][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.957517][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.965399][ T4472] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.965427][ T4472] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  260.005172][ T4472] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  260.014365][ T4472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.078482][ T4472] usb 5-1: config 0 descriptor??
[  260.092270][ T6908] device veth0_vlan entered promiscuous mode
[  260.147947][ T6908] device veth1_vlan entered promiscuous mode
[  260.688241][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  260.699878][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  260.710213][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  260.721001][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  260.731542][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  260.741625][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  260.779531][ T4286] device hsr_slave_0 left promiscuous mode
[  260.821146][ T4286] device hsr_slave_1 left promiscuous mode
[  260.835491][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.843057][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.860591][ T5008] usb 5-1: USB disconnect, device number 3
[  260.893706][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.904317][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.923612][ T4286] device bridge_slave_1 left promiscuous mode
[  260.933729][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.964274][ T4286] device bridge_slave_0 left promiscuous mode
[  260.970842][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.988544][ T4286] device hsr_slave_0 left promiscuous mode
[  260.998794][ T7135] loop0: detected capacity change from 0 to 1024
[  261.047702][ T4286] device hsr_slave_1 left promiscuous mode
[  261.054366][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.071032][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.084362][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.092357][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.105789][ T4286] device bridge_slave_1 left promiscuous mode
[  261.112161][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.127473][ T4286] device bridge_slave_0 left promiscuous mode
[  261.133852][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.159165][ T4286] device veth1_macvtap left promiscuous mode
[  261.169410][ T4286] device veth0_macvtap left promiscuous mode
[  261.178836][ T4286] device veth1_vlan left promiscuous mode
[  261.184663][ T4286] device veth0_vlan left promiscuous mode
[  261.196304][ T4286] device veth1_macvtap left promiscuous mode
[  261.204447][ T4286] device veth0_macvtap left promiscuous mode
[  261.216437][ T4286] device veth1_vlan left promiscuous mode
[  261.222225][ T4286] device veth0_vlan left promiscuous mode
[  262.086602][ T4286] team0 (unregistering): Port device team_slave_1 removed
[  262.112805][ T4286] team0 (unregistering): Port device team_slave_0 removed
[  262.129708][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.162003][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.314107][ T4286] bond0 (unregistering): Released all slaves
[  262.487569][ T4286] team0 (unregistering): Port device team_slave_1 removed
[  262.504942][ T4286] team0 (unregistering): Port device team_slave_0 removed
[  262.519749][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.542862][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.643669][ T4286] bond0 (unregistering): Released all slaves
[  262.807978][ T6908] device veth0_macvtap entered promiscuous mode
[  262.837649][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  262.846032][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  262.853850][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  262.862939][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  262.872059][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  262.886015][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  262.899846][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  262.912022][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  262.923439][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  263.158146][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  263.427776][ T6908] device veth1_macvtap entered promiscuous mode
[  263.477493][ T6943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  263.520057][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.547805][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.574017][ T7164] loop4: detected capacity change from 0 to 512
[  263.577170][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.635626][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.645883][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.656966][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.669169][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.685597][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.696594][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.706954][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.717964][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.738086][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.775641][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.817700][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.852795][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  263.864147][ T7164] EXT4-fs (loop4): Test dummy encryption mode enabled
[  263.872511][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  263.904264][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  264.027069][ T7164] EXT4-fs error (device loop4): ext4_fill_super:4841: inode #2: comm syz.4.867: casefold flag without casefold feature
[  264.090401][ T7164] EXT4-fs (loop4): get root inode failed
[  264.138583][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  264.170307][ T7164] EXT4-fs (loop4): mount failed
[  264.350560][ T6908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.429644][ T6908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.506189][ T6908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.516558][ T6908] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.904380][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  264.913232][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  264.932612][ T7192] loop0: detected capacity change from 0 to 512
[  264.941973][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.951809][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.991802][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.016229][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  265.081924][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  265.095481][ T7192] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  265.165579][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.208189][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.248569][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  265.286221][ T7192] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  266.693859][ T6943] device veth0_vlan entered promiscuous mode
[  266.741910][ T7192] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.874: corrupted in-inode xattr
[  266.781824][ T7192] EXT4-fs (loop0): Remounting filesystem read-only
[  266.792539][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  266.865169][ T7192] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  266.879468][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  266.905633][ T7192] EXT4-fs (loop0): 1 truncate cleaned up
[  266.911333][ T7192] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,errors=remount-ro,noload,. Quota mode: none.
[  266.912089][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  267.005971][ T6943] device veth1_vlan entered promiscuous mode
[  267.074341][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  267.096010][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  267.106805][   T26] audit: type=1800 audit(1739091915.928:9): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.874" name="bus" dev="loop0" ino=18 res=0 errno=0
[  267.169786][ T7220] loop4: detected capacity change from 0 to 1024
[  267.224859][ T6943] device veth0_macvtap entered promiscuous mode
[  267.257652][ T6943] device veth1_macvtap entered promiscuous mode
[  267.291880][ T7224] loop5: detected capacity change from 0 to 512
[  267.303691][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  267.320739][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  267.333088][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  267.348844][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  267.708027][ T7224] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.796: casefold flag without casefold feature
[  267.727735][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.809139][ T7224] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.796: couldn't read orphan inode 15 (err -117)
[  267.851587][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.906062][ T7224] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  267.927476][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.032287][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.060441][ T7239] loop0: detected capacity change from 0 to 256
[  268.098215][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.129318][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.170182][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.201447][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.243753][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.292400][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  268.343475][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  268.385227][ T7239] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  268.425577][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.456723][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.488762][ T7253] loop4: detected capacity change from 0 to 512
[  268.525958][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.546474][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.566643][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.617090][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.658352][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.689424][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.729124][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.786152][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  268.810030][ T7253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  268.835757][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  268.882589][ T7253] EXT4-fs (loop4): 1 truncate cleaned up
[  268.929148][ T6943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.970797][ T7270] mip6: mip6_rthdr_init_state: spi is not 0: 3557031936
[  268.978269][ T7253] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  269.005426][ T6943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.021023][ T6943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.099210][ T6943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.674522][ T7279] loop0: detected capacity change from 0 to 1024
[  270.249155][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.300673][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.347548][ T7285] netlink: 68 bytes leftover after parsing attributes in process `syz.3.893'.
