last executing test programs:

1m5.225990793s ago: executing program 1 (id=17):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x36)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r3, &(0x7f00000000c0), 0x26)

1m5.225292633s ago: executing program 4 (id=18):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x635, &(0x7f0000000000)="$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")
r2 = dup(r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000020000040800000000000000030000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0x4000000, 0x9})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m4.880324047s ago: executing program 1 (id=20):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1211, &(0x7f0000002480)="$eJzs28FrXEUcB/Bf0qapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfsWwIrYvXk1b9DBBG8CeJNL7n4HwjecvFYQXySXW27ujmshGwon89lfzDznZ3ZYRdmebP/2hcfbm9V2Vbei9mZmZjdiUj3UqSYjX98Gi+9+uNPz924dfvaWrO5fj2lq2s3V15JKS09//07H3/1wg+9c29/u/TdfOwtv7v/2+qvexf2Lu7/efODVpVaVWp3eilPdzqdXn6nLNJmq9rOUnqrLPKqSK12VXRH2rfKzs5OP+XtzcWFnW5RVSlv99N20U+9Tup1+yl/P2+1U5ZlaXEhmNzp+9XGl/fquo6o67k4E3Vd14/FQpyLx2MxlqIRy/FEPBlPxfl4Oi7EM/FsfPPL1/2DBAAAAAAAAAAAAAAAAAAAAHB0Jr3/f3HQa9qzBgAAAAAAAAAAAAAAAAAAgEfLjVu3r601m+vXUzobUX6+u7G7MXwdtq9tRSvKKOJKNOKPGNz+HxrWV99orl9JA8vxWXn37/zd3Y1To/mVaMTL4/Mrw3wazc/HwsP51WjE+XH5uVgdmz8bl198KJ9FI35+LzpRxmYcZB+8/ycrKb3+ZvNf+UuDfoc7dRzbAwAAAEciS/eNPb9n2WHtw/wE/w+MnK8PspdOT3XpRETV/2g7L8uiqxhbXD4Z0xgUZ45ywLmImCz1e13X0/8QplQc/k2Zj4j/PfJMRJyMBf6nmPYvE8fhwaZPeyYAAAAAAAAAAABM4jgeJ5z2GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FUAAAD//yrf0Ks=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x82)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80047210, &(0x7f0000000000)={@id={0x2, 0x0, @auto="a121d8c5f0f9568ad23d340aaeceaf60"}})

1m4.379223035s ago: executing program 4 (id=22):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10)

1m4.341115696s ago: executing program 1 (id=23):
open(0x0, 0x80242, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000500)={0x79, 0x0, 0xc1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0xe21, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xfffffffffffffffc, 0x2], 0x1000, 0x8340})
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m4.144849599s ago: executing program 4 (id=24):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x4, 0x716c})

1m3.878670483s ago: executing program 1 (id=25):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@quota}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN")
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008050, &(0x7f0000002480)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x41800, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

1m3.703815586s ago: executing program 4 (id=26):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

1m2.783268919s ago: executing program 1 (id=30):
socket$inet6(0xa, 0x5, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1m1.896079553s ago: executing program 1 (id=36):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020)

1m1.612600898s ago: executing program 32 (id=36):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020)

59.678566927s ago: executing program 3 (id=42):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

58.610830154s ago: executing program 3 (id=46):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xebb65a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

56.775476962s ago: executing program 3 (id=50):
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
r2 = fanotify_init(0x20, 0x2)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
getdents(r1, &(0x7f0000001200)=""/198, 0xc6)

56.288398949s ago: executing program 3 (id=51):
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x3800008, &(0x7f0000000780)={[{@discard}, {@user_xattr}, {@data_journal}, {@resgid}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}]}, 0x3f, 0x540, &(0x7f0000000100)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

55.260128545s ago: executing program 3 (id=53):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$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")
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sync()
unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

53.305018965s ago: executing program 3 (id=60):
openat$incfs(0xffffffffffffffff, 0x0, 0x80100, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0xf, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, [0x0, 0x2]}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x458082, 0x0)

52.859843772s ago: executing program 33 (id=60):
openat$incfs(0xffffffffffffffff, 0x0, 0x80100, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0xf, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, [0x0, 0x2]}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x458082, 0x0)

41.644440633s ago: executing program 4 (id=26):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

16.638652355s ago: executing program 4 (id=26):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

16.33488792s ago: executing program 6 (id=179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xe8, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0xb4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0xdd}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4)

15.300035316s ago: executing program 6 (id=182):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})

13.495952124s ago: executing program 6 (id=194):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x200200, &(0x7f0000000b00)=ANY=[], 0xf, 0x2ab, &(0x7f0000000480)="$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")
truncate(0x0, 0x8000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00')
r1 = fanotify_init(0x0, 0x80000)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents(r0, 0x0, 0x0)

13.08406848s ago: executing program 6 (id=199):
socket$unix(0x1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x55b, &(0x7f0000000980)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='cpu.stat\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x3000046, &(0x7f0000001400)={[{@inlinecrypt}, {@nouid32}, {@usrquota}, {@nojournal_checksum}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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")
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001180)=ANY=[@ANYBLOB="000000004c90020004000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed00000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000200"/192])

11.283434347s ago: executing program 6 (id=204):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000023106a053103000000000001090224000100007e1109040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2a08000, &(0x7f0000000140), 0xfc, 0x474, &(0x7f00000003c0)="$eJzs3MtrXFUYAPBv7mTSpM/4qNqHGl9YfDRN+rALN4qCCwVBF9VdTNNSm1ppIthSTBSpSym4F5eCf4Er3Yi6EtzqXgpBsml8gFfunXvzfk0yyUTn94MJ59x7Zu75zrlncu65MxNA2+rN/lQidkfEL1k6ybMz0qJQVm566vrQH1PXhyqRpq/9Xsn33Z66PlSWLZ+3u8gcSSKSjytxaInjjl69dnFwZGT4SpHvG7v0bt/o1WtPX7g0eH74/PA7A6dPnzje/8ypgZNNiXNPVteDH1w+fOClN26+MnTm5ls/fNVR1nVBHM3SG73z2nKux5p9sBbbMydd6WhhRWhINSKy7qrl439fVGO28/bFix+1tHLApkrTNN27/O6JFPgfq0SrawC0RvmP/vZUd3Rt0nXwdjb5XP0CKIt7unjU93REUpSpLbi+baauYt3kzMSfn0fe/jvaqv0BgK33TTb/eao+/ykf9T09cc+ccnvz9eBsa8QdEXFnRNwVEXdHxP6IvOy9EXFfg8fvXZBfPP9Mbq0rsDXK5n/PFve25s//itnfP2lPtcjtie7oiVrl3IWR4WNFmxyJ2o4s37/CMb594edPl9vXW8z9ykd2/HIuWNTjVseO+c85Ozg2uLGoZ01+mK8Bji+Of/bOVZY6EBEH1/H62bz5whNfHl5u/+rxr6AJ95nSLyIer/f/RKwQ/8L7k93FvlMDJ/u6YmT4WF95Viz24083Xl3u+BuKvwmy/t+55Pk/E39PZe792tHGj3Hj10+WvaZp4Px/s9ySnf+dldfzdGex7f3BsbEr/RGdlZcXbx+YfbUyX5af3L0/4pGlx3/2HpedY1n8hyIiO4nvj4gHIuLBou4PRcTDkb/EUsanI+L75x99ez3xJ6s1bBNk/X92Xv/HKv3feKJ68buv1xN/Xdb/J/LUkWLLWt7/1lrBjbQdAAAA/Fck+WfgK8nRmXSSHD0asStf292ZjFweHXvy3OX3/jpb/6x8T9SScqWrvh5cXw/tL9aGy/zAgvzxYt34s2p3nt9Z3PsGWmfX3PGfLzjWx3/mt2qLKwdsPt/XgvZl/EP7Mv6hfRn/0L7WOv7TTa4HsPWWGv/jLagHsPXM/6F9Gf/Qvox/aF/GP7SljXyvX2KVxHjDzdsVK5Xp3CZx5YlI8kQ63sJq/F38DMvaCm9efcpfy1i9cK0Yd9uhB1dOtO49CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJn+DQAA//85XdxN")
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

10.639819757s ago: executing program 6 (id=212):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000050000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

10.261023173s ago: executing program 34 (id=212):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000050000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

5.303388799s ago: executing program 0 (id=240):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x3800008, &(0x7f0000000780)={[{@discard}, {@user_xattr}, {@data_journal}, {@resgid}, {@noacl}]}, 0x3f, 0x540, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400)

3.932100649s ago: executing program 0 (id=242):
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102100708"], 0x0)

