last executing test programs:

32.591576278s ago: executing program 1 (id=1962):
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
mount$bind(0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0xc05c5340, &(0x7f0000000180)={0x0, 0x2})
socket$netlink(0x10, 0x3, 0x0)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0954912f9f6231854ec98e950cfed21fcad7ff0fbcb566a0982938caa52dd8d39af14c31ed56ad59300", 0x4}, 0x48, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
keyctl$revoke(0x3, r5)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0)

31.665950747s ago: executing program 1 (id=1963):
syz_emit_vhci(0x0, 0x39)
pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0), 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)
gettid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
signalfd(0xffffffffffffffff, &(0x7f0000000a40)={[0x5]}, 0x8)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x63, 0x0, 0x0)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000a00)={'lo\x00'})
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c6e6f6e756d7461696c3d302c636f6465706167653d3835322c73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d69736f383835392d372c73686f72746e616d653d77696e39352c73686f72746e616d653d6c30a62d4b10f8"], 0x1, 0x231, &(0x7f00000007c0)="$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")

30.652330839s ago: executing program 1 (id=1964):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00')
read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020)

16.782656919s ago: executing program 4 (id=1966):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000080)="92", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030409070000000000000000000000030006000000000002000000e0000009000000000000000002000100000000000000ff02feffff4b"], 0x38}}, 0x0)
bind$inet(r1, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000600)=0xdfa, 0x4)
ptrace$pokeuser(0x6, r2, 0x2596, 0x4)
sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}})

15.700058658s ago: executing program 4 (id=1967):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000080)='3', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001240)="ee5d21396015ee66f81ca6607d766049c68897", 0x13}], 0x1}}], 0x1, 0x40000)

15.40736901s ago: executing program 4 (id=1968):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)

15.236172196s ago: executing program 4 (id=1969):
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
mount$bind(0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0xc05c5340, &(0x7f0000000180)={0x0, 0x2})
socket$netlink(0x10, 0x3, 0x0)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0954912f9f6231854ec98e950cfed21fcad7ff0fbcb566a0982938caa52dd8d39af14c31ed56ad59300", 0x4}, 0x48, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
keyctl$revoke(0x3, r5)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0)

13.72099056s ago: executing program 4 (id=1972):
socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
sendto$llc(0xffffffffffffffff, &(0x7f0000000300)="8d", 0x1, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r6 = inotify_init1(0x80000)
fcntl$setown(r6, 0x8, 0xffffffffffffffff)
fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, <r7=>0x0})
r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0xc0185879, &(0x7f0000000180)={@id={0x3fffffff, 0x3ffff, @auto="ffee8e0000190000002000"}})
bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf71", 0xec, 0x4040004, 0x0, 0x0)

11.263376224s ago: executing program 0 (id=1977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
pwritev(r2, 0x0, 0x0, 0x0, 0x0)

10.987923774s ago: executing program 0 (id=1978):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000", 0xf)

10.987582429s ago: executing program 4 (id=1979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00')
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
read$FUSE(r1, &(0x7f0000004780)={0x2020}, 0x2020)

9.074193352s ago: executing program 0 (id=1980):
syz_usb_connect(0x2, 0xb7, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x200440fe, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeb3, &(0x7f0000000040)=0x9)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x183000, 0x0)
io_uring_setup(0x7a56, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef25bae80066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.827931408s ago: executing program 1 (id=1970):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
fsopen(0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="fdd4d4af46a33c29c6f6214c", 0x0, 0x1}, 0x20)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_pts(r3, 0x141601)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x400000)
fcntl$setstatus(r4, 0x4, 0x102800)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
r6 = accept(r5, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
recvmmsg$unix(r6, &(0x7f0000002800), 0x4000000000001e7, 0x40010000, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)

7.660309463s ago: executing program 1 (id=1982):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4c1, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7.656051693s ago: executing program 2 (id=1983):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
tkill(r1, 0x35)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000040)={0x1, 0x1, 0x8})
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb)
socket$inet_udplite(0x2, 0x2, 0x88)

6.410795044s ago: executing program 2 (id=1987):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000580)={[{}, {@numtail}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

5.940298613s ago: executing program 2 (id=1988):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000", 0xf)

5.291812361s ago: executing program 0 (id=1990):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00')

4.376235018s ago: executing program 0 (id=1991):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0xa}]}}]}, 0x40}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@empty}, &(0x7f0000000580)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="00082abd7000fddbdf25030000001c000180080003", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800030000000000080003000100000014000200626f6e643000000000000000000000001400020076657468305f746f5f627269646765001400020064766d727030000000000000", @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, 0x0, 0x0)
listen(r6, 0x2)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)

3.482793637s ago: executing program 2 (id=1992):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
fsopen(0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="fdd4d4af46a33c29c6f6214c", 0x0, 0x1}, 0x20)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_pts(r3, 0x141601)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x400000)
fcntl$setstatus(r4, 0x4, 0x102800)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
r6 = accept(r5, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
recvmmsg$unix(r6, &(0x7f0000002800), 0x4000000000001e7, 0x40010000, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)

3.155078703s ago: executing program 1 (id=1994):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0xfdef)

2.918637408s ago: executing program 0 (id=1996):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44301, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

2.50016156s ago: executing program 3 (id=1998):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030409070000000000000000000000030006000000000002000000e0000009000000000000000002000100000000000000ff02feffff4b"], 0x38}}, 0x0)
bind$inet(r1, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000600)=0xdfa, 0x4)
ptrace$pokeuser(0x6, r2, 0x2596, 0x4)
sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}})

1.087502859s ago: executing program 2 (id=1999):
syz_usb_connect(0x2, 0xb7, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x200440fe, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeb3, &(0x7f0000000040)=0x9)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x183000, 0x0)
io_uring_setup(0x7a56, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef25bae80066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.033602676s ago: executing program 3 (id=2000):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="b8"], 0xb8)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5])
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

672.286294ms ago: executing program 3 (id=2001):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

535.112369ms ago: executing program 3 (id=2002):
semget$private(0x0, 0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x10e, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x67, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @mptcp=@mp_fclose={0x1e, 0x0, 0x4, 0x0, 0x5}, @mptcp=@mp_fclose={0x1e, 0xc, 0x9, 0x0, 0xd}, @exp_fastopen={0xfe, 0xb, 0xf989, "25bd4f4c980a4c"}, @nop]}}}}}}}, 0x0)

362.266093ms ago: executing program 3 (id=2003):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14)

188.232949ms ago: executing program 3 (id=2004):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000080)={[{@sysvgroups}, {@noblock_validity}, {@debug}, {@grpquota}, {@nogrpid}, {@orlov}, {@grpid}]}, 0x80, 0x542, &(0x7f00000027c0)="$eJzs3c9rJFkdAPBv9XRn50dmO6sedMF1dVdmFp3uycbdDR7WEURPC+J6H2PSE8J00kO6szsJATN/gSCioie9eBH8AwQZ8OJRhAE9K6woohk9COqUdHUlk81UJz2xtzs/Ph+o1KtXP77vVVKVelWPqgDOrBcj4kZEPErT9JWIqOb5pXyIrd7QXe7h9uZ8d0giTd/+WxJJnrezrSQfX8pXOx8RX/tKxDeTJ+O21zduzzWbjdV8ut5ZvlNvr29cW1qeW2wsNlZmZqZfn31j9rXZ60Op5+WIePNLf/ret3/65Td/+dl3/3jzL1e71Y7JfP7eejyF7i4qH7RAr+qVbF/s6K6weoRgx1U5q2HuQtESaZqmj9Lqnpx7IykZAAD7dS9gPxQRn4qIV6Ia5w6+nAUAAABOoPQLk/GfpPeEpsBEn3wAAADgBCllfWCTUi3vCzAZpVKt1uvD+5G4WGq22p3P3GqtrSw8+OFkRExFpXRrqdm4nvcVnopK0p2eztKPp1/dNz0TEc9FxHerF7Lp2nyruTDumx8AAABwRlza1/7/Z7XX/gcAAABOmakns0rjKAcAAADwwSlo/wMAAACnjPY/AAAAnGpffeut7pDufP964Z31tdutd64tNNq3a8tr87X51uqd2mKrtZi9s29577rnCrbXbLXufC5W1u7WO412p95e37i53Fpb6dxcet8nsAEAAIAReu4T93+fRMTW5y9kQ9fEuAsFjER5N5Xk44Kj/w/P9sbvjahQwEgU3cPf771nRlAQYOTKR1orHeS0ARxzlXEXABi75JD5fTvv/CYff3K45QEAAIbvysf6P/8/+BsAWz4RACecgxjOrn0P8tLquAoCjFz2/H/QDr8uFuBUqQzUAxA4zf7v5/+HStOnKhAAADB0k9mQlGr57b3JKJVqtYjL2WcBKsmtpWbjekQ8GxG/q1ae6U5PZ2smh7YZAAAAAAAAAAAAAAAAAAAAAAAAAICeNE0iPciNA+cCAAAAJ0BE6c/Jr3rv8r9SfXly//2BieRf2SeBJyLi3R+9/f27c53O6nQ3/++7+Z0f5PmvjuMOBgAAALDfTjt9px0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMP0cHtz/uH2Zvrv7c35Ucb96xcjYmo3fjb05pTjfDY+H5WIuPiPJMp71ksi4twQ4m/di4iPFsVPusXaDVkU/8IHHz+m8r1QFP/SEOLDWXa/e/65UXT8leLFbFx8/JUj3jd9VP3Pf7F7/jvX5/i/PGCM5x/8vN43/r2I58vF55+d+Emf+C9FaaD43/j6xka/eemPI65Ecfy9seqd5Tv19vrGtaXlucXGYmNlZmb69dk3Zl+bvV6/tdRs5D8LY3zn4794dFD9L/aJP3VI/V8eqPYR/31wd/vDvWSlKP7Vlwri//on+RJPxi/l//s+nae786/spLd66b1e+NlvXzio/guP6195mt//1QHrP5QDBQAYmvb6xu25ZrOxehISlaOs1W2lF83Kr8jiGNRLYkyJbw11g2mapn3+ou5HxCDbSeI47JYsMd7zEgAAMHyPL/rHXRIAAAAAAAAAAAAAAAAAAAA4u4b4zrCJwtfsFbxZYGs3lXgzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwbPwvAAD//x4+3Ik=")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000100000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=2005):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