[  270.369178][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  270.418309][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.440486][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.483784][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  270.705997][ T7292] loop0: detected capacity change from 0 to 512
[  270.788195][ T7290] loop4: detected capacity change from 0 to 512
[  270.866199][ T7290] EXT4-fs (loop4): Unrecognized mount option "fsuuid=cd4a3aac-" or missing value
[  270.919432][ T7292] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000008,minixdf,,errors=continue. Quota mode: writeback.
[  271.066092][ T7292] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  271.136088][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  271.145088][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[  271.155050][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[  271.165059][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[  271.174465][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[  271.183652][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  271.192646][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  271.201635][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  271.210625][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  271.219613][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  272.519396][ T7320] loop0: detected capacity change from 0 to 2048
[  272.667316][ T7320] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,bsddf,. Quota mode: none.
[  272.843722][ T7322] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.902: bg 0: block 234: padding at end of block bitmap is not set
[  272.925329][ T7322] EXT4-fs (loop0): Remounting filesystem read-only
[  272.984573][ T7338] loop4: detected capacity change from 0 to 1024
[  273.079221][ T7341] loop5: detected capacity change from 0 to 512
[  273.246092][ T7341] EXT4-fs (loop5): 1 orphan inode deleted
[  273.251940][ T7341] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  273.274473][ T7341] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.291167][ T7341] mip6: mip6_rthdr_init_state: spi is not 0: 3557031936
[  274.399618][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.907'.
[  274.445290][ T7362] netlink: 'syz.5.907': attribute type 2 has an invalid length.
[  274.470356][ T7365] loop0: detected capacity change from 0 to 512
[  274.501524][ T7362] netlink: 'syz.5.907': attribute type 1 has an invalid length.
[  274.526979][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.907'.
[  274.629452][ T7365] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  274.675267][ T7365] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.734773][ T7365] overlayfs: missing 'lowerdir'
[  275.632647][ T7387] loop0: detected capacity change from 0 to 512
[  275.771259][ T7387] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.910: casefold flag without casefold feature
[  275.785400][ T7387] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.910: couldn't read orphan inode 15 (err -117)
[  275.832845][ T7387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  275.939711][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.947574][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.828757][ T4429] Bluetooth: hci0: command 0x0409 tx timeout
[  276.912949][ T7395] loop0: detected capacity change from 0 to 128
[  276.932151][ T7395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  276.946057][ T7395] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.252492][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.913'.
[  277.268244][ T7398] xt_TCPMSS: Only works on TCP SYN packets
[  278.171700][ T7402] loop0: detected capacity change from 0 to 512
[  278.287184][ T7402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  278.302366][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.349685][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.870013][ T7355] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.879303][ T7355] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.888667][ T7355] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.895128][ T2301] Bluetooth: hci0: command 0x041b tx timeout
[  278.905190][ T7355] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.039568][ T7355] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.051025][ T7355] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.061497][ T7355] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.071288][ T7355] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  279.115515][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.916'.
[  279.124427][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.916'.
[  279.302830][ T7415] mip6: mip6_rthdr_init_state: spi is not 0: 3557031936
[  280.467509][ T7359] chnl_net:caif_netlink_parms(): no params data found
[  280.471196][ T7432] loop4: detected capacity change from 0 to 128
[  280.613070][ T7432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  280.634115][ T7432] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.964926][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.924'.
[  280.980813][ T7447] xt_TCPMSS: Only works on TCP SYN packets
[  281.082971][ T7439] loop0: detected capacity change from 0 to 1024
[  281.389543][ T7439] EXT4-fs (loop0): Can't support bigalloc feature without extents feature
[  281.389543][ T7439] 
[  281.400423][ T7439] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  281.577220][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.599102][ T1108] Bluetooth: hci0: command 0x040f tx timeout
[  281.645388][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.741660][ T7359] device bridge_slave_0 entered promiscuous mode
[  281.754520][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.928'.
[  281.791936][ T7459] loop4: detected capacity change from 0 to 128
[  281.803577][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.928'.
[  281.830930][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.871882][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.067038][ T7359] device bridge_slave_1 entered promiscuous mode
[  282.128512][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.928'.
[  282.495353][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.570799][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.593269][ T7475] netlink: 44 bytes leftover after parsing attributes in process `syz.4.932'.
[  282.635782][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.932'.
[  282.648821][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.658557][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.665828][ T7475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.687171][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.719839][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'.
[  282.740195][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'.