3.547677366s ago: executing program 2 (id=244):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe)

3.327877799s ago: executing program 2 (id=245):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file0\x00', 0x800c80, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e", @ANYRESDEC=0x0, @ANYRES16=0x0], 0xf9, 0x1220, &(0x7f0000001840)="$eJzs3E9rHGUcB/Bf1tSkafNHrdX2oA94EQ9Dk4MnQYKkIFlQaiO0gjA1E10y7pbMElgRoyevvg7P3gTfQS6+Bm+59NiDONLZJs3G1VoxWbGfz2Hnx/zmyzMPuyw8yzx78NZ3n29vVdlW3o/W1FS07kak+ylStOLQK+vD463b66vt9tqNlK6v3lx+M6W08OpPH305ExEXPvxh4ceZ2F/6+ODeyi/7l/evHPx287NOlTpV6vb6KU93er1+fqdcSJudajtL6f2yyKsidbpVsXOsX6StNyJikPLu5vzc3Z2iqlLeHaTtYpD6vdTfGaT807zTTVmWpfm5YFS9d1See/zVG9/fr+s6oq7PxbNR13V9PubiQlyM+ViIryPiuXg+XohL8WJcjpfi5bjSXHW6cwAAAAAAAAAAAAAAAAAAAICnzV/t/1+MJfv/AQAAAAAAAAAAAAAAAAAA4Ax8cOv2+mq7vXYjpdmI8tvdjd2N4XHYX3rwUkYR12Ixfo1m9//QsL7+bnvtWmosxTfl3sP83u7GM01+9TC/3PydwMP8dNM7zC8P82k0PxNzD/Jb0WnyK7EYl8aPvzI2Pxuvv3Ysn8Vi/PxJ9KKMzWbsR/mvllN65732ifzV5joAAAD4P8jSkbHr9yz7s/4wf7S+fvzvAyfW19NxdXqycyeiGnyxnbfKYqcpysNi9g9nTq+IMxzr3y0i7tVNMTPaav2d+MWIeMJBWzHxKR8rpv7h2x3/hZtXnCzOx+iZSX8zcRYefQwmfScAAAAAAAAAAAA8iVN+rnA6xjxZ9vZkpgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zg4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKECAAD//0oZxDE=")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x3, 0x5}}, 0x30)

2.660080149s ago: executing program 2 (id=248):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18)

2.64514s ago: executing program 5 (id=249):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x890c, 0x0)

2.507280861s ago: executing program 5 (id=250):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x440100, 0x0)
close_range(r1, r0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x200000000000011, 0x2, 0x3)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
mkdir(&(0x7f0000000100)='./control\x00', 0x184)
r4 = open(&(0x7f0000022ff6)='./control\x00', 0x50500, 0x0)
getdents64(r4, &(0x7f0000005180)=""/45, 0x2d)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000001880)={0x79, 0x0, 0x3f8})
write$binfmt_script(r0, &(0x7f0000000f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)

2.227822216s ago: executing program 0 (id=251):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x4)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r0, &(0x7f0000000000)=""/120, 0x78)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
pwrite64(r0, &(0x7f0000000100)='M\t', 0x2, 0x0)

2.227424666s ago: executing program 5 (id=252):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)="c94c3c075705286f659bc6e56f18a75d3353e3351d19c22d803170541a608b3b53095d009dd56d8b066cd644a75b62dba0fae0267dccf77cafc920ff39d6178c92157bd801cde51a7bf95039fb1faef8c8ca89511e8466b24077594f08f056c57c5a16995e8916b211254d0d27eb5a1df50b2b", 0x0, 0x40, 0xffffffffffffffff, 0x4}, 0x38)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xad, 0x4, 0xff, 0x0, 0x100, 0xf2, 0x9, 0x4, 0xf0, 0x5, 0x4, 0x4, 0x0, 0x4a1, 0x5, 0x6, 0x9, 0x50, 0x7, '\x00', 0x7f, 0x8})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x3f, 0x5, 0x7, '\x00', 0xfce})

2.076549388s ago: executing program 5 (id=253):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf6334000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.470152277s ago: executing program 2 (id=254):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.003987544s ago: executing program 0 (id=255):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

974.665535ms ago: executing program 5 (id=256):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x2000006, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x25, 0x35b, &(0x7f0000000200)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

662.87199ms ago: executing program 2 (id=257):
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000000c0)=""/4096)

443.999543ms ago: executing program 2 (id=258):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}, {}]}, 0x1, 0x453, &(0x7f00000004c0)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0)

133.082578ms ago: executing program 5 (id=259):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

97.962208ms ago: executing program 0 (id=260):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000003f00)="11500df908f76b5ddb0a53570797b35a86a4b744", 0x14}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002"], 0x30, 0x940}}, {{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2004c000}}], 0x2, 0x0)

0s ago: executing program 0 (id=261):
r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', 0x0})
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
memfd_create(0x0, 0x2)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6)
setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0)
connect$inet(r3, 0x0, 0x0)
connect$bt_sco(r2, &(0x7f0000000900)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
syz_open_dev$sndctrl(0x0, 0x1, 0x111200)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x4b4b, &(0x7f0000000000))
write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8)

kernel console output (not intermixed with test programs):