kernel console output (not intermixed with test programs):

hange from 0 to 1024
[  701.879644][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.924697][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  701.988388][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  702.035932][T13694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  702.092507][ T7099] veth1_macvtap: left promiscuous mode
[  702.195456][ T7099] veth0_macvtap: left promiscuous mode
[  702.201752][ T7099] veth1_vlan: left promiscuous mode
[  702.224826][T13707] autofs: Unknown parameter '0x0000000000000000'
[  702.233502][ T7099] veth0_vlan: left promiscuous mode
[  702.586671][ T9169] Bluetooth: hci2: command tx timeout
[  703.087430][T13716] loop1: detected capacity change from 0 to 128
[  703.106866][T13716] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  703.196938][T13718] loop4: detected capacity change from 0 to 16
[  703.225839][T13718] erofs: (device loop4): mounted with root inode @ nid 36.
[  704.768023][T13736] loop1: detected capacity change from 0 to 256
[  704.784245][T13736] exfat: Deprecated parameter 'utf8'
[  704.854707][T13740] 9pnet_virtio: no channels available for device 127.0.0.1
[  704.864798][T13740] netlink: 'syz.0.1821': attribute type 1 has an invalid length.
[  704.872729][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'.
[  704.942563][T13736] exfat: Deprecated parameter 'namecase'
[  705.249030][T13736] exfat: Bad value for 'namecase'
[  705.398684][T13738] loop4: detected capacity change from 0 to 2048
[  705.535251][T13738] udf: Bad value for 'session'
[  705.650749][T13742] autofs: Unknown parameter '0x0000000000000000'
[  706.592730][T13752] ip6t_rpfilter: unknown options
[  707.386666][T13756] loop1: detected capacity change from 0 to 16
[  707.403214][T13759] loop4: detected capacity change from 0 to 128
[  707.421862][T13756] erofs: (device loop1): mounted with root inode @ nid 36.
[  708.902135][ T7099] team0 (unregistering): Port device team_slave_1 removed
[  709.091890][ T7099] team0 (unregistering): Port device team_slave_0 removed
[  709.135309][ T5308] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  709.219803][T13777] loop4: detected capacity change from 0 to 16
[  709.268451][T13777] erofs: (device loop4): mounted with root inode @ nid 36.
[  709.495277][ T5308] usb 2-1: Using ep0 maxpacket: 8
[  709.502860][ T5308] usb 2-1: no configurations
[  709.507880][ T5308] usb 2-1: can't read configurations, error -22
[  709.596851][T13781] No such timeout policy "syz1"
[  709.685517][ T5308] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  709.985391][ T5308] usb 2-1: Using ep0 maxpacket: 8
[  710.013872][ T5308] usb 2-1: no configurations
[  710.103699][ T5308] usb 2-1: can't read configurations, error -22
[  710.111199][ T5308] usb usb2-port1: attempt power cycle
[  710.261592][T13786] fuse: Unknown parameter 'group_i00000000000000000000'
[  710.905842][T13788] autofs: Unknown parameter 'fd0x0000000000000000'
[  710.943427][T13790] loop0: detected capacity change from 0 to 128
[  711.155393][ T5308] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  711.176058][ T5308] usb 2-1: Using ep0 maxpacket: 8
[  711.181706][ T5308] usb 2-1: no configurations
[  711.186995][ T5308] usb 2-1: can't read configurations, error -22
[  711.326362][ T5308] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  711.356981][ T5308] usb 2-1: Using ep0 maxpacket: 8
[  711.369300][ T5308] usb 2-1: no configurations
[  711.377576][ T5308] usb 2-1: can't read configurations, error -22
[  711.394273][ T5308] usb usb2-port1: unable to enumerate USB device
[  711.758505][T13564] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.775195][T12785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.784729][T13564] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.818816][T13564] bridge_slave_0: entered allmulticast mode
[  711.836071][T13564] bridge_slave_0: entered promiscuous mode
[  712.300035][T13564] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.307459][T13564] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.314735][T13564] bridge_slave_1: entered allmulticast mode
[  712.322163][T13564] bridge_slave_1: entered promiscuous mode
[  712.444722][T13564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.483074][T13564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.746015][T13824] loop2: detected capacity change from 0 to 128
[  712.796224][T13824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  712.809131][T13824] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  712.856440][T13564] team0: Port device team_slave_0 added
[  712.867604][T13564] team0: Port device team_slave_1 added
[  712.987620][T13832] loop0: detected capacity change from 0 to 128
[  713.087772][T13564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.107476][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.169168][T13564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.207957][T13564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.283886][T13843] fuse: Bad value for 'fd'
[  713.405530][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.493862][T13564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.703784][T12785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  713.933362][T13564] hsr_slave_0: entered promiscuous mode
[  713.949129][T13564] hsr_slave_1: entered promiscuous mode
[  714.717610][ T5334] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  714.906130][ T5334] usb 1-1: Using ep0 maxpacket: 8
[  714.911987][ T5334] usb 1-1: no configurations
[  714.916956][ T5334] usb 1-1: can't read configurations, error -22
[  714.993001][T13872] autofs: Unknown parameter 'fd0x0000000000000000'
[  715.055242][ T5334] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  715.245312][ T5334] usb 1-1: Using ep0 maxpacket: 8
[  715.266486][ T5334] usb 1-1: no configurations
[  715.276349][ T5334] usb 1-1: can't read configurations, error -22
[  715.315896][ T5334] usb usb1-port1: attempt power cycle
[  715.695321][ T5334] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  715.755657][ T5334] usb 1-1: Using ep0 maxpacket: 8
[  715.810869][ T5334] usb 1-1: no configurations
[  715.840984][ T5334] usb 1-1: can't read configurations, error -22
[  715.986731][ T5334] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  716.035750][ T5334] usb 1-1: Using ep0 maxpacket: 8
[  716.062371][ T5334] usb 1-1: no configurations
[  716.123837][ T5334] usb 1-1: can't read configurations, error -22
[  716.177941][ T5334] usb usb1-port1: unable to enumerate USB device
[  716.870357][T13891] loop4: detected capacity change from 0 to 128
[  717.123556][T13564] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  717.192884][T13564] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  717.262961][T13564] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  717.294679][T13564] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  717.378217][T13911] Bluetooth: MGMT ver 1.23
[  718.228457][T13903] overlayfs: failed to get index nlink (file2/file1, err=-61)
[  718.292832][T13925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1866'.
[  718.452945][T13564] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.385888][T13564] 8021q: adding VLAN 0 to HW filter on device team0
[  719.454140][T13944] autofs: Unknown parameter 'fd0x0000000000000000'
[  719.505938][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.513067][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.535539][T13946] loop0: detected capacity change from 0 to 512
[  719.546402][T13946] EXT4-fs: Ignoring removed orlov option
[  719.552107][T13946] EXT4-fs: Ignoring removed i_version option
[  719.590913][T13946] EXT4-fs: Ignoring removed nomblk_io_submit option
[  719.688848][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.696065][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.783627][T13946] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  720.216181][T13946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  720.320204][T13946] EXT4-fs (loop0): orphan cleanup on readonly fs
[  720.371309][T13946] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  720.449113][T13962] loop4: detected capacity change from 0 to 2048
[  720.475936][T13946] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  720.503473][T13962] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  720.563836][T13962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  720.835571][T13946] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  721.076476][T13946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1869: bg 0: block 40: padding at end of block bitmap is not set
[  721.380942][T13968] loop1: detected capacity change from 0 to 512
[  721.569986][T13946] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  721.616404][T13946] EXT4-fs (loop0): 1 truncate cleaned up
[  721.627297][ T9167] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  721.628099][T13946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  721.693492][ T9167] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  721.736133][T13946] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1869: bad symlink.
[  721.943382][T13564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  722.060731][T13989] loop1: detected capacity change from 0 to 256
[  722.070760][T13989] vfat: Bad value for 'shortname'
[  722.282986][T13564] veth0_vlan: entered promiscuous mode
[  722.697546][T13564] veth1_vlan: entered promiscuous mode
[  724.373456][T14002] loop1: detected capacity change from 0 to 1024
[  724.383282][T14002] EXT4-fs: Ignoring removed nobh option
[  724.557848][T14002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  724.695937][T13564] veth0_macvtap: entered promiscuous mode
[  724.705143][T13564] veth1_macvtap: entered promiscuous mode
[  724.759642][T12977] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /44/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  724.764144][T14016] loop2: detected capacity change from 0 to 16
[  724.796442][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  724.832140][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.875664][T14016] erofs: (device loop2): mounted with root inode @ nid 36.
[  724.886268][T12977] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  724.915365][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  724.935200][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.945064][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  724.975316][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.995272][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  725.015191][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.025038][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  725.065566][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.086542][T13564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  725.096548][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.107461][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.118146][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.131162][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.135446][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  725.141243][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.141263][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.141280][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.154560][T12977] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /44/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  725.164365][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.215618][T13564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.278690][T14022] No such timeout policy "syz1"
[  725.412425][T12977] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  725.465836][T13564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.497749][T13564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  725.684671][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  725.753063][T12977] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /44/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  725.877821][T12977] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  725.924179][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  725.943858][T12977] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /44/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  725.975999][T12977] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  726.009624][ T2529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.065396][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  726.082403][T12977] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /44/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  726.087476][T14025] loop2: detected capacity change from 0 to 2048
[  726.123076][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  726.140018][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  726.162973][T12977] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  726.195318][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  726.204029][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  726.239601][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  726.240338][T13564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  726.260003][T13564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  726.269249][T13564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  726.278315][T13564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  726.298684][T14025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  726.317143][T13490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  726.329733][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  726.343792][T13490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  726.375946][T13490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  726.400224][ T2529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.405585][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  726.453221][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  726.516297][T12977] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  726.660745][T12472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.681217][ T2529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.884228][ T2529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.124775][T12785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.203032][ T2529] bridge_slave_1: left allmulticast mode
[  727.216663][ T2529] bridge_slave_1: left promiscuous mode
[  727.222450][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.233791][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.244791][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  727.283808][ T2529] bridge_slave_0: left allmulticast mode
[  727.334422][ T2529] bridge_slave_0: left promiscuous mode
[  727.344229][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.370603][ T9169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  727.381318][ T9169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  727.414212][ T9169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  727.432217][ T9169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  727.440970][ T9169] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  727.490758][ T9169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  728.050864][T14075] loop2: detected capacity change from 0 to 512