[  282.838711][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.948049][ T7488] overlayfs: failed to clone lowerpath
[  282.984315][ T7486] loop4: detected capacity change from 0 to 1024
[  283.695291][ T4472] Bluetooth: hci0: command 0x0419 tx timeout
[  283.790693][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.834496][ T7486] loop4: detected capacity change from 0 to 2048
[  283.933057][ T7486] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  284.044214][ T7486] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,mblk_io_submit,nouid32,dioread_lock,grpjquota=,bsddf,,errors=continue. Quota mode: none.
[  284.150665][ T7500] xt_TCPMSS: Only works on TCP SYN packets
[  284.295092][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.427159][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'.
[  284.771711][ T7359] team0: Port device team_slave_0 added
[  284.809924][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'.
[  284.839119][ T7359] team0: Port device team_slave_1 added
[  285.010259][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'.
[  285.110422][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.123816][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.155075][   T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  285.379825][ T7359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.706008][   T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  286.085499][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.094116][   T13] usb 1-1: Product: syz
[  286.098874][   T13] usb 1-1: Manufacturer: syz
[  286.103500][   T13] usb 1-1: SerialNumber: syz
[  286.200842][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.212461][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.272026][ T7359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.487621][ T7359] device hsr_slave_0 entered promiscuous mode
[  286.503337][ T7359] device hsr_slave_1 entered promiscuous mode
[  287.256486][   T13] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  287.276235][   T13] cdc_ncm 1-1:1.0: setting tx_max = 184
[  287.660095][   T13] cdc_ncm 1-1:1.0 eth2: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[  287.716324][ T7558] netlink: 'syz.5.947': attribute type 32 has an invalid length.
[  287.732697][   T13] usb 1-1: USB disconnect, device number 4
[  287.746096][   T13] cdc_ncm 1-1:1.0 eth2: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[  288.107432][ T7565] overlayfs: failed to clone lowerpath
[  288.804229][ T7359] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  288.855325][ T7359] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  288.914287][ T7568] loop4: detected capacity change from 0 to 512
[  288.956956][ T7359] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  288.978098][ T7359] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  289.048250][ T7568] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.950: corrupted inode contents
[  289.112317][ T7568] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.950: mark_inode_dirty error
[  289.172046][ T7568] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.950: corrupted inode contents
[  289.184725][ T7568] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.950: mark_inode_dirty error
[  289.223490][ T7568] Quota error (device loop4): write_blk: dquota write failed
[  289.249822][ T7568] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  289.298139][ T7568] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.950: Failed to acquire dquot type 0
[  289.397842][ T7568] EXT4-fs (loop4): 1 orphan inode deleted
[  289.435175][ T7568] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  289.465511][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.491241][ T7568] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.599768][ T7359] 8021q: adding VLAN 0 to HW filter on device team0
[  289.606897][ T7597] loop0: detected capacity change from 0 to 128
[  289.640287][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  289.663081][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  289.706846][ T4286] device hsr_slave_0 left promiscuous mode
[  289.717682][ T4286] device hsr_slave_1 left promiscuous mode
[  289.746987][ T7597] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8)
[  289.760361][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.779047][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.781917][ T7597] FAT-fs (loop0): Filesystem has been set read-only
[  289.828852][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.865212][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.893653][ T4286] device bridge_slave_1 left promiscuous mode
[  289.913538][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.995893][ T4286] device bridge_slave_0 left promiscuous mode
[  290.002175][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.040483][   T26] audit: type=1800 audit(1739091938.868:10): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.950" name="file1" dev="loop4" ino=15 res=0 errno=0
[  290.471164][ T4286] device veth1_macvtap left promiscuous mode
[  290.552410][ T4286] device veth0_macvtap left promiscuous mode
[  290.748142][ T4286] device veth1_vlan left promiscuous mode
[  290.754002][ T4286] device veth0_vlan left promiscuous mode
[  291.689200][ T7628] overlayfs: failed to clone lowerpath
[  292.726583][ T4286] team0 (unregistering): Port device team_slave_1 removed
[  292.773015][ T4286] team0 (unregistering): Port device team_slave_0 removed
[  292.799889][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.818915][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.913838][ T4286] bond0 (unregistering): Released all slaves
[  292.992532][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  293.001820][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  293.012769][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.019889][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.028971][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  293.038548][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  293.047378][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.054475][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.073503][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  293.145640][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  293.161430][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  293.202094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  293.252633][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  293.328178][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  293.364010][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  293.373660][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  293.421719][ T7359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  293.448662][ T7359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  293.487614][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  293.509078][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  293.522268][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  293.531475][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  293.543167][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  293.769645][ T7664] loop4: detected capacity change from 0 to 512
[  294.312562][ T7664] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.976: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  294.669096][ T7664] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.976: couldn't read orphan inode 16 (err -117)
[  294.745573][ T7664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  294.771055][ T7664] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.784470][ T7679] loop0: detected capacity change from 0 to 128
[  294.895926][   T26] audit: type=1800 audit(1739091943.698:11): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.976" name="bus" dev="loop4" ino=18 res=0 errno=0
[  295.078372][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  295.103067][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  295.171054][ T7359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.286331][ T4174] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  295.333138][ T7688] loop0: detected capacity change from 0 to 1024
[  295.340647][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  295.350370][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  295.395642][ T4174] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[  295.424604][ T7359] device veth0_vlan entered promiscuous mode
[  295.448102][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  295.458164][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  295.491036][ T7359] device veth1_vlan entered promiscuous mode
[  295.512902][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  295.533787][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  295.564498][ T7688] loop0: detected capacity change from 0 to 2048
[  295.587801][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  295.660819][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  295.681060][ T7688] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  295.708547][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  295.732354][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  295.754304][ T7359] device veth0_macvtap entered promiscuous mode
[  295.774135][ T7688] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,abort,mblk_io_submit,nouid32,dioread_lock,grpjquota=,bsddf,,errors=continue. Quota mode: none.