91809][ T4213] Bluetooth: hci3: command 0x040f tx timeout
[   68.506264][ T4213] Bluetooth: hci0: command 0x040f tx timeout
[   68.507275][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.513001][ T4213] Bluetooth: hci2: command 0x040f tx timeout
[   68.528623][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.562628][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.573858][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.584108][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.595635][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.605866][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.616528][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.628251][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.666548][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.681681][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.692206][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.701439][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.713484][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.724891][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.734922][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.745829][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.755888][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.766407][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.778426][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.798729][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.807899][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.816943][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.825701][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.841357][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.852870][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.948542][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.958181][  T560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.960523][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.971749][  T560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.987612][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.003394][ T4173] device veth0_macvtap entered promiscuous mode
[   69.041109][ T4173] device veth1_macvtap entered promiscuous mode
[   69.048479][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.067338][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.085669][  T560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.094410][  T560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.103166][  T560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.159757][  T560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.168416][  T560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.189071][  T560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.194634][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.200695][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.216395][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.223916][  T560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.227398][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.241245][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.252698][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.262812][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.275256][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.285406][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.296010][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.308482][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.320227][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.328263][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.337423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.345684][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.355649][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.384842][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.397845][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.410081][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.421082][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.431575][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.444830][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.455532][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.466026][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.477714][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.516250][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.529847][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.556003][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.566525][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.576372][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.585232][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.616594][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.658560][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.684875][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.709741][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.725662][ T4254] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   69.727193][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.780933][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.795784][ T4255] loop1: detected capacity change from 0 to 512
[   69.796989][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.829127][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.851238][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.859204][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.892152][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.920465][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.009948][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.018001][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.060700][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.125292][ T4255] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   70.246859][ T4255] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.552232][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[   70.563460][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[   70.615504][    T7] Bluetooth: hci3: command 0x0419 tx timeout
[   70.617960][ T4273] loop3: detected capacity change from 0 to 764
[   70.662393][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[   70.729532][ T4273] rock: directory entry would overflow storage
[   70.738660][ T4273] rock: sig=0x4654, size=5, remaining=4
[   70.763500][    T7] Bluetooth: hci1: command 0x0419 tx timeout
[   71.198931][ T4286] ecryptfs_parse_options: eCryptfs: unrecognized option [&@]
[   71.206497][ T4286] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[   71.220497][ T4286] Error parsing options; rc = [-22]
[   71.355436][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[   71.364354][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[   71.871448][ T4289] loop3: detected capacity change from 0 to 128
[   71.915337][ T4291] loop0: detected capacity change from 0 to 1024
[   71.938704][ T4289] =======================================================
[   71.938704][ T4289] WARNING: The mand mount option has been deprecated and
[   71.938704][ T4289]          and is ignored by this kernel. Remove the mand
[   71.938704][ T4289]          option from the mount to silence this warning.
[   71.938704][ T4289] =======================================================
[   71.955472][ T4285] loop2: detected capacity change from 0 to 8192
[   72.300910][ T4293] loop0: detected capacity change from 0 to 512
[   72.312095][ T4293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   72.464217][ T4293] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.11: corrupted inode contents
[   72.578874][ T4293] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #16: comm syz.0.11: mark_inode_dirty error
[   72.595284][ T4301] loop1: detected capacity change from 0 to 2048
[   72.602002][ T4160] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   72.643399][ T4293] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.11: corrupted inode contents
[   72.665339][ T4293] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.11: mark_inode_dirty error
[   72.683537][ T4293] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.11: corrupted inode contents
[   72.701233][ T4301] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   72.747372][ T4293] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   72.756824][ T4301] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   72.774008][ T4293] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.11: corrupted inode contents
[   72.797051][ T4293] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.11: mark_inode_dirty error
[   72.825341][ T4301] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[   72.857141][ T4293] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   72.879535][ T4160] usb 4-1: Using ep0 maxpacket: 16
[   72.896483][ T4301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.904390][ T4293] EXT4-fs (loop0): 1 truncate cleaned up
[   72.911647][ T4293] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.925253][ T4293] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.009909][ T4160] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[   73.028802][ T4160] usb 4-1: config 1 has no interface number 0
[   73.073209][ T4160] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   73.097967][ T4160] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   73.128724][ T4160] usb 4-1: config 1 interface 105 has no altsetting 0
[   73.179361][ T4293] EXT4-fs error (device loop0): ext4_get_group_desc:277: comm syz.0.11: block_group >= groups_count - block_group = 1048576, groups_count = 1
[   73.277800][ T4293] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4439: inode #33554445: comm syz.0.11: unable to read itable block
[   73.339744][ T4160] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   73.345819][ T4312] loop4: detected capacity change from 0 to 2048
[   73.367036][ T4160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.395955][ T4160] usb 4-1: Product: syz
[   73.409019][ T4160] usb 4-1: Manufacturer: syz
[   73.419923][ T4160] usb 4-1: SerialNumber: syz
[   73.462358][ T4246]  loop4: p1 < > p3
[   73.491234][ T4289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   73.500760][ T4246] loop4: p3 size 134217728 extends beyond EOD, truncated
[   73.508935][ T4289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   73.569982][ T4312]  loop4: p1 < > p3
[   73.601182][ T4312] loop4: p3 size 134217728 extends beyond EOD, truncated
[   73.701697][ T4320] loop0: detected capacity change from 0 to 8
[   73.790335][ T4312] kvm: emulating exchange as write
[   73.962829][ T4323] loop1: detected capacity change from 0 to 8192
[   73.983733][ T4289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.017995][ T4289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.144870][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   74.169197][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   74.291192][ T4329] loop1: detected capacity change from 0 to 2048
[   74.365191][ T4329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.490891][ T4160] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   74.534418][ T4160] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   74.579710][ T4160] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   74.622596][ T4160] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:e3:e2:c3:a1:9b
[   74.656026][ T4336] loop1: detected capacity change from 0 to 512
[   74.669012][ T4160] usb 4-1: USB disconnect, device number 2
[   74.681300][ T4160] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   74.683902][ T4169] syz-executor (4169) used greatest stack depth: 21152 bytes left
[   74.733801][ T4336] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   74.766247][ T4336] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   74.787559][ T4336] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   74.831669][ T4336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec11c, mo2=0002]
[   74.846770][  T560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.876490][ T4336] System zones: 1-12
[   74.946996][ T4336] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.25: corrupted in-inode xattr
[   74.975477][  T560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.982407][ T4336] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.25: couldn't read orphan inode 15 (err -117)
[   74.998599][ T4160] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   75.018394][ T4160] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   75.052076][ T4160] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   75.062756][ T4336] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,quota,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: writeback.
[   75.115769][  T560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.252570][ T4344] loop3: detected capacity change from 0 to 512
[   75.330239][ T4344] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   75.389791][ T4344] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[   75.389791][ T4344] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   75.389791][ T4344] 
[   75.412924][  T560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.437762][ T4336] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.25: bg 0: bad block bitmap checksum
[   75.467582][ T4344] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[   75.487945][ T4336] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.25: iget: checksum invalid
[   75.494897][ T4344] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   75.519570][ T4214] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.533640][ T4344] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.28: casefold flag without casefold feature
[   75.549190][ T4344] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.28: couldn't read orphan inode 15 (err -117)
[   75.575704][ T4344] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,nouser_xattr,grpjquota=./file0,jqfmt=vfsv0,i_version,nolazytime,,errors=continue. Quota mode: writeback.
[   75.642924][ T4347] loop2: detected capacity change from 0 to 8192
[   75.665306][ T4171] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[   75.819690][ T4214] usb 1-1: Using ep0 maxpacket: 8
[   75.833118][ T4171] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[   75.970383][ T4214] usb 1-1: config 0 has no interfaces?
[   76.032778][ T4352] loop3: detected capacity change from 0 to 128
[   76.129578][ T4352] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.152899][ T4352] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.169828][ T4214] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   76.178923][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.208722][ T4214] usb 1-1: Product: syz
[   76.227438][ T4214] usb 1-1: Manufacturer: syz
[   76.235102][ T4351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.243397][ T4360] loop2: detected capacity change from 0 to 256
[   76.267052][ T4214] usb 1-1: SerialNumber: syz
[   76.302884][ T4214] usb 1-1: config 0 descriptor??
[   76.338544][ T4360] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   76.368388][ T4341] chnl_net:caif_netlink_parms(): no params data found
[   76.510894][ T4171] syz-executor (4171) used greatest stack depth: 20320 bytes left
[   76.582568][    T7] usb 1-1: USB disconnect, device number 2