[  728.060123][T14075] EXT4-fs: Ignoring removed orlov option
[  728.066060][T14075] EXT4-fs: Ignoring removed i_version option
[  728.072130][T14075] EXT4-fs: Ignoring removed nomblk_io_submit option
[  728.185796][T14075] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  728.193885][T14075] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  728.203395][T14075] EXT4-fs (loop2): orphan cleanup on readonly fs
[  728.210282][T14075] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  728.219999][T14075] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  728.234641][T14075] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  728.245947][T14075] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1892: bg 0: block 40: padding at end of block bitmap is not set
[  728.261125][T14075] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  728.271170][T14075] EXT4-fs (loop2): 1 truncate cleaned up
[  728.280230][T14075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  728.326840][T14075] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.1892: bad symlink.
[  728.512243][ T9169] Bluetooth: hci3: command tx timeout
[  729.138554][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  729.183778][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  729.196099][ T2529] bond0 (unregistering): Released all slaves
[  729.383816][T12977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  729.417978][T14026] chnl_net:caif_netlink_parms(): no params data found
[  729.449092][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.488038][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.498433][T12785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  729.627811][ T9169] Bluetooth: hci0: command tx timeout
[  730.058171][T13490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  730.069988][T13490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  730.078661][T13490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  730.087618][T13490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  730.095301][T13490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  730.108552][T13490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  730.270539][ T2529] hsr_slave_0: left promiscuous mode
[  730.284499][ T2529] hsr_slave_1: left promiscuous mode
[  730.294532][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  730.317765][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  730.344095][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  730.358814][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  730.392927][ T2529] veth1_macvtap: left promiscuous mode
[  730.409470][ T2529] veth0_macvtap: left promiscuous mode
[  730.436487][ T9169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  730.455155][ T9169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  730.467148][ T2529] veth1_vlan: left promiscuous mode
[  730.472587][ T2529] veth0_vlan: left promiscuous mode
[  730.561691][ T9169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  730.574506][ T9169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  730.585202][ T9169] Bluetooth: hci3: command tx timeout
[  730.592804][ T9169] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  730.600403][ T9169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  731.033175][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  731.381397][ T2529] team0 (unregistering): Port device team_slave_1 removed
[  731.498138][T14124] loop3: detected capacity change from 0 to 512
[  731.507102][T14124] EXT4-fs: Ignoring removed orlov option
[  731.512895][T14124] EXT4-fs: Ignoring removed i_version option
[  731.519051][T14124] EXT4-fs: Ignoring removed nomblk_io_submit option
[  731.560845][T14124] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  731.569004][T14124] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  731.578219][T14124] EXT4-fs (loop3): orphan cleanup on readonly fs
[  731.585007][T14124] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  731.594773][T14124] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  731.609538][T14124] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  731.684979][T14124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1900: bg 0: block 40: padding at end of block bitmap is not set
[  731.703782][T14124] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  731.725816][T14124] EXT4-fs (loop3): 1 truncate cleaned up
[  731.735069][T14124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  731.774752][T14124] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1900: bad symlink.
[  731.823147][ T9169] Bluetooth: hci0: command tx timeout
[  731.856675][ T2529] team0 (unregistering): Port device team_slave_0 removed
[  732.221680][ T9169] Bluetooth: hci1: command tx timeout
[  732.667757][T13490] Bluetooth: hci3: command tx timeout
[  732.667780][ T9169] Bluetooth: hci4: command tx timeout
[  732.945996][T14026] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.953106][T14026] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.961925][T14026] bridge_slave_0: entered allmulticast mode
[  732.969501][T14026] bridge_slave_0: entered promiscuous mode
[  733.024048][T14026] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.031271][T14026] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.041551][T14026] bridge_slave_1: entered allmulticast mode
[  733.048739][T14026] bridge_slave_1: entered promiscuous mode
[  733.147651][T14026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.163207][T14026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  733.267841][T14053] chnl_net:caif_netlink_parms(): no params data found
[  733.314761][T14026] team0: Port device team_slave_0 added
[  733.336221][T14026] team0: Port device team_slave_1 added
[  733.425262][T13564] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  733.502303][T14026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  733.526161][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.565434][T14026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  733.629629][T14026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  733.652643][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.696210][T14026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  733.842309][T14053] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.851470][T14053] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.866129][ T9169] Bluetooth: hci0: command tx timeout
[  733.871844][T14053] bridge_slave_0: entered allmulticast mode
[  733.886425][T14053] bridge_slave_0: entered promiscuous mode
[  733.957237][T14053] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.964611][T14053] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.973058][T14053] bridge_slave_1: entered allmulticast mode
[  733.981138][T14053] bridge_slave_1: entered promiscuous mode
[  734.017819][T14026] hsr_slave_0: entered promiscuous mode
[  734.035487][T14026] hsr_slave_1: entered promiscuous mode
[  734.047778][T14026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  734.055466][T14026] Cannot create hsr debugfs directory
[  734.084683][T13490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  734.104696][T13490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  734.114212][T13490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  734.122712][T13490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  734.136590][T13490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  734.143961][T13490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  734.188059][T14053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  734.223252][T14111] chnl_net:caif_netlink_parms(): no params data found
[  734.241263][T14053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.265496][T13490] Bluetooth: hci1: command tx timeout
[  734.309165][T14053] team0: Port device team_slave_0 added
[  734.394963][T14053] team0: Port device team_slave_1 added
[  734.504517][T14053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  734.522522][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.549787][T14053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  734.574236][T14053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  734.581312][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.617003][T14053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.711996][ T2529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.745544][T13490] Bluetooth: hci4: command tx timeout
[  734.750118][ T9169] Bluetooth: hci3: command tx timeout
[  734.808054][T14111] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.815657][T14111] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.822892][T14111] bridge_slave_0: entered allmulticast mode
[  734.831769][T14111] bridge_slave_0: entered promiscuous mode
[  734.891141][ T2529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.915229][T14105] chnl_net:caif_netlink_parms(): no params data found
[  734.934444][T14111] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.942420][T14111] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.949863][T14111] bridge_slave_1: entered allmulticast mode
[  734.956936][T14111] bridge_slave_1: entered promiscuous mode
[  735.000769][T14053] hsr_slave_0: entered promiscuous mode
[  735.007353][T14053] hsr_slave_1: entered promiscuous mode
[  735.013409][T14053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  735.021807][T14053] Cannot create hsr debugfs directory
[  735.081595][ T2529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.109099][T14111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.124801][T14111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.186660][ T2529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.269213][T14111] team0: Port device team_slave_0 added
[  735.282409][T14111] team0: Port device team_slave_1 added
[  735.402271][T14105] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.414683][T14105] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.433188][T14105] bridge_slave_0: entered allmulticast mode
[  735.441994][T14105] bridge_slave_0: entered promiscuous mode
[  735.479952][T14111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.488771][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.514734][    C0] vkms_vblank_simulate: vblank timer overrun
[  735.522716][T14111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  735.535541][T14111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  735.542948][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.568880][    C0] vkms_vblank_simulate: vblank timer overrun
[  735.586882][T14111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  735.721907][T14105] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.735439][T14105] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.742754][T14105] bridge_slave_1: entered allmulticast mode
[  735.759163][T14105] bridge_slave_1: entered promiscuous mode
[  735.933274][T14105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.946145][ T9169] Bluetooth: hci0: command tx timeout
[  736.052709][T14105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.123913][ T2529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.162215][T14111] hsr_slave_0: entered promiscuous mode
[  736.181896][T14111] hsr_slave_1: entered promiscuous mode
[  736.191570][T14111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  736.202198][ T9169] Bluetooth: hci2: command tx timeout
[  736.209356][T14111] Cannot create hsr debugfs directory
[  736.269572][ T2529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.303778][T14105] team0: Port device team_slave_0 added
[  736.314538][T14105] team0: Port device team_slave_1 added
[  736.340883][T14149] chnl_net:caif_netlink_parms(): no params data found
[  736.348061][ T9169] Bluetooth: hci1: command tx timeout
[  736.425748][ T2529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.466060][T14105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  736.473050][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  736.498967][    C0] vkms_vblank_simulate: vblank timer overrun
[  736.509016][T14105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.557421][T14105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.564385][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  736.592169][T14105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.627639][ T2529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.723981][T14149] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.732725][T14149] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.740903][T14149] bridge_slave_0: entered allmulticast mode
[  736.748495][T14149] bridge_slave_0: entered promiscuous mode
[  736.788745][T14105] hsr_slave_0: entered promiscuous mode
[  736.797057][T14105] hsr_slave_1: entered promiscuous mode
[  736.803352][T14105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  736.813013][T14105] Cannot create hsr debugfs directory
[  736.819005][T14149] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.826170][ T9169] Bluetooth: hci4: command tx timeout
[  736.838381][T14149] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.845975][T14149] bridge_slave_1: entered allmulticast mode
[  736.852595][T14149] bridge_slave_1: entered promiscuous mode
[  736.936374][T14149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  737.000671][T14053] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.044663][T14149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.079950][T14026] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  737.137932][ T2529] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.192403][T14053] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.229588][T14149] team0: Port device team_slave_0 added
[  737.240035][T14026] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  737.261794][T14026] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  737.271232][T14026] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  737.304668][ T2529] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.324455][T14149] team0: Port device team_slave_1 added
[  737.359649][T14053] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.394906][T14149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  737.402198][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  737.429010][T14149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  737.473925][ T2529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.531152][T14053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.544585][T14149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  737.552937][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  737.579721][T14149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  737.639337][ T2529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.820053][T14149] hsr_slave_0: entered promiscuous mode
[  737.843913][T14149] hsr_slave_1: entered promiscuous mode
[  737.852537][T14149] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  737.876547][T14149] Cannot create hsr debugfs directory
[  738.119158][ T2529] bridge_slave_1: left allmulticast mode
[  738.124850][ T2529] bridge_slave_1: left promiscuous mode
[  738.133881][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.157212][ T2529] bridge_slave_0: left allmulticast mode
[  738.162919][ T2529] bridge_slave_0: left promiscuous mode
[  738.169441][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.182901][ T2529] bridge_slave_1: left allmulticast mode