[  295.850614][ T7359] device veth1_macvtap entered promiscuous mode
[  295.962706][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.993497][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.021107][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.044207][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.066796][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.088459][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.114815][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.134707][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  296.158408][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  296.189827][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  296.206067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  296.297176][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.335828][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.363764][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.375676][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.390625][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.402475][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.430511][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.452148][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.466217][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  296.498020][ T7359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.516596][ T7359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.528253][ T7359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.538170][ T7359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.811542][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.853981][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.908423][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  296.932053][ T6748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.952076][ T6748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.005226][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  297.096032][ T7722] device veth1_to_bond entered promiscuous mode
[  297.103123][ T7722] device veth1_to_bond left promiscuous mode
[  297.938011][ T7754] loop0: detected capacity change from 0 to 512
[  298.011112][ T7754] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  298.046423][ T7754] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  298.078404][ T7754] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1000: corrupted in-inode xattr
[  298.100200][ T7754] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1000: couldn't read orphan inode 15 (err -117)
[  298.113696][ T7754] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  298.178913][ T7734] chnl_net:caif_netlink_parms(): no params data found
[  298.496205][ T1239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.537101][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.544471][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.553409][ T7734] device bridge_slave_0 entered promiscuous mode
[  298.562631][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.570096][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.579181][ T7734] device bridge_slave_1 entered promiscuous mode
[  298.628615][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.648809][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.707245][ T7734] team0: Port device team_slave_0 added
[  298.715737][ T7734] team0: Port device team_slave_1 added
[  298.743615][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.751127][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.777325][ T7734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.797802][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.804779][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.843246][ T7734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.902777][ T7734] device hsr_slave_0 entered promiscuous mode
[  298.910006][ T7734] device hsr_slave_1 entered promiscuous mode
[  298.917247][ T7734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.924833][ T7734] Cannot create hsr debugfs directory
[  299.067193][ T1239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.198323][ T1239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.272410][ T7778] loop0: detected capacity change from 0 to 256
[  299.283647][ T1239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.335737][ T7778] exfat: Deprecated parameter 'utf8'
[  299.345247][ T7778] exfat: Deprecated parameter 'namecase'
[  299.350930][ T7778] exfat: Deprecated parameter 'utf8'
[  299.412737][ T7778] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  299.545233][ T5008] Bluetooth: hci0: command 0x0409 tx timeout
[  299.804623][ T7734] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  300.037373][ T7734] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  300.311162][ T7734] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  300.541430][ T7734] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  301.012544][ T7780] chnl_net:caif_netlink_parms(): no params data found
[  301.263224][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.324923][ T7734] 8021q: adding VLAN 0 to HW filter on device team0
[  301.363328][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  301.383469][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.486181][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  301.514338][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  301.563316][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.570681][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.632220][ T4208] Bluetooth: hci3: command 0x0409 tx timeout
[  301.640537][ T4208] Bluetooth: hci0: command 0x041b tx timeout
[  301.649634][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  301.659036][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  301.668165][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.675279][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.684845][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  301.695858][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.114793][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.148564][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.210227][ T7780] device bridge_slave_0 entered promiscuous mode
[  302.246089][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.269770][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.307605][ T7780] device bridge_slave_1 entered promiscuous mode
[  302.531475][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.542021][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  302.647079][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  302.813924][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.996900][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  303.246390][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  303.295741][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.335375][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.378561][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.419807][ T7734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.453308][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  303.621255][ T7780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.705844][   T23] Bluetooth: hci0: command 0x040f tx timeout
[  303.712587][   T23] Bluetooth: hci3: command 0x041b tx timeout
[  303.733671][ T7864] overlayfs: failed to clone lowerpath
[  304.552042][ T7780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.669341][ T7780] team0: Port device team_slave_0 added
[  304.727834][ T7780] team0: Port device team_slave_1 added
[  304.813192][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.829375][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.884428][ T7780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.913616][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.942371][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.979984][ T7780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.095922][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  305.103414][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  305.137683][ T7734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.211095][ T7780] device hsr_slave_0 entered promiscuous mode
[  305.246527][ T7780] device hsr_slave_1 entered promiscuous mode
[  305.262013][ T7780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.304150][ T7780] Cannot create hsr debugfs directory
[  305.389708][ T1239] device hsr_slave_0 left promiscuous mode
[  305.408161][ T1239] device hsr_slave_1 left promiscuous mode
[  305.458817][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.472098][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.495984][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.517096][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.541160][ T1239] device bridge_slave_1 left promiscuous mode
[  305.557194][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.582286][ T1239] device bridge_slave_0 left promiscuous mode
[  305.600966][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.663035][ T1239] device veth1_macvtap left promiscuous mode
[  305.675384][ T1239] device veth0_macvtap left promiscuous mode
[  305.681503][ T1239] device veth1_vlan left promiscuous mode
[  305.705401][ T1239] device veth0_vlan left promiscuous mode
[  305.778329][ T4991] Bluetooth: hci0: command 0x0419 tx timeout
[  305.942659][ T4991] Bluetooth: hci3: command 0x040f tx timeout
[  306.131562][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1038'.