[   76.863022][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.883324][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.968742][ T4341] device bridge_slave_0 entered promiscuous mode
[   77.046094][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.058378][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.080744][ T4341] device bridge_slave_1 entered promiscuous mode
[   77.269562][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   77.272045][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.329887][ T4388] loop0: detected capacity change from 0 to 2048
[   77.352158][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.444053][ T4388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.556347][ T4341] team0: Port device team_slave_0 added
[   77.594052][ T4341] team0: Port device team_slave_1 added
[   77.728098][ T4398] loop2: detected capacity change from 0 to 128
[   78.031457][ T4398] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   78.592580][ T4398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   78.717141][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.740926][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.804438][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.858251][ T4384] chnl_net:caif_netlink_parms(): no params data found
[   78.888307][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.905772][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.000478][ T4414] loop2: detected capacity change from 0 to 512
[   79.019857][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.046392][ T4414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   79.116052][ T4414] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.43: bg 0: block 384: padding at end of block bitmap is not set
[   79.188057][ T4421] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   79.227334][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   79.269795][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.279976][ T4414] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   79.330992][ T4341] device hsr_slave_0 entered promiscuous mode
[   79.341487][ T4341] device hsr_slave_1 entered promiscuous mode
[   79.341606][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.354650][    T7] Bluetooth: hci0: command 0x041b tx timeout
[   79.381011][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.400248][ T4341] Cannot create hsr debugfs directory
[   79.426275][ T4424] loop0: detected capacity change from 0 to 2048
[   79.443731][ T4414] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.43: attempt to clear invalid blocks 983260 len 1
[   79.520105][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.526711][ T4414] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.43: Invalid inode table block 0 in block_group 0
[   79.565608][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.567054][ T4424] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none.
[   79.574014][ T4414] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem
[   79.627449][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.641732][ T4414] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   79.662422][ T4424] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   79.710954][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.745740][ T4414] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.43: Invalid inode table block 0 in block_group 0
[   79.787832][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.806055][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.829053][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.846950][ T4414] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem
[   79.849864][ T4384] device bridge_slave_0 entered promiscuous mode
[   79.857592][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.889828][ T4414] EXT4-fs error (device loop2): ext4_truncate:4273: inode #11: comm syz.2.43: mark_inode_dirty error
[   79.924902][ T4432] loop3: detected capacity change from 0 to 512
[   79.932257][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.938838][ T4414] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   79.964531][  T560] device hsr_slave_0 left promiscuous mode
[   79.979779][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   79.986411][ T4414] EXT4-fs (loop2): 1 truncate cleaned up
[   80.001956][  T560] device hsr_slave_1 left promiscuous mode
[   80.011316][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.018821][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.046373][ T4414] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none.
[   80.087808][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.144802][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.193520][  T560] device bridge_slave_1 left promiscuous mode
[   80.220373][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.234905][ T4414] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.43: Invalid inode table block 0 in block_group 0
[   80.235217][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[   80.293571][ T4432] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.312676][ T4414] EXT4-fs (loop2): Remounting filesystem read-only
[   80.363816][  T560] device bridge_slave_0 left promiscuous mode
[   80.374720][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.413354][  T560] device veth1_macvtap left promiscuous mode
[   80.429923][  T560] device veth0_macvtap left promiscuous mode
[   80.436532][  T560] device veth1_vlan left promiscuous mode
[   80.451820][  T560] device veth0_vlan left promiscuous mode
[   81.102340][ T4458] 9pnet: Insufficient options for proto=fd
[   81.595383][ T4217] Bluetooth: hci2: command 0x041b tx timeout
[   81.601784][ T4217] Bluetooth: hci0: command 0x040f tx timeout
[   81.757609][ T4217] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   82.061405][  T560] team0 (unregistering): Port device team_slave_1 removed
[   82.100313][  T560] team0 (unregistering): Port device team_slave_0 removed
[   82.129939][ T4217] usb 3-1: config 0 has an invalid interface number: 151 but max is 0
[   82.138196][ T4217] usb 3-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config
[   82.160185][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.179523][ T4217] usb 3-1: config 0 has no interface number 0
[   82.185720][ T4217] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   82.215338][ T4465] loop3: detected capacity change from 0 to 512
[   82.249959][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.355683][ T4465] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[   82.388681][ T4217] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[   82.419020][ T4217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.442256][ T4217] usb 3-1: Product: syz
[   82.446480][ T4217] usb 3-1: Manufacturer: syz
[   82.514643][ T4217] usb 3-1: SerialNumber: syz
[   82.526723][ T4465] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.51: corrupted inode contents
[   82.549312][ T4217] usb 3-1: config 0 descriptor??
[   82.574160][  T560] bond0 (unregistering): Released all slaves
[   82.616922][ T4465] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #16: comm syz.3.51: mark_inode_dirty error
[   82.649516][ T4465] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.51: corrupted inode contents
[   82.664057][ T4465] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.51: mark_inode_dirty error
[   82.684073][ T4465] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.51: corrupted inode contents
[   82.698003][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.702727][ T4465] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   82.709777][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.723219][ T4465] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.51: corrupted inode contents
[   82.736021][ T4465] EXT4-fs error (device loop3): ext4_truncate:4273: inode #16: comm syz.3.51: mark_inode_dirty error
[   82.738900][ T4384] device bridge_slave_1 entered promiscuous mode
[   82.754464][ T4465] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   82.770125][ T4465] EXT4-fs (loop3): 1 truncate cleaned up
[   82.775931][ T4465] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,user_xattr,data=journal,resgid=0x0000000000000000,grpjquota=./file2,,errors=continue. Quota mode: writeback.
[   82.794981][ T4465] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.968727][ T4384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.994233][ T4470] loop0: detected capacity change from 0 to 256
[   83.043445][ T4384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.049708][ T4470] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   83.082570][ T4217] usb 3-1: USB disconnect, device number 2
[   83.099891][ T4246] udevd[4246]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.117563][ T4470] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   83.158276][ T4470] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   83.197003][ T4384] team0: Port device team_slave_0 added
[   83.254282][ T4384] team0: Port device team_slave_1 added
[   83.455446][ T4384] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.511579][ T4384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.624689][ T4384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.670030][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   83.671937][ T4384] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.689521][   T13] Bluetooth: hci2: command 0x040f tx timeout
[   83.710831][ T4384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.774487][ T4478] loop2: detected capacity change from 0 to 4096
[   83.806801][ T4384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.873221][ T4486] loop0: detected capacity change from 0 to 1024
[   83.907308][ T4478] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   84.165490][ T4478] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.55: iget: bad i_size value: -72057594037927926
[   84.179786][ T4486] hfsplus: xattr searching failed
[   84.247030][  T154] hfsplus: b-tree write err: -5, ino 3
[   84.259825][ T4478] fs-verity: sha256 using implementation "sha256-avx2"
[   84.318921][ T4384] device hsr_slave_0 entered promiscuous mode
[   84.349023][ T4384] device hsr_slave_1 entered promiscuous mode
[   84.382773][ T4496] loop0: detected capacity change from 0 to 512
[   84.464943][ T4496] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   84.510315][ T4496] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   84.550725][ T4496] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   84.600027][ T4496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   84.670468][ T4496] System zones: 0-2, 18-18, 34-34
[   84.715212][ T4496] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   84.859816][ T4496] EXT4-fs (loop0): 1 truncate cleaned up
[   84.865518][ T4496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   85.027672][   T26] audit: type=1800 audit(1750176380.925:2): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.57" name="file1" dev="loop0" ino=15 res=0 errno=0
[   85.089593][   T26] audit: type=1800 audit(1750176380.965:3): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.57" name="file2" dev="loop0" ino=16 res=0 errno=0
[   85.131415][ T4341] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.161213][ T4341] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.188843][ T4508] loop2: detected capacity change from 0 to 512
[   85.199893][   T26] audit: type=1800 audit(1750176381.055:4): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.59" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   85.230390][ T4341] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.284057][ T4508] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.59: casefold flag without casefold feature
[   85.291665][ T4384] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   85.329991][ T4508] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.59: couldn't read orphan inode 15 (err -117)
[   85.431002][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   85.451818][ T4341] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.462200][ T4384] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   85.495960][ T4384] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   85.542626][ T4384] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   85.699308][ T4514] device syzkaller0 entered promiscuous mode
[   85.752053][ T4245] Bluetooth: hci2: command 0x0419 tx timeout
[   86.171366][ T4384] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.925365][ T1107] cfg80211: failed to load regulatory.db
[   87.044363][ T4384] 8021q: adding VLAN 0 to HW filter on device team0
[   87.121789][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.144305][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.147038][ T4539] loop2: detected capacity change from 0 to 512
[   87.163587][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.198160][ T4539] EXT4-fs (loop2): Ignoring removed nobh option
[   87.259864][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.272418][ T4539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.288166][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.309186][ T4539] EXT4-fs (loop2): 1 truncate cleaned up
[   87.315574][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.322723][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.330508][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none.
[   87.354152][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.363103][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.371795][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.378896][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.387346][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.397994][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.403639][   T26] audit: type=1800 audit(1750176383.305:5): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.65" name="file1" dev="loop2" ino=15 res=0 errno=0
[   87.406333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.438802][ T4341] 8021q: adding VLAN 0 to HW filter on device team0
[   87.460160][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.473743][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.515867][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.548094][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.578706][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.582470][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.664520][ T4384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   87.664545][ T4384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.685273][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.686088][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.686698][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.687423][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.687971][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.694358][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.694398][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.694935][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.695570][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.712430][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.723981][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.724618][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.725639][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.726085][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.726124][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.807197][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.808087][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.820741][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.822216][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.850241][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.851037][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.851720][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.030845][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.031573][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.068781][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.069392][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.208169][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.291286][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.291429][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.306771][ T4531] chnl_net:caif_netlink_parms(): no params data found