[  738.189595][ T2529] bridge_slave_1: left promiscuous mode
[  738.195978][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.204917][ T2529] bridge_slave_0: left allmulticast mode
[  738.211750][ T2529] bridge_slave_0: left promiscuous mode
[  738.217880][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.247310][ T2529] bridge_slave_1: left allmulticast mode
[  738.253004][ T2529] bridge_slave_1: left promiscuous mode
[  738.259184][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.273162][ T2529] bridge_slave_0: left allmulticast mode
[  738.275444][ T9169] Bluetooth: hci2: command tx timeout
[  738.281257][ T2529] bridge_slave_0: left promiscuous mode
[  738.290360][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.303254][ T2529] bridge_slave_1: left allmulticast mode
[  738.309408][ T2529] bridge_slave_1: left promiscuous mode
[  738.315155][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.324342][ T2529] bridge_slave_0: left allmulticast mode
[  738.331211][ T2529] bridge_slave_0: left promiscuous mode
[  738.337343][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.425757][ T9169] Bluetooth: hci1: command tx timeout
[  738.905275][ T9169] Bluetooth: hci4: command tx timeout
[  739.782935][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  739.794044][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  739.806750][ T2529] bond0 (unregistering): Released all slaves
[  740.011499][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  740.023459][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  740.034157][ T2529] bond0 (unregistering): Released all slaves
[  740.218357][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  740.230114][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  740.241218][ T2529] bond0 (unregistering): Released all slaves
[  740.352258][ T9169] Bluetooth: hci2: command tx timeout
[  740.445590][ T2529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  740.462462][ T2529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  740.472994][ T2529] bond0 (unregistering): Released all slaves
[  740.977149][T14053] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  740.997404][T14053] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  741.060927][T14053] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  741.118999][T14053] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  741.238602][T14026] 8021q: adding VLAN 0 to HW filter on device bond0
[  741.337010][T14026] 8021q: adding VLAN 0 to HW filter on device team0
[  741.439089][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.446254][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  741.528723][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.535914][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  741.867755][T14026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  742.010486][ T2529] hsr_slave_0: left promiscuous mode
[  742.031648][ T2529] hsr_slave_1: left promiscuous mode
[  742.038384][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.047336][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.055721][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.063145][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.074509][ T2529] hsr_slave_0: left promiscuous mode
[  742.081335][ T2529] hsr_slave_1: left promiscuous mode
[  742.087663][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.095462][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.103117][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.110811][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.121458][ T2529] hsr_slave_0: left promiscuous mode
[  742.127642][ T2529] hsr_slave_1: left promiscuous mode
[  742.133640][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.141325][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.152293][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.159912][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.171338][ T2529] hsr_slave_0: left promiscuous mode
[  742.177375][ T2529] hsr_slave_1: left promiscuous mode
[  742.183136][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.190963][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.198967][ T2529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.206963][ T2529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.268955][ T2529] veth1_macvtap: left promiscuous mode
[  742.274529][ T2529] veth0_macvtap: left promiscuous mode
[  742.280175][ T2529] veth1_vlan: left promiscuous mode
[  742.285711][ T2529] veth0_vlan: left promiscuous mode
[  742.291493][ T2529] veth1_macvtap: left promiscuous mode
[  742.297059][ T2529] veth0_macvtap: left promiscuous mode
[  742.302607][ T2529] veth1_vlan: left promiscuous mode
[  742.310057][ T2529] veth0_vlan: left promiscuous mode
[  742.316942][ T2529] veth1_macvtap: left promiscuous mode
[  742.322453][ T2529] veth0_macvtap: left promiscuous mode
[  742.328237][ T2529] veth1_vlan: left promiscuous mode
[  742.333507][ T2529] veth0_vlan: left promiscuous mode
[  742.340353][ T2529] veth1_macvtap: left promiscuous mode
[  742.347233][ T2529] veth0_macvtap: left promiscuous mode
[  742.352787][ T2529] veth1_vlan: left promiscuous mode
[  742.358205][ T2529] veth0_vlan: left promiscuous mode
[  742.425396][ T9169] Bluetooth: hci2: command tx timeout
[  743.151794][ T2529] team0 (unregistering): Port device team_slave_1 removed
[  743.211476][ T2529] team0 (unregistering): Port device team_slave_0 removed
[  744.244446][ T2529] team0 (unregistering): Port device team_slave_1 removed
[  744.309169][ T2529] team0 (unregistering): Port device team_slave_0 removed
[  745.412383][ T2529] team0 (unregistering): Port device team_slave_1 removed
[  745.468938][ T2529] team0 (unregistering): Port device team_slave_0 removed
[  746.598352][ T2529] team0 (unregistering): Port device team_slave_1 removed
[  746.658123][ T2529] team0 (unregistering): Port device team_slave_0 removed
[  747.294531][T14053] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.302682][T14105] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  747.314614][T14105] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  747.367428][T14105] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  747.389589][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  747.396107][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  747.400801][T14105] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  747.442013][T14053] 8021q: adding VLAN 0 to HW filter on device team0
[  747.546404][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.553548][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  747.628021][T14111] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  747.743588][T14111] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  747.770070][T14111] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  747.806971][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.814127][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  747.854304][T14111] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  747.881473][T14026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.194836][T14053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  748.208347][T14053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  748.516332][T14105] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.747598][T14149] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  748.781040][T14149] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  748.800876][T14149] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  748.829344][T14149] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  748.910225][T14105] 8021q: adding VLAN 0 to HW filter on device team0
[  748.934482][T14053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.952852][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.968669][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.009333][T14026] veth0_vlan: entered promiscuous mode
[  749.048130][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.055315][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.144935][T14026] veth1_vlan: entered promiscuous mode
[  749.184054][T14111] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.212889][T14105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  749.245348][T14105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  749.334579][T14111] 8021q: adding VLAN 0 to HW filter on device team0
[  749.372328][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.379510][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.462764][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.469968][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.510023][T14053] veth0_vlan: entered promiscuous mode
[  749.553590][T14149] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.570924][T14053] veth1_vlan: entered promiscuous mode
[  749.598185][T14026] veth0_macvtap: entered promiscuous mode
[  749.627642][T14026] veth1_macvtap: entered promiscuous mode
[  749.650785][T14149] 8021q: adding VLAN 0 to HW filter on device team0
[  749.743590][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.750804][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.771578][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  749.782827][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.794329][T14026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.837111][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.844252][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.889463][T14053] veth0_macvtap: entered promiscuous mode
[  749.910789][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  749.921807][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.933587][T14026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.950332][T14053] veth1_macvtap: entered promiscuous mode
[  749.973002][T14026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.983863][T14026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.996373][T14026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  750.006013][T14026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  750.028275][T14105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.044599][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  750.061788][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  750.072275][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  750.083046][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  750.094064][T14053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  750.113281][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  750.135700][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  750.146015][T14053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  750.156689][T14053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  750.168428][T14053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  750.204389][T14111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.228320][T14053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  750.240218][T14053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  750.249557][T14053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  750.261872][T14053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  750.314981][T14149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.451602][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.486295][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.552782][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.569251][T14105] veth0_vlan: entered promiscuous mode
[  750.587877][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.598007][T14111] veth0_vlan: entered promiscuous mode
[  750.627169][T14149] veth0_vlan: entered promiscuous mode
[  750.648993][T14105] veth1_vlan: entered promiscuous mode
[  750.658158][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.667449][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.692631][T14149] veth1_vlan: entered promiscuous mode
[  750.764076][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.764233][T14111] veth1_vlan: entered promiscuous mode
[  750.778617][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.788838][T14317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1886'.
[  750.921974][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  750.993509][T14105] veth0_macvtap: entered promiscuous mode
[  751.048038][T14105] veth1_macvtap: entered promiscuous mode
[  751.082249][T14111] veth0_macvtap: entered promiscuous mode
[  751.687275][T14149] veth0_macvtap: entered promiscuous mode
[  751.818031][T14111] veth1_macvtap: entered promiscuous mode
[  751.894842][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.930201][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.949566][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.964453][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.055499][T14335] loop4: detected capacity change from 0 to 512
[  752.064757][T14335] EXT4-fs: Ignoring removed orlov option
[  752.070692][T14335] EXT4-fs: Ignoring removed i_version option
[  752.076835][T14335] EXT4-fs: Ignoring removed nomblk_io_submit option
[  752.178922][T14335] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  752.187948][T14335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  752.197191][T14335] EXT4-fs (loop4): orphan cleanup on readonly fs
[  752.203978][T14335] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  752.213669][T14335] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  752.228347][T14335] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  752.249205][T14335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1908: bg 0: block 40: padding at end of block bitmap is not set
[  752.266150][T14335] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  752.288562][T14335] EXT4-fs (loop4): 1 truncate cleaned up
[  752.298001][T14335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  752.342981][T14335] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1908: bad symlink.
[  752.452378][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  753.007046][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.148265][T14105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  753.372558][T14149] veth1_macvtap: entered promiscuous mode
[  753.406324][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  753.443760][T14346] loop0: detected capacity change from 0 to 512
[  753.475792][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.487191][T14346] EXT4-fs: Ignoring removed mblk_io_submit option
[  753.525154][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  753.547015][T14346] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  753.582115][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.609657][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  753.650951][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.666961][T14346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  753.686453][T14105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  753.699574][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  753.716911][T14346] System zones: 1-12
[  753.745320][T14346] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1911: corrupted in-inode xattr: e_value size too large
[  753.766612][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.795532][T14346] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1911: couldn't read orphan inode 15 (err -117)