[  306.350116][ T1239] team0 (unregistering): Port device team_slave_1 removed
[  306.475223][ T1239] team0 (unregistering): Port device team_slave_0 removed
[  306.539895][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.574880][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.792659][ T1239] bond0 (unregistering): Released all slaves
[  307.376906][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  307.404913][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  307.554535][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  307.592429][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  307.613284][ T7734] device veth0_vlan entered promiscuous mode
[  307.687046][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  307.698842][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  307.801295][ T7734] device veth1_vlan entered promiscuous mode
[  307.930662][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  307.975941][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  308.012030][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  308.028869][ T4991] Bluetooth: hci3: command 0x0419 tx timeout
[  308.029195][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  308.077389][ T7734] device veth0_macvtap entered promiscuous mode
[  308.126447][ T7734] device veth1_macvtap entered promiscuous mode
[  308.209757][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.234118][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.274438][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.286300][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.305153][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.325095][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.346793][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.354184][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  308.384251][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  308.396645][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  308.417062][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  308.495275][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.521437][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.538969][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.561102][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.665020][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.714194][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.835904][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.902026][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  308.916356][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  308.962527][ T7780] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  309.008142][ T7734] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.025339][ T7734] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.044642][ T7734] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.066345][ T7734] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.112770][ T7780] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  309.158255][ T7780] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  309.242193][ T7780] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  309.409802][ T4536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.434445][ T4536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.499877][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  309.522404][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.579900][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.623267][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  309.772500][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.868219][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  309.889563][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  309.919588][ T7780] 8021q: adding VLAN 0 to HW filter on device team0
[  309.951213][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  309.966146][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  309.988423][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.995618][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.046305][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  310.087465][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  310.113313][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  310.142404][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.149618][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.201310][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  310.232658][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  310.261214][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  310.288855][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  310.801418][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  310.824645][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  310.881374][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  311.086216][ T7780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  311.413611][ T7780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.510238][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  311.538781][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  311.553079][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  311.568599][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  311.591287][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  312.188363][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.218233][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  312.246314][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  312.308965][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  312.339159][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  312.398712][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  312.416782][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  312.458320][ T7780] device veth0_vlan entered promiscuous mode
[  312.475518][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  312.490603][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  312.528945][ T7780] device veth1_vlan entered promiscuous mode
[  312.615790][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  312.657743][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  312.724388][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  313.031794][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  313.092238][ T7780] device veth0_macvtap entered promiscuous mode
[  313.135678][ T7780] device veth1_macvtap entered promiscuous mode
[  313.254891][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.296380][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.337912][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.394619][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.579076][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.589990][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.600149][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.610944][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.623968][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.719028][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  313.753055][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  313.797770][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  313.823745][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  313.862714][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'.
[  313.908071][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.922255][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.040379][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.067486][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.083089][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.104501][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.132182][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.154872][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.166875][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.187512][ T7780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.204426][ T7780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.215641][ T7780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.224471][ T7780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.290224][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  314.315946][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  314.341018][ T8094] loop6: detected capacity change from 0 to 1024
[  314.772676][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.815465][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.036290][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  315.069836][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.101677][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.281181][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  315.341974][ T8112] loop6: detected capacity change from 0 to 2048
[  315.488151][ T8112] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  315.519668][ T3546] udevd[3546]: worker [7886] terminated by signal 33 (Unknown signal 33)
[  315.534894][ T3546] udevd[3546]: worker [7886] failed while handling '/devices/virtual/block/loop6'
[  315.550424][ T8112] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  315.578471][ T8112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.467289][ T8139] loop0: detected capacity change from 0 to 4096
[  316.596228][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  316.602596][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  316.633022][ T8139] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  316.753283][ T8139] ntfs: volume version 3.1.
[  317.114465][ T1239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.484219][ T1239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.524883][ T1239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.582600][ T1239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.327276][ T8208] loop6: detected capacity change from 0 to 8192
[  318.561155][ T8219] loop0: detected capacity change from 0 to 512
[  318.734084][ T8219] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1092: casefold flag without casefold feature
[  318.772987][ T8219] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1092: couldn't read orphan inode 15 (err -117)
[  318.790954][ T8219] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  319.925883][ T8245] overlayfs: failed to clone lowerpath
[  320.637107][ T1239] device hsr_slave_0 left promiscuous mode
[  320.657207][ T1239] device hsr_slave_1 left promiscuous mode
[  320.721916][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  320.741158][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.761920][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.789928][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.835939][ T1239] device bridge_slave_1 left promiscuous mode
[  320.852455][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.880745][ T1239] device bridge_slave_0 left promiscuous mode
[  320.906278][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.947232][ T1239] device veth1_macvtap left promiscuous mode
[  320.953319][ T1239] device veth0_macvtap left promiscuous mode
[  320.982334][ T1239] device veth1_vlan left promiscuous mode
[  321.002557][ T1239] device veth0_vlan left promiscuous mode
[  321.385253][ T4991] Bluetooth: hci3: command 0x0409 tx timeout
[  321.659520][ T1239] team0 (unregistering): Port device team_slave_1 removed
[  321.704101][ T1239] team0 (unregistering): Port device team_slave_0 removed
[  321.733085][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.773181][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  321.975292][ T1239] bond0 (unregistering): Released all slaves
[  321.999988][ T8279] loop6: detected capacity change from 0 to 128
[  322.250432][ T8279] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  322.281591][ T8279] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.459542][ T8289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1102'.