[   88.390176][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   88.431134][ T4570] loop2: detected capacity change from 0 to 512
[   88.443010][ T4384] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.528717][ T4576] loop0: detected capacity change from 0 to 1024
[   88.574073][ T4570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   88.649230][ T4576] EXT4-fs (loop0): Ignoring removed nobh option
[   88.719354][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.764036][ T4576] EXT4-fs (loop0): Ignoring removed bh option
[   88.770700][ T4576] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.784138][ T4570] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   88.797778][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.799147][ T4531] device bridge_slave_0 entered promiscuous mode
[   88.808091][ T4576] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.69: bad orphan inode 32767
[   88.840322][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.869865][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.886031][ T4570] EXT4-fs (loop2): 1 truncate cleaned up
[   88.893045][ T4570] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000066,nobarrier,nodiscard,noquota,. Quota mode: none.
[   88.918076][ T4531] device bridge_slave_1 entered promiscuous mode
[   88.997652][ T4576] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,noload,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   89.035148][ T4531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.077767][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.184554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.199776][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.247399][ T4531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.423656][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.452837][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.498232][   T26] audit: type=1800 audit(1750176385.385:6): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.69" name="file1" dev="loop0" ino=15 res=0 errno=0
[   89.808650][ T4531] team0: Port device team_slave_0 added
[   90.492238][ T4531] team0: Port device team_slave_1 added
[   90.515027][ T4384] device veth0_vlan entered promiscuous mode
[   90.521541][   T13] Bluetooth: hci4: command 0x041b tx timeout
[   90.535694][ T4610] loop2: detected capacity change from 0 to 512
[   90.540776][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.564448][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.589082][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.615279][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.633437][ T4610] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   90.716949][ T4384] device veth1_vlan entered promiscuous mode
[   90.794221][ T4620] loop0: detected capacity change from 0 to 256
[   90.801491][ T4531] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.837930][ T4531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.877304][ T4620] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   90.904703][ T4531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.915516][ T4620] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   90.938904][  T560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.973195][ T4625] loop2: detected capacity change from 0 to 256
[   90.993819][ T4531] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.009883][ T4531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.013477][ T4620] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   91.065279][ T4531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.082932][ T4625] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   91.101206][ T4625] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   91.152429][ T4625] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   91.193452][  T560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.208628][ T4620] exFAT-fs (loop0): hint_cluster is invalid (17)
[   91.248121][ T4625] exFAT-fs (loop2): hint_cluster is invalid (17)
[   91.309681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.318424][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.499991][ T4384] device veth0_macvtap entered promiscuous mode
[   91.513239][ T4384] device veth1_macvtap entered promiscuous mode
[   91.531513][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.543382][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.566105][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.580216][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.782223][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.249497][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.259358][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.321007][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.355356][ T4384] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.448525][  T560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.551376][ T4245] Bluetooth: hci4: command 0x040f tx timeout
[   92.576631][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.581119][ T4644] loop0: detected capacity change from 0 to 16
[   92.599164][ T4645] loop2: detected capacity change from 0 to 1024
[   92.600614][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.624864][ T4644] erofs: (device loop0): mounted with root inode @ nid 36.
[   92.660633][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.696028][ T4644] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[   92.701680][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.716159][   T26] audit: type=1800 audit(1750176388.615:7): pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.76" name="file1" dev="loop2" ino=20 res=0 errno=0
[   92.734211][ T4644] attempt to access beyond end of device
[   92.734211][ T4644] loop0: rw=0, want=304, limit=16
[   92.758008][ T4644] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   92.764956][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   92.780131][ T4644] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   92.787799][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.811574][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.823617][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.833950][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.846935][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.875122][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.895489][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.916411][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.937548][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.954969][ T4384] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.969402][ T4531] device hsr_slave_0 entered promiscuous mode
[   92.977223][ T4531] device hsr_slave_1 entered promiscuous mode
[   93.003016][ T4531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.038421][ T4531] Cannot create hsr debugfs directory
[   93.083771][ T4652] loop0: detected capacity change from 0 to 1024
[   93.085768][  T560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.153931][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.191203][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.244402][ T4384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.274629][ T4384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.315313][ T4384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.356057][ T4384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.455206][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.543601][ T4661] cgroup: Unknown subsys name 'io'
[   93.593335][ T4661] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   93.857569][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.229096][ T4654] kvm [4653]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0
[   94.250390][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.258488][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.289744][ T4654] kvm [4653]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[   94.321430][ T4654] kvm [4653]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80
[   94.339711][ T4654] kvm [4653]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x80
[   94.409980][ T4341] device veth0_vlan entered promiscuous mode
[   94.476897][ T4341] device veth1_vlan entered promiscuous mode
[   94.629948][ T1326] Bluetooth: hci4: command 0x0419 tx timeout
[   94.695836][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.708984][  T560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.719595][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.741377][ T4341] device veth0_macvtap entered promiscuous mode
[   94.753441][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.769316][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.780794][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.798698][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.826371][ T4341] device veth1_macvtap entered promiscuous mode
[   94.853182][  T560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.886484][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.908706][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.923242][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.938343][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.958754][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.979574][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.989873][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.000973][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.012000][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.023608][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.036492][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.047504][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.060434][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.082261][  T560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.095455][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.113576][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.122221][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.132688][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.144652][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.156567][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.168326][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.189836][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.208139][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.219036][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.237606][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.252239][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.256696][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.278687][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.308901][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.341160][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.352842][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.374760][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.423812][  T560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.438267][ T4341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.448318][ T4341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.457627][ T4341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.467952][ T4341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.649921][ T4531] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   95.711756][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.712007][ T4531] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   95.730463][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.730476][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.753953][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   95.761255][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.792217][ T1107] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   95.823804][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.894010][ T1107] usb 1-1: config 0 descriptor??
[   95.900742][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.921352][ T4531] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   96.018397][ T4531] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   96.077518][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.098891][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.148477][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   96.380000][ T4712] loop2: detected capacity change from 0 to 16
[   96.387019][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[   96.408306][ T1107] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   96.473575][ T4712] erofs: (device loop2): mounted with root inode @ nid 36.
[   96.499752][ T1107] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   96.530623][ T4712] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[   96.551909][ T4712] attempt to access beyond end of device
[   96.551909][ T4712] loop2: rw=0, want=304, limit=16
[   96.619572][ T4712] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[   96.661699][ T4712] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   96.745338][    T7] usb 1-1: USB disconnect, device number 3
[   96.769153][ T4531] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.827824][ T4717] fido_id[4717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[   96.996643][ T4723] loop2: detected capacity change from 0 to 1024
[   97.023344][ T4531] 8021q: adding VLAN 0 to HW filter on device team0
[   97.032426][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.041080][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.088229][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.140165][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.160974][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.168092][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.260849][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.482794][ T4730] cgroup: Unknown subsys name 'io'
[   97.512485][ T4730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[   98.121653][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   98.174510][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.212442][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.219621][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.256691][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   98.292519][ T4734] loop2: detected capacity change from 0 to 256