[  753.822350][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  753.853492][T14346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  753.866594][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.895464][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  753.945551][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  753.978228][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.008955][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.041199][T14111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.094401][T14105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.122804][T14105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.131800][T14344] coredump: 13(syz.0.1909): written to core: VMAs: 36, size 97476608; core: 71894114 bytes, pos 97484800
[  754.138390][T14105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.159147][T14105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.181236][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.206559][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.225740][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.255140][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.265001][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.284766][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.294914][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.312789][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.338896][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.361637][T14111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.547807][T14111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.571991][T14111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.583696][T14111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.598812][T14111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.643190][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.654513][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.688608][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.705130][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.715006][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.726409][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.737554][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.748788][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.759738][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.770306][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.781896][T14149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.812356][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'.
[  754.847547][T14352] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.854888][T14352] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.873861][T14353] bridge_slave_1: left allmulticast mode
[  754.880155][T14353] bridge_slave_1: left promiscuous mode
[  754.889250][T14353] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.908212][T14353] bridge_slave_0: left allmulticast mode
[  754.915478][T14353] bridge_slave_0: left promiscuous mode
[  754.921546][T14353] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.945696][T14026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  755.189070][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.207494][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.218953][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.229779][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.239964][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.273305][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.291964][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.315169][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.335173][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  755.365276][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  755.378226][T14149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  755.436866][T14149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.455516][T14149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.475239][T14149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.483984][T14149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.622756][ T7921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.652993][ T7921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.691225][T13490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  755.702679][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.717032][T14366] loop0: detected capacity change from 0 to 512
[  755.723775][T14366] EXT4-fs: Ignoring removed orlov option
[  755.734224][T13490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  755.742846][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.750717][T13490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  755.766536][T13490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  755.774297][T13490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  755.781183][T14366] EXT4-fs: Ignoring removed i_version option
[  755.787578][T13490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  755.856330][T14366] EXT4-fs: Ignoring removed nomblk_io_submit option
[  755.874799][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.883801][T14366] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  755.893318][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.916677][T14366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  755.924865][T14366] EXT4-fs (loop0): orphan cleanup on readonly fs
[  755.925679][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.939709][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.986541][T14366] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  755.996120][T14366] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  756.001757][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.016675][T14366] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  756.030833][T14366] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1917: bg 0: block 40: padding at end of block bitmap is not set
[  756.048302][T14366] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  756.058525][T14366] EXT4-fs (loop0): 1 truncate cleaned up
[  756.067776][T14366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  756.221812][T14366] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1917: bad symlink.
[  756.238287][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.328627][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.358571][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.559485][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.610129][T14374] loop2: detected capacity change from 0 to 512
[  756.706157][T14374] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1902: corrupted in-inode xattr: invalid ea_ino
[  756.721220][T14374] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1902: couldn't read orphan inode 15 (err -117)
[  756.740158][T14374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  756.919295][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.155404][   T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  757.193479][ T2529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.234297][ T2529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  757.327258][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  757.414875][T14363] chnl_net:caif_netlink_parms(): no params data found
[  757.422299][   T25] usb 2-1: Dual-Role OTG device on HNP port
[  757.445509][   T25] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  757.454603][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.464321][T14111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.489505][   T25] usb 2-1: Product: syz
[  757.493765][   T25] usb 2-1: Manufacturer: syz
[  757.534357][   T25] usb 2-1: SerialNumber: syz
[  757.559822][   T25] usb 2-1: config 0 descriptor??
[  757.606845][   T25] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32
[  757.896553][T13490] Bluetooth: hci3: command tx timeout
[  758.065614][   T11] bridge_slave_1: left allmulticast mode
[  758.085199][   T11] bridge_slave_1: left promiscuous mode
[  758.094956][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.119359][   T11] bridge_slave_0: left allmulticast mode
[  758.131072][   T11] bridge_slave_0: left promiscuous mode
[  758.142957][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.623975][T14406] loop2: detected capacity change from 0 to 8
[  758.653456][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  759.952410][    T9] usb 2-1: USB disconnect, device number 24
[  759.968369][T13490] Bluetooth: hci3: command tx timeout
[  760.120747][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  760.144190][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  760.464496][   T11] bond0 (unregistering): Released all slaves
[  761.279100][T14428] pim6reg1: entered promiscuous mode
[  761.285972][T14428] pim6reg1: entered allmulticast mode
[  761.326900][T14437] loop1: detected capacity change from 0 to 512
[  761.464200][T14437] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1926: corrupted in-inode xattr: invalid ea_ino
[  761.550453][T14437] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1926: couldn't read orphan inode 15 (err -117)
[  761.571632][T14437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.650448][T14464] loop3: detected capacity change from 0 to 512
[  761.670841][T14464] EXT4-fs: Ignoring removed orlov option
[  761.703718][T14363] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.725694][T14464] EXT4-fs: Ignoring removed i_version option
[  761.764994][T14363] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.778753][T14464] EXT4-fs: Ignoring removed nomblk_io_submit option
[  761.789010][T14363] bridge_slave_0: entered allmulticast mode
[  761.806548][T14363] bridge_slave_0: entered promiscuous mode
[  761.837656][T14464] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  761.866630][T14464] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  761.915723][T14363] bridge0: port 2(bridge_slave_1) entered blocking state
[  761.925310][T14363] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.932532][T14363] bridge_slave_1: entered allmulticast mode
[  761.995292][T14363] bridge_slave_1: entered promiscuous mode
[  762.014727][T14464] EXT4-fs (loop3): orphan cleanup on readonly fs
[  762.035625][T13490] Bluetooth: hci3: command tx timeout
[  762.064501][T14464] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  762.092205][T14105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.152420][T14470] loop2: detected capacity change from 0 to 256
[  762.161772][T14470] vfat: Bad value for 'fmask'
[  762.207770][T14470] loop2: detected capacity change from 0 to 512
[  762.214440][T14470] EXT4-fs: Ignoring removed nomblk_io_submit option
[  762.221097][T14470] ext4: Unknown parameter 'noinit_itable"grpquota'
[  762.573344][T14464] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  762.913313][T14464] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  762.933516][T14464] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1928: bg 0: block 40: padding at end of block bitmap is not set
[  762.964947][T14464] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  762.985971][T14464] EXT4-fs (loop3): 1 truncate cleaned up
[  763.063579][T14363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  763.074918][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  763.075654][T14464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  763.156194][T14363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  763.232279][T14053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  763.254727][T14464] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1928: bad symlink.
[  763.348170][T14363] team0: Port device team_slave_0 added
[  763.439063][   T11] hsr_slave_0: left promiscuous mode
[  763.458846][   T11] hsr_slave_1: left promiscuous mode
[  763.476532][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  763.491677][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  763.513566][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  763.530879][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  763.602382][   T11] veth1_macvtap: left promiscuous mode
[  763.617890][   T11] veth0_macvtap: left promiscuous mode
[  763.636452][   T11] veth1_vlan: left promiscuous mode
[  763.656672][   T11] veth0_vlan: left promiscuous mode
[  764.115196][T13490] Bluetooth: hci3: command tx timeout
[  764.267109][ T9169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  764.297149][ T9169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  764.315146][ T9169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  764.357052][ T9169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  764.364812][ T9169] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  764.376591][ T9169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  764.422919][T14507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.445499][T14507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.079794][T14514] loop1: detected capacity change from 0 to 512
[  766.164033][T14514] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1939: corrupted in-inode xattr: invalid ea_ino
[  766.208796][T14514] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1939: couldn't read orphan inode 15 (err -117)
[  766.223037][T14514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  766.245659][   T11] team0 (unregistering): Port device team_slave_1 removed
[  766.323021][   T11] team0 (unregistering): Port device team_slave_0 removed
[  766.440159][ T9169] Bluetooth: hci0: command tx timeout
[  766.867309][T14105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.997876][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  768.129164][T14363] team0: Port device team_slave_1 added
[  768.535795][ T9169] Bluetooth: hci0: command tx timeout
[  769.341718][T14149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.814670][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  769.822976][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  769.851007][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  770.216922][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  770.274702][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  770.525197][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  770.928384][T14555] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1947'.
[  770.981173][T14363] hsr_slave_0: entered promiscuous mode
[  771.134065][T14363] hsr_slave_1: entered promiscuous mode
[  771.344850][ T9169] Bluetooth: hci0: command tx timeout
[  771.601373][T13490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  771.646946][T13490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  771.662868][T13490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  771.695541][T13490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  771.714050][T13490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  771.723474][T13490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  771.977314][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  772.327881][T14504] chnl_net:caif_netlink_parms(): no params data found
[  772.584033][T14589] loop2: detected capacity change from 0 to 512
[  772.591621][T14589] EXT4-fs: Ignoring removed orlov option
[  772.597445][T14589] EXT4-fs: Ignoring removed i_version option