[  322.609297][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1101'.
[  322.624847][ T8293] xt_TCPMSS: Only works on TCP SYN packets
[  322.986633][ T8296] netlink: 'syz.0.1105': attribute type 10 has an invalid length.
[  323.098019][ T8237] chnl_net:caif_netlink_parms(): no params data found
[  323.455152][   T13] Bluetooth: hci3: command 0x041b tx timeout
[  324.533558][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.565948][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.637751][ T8237] device bridge_slave_0 entered promiscuous mode
[  324.713042][ T8330] loop0: detected capacity change from 0 to 512
[  324.720815][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.763475][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.773144][ T8237] device bridge_slave_1 entered promiscuous mode
[  325.252586][ T8330] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1112: casefold flag without casefold feature
[  325.333377][ T8330] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1112: couldn't read orphan inode 15 (err -117)
[  325.364459][ T8330] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  325.517127][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.529207][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.678575][   T13] Bluetooth: hci3: command 0x040f tx timeout
[  326.400495][ T8237] team0: Port device team_slave_0 added
[  326.416717][ T8237] team0: Port device team_slave_1 added
[  326.550879][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.578970][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.667768][ T8355] loop0: detected capacity change from 0 to 128
[  326.714991][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.767383][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.817566][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.854575][ T8355] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  326.893773][ T8355] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.894789][ T8365] loop6: detected capacity change from 0 to 1024
[  326.923463][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.217932][ T8237] device hsr_slave_0 entered promiscuous mode
[  327.305851][ T8237] device hsr_slave_1 entered promiscuous mode
[  327.400074][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1119'.
[  327.417064][ T8370] xt_TCPMSS: Only works on TCP SYN packets
[  327.812289][ T1108] Bluetooth: hci3: command 0x0419 tx timeout
[  329.108846][ T8381] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1123'.
[  329.965200][ T8399] loop0: detected capacity change from 0 to 8
[  330.108379][ T8399] unable to read inode lookup table
[  330.270694][ T8408] loop6: detected capacity change from 0 to 256
[  330.388982][ T8408] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  330.711506][ T8237] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  330.731930][ T8237] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  330.769237][ T8237] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  330.834450][ T8237] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  331.092934][ T8424] loop0: detected capacity change from 0 to 512
[  331.171094][ T8427] loop6: detected capacity change from 0 to 128
[  331.219270][ T8424] EXT4-fs (loop0): orphan cleanup on readonly fs
[  331.235907][ T8424] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.1134: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1)
[  331.272219][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.288181][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  331.291937][ T8424] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.1134: Bad quota inode: 4, type: 1
[  331.310697][ T8424] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  331.319061][ T8427] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  331.326187][ T8424] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  331.337966][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  331.343176][ T8424] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  331.376606][ T8427] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.517582][ T8237] 8021q: adding VLAN 0 to HW filter on device team0
[  331.741771][ T8433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1133'.
[  331.757593][ T8433] xt_TCPMSS: Only works on TCP SYN packets
[  332.358916][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  332.455841][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.494177][ T8440] loop0: detected capacity change from 0 to 1024
[  332.532532][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.539717][ T6960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.699054][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  332.743749][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  332.783279][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.790505][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.825435][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  332.844226][ T8440] hfsplus: small file entry
[  332.850614][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  332.888643][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  332.925715][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  332.958235][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  332.984058][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  333.026052][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  333.060303][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  333.184646][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  333.233663][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  333.264585][ T8237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  333.292876][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  333.330666][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  333.445155][ T8455] loop0: detected capacity change from 0 to 1024
[  333.583316][ T8455] hfsplus: failed to load root directory
[  333.682974][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.581187][ T8469] loop6: detected capacity change from 0 to 512
[  334.618271][ T8470] loop0: detected capacity change from 0 to 1024
[  334.689302][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  334.700717][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  334.734000][ T8470] EXT4-fs (loop0): Ignoring removed orlov option
[  334.771264][ T8470] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  334.776376][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.825988][ T8469] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1141: casefold flag without casefold feature
[  334.884478][ T8470] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  334.907670][ T8469] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1141: couldn't read orphan inode 15 (err -117)
[  334.976476][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  334.991441][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  335.079299][ T8469] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  335.098155][ T8237] device veth0_vlan entered promiscuous mode
[  335.174253][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  335.198642][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  335.265757][ T8237] device veth1_vlan entered promiscuous mode
[  335.308802][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  335.357282][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  335.872213][ T8237] device veth0_macvtap entered promiscuous mode
[  335.938709][ T8237] device veth1_macvtap entered promiscuous mode
[  336.030655][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.077621][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.112147][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.151991][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.172041][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.208527][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.218599][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.232934][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.274392][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.320243][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  336.332677][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  336.359312][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  336.386319][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  336.406489][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  336.439378][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  336.488209][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.507345][ T8495] loop0: detected capacity change from 0 to 128
[  336.545300][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.555545][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.566613][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.577959][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.588469][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.598738][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.610069][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.631075][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.647586][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  336.683441][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  336.718024][ T8237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.748494][ T8237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.751938][ T8495] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  336.759188][ T8237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.777767][ T8237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.799895][ T8495] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.844560][ T8495] EXT4-fs (loop0): shut down requested (2)
[  336.946493][ T6748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.988393][ T6748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.051015][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  337.169526][ T6960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.204555][ T6960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.247465][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  337.335210][ T5008] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  337.357016][ T8237] 
[  337.359380][ T8237] ======================================================
[  337.366414][ T8237] WARNING: possible circular locking dependency detected
[  337.373868][ T8237] 5.15.178-syzkaller #0 Not tainted
[  337.379054][ T8237] ------------------------------------------------------
[  337.386171][ T8237] syz-executor/8237 is trying to acquire lock:
[  337.392309][ T8237] ffff888073ba0120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x104/0x300
[  337.402764][ T8237] 
[  337.402764][ T8237] but task is already holding lock:
[  337.410122][ T8237] ffffffff8dd8cfc8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  337.419682][ T8237] 
[  337.419682][ T8237] which lock already depends on the new lock.