[   98.324628][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.450482][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.495886][ T4734] FAT-fs (loop2): Directory bread(block 64) failed
[   98.516926][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.525822][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.535621][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.544471][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.559862][ T4734] FAT-fs (loop2): Directory bread(block 65) failed
[   98.572020][ T4734] FAT-fs (loop2): Directory bread(block 66) failed
[   98.578816][ T4734] FAT-fs (loop2): Directory bread(block 67) failed
[   98.764791][ T4734] FAT-fs (loop2): Directory bread(block 68) failed
[   98.918414][ T4734] FAT-fs (loop2): Directory bread(block 69) failed
[   99.087759][ T4531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.141735][ T4734] FAT-fs (loop2): Directory bread(block 70) failed
[   99.343007][ T4531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.354747][ T4734] FAT-fs (loop2): Directory bread(block 71) failed
[   99.364959][ T4734] FAT-fs (loop2): Directory bread(block 72) failed
[   99.389763][ T4734] FAT-fs (loop2): Directory bread(block 73) failed
[   99.399865][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   99.419911][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   99.483282][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   99.491932][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   99.502407][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  100.289951][ T4217] Bluetooth: hci0: command 0x0409 tx timeout
[  100.416240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  100.431787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  100.449604][ T4245] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  100.488880][ T4531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.519029][ T4729] chnl_net:caif_netlink_parms(): no params data found
[  100.545734][ T4766] loop0: detected capacity change from 0 to 256
[  100.615838][ T4761] loop2: detected capacity change from 0 to 8192
[  100.657620][ T4766] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.689543][ T4245] usb 6-1: Using ep0 maxpacket: 16
[  100.703946][ T4766] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  100.807585][ T4766] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  100.849751][ T4245] usb 6-1: unable to get BOS descriptor or descriptor too short
[  100.870208][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.939688][ T4245] usb 6-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config
[  100.944918][ T4766] exFAT-fs (loop0): hint_cluster is invalid (17)
[  100.970737][ T4245] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  101.001666][ T4245] usb 6-1: config 1 has no interface number 1
[  101.008113][ T4245] usb 6-1: config 1 interface 2 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  101.111367][ T4783] loop2: detected capacity change from 0 to 8
[  101.186903][ T4245] usb 6-1: config 1 interface 2 has no altsetting 0
[  101.298240][ T4783] SQUASHFS error: Failed to read block 0xb40004e8: -5
[  101.339800][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.352283][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.368183][ T4783] SQUASHFS error: Unable to read metadata cache entry [b40004e8]
[  101.450991][ T4729] device bridge_slave_0 entered promiscuous mode
[  101.469647][ T4245] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.488071][ T4783] SQUASHFS error: Unable to read inode 0xb4000000011f
[  101.495554][ T4245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.514848][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.542548][ T4245] usb 6-1: Product: syz
[  101.546771][ T4245] usb 6-1: Manufacturer: syz
[  101.561965][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.579520][ T4245] usb 6-1: SerialNumber: syz
[  101.600954][ T4729] device bridge_slave_1 entered promiscuous mode
[  101.784609][ T4790] loop2: detected capacity change from 0 to 1024
[  101.857076][ T4729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.900369][ T4793] loop0: detected capacity change from 0 to 8
[  101.920611][ T4729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.986666][ T4793] SQUASHFS error: lzo decompression failed, data probably corrupt
[  101.999982][ T4793] SQUASHFS error: Failed to read block 0x91: -5
[  102.016675][ T4793] SQUASHFS error: Unable to read metadata cache entry [8f]
[  102.030624][ T4245] usb 6-1: USB disconnect, device number 2
[  102.043691][ T4793] SQUASHFS error: Unable to read inode 0x11f
[  102.283733][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.290956][ T4321] udevd[4321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  102.300413][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.316096][ T1110] Bluetooth: hci0: command 0x041b tx timeout
[  102.403833][ T4800] cgroup: Unknown subsys name 'io'
[  102.426817][ T4800] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8
[  103.345465][ T4729] team0: Port device team_slave_0 added
[  103.424816][ T4531] device veth0_vlan entered promiscuous mode
[  103.451041][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.466437][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.480305][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.510461][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.525470][ T4729] team0: Port device team_slave_1 added
[  103.667155][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.699685][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.727139][ T4729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.752885][ T4816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.105'.
[  103.962403][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.974529][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.070340][ T4729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.167418][ T4826] loop2: detected capacity change from 0 to 512
[  104.182319][ T4531] device veth1_vlan entered promiscuous mode
[  104.218982][  T560] device hsr_slave_0 left promiscuous mode
[  104.273312][  T560] device hsr_slave_1 left promiscuous mode
[  104.283670][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.300190][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.301783][ T4826] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  104.327110][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.336310][ T4832] loop0: detected capacity change from 0 to 8192
[  104.337909][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.351285][  T560] device bridge_slave_1 left promiscuous mode
[  104.357562][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.368091][ T4826] EXT4-fs (loop2): orphan cleanup on readonly fs
[  104.378230][ T4826] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  104.393303][ T1110] Bluetooth: hci0: command 0x040f tx timeout
[  104.400354][  T560] device bridge_slave_0 left promiscuous mode
[  104.407775][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.447602][ T4826] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  104.465298][  T560] device hsr_slave_0 left promiscuous mode
[  104.472646][  T560] device hsr_slave_1 left promiscuous mode
[  104.487734][ T4826] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  104.528217][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.536790][   T26] audit: type=1800 audit(1750176400.435:8): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.110" name="bus" dev="loop0" ino=1048636 res=0 errno=0
[  104.545204][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.566355][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.574517][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.589751][ T4826] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.108: couldn't read orphan inode 13 (err -117)
[  104.602444][  T560] device bridge_slave_1 left promiscuous mode
[  104.608774][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.633580][ T4826] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback.
[  104.653879][  T560] device bridge_slave_0 left promiscuous mode
[  104.669881][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.694385][ T4826] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.108: inode #15: comm syz.2.108: iget: illegal inode #
[  104.743970][ T4826] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  104.761153][  T560] device veth1_macvtap left promiscuous mode
[  104.783246][ T4826] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  104.787767][  T560] device veth0_macvtap left promiscuous mode
[  104.806949][  T560] device veth1_vlan left promiscuous mode
[  104.815385][  T560] device veth0_vlan left promiscuous mode
[  104.822739][  T560] device veth1_macvtap left promiscuous mode
[  104.830217][  T560] device veth0_macvtap left promiscuous mode
[  104.839201][  T560] device veth1_vlan left promiscuous mode
[  104.840547][ T4826] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  104.874382][  T560] device veth0_vlan left promiscuous mode
[  105.273617][  T560] team0 (unregistering): Port device team_slave_1 removed
[  105.291362][  T560] team0 (unregistering): Port device team_slave_0 removed
[  105.308582][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.325456][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.411454][  T560] bond0 (unregistering): Released all slaves
[  105.554944][  T560] team0 (unregistering): Port device team_slave_1 removed
[  105.571333][  T560] team0 (unregistering): Port device team_slave_0 removed
[  105.584776][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.602680][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.682011][  T560] bond0 (unregistering): Released all slaves
[  105.783739][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.797903][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.839192][ T4531] device veth0_macvtap entered promiscuous mode
[  105.865657][ T4729] device hsr_slave_0 entered promiscuous mode
[  105.879640][ T4729] device hsr_slave_1 entered promiscuous mode
[  105.886962][ T4729] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.896198][ T4729] Cannot create hsr debugfs directory
[  105.956769][ T4531] device veth1_macvtap entered promiscuous mode
[  106.026604][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.039268][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.049329][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.068992][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.079029][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.099177][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.112520][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.123355][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.135001][ T4531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.163764][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.178007][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.187596][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.207233][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.227689][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.238721][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.248850][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.259624][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.270319][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.281060][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.291237][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.302001][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.313674][ T4531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.357184][ T4729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.379286][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.406830][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.430761][ T4531] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.440761][ T4531] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.458665][ T4531] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.468933][ T4531] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.479713][ T4217] Bluetooth: hci0: command 0x0419 tx timeout
[  106.493493][ T4729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.565269][ T4729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.677227][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.681138][ T4729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.695908][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.734243][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.787881][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.818386][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.852697][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  106.954244][ T4729] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.979053][ T4880] loop0: detected capacity change from 0 to 512
[  106.999246][ T4878] loop5: detected capacity change from 0 to 128
[  107.008696][ T4729] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  107.057461][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.62'.
[  107.067679][ T4729] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  107.086408][ T4880] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  107.157668][ T4729] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  107.176298][ T4878] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.191520][ T4880] EXT4-fs (loop0): 1 orphan inode deleted
[  107.197301][ T4880] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000005314,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000000100,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback.
[  107.256209][ T4878] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  107.560140][ T4894] loop2: detected capacity change from 0 to 512
[  108.079853][ T4898] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.122: Directory hole found for htree leaf block 0
[  109.066202][ T4900] cgroup: Unknown subsys name 'io'
[  109.095597][ T4900] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9
[  109.634427][ T4894] EXT4-fs (loop2): Ignoring removed nobh option
[  109.762553][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.781695][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  109.810300][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.833183][ T4729] 8021q: adding VLAN 0 to HW filter on device team0
[  109.912614][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  109.922212][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback.
[  109.979187][ T4904] loop0: detected capacity change from 0 to 512
[  109.993916][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.011068][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.018193][ T4803] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.042451][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.069801][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.078768][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.087959][ T4904] EXT4-fs (loop0): Ignoring removed nobh option
[  110.094525][ T4803] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.101685][ T4803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.115666][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  110.125522][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  110.176923][ T4904] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  110.250242][ T4904] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  110.321743][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  110.330100][ T4904] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.114: casefold flag without casefold feature