[  772.603448][T14589] EXT4-fs: Ignoring removed nomblk_io_submit option
[  772.685261][T12996] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  772.726114][T14589] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  772.734068][T14589] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  772.742369][T14589] EXT4-fs (loop2): orphan cleanup on readonly fs
[  772.748874][T14589] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  772.760133][T14589] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  772.774725][T14589] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  772.784519][T14589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1954: bg 0: block 40: padding at end of block bitmap is not set
[  772.799181][T14589] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  772.808320][T14589] EXT4-fs (loop2): 1 truncate cleaned up
[  772.814914][T14589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  772.833436][T14589] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.1954: bad symlink.
[  772.941420][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.080830][T12996] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  773.136118][T12996] usb 2-1: Dual-Role OTG device on HNP port
[  773.158028][T12996] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  773.177056][T12996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.221121][T12996] usb 2-1: Product: syz
[  773.238096][T12996] usb 2-1: Manufacturer: syz
[  773.253328][T12996] usb 2-1: SerialNumber: syz
[  773.301174][T12996] usb 2-1: config 0 descriptor??
[  773.353144][T12996] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32
[  773.386565][T13490] Bluetooth: hci0: command tx timeout
[  773.509765][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.749548][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.780305][T14504] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.787714][T13490] Bluetooth: hci2: command tx timeout
[  773.816971][T14504] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.824231][T14504] bridge_slave_0: entered allmulticast mode
[  773.856406][T14504] bridge_slave_0: entered promiscuous mode
[  774.001624][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.026709][T14504] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.033899][T14504] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.041433][T14504] bridge_slave_1: entered allmulticast mode
[  774.050654][T14504] bridge_slave_1: entered promiscuous mode
[  774.108657][T14504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.121040][T14504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  774.139508][T14567] chnl_net:caif_netlink_parms(): no params data found
[  774.193412][T14504] team0: Port device team_slave_0 added
[  774.235000][T14111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  774.277243][T14504] team0: Port device team_slave_1 added
[  774.433530][T14504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  774.440918][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  774.467653][T14504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  774.480635][T14504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  774.493124][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  774.521373][T14504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  774.547125][T14567] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.554417][T14567] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.571098][T14567] bridge_slave_0: entered allmulticast mode
[  774.581121][T14567] bridge_slave_0: entered promiscuous mode
[  774.661257][T14567] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.679773][T14567] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.700526][ T9169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  774.706091][T14567] bridge_slave_1: entered allmulticast mode
[  774.717554][ T9169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  774.725803][T14567] bridge_slave_1: entered promiscuous mode
[  774.731965][ T9169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  774.741216][ T9169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  774.765397][ T9169] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  774.772729][ T9169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  774.846640][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.875720][T14363] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  774.908812][T14504] hsr_slave_0: entered promiscuous mode
[  774.916236][T14504] hsr_slave_1: entered promiscuous mode
[  774.922460][T14504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  774.930412][T14504] Cannot create hsr debugfs directory
[  774.942239][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.952203][T14363] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  774.994702][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.019359][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  775.036469][T14363] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  775.099173][  T901] usb 2-1: USB disconnect, device number 25
[  775.133405][T14363] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  775.186756][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.248339][T14567] team0: Port device team_slave_0 added
[  775.282506][T14567] team0: Port device team_slave_1 added
[  775.413470][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.473237][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  775.485484][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  775.511410][    C0] vkms_vblank_simulate: vblank timer overrun
[  775.567710][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  775.867354][T13490] Bluetooth: hci2: command tx timeout
[  776.125722][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  776.134041][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  776.183258][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  776.273735][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  776.514560][T14567] hsr_slave_0: entered promiscuous mode
[  776.524760][T14567] hsr_slave_1: entered promiscuous mode
[  776.535295][T14567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  776.544293][T14567] Cannot create hsr debugfs directory
[  776.739496][T14640] loop1: detected capacity change from 0 to 512
[  776.747956][T14640] EXT4-fs: Ignoring removed orlov option
[  776.753646][T14640] EXT4-fs: Ignoring removed i_version option
[  776.760046][T14640] EXT4-fs: Ignoring removed nomblk_io_submit option
[  776.835986][   T11] bridge_slave_1: left allmulticast mode
[  776.842220][   T11] bridge_slave_1: left promiscuous mode
[  776.848069][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.858343][   T11] bridge_slave_0: left allmulticast mode
[  776.864095][   T11] bridge_slave_0: left promiscuous mode
[  776.870256][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.883747][T14640] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  776.891767][T14640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  776.900150][T14640] EXT4-fs (loop1): orphan cleanup on readonly fs
[  776.906651][T14640] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  776.916080][T14640] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  776.930675][T14640] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  776.944092][T14640] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1962: bg 0: block 40: padding at end of block bitmap is not set
[  776.962232][T14640] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  776.975887][T14640] EXT4-fs (loop1): 1 truncate cleaned up
[  776.983391][T14640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  777.006115][T14640] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.1962: bad symlink.
[  777.017445][T13490] Bluetooth: hci4: command tx timeout
[  777.945309][T13490] Bluetooth: hci2: command tx timeout
[  777.987174][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  778.001431][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  778.013905][   T11] bond0 (unregistering): Released all slaves
[  778.167405][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  778.178533][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  778.190048][   T11] bond0 (unregistering): Released all slaves
[  778.427215][T14105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.640693][T14363] 8021q: adding VLAN 0 to HW filter on device bond0
[  778.655028][T14611] chnl_net:caif_netlink_parms(): no params data found
[  778.979191][T14363] 8021q: adding VLAN 0 to HW filter on device team0
[  779.066040][ T5234] Bluetooth: hci4: command tx timeout
[  779.069536][ T9169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  779.085851][ T9169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  779.096849][ T9169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  779.106775][ T9169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  779.135454][ T9169] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  779.146561][ T9169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  779.298412][T14430] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.305566][T14430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  779.374122][T14611] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.390157][T14611] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.415333][T14611] bridge_slave_0: entered allmulticast mode
[  779.428113][T14611] bridge_slave_0: entered promiscuous mode
[  779.436612][T14611] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.443756][T14611] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.451983][T14611] bridge_slave_1: entered allmulticast mode
[  779.459461][T14611] bridge_slave_1: entered promiscuous mode
[  779.477671][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.484771][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  779.513599][   T11] hsr_slave_0: left promiscuous mode
[  779.524772][   T11] hsr_slave_1: left promiscuous mode
[  779.531332][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  779.540451][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  779.549852][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  779.557632][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.569032][   T11] hsr_slave_0: left promiscuous mode
[  779.574919][   T11] hsr_slave_1: left promiscuous mode
[  779.586236][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  779.593701][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  779.616534][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  779.624008][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.677312][   T11] veth1_macvtap: left promiscuous mode
[  779.682888][   T11] veth0_macvtap: left promiscuous mode
[  779.688934][   T11] veth1_vlan: left promiscuous mode
[  779.694289][   T11] veth0_vlan: left promiscuous mode
[  779.703543][   T11] veth1_macvtap: left promiscuous mode
[  779.709591][   T11] veth0_macvtap: left promiscuous mode
[  779.715680][   T11] veth1_vlan: left promiscuous mode
[  779.721970][   T11] veth0_vlan: left promiscuous mode
[  780.026265][T13490] Bluetooth: hci2: command tx timeout
[  780.816160][   T11] team0 (unregistering): Port device team_slave_1 removed
[  780.867101][   T11] team0 (unregistering): Port device team_slave_0 removed
[  781.146188][T13490] Bluetooth: hci4: command tx timeout
[  781.237950][T13490] Bluetooth: hci1: command tx timeout
[  781.810107][   T11] team0 (unregistering): Port device team_slave_1 removed
[  781.875992][   T11] team0 (unregistering): Port device team_slave_0 removed
[  782.494876][T14611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  782.594523][T14504] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  782.607775][T14504] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  782.619385][T14611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  782.656128][T14504] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  782.729274][T14611] team0: Port device team_slave_0 added
[  782.740790][T14504] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  782.814697][T14611] team0: Port device team_slave_1 added
[  782.989520][T14611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  783.021304][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  783.056903][T14611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  783.095946][T14611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  783.103028][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  783.139847][T14611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  783.236151][T13490] Bluetooth: hci4: command tx timeout
[  783.301399][T14611] hsr_slave_0: entered promiscuous mode
[  783.311250][T13490] Bluetooth: hci1: command tx timeout
[  783.320651][T14611] hsr_slave_1: entered promiscuous mode
[  783.335554][T14611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  783.343154][T14611] Cannot create hsr debugfs directory
[  783.424636][T14663] chnl_net:caif_netlink_parms(): no params data found
[  783.626165][T14363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  783.667645][T14567] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  783.681683][T14567] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  783.747963][T14567] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  783.773152][T14567] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  783.820205][T14611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  783.848531][T14663] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.857485][T14663] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.864662][T14663] bridge_slave_0: entered allmulticast mode
[  783.873993][T14663] bridge_slave_0: entered promiscuous mode
[  783.889458][T14663] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.903383][T14663] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.913101][T14663] bridge_slave_1: entered allmulticast mode
[  783.921148][T14663] bridge_slave_1: entered promiscuous mode
[  783.996315][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.042285][T14611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.072009][T14504] 8021q: adding VLAN 0 to HW filter on device bond0
[  784.123003][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.153641][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  784.218220][T14611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.247247][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  784.320035][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.358966][T14504] 8021q: adding VLAN 0 to HW filter on device team0
[  784.412287][T14663] team0: Port device team_slave_0 added
[  784.451696][T14611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.498850][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.564048][T14663] team0: Port device team_slave_1 added
[  784.631994][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.639169][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  784.686369][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  784.701598][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  784.742153][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  784.762360][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  784.769470][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  784.796014][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  784.811151][T14363] veth0_vlan: entered promiscuous mode