[  337.419682][ T8237] 
[  337.430076][ T8237] 
[  337.430076][ T8237] the existing dependency chain (in reverse order) is:
[  337.439085][ T8237] 
[  337.439085][ T8237] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  337.446814][ T8237]        lock_acquire+0x1db/0x4f0
[  337.452107][ T8237]        __mutex_lock_common+0x1da/0x25a0
[  337.457829][ T8237]        mutex_lock_nested+0x17/0x20
[  337.463119][ T8237]        hci_remote_features_evt+0x639/0xac0
[  337.469107][ T8237]        hci_event_packet+0x6fe/0x1550
[  337.474574][ T8237]        hci_rx_work+0x237/0xa10
[  337.479504][ T8237]        process_one_work+0x8a1/0x10c0
[  337.484970][ T8237]        worker_thread+0xaca/0x1280
[  337.490165][ T8237]        kthread+0x3f6/0x4f0
[  337.494749][ T8237]        ret_from_fork+0x1f/0x30
[  337.499698][ T8237] 
[  337.499698][ T8237] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  337.506986][ T8237]        lock_acquire+0x1db/0x4f0
[  337.512029][ T8237]        __mutex_lock_common+0x1da/0x25a0
[  337.517744][ T8237]        mutex_lock_nested+0x17/0x20
[  337.523106][ T8237]        sco_sock_connect+0x181/0x8e0
[  337.528469][ T8237]        __sys_connect+0x38b/0x410
[  337.533574][ T8237]        __x64_sys_connect+0x76/0x80
[  337.538944][ T8237]        do_syscall_64+0x3b/0xb0
[  337.543876][ T8237]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  337.550294][ T8237] 
[  337.550294][ T8237] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
[  337.559426][ T8237]        validate_chain+0x1649/0x5930
[  337.564801][ T8237]        __lock_acquire+0x1295/0x1ff0
[  337.570167][ T8237]        lock_acquire+0x1db/0x4f0
[  337.575188][ T8237]        lock_sock_nested+0x44/0x100
[  337.580480][ T8237]        sco_conn_del+0x104/0x300
[  337.585497][ T8237]        hci_conn_hash_flush+0x10d/0x220
[  337.591131][ T8237]        hci_dev_do_close+0x9f6/0x1070
[  337.596588][ T8237]        hci_unregister_dev+0x2d7/0x580
[  337.602129][ T8237]        vhci_release+0x73/0xc0
[  337.606972][ T8237]        __fput+0x3fe/0x8e0
[  337.611470][ T8237]        task_work_run+0x129/0x1a0
[  337.616577][ T8237]        do_exit+0x6a3/0x2480
[  337.621245][ T8237]        do_group_exit+0x144/0x310
[  337.626347][ T8237]        __x64_sys_exit_group+0x3b/0x40
[  337.631883][ T8237]        do_syscall_64+0x3b/0xb0
[  337.636811][ T8237]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  337.643239][ T8237] 
[  337.643239][ T8237] other info that might help us debug this:
[  337.643239][ T8237] 
[  337.653462][ T8237] Chain exists of:
[  337.653462][ T8237]   sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
[  337.653462][ T8237] 
[  337.667709][ T8237]  Possible unsafe locking scenario:
[  337.667709][ T8237] 
[  337.675291][ T8237]        CPU0                    CPU1
[  337.680656][ T8237]        ----                    ----
[  337.686031][ T8237]   lock(hci_cb_list_lock);
[  337.690534][ T8237]                                lock(&hdev->lock);
[  337.697113][ T8237]                                lock(hci_cb_list_lock);
[  337.704123][ T8237]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
[  337.710002][ T8237] 
[  337.710002][ T8237]  *** DEADLOCK ***
[  337.710002][ T8237] 
[  337.718150][ T8237] 3 locks held by syz-executor/8237:
[  337.723425][ T8237]  #0: ffff888076550ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  337.733170][ T8237]  #1: ffff888076550078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  337.742648][ T8237]  #2: ffffffff8dd8cfc8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  337.752647][ T8237] 
[  337.752647][ T8237] stack backtrace:
[  337.758520][ T8237] CPU: 1 PID: 8237 Comm: syz-executor Not tainted 5.15.178-syzkaller #0
[  337.766836][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  337.777067][ T8237] Call Trace:
[  337.780343][ T8237]  <TASK>
[  337.783265][ T8237]  dump_stack_lvl+0x1e3/0x2d0
[  337.787935][ T8237]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  337.793663][ T8237]  ? print_circular_bug+0x12b/0x1a0
[  337.799030][ T8237]  check_noncircular+0x2f8/0x3b0
[  337.803989][ T8237]  ? stack_trace_snprint+0xe0/0xe0
[  337.809120][ T8237]  ? add_chain_block+0x850/0x850
[  337.814138][ T8237]  ? lockdep_lock+0x11f/0x2a0
[  337.818807][ T8237]  ? lockdep_unlock+0x166/0x300
[  337.823653][ T8237]  ? lockdep_lock+0x2a0/0x2a0
[  337.828325][ T8237]  validate_chain+0x1649/0x5930
[  337.833179][ T8237]  ? reacquire_held_locks+0x660/0x660
[  337.838542][ T8237]  ? reacquire_held_locks+0x660/0x660
[  337.843909][ T8237]  ? mark_lock+0x98/0x340