[  110.361618][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  110.396287][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  110.427384][ T4904] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.114: couldn't read orphan inode 13 (err -117)
[  110.491411][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  110.524204][ T4904] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback.
[  110.561217][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  110.572610][ T4919] loop2: detected capacity change from 0 to 512
[  110.587898][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  110.630982][ T4919] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  110.787943][ T4919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.117: bg 0: block 5: invalid block bitmap
[  110.817666][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  110.934149][ T4926] hub 6-0:1.0: USB hub found
[  110.943322][ T4926] hub 6-0:1.0: 1 port detected
[  111.171740][ T4919] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  111.313049][ T4919] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.117: invalid indirect mapped block 3 (level 2)
[  111.640471][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  111.699202][ T4919] EXT4-fs (loop2): 2 truncates cleaned up
[  111.706369][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.757678][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  111.803041][ T4934] Zero length message leads to an empty skb
[  111.809551][ T4919] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback.
[  112.078256][ T4931] kvm [4930]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0
[  112.168142][ T4931] kvm [4930]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  112.201899][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[  112.246125][ T4931] kvm [4930]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80
[  112.359899][ T4931] kvm [4930]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x80
[  112.502530][ T4956] cgroup: Unknown subsys name 'io'
[  113.126917][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.137572][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.164323][ T4959] loop2: detected capacity change from 0 to 1024
[  113.239830][ T4729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.462376][ T4971] cgroup: Unknown subsys name 'io'
[  113.721909][ T4959] EXT4-fs (loop2): Test dummy encryption mode enabled
[  113.779775][ T4959] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,grpid,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  114.065492][ T5004] loop5: detected capacity change from 0 to 512
[  114.169695][ T5004] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  114.234984][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.247320][ T5004] EXT4-fs (loop5): 1 orphan inode deleted
[  114.276144][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  114.276996][ T5004] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000005314,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000000100,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback.
[  114.337094][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  114.348711][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.360888][ T4729] device veth0_vlan entered promiscuous mode
[  114.378004][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.393845][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.407979][ T4729] device veth1_vlan entered promiscuous mode
[  114.437298][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  114.446994][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  114.522344][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  114.537508][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.637088][ T5017] loop2: detected capacity change from 0 to 512
[  114.651652][ T4729] device veth0_macvtap entered promiscuous mode
[  114.703241][ T5017] EXT4-fs (loop2): Ignoring removed nobh option
[  114.708806][ T4729] device veth1_macvtap entered promiscuous mode
[  114.752500][ T5017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.782499][ T5018] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.142: Directory hole found for htree leaf block 0
[  115.335378][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.353138][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.365980][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.386464][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.399126][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.434625][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.489339][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.510532][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.523078][ T5017] EXT4-fs (loop2): 1 truncate cleaned up
[  115.523115][ T5017] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none.
[  115.553748][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.564256][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.575748][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.599565][   T26] audit: type=1800 audit(1750176411.485:9): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.146" name="file1" dev="loop2" ino=15 res=0 errno=0
[  115.608550][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  115.632207][ T5017] usb usb8: usbfs: process 5017 (syz.2.146) did not claim interface 0 before use
[  115.634050][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  115.650824][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.660294][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.680740][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.699473][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.710154][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.737830][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.767186][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.801851][ T5029] cgroup: Unknown subsys name 'io'
[  115.809495][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.819345][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.865180][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.875046][ T5031] loop0: detected capacity change from 0 to 256
[  115.922250][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.956659][ T5031] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  115.963848][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.973390][ T5033] loop5: detected capacity change from 0 to 8
[  115.997488][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.003610][ T5031] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  116.030057][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.038588][ T5031] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  116.047054][ T1110] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  116.073292][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.082044][ T5031] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  116.116890][ T4729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.167447][ T4729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.203018][ T4729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.236439][ T4729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.279673][ T1110] usb 7-1: Using ep0 maxpacket: 16
[  116.362769][ T5043] netlink: 'syz.2.156': attribute type 27 has an invalid length.
[  116.410029][ T1110] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.432409][ T1110] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.609837][ T1110] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.618950][ T1110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.637535][ T1110] usb 7-1: Product: syz
[  116.646475][ T1110] usb 7-1: Manufacturer: syz
[  116.667191][ T1110] usb 7-1: SerialNumber: syz
[  116.782901][ T4170] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  116.796131][ T5062] loop5: detected capacity change from 0 to 512
[  116.858727][ T5062] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  116.916257][ T5062] EXT4-fs (loop5): 1 truncate cleaned up
[  116.955614][ T5062] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  116.983798][ T5062] EXT4-fs (loop5): shut down requested (1)
[  117.001402][ T5067] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  117.190231][ T1110] usb 7-1: 0:2 : does not exist
[  117.219848][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.309151][ T1110] usb 7-1: USB disconnect, device number 2
[  117.312607][ T5075] loop0: detected capacity change from 0 to 512
[  117.487599][ T5075] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.163: corrupted inode contents
[  117.532331][ T5075] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #16: comm syz.0.163: mark_inode_dirty error
[  117.556705][ T5075] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.163: corrupted inode contents
[  117.564437][ T4246] udevd[4246]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.584219][ T5075] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.163: mark_inode_dirty error
[  117.614126][ T5075] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.163: corrupted inode contents
[  117.702425][ T5075] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  117.749897][ T5075] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.163: corrupted inode contents
[  117.811095][ T5075] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.163: mark_inode_dirty error
[  117.859993][ T5075] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  117.875131][ T5075] EXT4-fs (loop0): 1 truncate cleaned up
[  117.889569][ T5075] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.010473][ T5075] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.439727][    T7] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  118.742515][ T5086] loop5: detected capacity change from 0 to 512
[  118.771124][ T5086] EXT4-fs (loop5): Test dummy encryption mode enabled
[  118.782044][ T5086] EXT4-fs (loop5): Test dummy encryption mode enabled
[  118.819858][ T5086] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:163: inode #12: comm syz.5.167: inline data xattr refers to an external xattr inode
[  118.882696][ T5090] loop0: detected capacity change from 0 to 256
[  118.895922][ T5086] EXT4-fs (loop5): Remounting filesystem read-only
[  118.942156][ T5086] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.167: couldn't read orphan inode 12 (err -117)
[  118.959630][    T7] usb 7-1: unable to get BOS descriptor or descriptor too short
[  118.980260][ T5086] EXT4-fs (loop5): Remounting filesystem read-only
[  118.987047][ T5086] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,sysvgroups,prjquota,stripe=0x00000000000093a8,barrier=0x000000000000000e,errors=remount-ro,nombcache,test_dummy_encryption,. Quota mode: writeback.
[  119.020098][ T5043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.029680][    T7] usb 7-1: not running at top speed; connect to a high speed hub
[  119.107439][ T5043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.119630][    T7] usb 7-1: config 2 has an invalid interface number: 136 but max is 0
[  119.135538][    T7] usb 7-1: config 2 has no interface number 0
[  119.142382][    T7] usb 7-1: config 2 interface 136 has no altsetting 0
[  120.109644][    T7] usb 7-1: New USB device found, idVendor=0ac8, idProduct=332d, bcdDevice=37.8b
[  120.129006][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.137515][    T7] usb 7-1: Product: syz
[  120.142595][    T7] usb 7-1: Manufacturer: syz
[  120.147272][    T7] usb 7-1: SerialNumber: syz
[  120.531569][    T7] usb 7-1: USB disconnect, device number 3
[  120.566026][ T5043] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.575065][ T5043] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.586652][ T5043] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.595618][ T5043] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.779391][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  120.788342][ T5047] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.796862][ T5047] 8021q: adding VLAN 0 to HW filter on device team0
[  120.809361][ T5047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.888420][ T5100] loop0: detected capacity change from 0 to 8
[  120.912723][ T5102] loop2: detected capacity change from 0 to 256
[  120.961217][ T5100] squashfs: Unknown parameter '�00000000000000000000ة
[  120.961217][ T5100] A�	�뽦�qe�OP/6rG���G�hD���
[  120.961217][ T5100] 3p�"")[ߡ\7��g�t��7m�1�uԢ�����Řd�IOr+�#��
[  120.961217][ T5100] �Pj+����o�Q����.#�ǂ��y�A8I�A����geN���f�Un��+�*�T���K�+�g'
[  121.012863][ T4802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.035123][ T5102] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  121.037523][ T4802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.095171][ T5102] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  121.142774][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  121.166422][ T5102] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  121.177507][ T4802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.204239][ T4802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.213547][ T5102] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  121.246851][ T5111] loop0: detected capacity change from 0 to 512
[  121.259134][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  121.296410][ T5113] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  121.364514][ T5111] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  121.426465][ T5111] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  121.466732][ T5111] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  121.493070][ T5111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec11c, mo2=0002]
[  121.506377][ T5111] System zones: 1-12
[  121.514975][ T5111] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.173: corrupted in-inode xattr
[  121.527644][ T5111] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.173: couldn't read orphan inode 15 (err -117)
[  121.540193][ T5111] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,quota,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: writeback.
[  121.884640][ T4173] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  122.057590][  T560] device hsr_slave_0 left promiscuous mode
[  122.075566][  T560] device hsr_slave_1 left promiscuous mode
[  122.105446][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.125521][ T5138] netlink: 'syz.6.179': attribute type 2 has an invalid length.
[  122.144010][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.335509][ T5138] netlink: 'syz.6.179': attribute type 1 has an invalid length.
[  122.358477][ T5138] netlink: 'syz.6.179': attribute type 1 has an invalid length.
[  122.359152][ T5145] loop5: detected capacity change from 0 to 1024
[  122.390733][ T5138] netlink: 'syz.6.179': attribute type 1 has an invalid length.
[  122.401936][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.413290][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.456208][ T5138] netlink: 'syz.6.179': attribute type 1 has an invalid length.
[  122.508234][ T5138] netlink: 'syz.6.179': attribute type 2 has an invalid length.
[  122.609145][  T560] device bridge_slave_1 left promiscuous mode