[  784.827129][T14430] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.834239][T14430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  784.851261][T14363] veth1_vlan: entered promiscuous mode
[  784.962853][T14663] hsr_slave_0: entered promiscuous mode
[  784.974942][T14663] hsr_slave_1: entered promiscuous mode
[  784.982002][T14663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  784.999693][T14663] Cannot create hsr debugfs directory
[  785.070817][T14611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  785.079994][   T11] bridge_slave_1: left allmulticast mode
[  785.086153][   T11] bridge_slave_1: left promiscuous mode
[  785.091870][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.100548][   T11] bridge_slave_0: left allmulticast mode
[  785.107034][   T11] bridge_slave_0: left promiscuous mode
[  785.112760][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.121969][   T11] bridge_slave_1: left allmulticast mode
[  785.127994][   T11] bridge_slave_1: left promiscuous mode
[  785.133660][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.142909][   T11] bridge_slave_0: left allmulticast mode
[  785.152902][   T11] bridge_slave_0: left promiscuous mode
[  785.159187][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.395389][T13490] Bluetooth: hci1: command tx timeout
[  785.841268][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  785.852883][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  785.864420][   T11] bond0 (unregistering): Released all slaves
[  786.020198][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  786.031864][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  786.042364][   T11] bond0 (unregistering): Released all slaves
[  786.090641][T14611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  786.179921][T14363] veth0_macvtap: entered promiscuous mode
[  786.188887][T14611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  786.316453][T14611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  786.358153][T14363] veth1_macvtap: entered promiscuous mode
[  786.381474][T14567] 8021q: adding VLAN 0 to HW filter on device bond0
[  786.596331][T14567] 8021q: adding VLAN 0 to HW filter on device team0
[  786.607546][T14504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  786.624753][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  786.636944][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  786.647972][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  786.658894][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  786.669326][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  786.680645][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  786.691730][T14363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  786.769062][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.776239][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.794270][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  786.804891][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  786.819782][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  786.831348][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  786.841638][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  786.852778][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  786.864187][T14363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  787.001320][T14363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  787.010254][T14363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  787.023406][T14363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  787.032279][T14363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  787.116991][T14430] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.124137][T14430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  787.223349][   T11] hsr_slave_0: left promiscuous mode
[  787.241887][   T11] hsr_slave_1: left promiscuous mode
[  787.250737][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  787.258455][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  787.270297][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  787.278173][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  787.290401][   T11] hsr_slave_0: left promiscuous mode
[  787.296690][   T11] hsr_slave_1: left promiscuous mode
[  787.302395][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  787.311024][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  787.318966][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  787.326989][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  787.359418][   T11] veth1_macvtap: left promiscuous mode
[  787.364931][   T11] veth0_macvtap: left promiscuous mode
[  787.374102][   T11] veth1_vlan: left promiscuous mode
[  787.380211][   T11] veth0_vlan: left promiscuous mode
[  787.390502][   T11] veth1_macvtap: left promiscuous mode
[  787.396154][   T11] veth0_macvtap: left promiscuous mode
[  787.401689][   T11] veth1_vlan: left promiscuous mode
[  787.408302][   T11] veth0_vlan: left promiscuous mode
[  787.465526][T13490] Bluetooth: hci1: command tx timeout
[  787.989091][   T11] team0 (unregistering): Port device team_slave_1 removed
[  788.044673][   T11] team0 (unregistering): Port device team_slave_0 removed
[  788.999374][   T11] team0 (unregistering): Port device team_slave_1 removed
[  789.046344][   T11] team0 (unregistering): Port device team_slave_0 removed
[  789.571612][T14504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  789.638359][T14611] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.777688][T14611] 8021q: adding VLAN 0 to HW filter on device team0
[  789.831762][T14663] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  789.852478][T14663] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  789.873617][T14663] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  789.893315][T14663] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  789.913762][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  789.934457][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  789.981039][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.988272][ T7099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  790.001385][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.008597][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  790.143171][T14567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  790.183134][T14430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  790.205453][T14430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  790.269805][T14504] veth0_vlan: entered promiscuous mode
[  790.283642][T14611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  790.350311][T14504] veth1_vlan: entered promiscuous mode
[  790.464848][T14567] veth0_vlan: entered promiscuous mode
[  790.537760][T14567] veth1_vlan: entered promiscuous mode
[  791.400230][T14504] veth0_macvtap: entered promiscuous mode
[  791.556091][T14567] veth0_macvtap: entered promiscuous mode
[  791.610394][T14504] veth1_macvtap: entered promiscuous mode
[  791.633274][T14567] veth1_macvtap: entered promiscuous mode
[  791.837126][T14663] 8021q: adding VLAN 0 to HW filter on device bond0
[  792.027735][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  792.163521][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.275506][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  792.303084][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.335366][T14504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  792.402176][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  792.414719][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.435224][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  792.448978][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.459705][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  792.470654][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.483957][T14567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  792.640953][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.653073][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.664444][T14504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.700551][T14504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.802172][T14504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  792.952825][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  793.007685][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  793.057184][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  793.107948][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  793.163935][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  793.192740][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  793.208080][T14567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  793.230920][T14567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.240321][T14567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.249843][T14567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.259495][T14567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.283257][T14611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  793.338715][T14504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.352802][T14504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.365466][T14504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.374308][T14504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.411665][T14663] 8021q: adding VLAN 0 to HW filter on device team0
[  793.442766][T14663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  793.453159][T14663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  793.531501][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state
[  793.538679][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state
[  793.553711][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state
[  793.560860][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state
[  793.668407][T14611] veth0_vlan: entered promiscuous mode
[  793.672643][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  793.752682][T14611] veth1_vlan: entered promiscuous mode
[  793.811310][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.828368][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.901650][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.920645][T14611] veth0_macvtap: entered promiscuous mode
[  793.923316][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.955729][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.963618][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.976240][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  794.035119][T14611] veth1_macvtap: entered promiscuous mode
[  794.047351][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.071775][T14847] loop4: detected capacity change from 0 to 512
[  794.079029][T14847] EXT4-fs: Ignoring removed orlov option
[  794.084708][T14847] EXT4-fs: Ignoring removed i_version option
[  794.090800][T14847] EXT4-fs: Ignoring removed nomblk_io_submit option
[  794.135762][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.189810][T14847] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  794.197878][T14847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  794.206187][T14847] EXT4-fs (loop4): orphan cleanup on readonly fs
[  794.212627][T14847] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  794.222215][T14847] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  794.236896][T14847] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  794.253045][T14847] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1969: bg 0: block 40: padding at end of block bitmap is not set
[  794.269620][T14847] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  794.279289][T14847] EXT4-fs (loop4): 1 truncate cleaned up
[  794.285992][T14847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  794.306473][T14847] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1969: bad symlink.
[  794.396673][   T29] audit: type=1326 audit(1727267108.075:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.0.1934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f3f7def9 code=0x0
[  794.999627][T14663] veth0_vlan: entered promiscuous mode
[  795.011179][T14663] veth1_vlan: entered promiscuous mode
[  795.101799][T14663] veth0_macvtap: entered promiscuous mode
[  795.138895][T14663] veth1_macvtap: entered promiscuous mode
[  795.220112][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.230766][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.240761][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.284244][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.294233][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.309620][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.319887][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.330767][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.346750][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  795.406266][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.425606][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.436608][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.449053][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.459748][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.470446][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.480767][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.492046][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.502318][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.513364][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.532257][T14611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  795.542959][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  795.596160][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.613160][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  795.624305][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.641365][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  795.652828][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.711403][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  795.752063][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.784238][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  796.397403][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.446516][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.595290][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.635259][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.655196][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.694209][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.722370][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.752788][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.778396][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.816505][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.875244][T14611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  796.936851][T14663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  796.946074][T14663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  796.954800][T14663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  796.963597][T14663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  797.345683][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  797.874742][T14611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  797.944279][T14611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  797.963414][T14611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  797.972593][T14611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  798.052246][T14363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.287334][ T7921] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.307979][   T29] audit: type=1326 audit(1727267111.975:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.0.1978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f3f7def9 code=0x0