[  337.848605][ T8237]  ? mark_lock+0x98/0x340
[  337.852928][ T8237]  __lock_acquire+0x1295/0x1ff0
[  337.857777][ T8237]  lock_acquire+0x1db/0x4f0
[  337.862272][ T8237]  ? sco_conn_del+0x104/0x300
[  337.866942][ T8237]  ? read_lock_is_recursive+0x10/0x10
[  337.872307][ T8237]  ? read_lock_is_recursive+0x10/0x10
[  337.877675][ T8237]  ? sco_conn_del+0xfa/0x300
[  337.882259][ T8237]  ? __lock_acquire+0x1ff0/0x1ff0
[  337.887273][ T8237]  ? do_raw_spin_lock+0x14a/0x370
[  337.892297][ T8237]  lock_sock_nested+0x44/0x100
[  337.897068][ T8237]  ? sco_conn_del+0x104/0x300
[  337.901741][ T8237]  sco_conn_del+0x104/0x300
[  337.906237][ T8237]  ? sco_connect_cfm+0xad0/0xad0
[  337.911168][ T8237]  hci_conn_hash_flush+0x10d/0x220
[  337.916276][ T8237]  hci_dev_do_close+0x9f6/0x1070
[  337.921216][ T8237]  hci_unregister_dev+0x2d7/0x580
[  337.926237][ T8237]  vhci_release+0x73/0xc0
[  337.930560][ T8237]  ? vhci_open+0x290/0x290
[  337.934971][ T8237]  __fput+0x3fe/0x8e0
[  337.938954][ T8237]  task_work_run+0x129/0x1a0
[  337.943539][ T8237]  do_exit+0x6a3/0x2480
[  337.947692][ T8237]  ? put_task_struct+0x80/0x80
[  337.952487][ T8237]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  337.958464][ T8237]  ? vtime_user_exit+0x2d1/0x400
[  337.963402][ T8237]  do_group_exit+0x144/0x310
[  337.967990][ T8237]  __x64_sys_exit_group+0x3b/0x40
[  337.973010][ T8237]  do_syscall_64+0x3b/0xb0
[  337.977432][ T8237]  ? clear_bhb_loop+0x15/0x70
[  337.982100][ T8237]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  337.988006][ T8237] RIP: 0033:0x7f0576c4ade9
[  337.992412][ T8237] Code: Unable to access opcode bytes at RIP 0x7f0576c4adbf.
[  337.999766][ T8237] RSP: 002b:00007ffd3794b9c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  338.008172][ T8237] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0576c4ade9
[  338.016244][ T8237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  338.024228][ T8237] RBP: 00007f0576cab8d0 R08: 00007ffd37949767 R09: 0000000000000003
[  338.032201][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.040187][ T8237] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd3794bb80
[  338.048166][ T8237]  </TASK>
[  338.605170][ T5008] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  338.614254][ T5008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.624629][ T5008] usb 1-1: Product: syz
[  338.628912][ T5008] usb 1-1: Manufacturer: syz
[  338.633509][ T5008] usb 1-1: SerialNumber: syz
[  339.755200][ T5008] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  339.761667][ T5008] cdc_ncm 1-1:1.0: setting tx_max = 184
[  339.797908][ T6960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.975407][ T5008] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  339.990876][ T5008] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  340.001061][ T5008] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[  340.018045][ T5008] usb 1-1: USB disconnect, device number 5
[  340.028523][ T5008] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[  340.037617][ T5008] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  340.319464][ T6960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.381752][ T6960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.440712][ T6960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.223554][ T6960] device hsr_slave_0 left promiscuous mode
[  341.230078][ T6960] device hsr_slave_1 left promiscuous mode
[  341.240432][ T6960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.249558][ T6960] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.259811][ T6960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.267512][ T6960] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.275465][ T6960] device bridge_slave_1 left promiscuous mode
[  341.281666][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.293578][ T6960] device bridge_slave_0 left promiscuous mode
[  341.304057][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.318470][ T6960] device veth1_macvtap left promiscuous mode
[  341.324531][ T6960] device veth0_macvtap left promiscuous mode
[  341.333211][ T6960] device veth1_vlan left promiscuous mode
[  341.339828][ T6960] device veth0_vlan left promiscuous mode
[  341.540372][ T6960] team0 (unregistering): Port device team_slave_1 removed
[  341.553570][ T6960] team0 (unregistering): Port device team_slave_0 removed
[  341.569088][ T6960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  341.583591][ T6960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  341.676382][ T6960] bond0 (unregistering): Released all slaves