[  798.691708][ T7921] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.206476][ T7921] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.307514][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.345504][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.374459][T14430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.425200][T14430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.512253][ T7921] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.758357][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.778155][ T9169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  799.796515][ T9169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  799.818723][ T9169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  799.827693][ T9169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  799.836502][ T9169] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  799.845916][ T9169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  799.899064][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.009847][T14881] coredump: 21(syz.0.1978): written to core: VMAs: 42, size 99835904; core: 66349569 bytes, pos 99848192
[  800.038185][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  800.105292][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.254470][T14876] loop3: detected capacity change from 0 to 65536
[  800.294880][T14888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1957'.
[  800.933198][ T7921] bridge_slave_1: left allmulticast mode
[  801.116791][ T7921] bridge_slave_1: left promiscuous mode
[  801.324888][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.518235][ T7921] bridge_slave_0: left allmulticast mode
[  801.523944][ T7921] bridge_slave_0: left promiscuous mode
[  801.530648][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.546997][T14876] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  801.565121][T14876] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR
[  801.566293][T14876] XFS (loop3): log mount failed
[  801.707771][  T901] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  802.077667][ T9169] Bluetooth: hci3: command tx timeout
[  802.519588][  T901] usb 1-1: unable to get BOS descriptor or descriptor too short
[  802.528044][  T901] usb 1-1: not running at top speed; connect to a high speed hub
[  802.632807][  T901] usb 1-1: config 129 has an invalid interface number: 135 but max is 0
[  802.645161][  T901] usb 1-1: config 129 has an invalid interface number: 5 but max is 0
[  802.661509][  T901] usb 1-1: config 129 descriptor has 1 excess byte, ignoring
[  802.699728][  T901] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  802.720189][  T901] usb 1-1: config 129 has no interface number 0
[  802.740023][  T901] usb 1-1: config 129 has no interface number 1
[  802.780636][  T901] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  802.822947][  T901] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  802.832885][T14927] loop2: detected capacity change from 0 to 128
[  802.840960][  T901] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  802.875152][  T901] usb 1-1: config 129 interface 135 has no altsetting 0
[  802.882158][  T901] usb 1-1: config 129 interface 5 has no altsetting 0
[  803.776975][  T901] usb 1-1: string descriptor 0 read error: -71
[  803.785278][  T901] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  803.837587][  T901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.875645][   T29] audit: type=1326 audit(1727267117.535:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14936 comm="syz.2.1988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87ab7def9 code=0x0
[  803.958577][  T901] usb 1-1: can't set config #129, error -71
[  804.013853][  T901] usb 1-1: USB disconnect, device number 42
[  804.176754][ T9169] Bluetooth: hci3: command tx timeout
[  805.362571][T14935] loop3: detected capacity change from 0 to 32768
[  805.500380][T14935] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  805.596757][T14939] coredump: 14(syz.2.1988): written to core: VMAs: 43, size 99909632; core: 66353721 bytes, pos 99921920
[  805.678641][T14935] XFS (loop3): Ending clean mount
[  805.704837][ T7921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.759911][T14567] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  805.770956][ T7921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.836858][ T7921] bond0 (unregistering): Released all slaves
[  806.269462][ T9169] Bluetooth: hci3: command tx timeout
[  806.442031][T14967] veth3: entered promiscuous mode
[  806.576240][T14969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.180286][T14992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  808.225539][T14992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  808.309796][T14969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.341634][T14997] overlayfs: failed to resolve './file1': -2
[  808.360524][ T9169] Bluetooth: hci3: command tx timeout
[  808.833154][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  808.841928][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  808.998725][T15013] loop3: detected capacity change from 0 to 512
[  809.043031][T15013] EXT4-fs: Ignoring removed orlov option
[  809.074959][T15013] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  809.104363][T15013] EXT4-fs (loop3): orphan cleanup on readonly fs
[  809.145198][T15013] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  809.230694][T15013] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  809.261730][T15013] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.2004: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  809.323774][T15013] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2004: couldn't read orphan inode 13 (err -117)
[  809.366237][T15013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
Stopping sshd: Stack fault
Stack fault
[  809.556783][T15013] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
The system is going down NOW!
[  809.596898][T15013] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
Connection to 10.128.1.96 closed by remote host.
Sent SIGTERM to all processes
[  809.728418][T15013] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
Sent SIGKILL to all processes
Requesting system poweroff
[  812.475586][T14969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.923355][T14969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.980431][T15013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.990333][ T7921] hsr_slave_0: left promiscuous mode
[  813.032592][ T7921] hsr_slave_1: left promiscuous mode
[  813.038776][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  813.046358][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_0
[  813.056877][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  813.064302][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_1
[  813.088615][ T7921] veth1_macvtap: left promiscuous mode
[  813.094207][ T7921] veth0_macvtap: left promiscuous mode
[  813.100332][ T7921] veth1_vlan: left promiscuous mode
[  813.105785][ T7921] veth0_vlan: left promiscuous mode
[  813.631055][ T7921] team0 (unregistering): Port device team_slave_1 removed
[  813.689158][ T7921] team0 (unregistering): Port device team_slave_0 removed
[  814.502021][T14969] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.520204][T14969] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.554770][T14969] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  814.581185][T14969] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  814.610984][T15032] ==================================================================
[  814.619093][T15032] BUG: KASAN: use-after-free in shutdown_one_device_async+0x4ac/0x5f0
[  814.627263][T15032] Read of size 8 at addr ffff88806d6e0738 by task kworker/u8:17/15032
[  814.635408][T15032] 
[  814.637748][T15032] CPU: 1 UID: 0 PID: 15032 Comm: kworker/u8:17 Not tainted 6.11.0-next-20240925-syzkaller #0
[  814.647920][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  814.657989][T15032] Workqueue: async async_run_entry_fn
[  814.663364][T15032] Call Trace:
[  814.666646][T15032]  <TASK>
[  814.669590][T15032]  dump_stack_lvl+0x241/0x360
[  814.674282][T15032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  814.679506][T15032]  ? __pfx__printk+0x10/0x10
[  814.684113][T15032]  ? _printk+0xd5/0x120
[  814.688278][T15032]  ? __virt_addr_valid+0x183/0x530
[  814.693410][T15032]  ? __virt_addr_valid+0x183/0x530
[  814.698539][T15032]  print_report+0x169/0x550
[  814.703055][T15032]  ? __virt_addr_valid+0x183/0x530
[  814.708180][T15032]  ? __virt_addr_valid+0x183/0x530
[  814.713300][T15032]  ? __virt_addr_valid+0x45f/0x530
[  814.718414][T15032]  ? __phys_addr+0xba/0x170
[  814.722919][T15032]  ? shutdown_one_device_async+0x4ac/0x5f0
[  814.728713][T15032]  kasan_report+0x143/0x180
[  814.733199][T15032]  ? kobject_put+0x272/0x480
[  814.737778][T15032]  ? shutdown_one_device_async+0x4ac/0x5f0
[  814.743571][T15032]  shutdown_one_device_async+0x4ac/0x5f0
[  814.749191][T15032]  ? __pfx_shutdown_one_device_async+0x10/0x10
[  814.755473][T15032]  async_run_entry_fn+0xa8/0x420
[  814.760448][T15032]  ? process_scheduled_works+0x976/0x1850
[  814.766178][T15032]  process_scheduled_works+0xa63/0x1850
[  814.771754][T15032]  ? __pfx_process_scheduled_works+0x10/0x10
[  814.777742][T15032]  ? assign_work+0x364/0x3d0
[  814.782322][T15032]  worker_thread+0x870/0xd30
[  814.786906][T15032]  ? __kthread_parkme+0x169/0x1d0
[  814.791915][T15032]  ? __pfx_worker_thread+0x10/0x10
[  814.797011][T15032]  kthread+0x2f0/0x390
[  814.801063][T15032]  ? __pfx_worker_thread+0x10/0x10
[  814.806160][T15032]  ? __pfx_kthread+0x10/0x10
[  814.810727][T15032]  ret_from_fork+0x4b/0x80
[  814.815137][T15032]  ? __pfx_kthread+0x10/0x10
[  814.819737][T15032]  ret_from_fork_asm+0x1a/0x30
[  814.824533][T15032]  </TASK>
[  814.827543][T15032] 
[  814.829854][T15032] The buggy address belongs to the physical page:
[  814.836250][T15032] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f7228b8b pfn:0x6d6e0
[  814.845698][T15032] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  814.852808][T15032] raw: 00fff00000000000 ffffea0001e54f08 ffff8880b8744b80 0000000000000000
[  814.861391][T15032] raw: 00000007f7228b8b 0000000000000000 00000000ffffffff 0000000000000000
[  814.869968][T15032] page dumped because: kasan: bad access detected
[  814.876391][T15032] page_owner tracks the page as freed
[  814.881739][T15032] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO), pid 14611, tgid 14611 (syz-executor), ts 776495307320, free_ts 814610926588
[  814.903598][T15032]  post_alloc_hook+0x1f3/0x230
[  814.908378][T15032]  get_page_from_freelist+0x3045/0x3190
[  814.914166][T15032]  __alloc_pages_noprof+0x256/0x6c0
[  814.919359][T15032]  ___kmalloc_large_node+0x8b/0x1d0
[  814.924572][T15032]  __kmalloc_large_node_noprof+0x1a/0x80
[  814.930364][T15032]  __kmalloc_node_noprof+0x2d2/0x440
[  814.935632][T15032]  __kvmalloc_node_noprof+0x72/0x190
[  814.940892][T15032]  alloc_netdev_mqs+0x9b/0x1000
[  814.945733][T15032]  tun_set_iff+0x542/0xe80
[  814.950135][T15032]  __tun_chr_ioctl+0x863/0x2400
[  814.954965][T15032]  __se_sys_ioctl+0xf9/0x170
[  814.959538][T15032]  do_syscall_64+0xf3/0x230
[  814.964020][T15032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.969910][T15032] page last free pid 15032 tgid 15032 stack trace:
[  814.976403][T15032]  free_unref_page+0xcfb/0xf20
[  814.981151][T15032]  __folio_put+0x2c7/0x440
[  814.985543][T15032]  free_large_kmalloc+0x105/0x1c0
[  814.990638][T15032]  kfree+0x21c/0x440
[  814.994512][T15032]  device_release+0x99/0x1c0
[  814.999084][T15032]  kobject_put+0x22f/0x480
[  815.003485][T15032]  shutdown_one_device_async+0x492/0x5f0
[  815.009098][T15032]  async_run_entry_fn+0xa8/0x420
[  815.014037][T15032]  process_scheduled_works+0xa63/0x1850
[  815.019595][T15032]  worker_thread+0x870/0xd30
[  815.024207][T15032]  kthread+0x2f0/0x390
[  815.028284][T15032]  ret_from_fork+0x4b/0x80
[  815.032706][T15032]  ret_from_fork_asm+0x1a/0x30
[  815.037461][T15032] 
[  815.039764][T15032] Memory state around the buggy address:
[  815.045377][T15032]  ffff88806d6e0600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  815.053420][T15032]  ffff88806d6e0680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  815.061460][T15032] >ffff88806d6e0700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  815.069513][T15032]                                         ^
[  815.075399][T15032]  ffff88806d6e0780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  815.083495][T15032]  ffff88806d6e0800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  815.091537][T15032] ==================================================================
[  815.102911][T15032] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  815.110146][T15032] CPU: 1 UID: 0 PID: 15032 Comm: kworker/u8:17 Not tainted 6.11.0-next-20240925-syzkaller #0
[  815.120321][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  815.130393][T15032] Workqueue: async async_run_entry_fn
[  815.135776][T15032] Call Trace:
[  815.139044][T15032]  <TASK>
[  815.141965][T15032]  dump_stack_lvl+0x241/0x360
[  815.146647][T15032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  815.151842][T15032]  ? __pfx__printk+0x10/0x10
[  815.156425][T15032]  ? preempt_schedule+0xe1/0xf0
[  815.161270][T15032]  ? vscnprintf+0x5d/0x90
[  815.165612][T15032]  panic+0x349/0x880
[  815.169516][T15032]  ? check_panic_on_warn+0x21/0xb0
[  815.174627][T15032]  ? __pfx_panic+0x10/0x10
[  815.179040][T15032]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  815.185038][T15032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  815.191392][T15032]  ? print_report+0x502/0x550
[  815.196080][T15032]  check_panic_on_warn+0x86/0xb0
[  815.201057][T15032]  ? shutdown_one_device_async+0x4ac/0x5f0
[  815.206879][T15032]  end_report+0x77/0x160
[  815.211128][T15032]  kasan_report+0x154/0x180
[  815.215623][T15032]  ? kobject_put+0x272/0x480
[  815.220207][T15032]  ? shutdown_one_device_async+0x4ac/0x5f0
[  815.226009][T15032]  shutdown_one_device_async+0x4ac/0x5f0
[  815.231636][T15032]  ? __pfx_shutdown_one_device_async+0x10/0x10
[  815.237781][T15032]  async_run_entry_fn+0xa8/0x420
[  815.242712][T15032]  ? process_scheduled_works+0x976/0x1850
[  815.248429][T15032]  process_scheduled_works+0xa63/0x1850
[  815.253976][T15032]  ? __pfx_process_scheduled_works+0x10/0x10
[  815.259963][T15032]  ? assign_work+0x364/0x3d0
[  815.264554][T15032]  worker_thread+0x870/0xd30
[  815.269142][T15032]  ? __kthread_parkme+0x169/0x1d0
[  815.274162][T15032]  ? __pfx_worker_thread+0x10/0x10
[  815.279266][T15032]  kthread+0x2f0/0x390
[  815.283324][T15032]  ? __pfx_worker_thread+0x10/0x10
[  815.288425][T15032]  ? __pfx_kthread+0x10/0x10
[  815.293023][T15032]  ret_from_fork+0x4b/0x80
[  815.297463][T15032]  ? __pfx_kthread+0x10/0x10
[  815.302053][T15032]  ret_from_fork_asm+0x1a/0x30
[  815.306819][T15032]  </TASK>
[  815.309955][T15032] Kernel Offset: disabled
[  815.314267][T15032] Rebooting in 86400 seconds..