[  122.704880][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.888876][  T560] device bridge_slave_0 left promiscuous mode
[  123.084445][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.172455][  T560] device veth1_macvtap left promiscuous mode
[  123.229916][ T5145] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  123.249867][  T560] device veth0_macvtap left promiscuous mode
[  123.259807][ T5150] loop0: detected capacity change from 0 to 256
[  123.271345][  T560] device veth1_vlan left promiscuous mode
[  123.277422][ T5145] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: inode #32: comm syz.5.181: iget: special inode unallocated
[  123.277435][  T560] device veth0_vlan left promiscuous mode
[  123.312916][ T5145] EXT4-fs (loop5): no journal found
[  123.347159][ T5145] EXT4-fs (loop5): can't get journal size
[  123.396143][ T5145] EXT4-fs (loop5): filesystem is read-only
[  123.418554][ T5145] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none.
[  124.054189][  T560] team0 (unregistering): Port device team_slave_1 removed
[  124.078921][  T560] team0 (unregistering): Port device team_slave_0 removed
[  124.102268][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.122309][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.137383][ T1110] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  124.265870][ T5177] loop5: detected capacity change from 0 to 1764
[  124.309952][  T560] bond0 (unregistering): Released all slaves
[  124.499618][ T1110] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  124.508102][ T1110] usb 1-1: config 0 has no interface number 0
[  124.679630][ T1110] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  124.688721][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.697659][ T1110] usb 1-1: Product: syz
[  124.701937][ T1110] usb 1-1: Manufacturer: syz
[  124.706557][ T1110] usb 1-1: SerialNumber: syz
[  124.723120][ T1110] usb 1-1: config 0 descriptor??
[  124.981422][ T1110] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  124.994046][ T5192] loop6: detected capacity change from 0 to 256
[  125.011450][ T1110] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  125.034365][ T1110] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  125.056384][ T1110] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  125.067286][ T5194] loop5: detected capacity change from 0 to 512
[  125.112425][ T1110] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  125.230696][ T5194] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  125.280770][ T5205] loop2: detected capacity change from 0 to 1024
[  125.333776][ T5194] EXT4-fs (loop5): Ignoring removed oldalloc option
[  125.349637][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[  125.383066][ T5205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.433282][ T5151] chnl_net:caif_netlink_parms(): no params data found
[  125.455966][ T5194] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.195: casefold flag without casefold feature
[  125.470584][ T5194] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.195: couldn't read orphan inode 15 (err -117)
[  125.544717][ T5194] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,oldalloc,barrier=0x000000000000952b,,errors=continue. Quota mode: writeback.
[  125.642464][ T5213] loop6: detected capacity change from 0 to 1024
[  125.777346][ T5213] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  125.947484][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.969999][ T4321] udevd[4321]: incorrect jbd checksum on /dev/loop6
[  125.980001][   T23] usb 1-1: USB disconnect, device number 4
[  126.002931][   T23] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  126.022619][ T5213] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.199: Invalid block bitmap block 0 in block_group 0
[  126.049500][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.061644][   T23] keyspan 1-1:0.133: device disconnected
[  126.083544][ T5151] device bridge_slave_0 entered promiscuous mode
[  126.144427][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.158950][ T4531] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0
[  126.276503][ T4531] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  126.316593][ T4531] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #2: comm syz-executor: mark_inode_dirty error
[  126.363744][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.380926][ T5151] device bridge_slave_1 entered promiscuous mode
[  126.398539][ T4531] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0
[  126.412699][ T4531] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0
[  126.446320][ T5151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.697422][ T5151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.303817][ T5243] loop5: detected capacity change from 0 to 256
[  127.401863][ T5151] team0: Port device team_slave_0 added
[  127.404266][ T5243] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d)
[  127.439680][ T4215] Bluetooth: hci0: command 0x041b tx timeout
[  127.460560][ T5151] team0: Port device team_slave_1 added
[  127.642479][ T4287] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm kworker/u4:7: Invalid inode table block 0 in block_group 0
[  127.643035][ T5151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.712769][ T5260] loop0: detected capacity change from 0 to 256
[  127.725160][ T5151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.758777][ T5151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.819120][ T5263] loop5: detected capacity change from 0 to 16
[  127.847227][ T5151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.888927][ T5151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.924001][ T5263] erofs: (device loop5): mounted with root inode @ nid 36.
[  128.047898][ T5151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.228961][ T5278] capability: warning: `syz.2.216' uses deprecated v2 capabilities in a way that may be insecure
[  128.253436][ T5279] loop0: detected capacity change from 0 to 128
[  128.378643][ T5279] EXT4-fs (loop0): Ignoring removed nobh option
[  128.634487][ T5279] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[  128.746620][ T5151] device hsr_slave_0 entered promiscuous mode
[  129.179723][ T5151] device hsr_slave_1 entered promiscuous mode
[  129.232783][ T5151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.277931][ T5279] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.306936][ T5151] Cannot create hsr debugfs directory
[  129.520024][ T4215] Bluetooth: hci0: command 0x040f tx timeout
[  129.669071][ T5301] loop0: detected capacity change from 0 to 1024
[  129.855439][ T5307] loop2: detected capacity change from 0 to 256
[  129.911216][ T5151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.093345][ T5151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.125709][ T5312] loop0: detected capacity change from 0 to 164
[  130.125741][ T5314] loop5: detected capacity change from 0 to 256
[  130.213402][ T5151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.224398][ T5312] Unable to read rock-ridge attributes
[  130.286432][ T5312] Unable to read rock-ridge attributes
[  130.298229][ T5312] iso9660: Corrupted directory entry in block 4 of inode 1792
[  130.354999][   T26] audit: type=1326 audit(1750176426.255:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.2.226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd3fe59929 code=0x0
[  130.392271][ T5151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.569011][ T5285] chnl_net:caif_netlink_parms(): no params data found
[  131.357626][ T4160] Bluetooth: hci4: command 0x0409 tx timeout
[  131.590531][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  131.605170][ T5346] loop5: detected capacity change from 0 to 16
[  131.749193][ T5346] erofs: (device loop5): mounted with root inode @ nid 36.
[  131.759675][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.767458][ T5285] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.829808][ T5285] device bridge_slave_0 entered promiscuous mode
[  131.862494][ T5358] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46
[  131.891364][ T5151] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  131.941232][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.948355][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.988836][ T5285] device bridge_slave_1 entered promiscuous mode
[  132.048418][ T5151] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  132.086518][ T5151] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  132.195680][ T5151] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  132.225289][ T5285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.272356][ T5285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.356953][ T5285] team0: Port device team_slave_0 added
[  132.371208][ T5285] team0: Port device team_slave_1 added
[  132.423248][ T5285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.429517][   T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  132.438918][ T5285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.466079][ T5285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.490019][ T5285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.497834][ T5285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.527389][ T5285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.608743][ T5285] device hsr_slave_0 entered promiscuous mode
[  132.616627][ T5285] device hsr_slave_1 entered promiscuous mode
[  132.627967][ T5285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.648651][ T5285] Cannot create hsr debugfs directory
[  132.672278][ T5151] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.689672][   T23] usb 6-1: Using ep0 maxpacket: 8
[  132.758834][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  132.774531][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.794677][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  132.801183][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  132.810815][   T23] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  132.824096][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.825639][ T5151] 8021q: adding VLAN 0 to HW filter on device team0
[  132.854656][   T23] usb 6-1: config 0 descriptor??
[  132.898085][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  132.911670][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  132.942162][ T4927] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.949485][ T4927] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.977480][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  132.990116][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  132.999174][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.011681][ T4927] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.018870][ T4927] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.042312][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  133.078301][ T5384] loop2: detected capacity change from 0 to 256
[  133.101350][  T560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.167286][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  133.180573][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  133.223117][ T5389] loop0: detected capacity change from 0 to 512
[  133.229269][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  133.258952][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  133.277491][ T5389] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[  133.277491][ T5389] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  133.277491][ T5389] 
[  133.284047][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  133.339886][   T23] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  133.361009][  T560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.380541][   T23] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  133.397300][ T5389] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.240: corrupted inode contents
[  133.410045][   T23] asix: probe of 6-1:0.0 failed with error -32
[  133.426710][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  133.435262][ T4176] Bluetooth: hci4: command 0x041b tx timeout
[  133.443473][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  133.452665][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  133.462403][ T5389] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #16: comm syz.0.240: mark_inode_dirty error
[  133.469823][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  133.482208][ T5389] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.240: corrupted inode contents
[  133.496397][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  133.501728][ T5389] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.240: mark_inode_dirty error
[  133.531393][  T560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.547123][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  133.685417][ T5389] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.240: corrupted inode contents
[  133.720665][ T5389] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  133.741808][  T560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.754719][ T5389] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.240: corrupted inode contents
[  133.773982][ T5389] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.240: mark_inode_dirty error
[  133.787864][ T5389] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  133.852267][ T5389] EXT4-fs (loop0): 1 truncate cleaned up
[  133.858218][ T5389] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,user_xattr,data=journal,resgid=0x0000000000000000,noacl,,errors=continue. Quota mode: writeback.
[  134.038272][ T5389] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.398205][   T26] audit: type=1800 audit(1750176430.295:11): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="file2" dev="loop0" ino=16 res=0 errno=0
[  134.533794][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  134.545949][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  134.575770][ T5151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.847281][ T5285] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  134.929689][ T4669] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  135.015939][ T5285] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  135.106245][ T5285] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  135.122545][ T4176] usb 6-1: USB disconnect, device number 3
[  135.151030][ T5285] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  135.179528][ T4669] usb 1-1: Using ep0 maxpacket: 8
[  135.299796][ T4669] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  135.339647][ T4669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.368823][ T5426] loop2: detected capacity change from 0 to 8192
[  135.376776][ T4669] usb 1-1: config 0 descriptor??
[  135.443823][ T5435] loop5: detected capacity change from 0 to 4096
[  135.451302][ T5426] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  135.478166][   T26] audit: type=1800 audit(1750176431.375:12): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file1" dev="loop2" ino=1048647 res=0 errno=0
[  135.521681][   T23] Bluetooth: hci4: command 0x040f tx timeout
[  135.555142][ T5435] EXT4-fs (loop5): Ignoring removed orlov option
[  135.557661][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.587661][ T5435] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,abort,errors=continue,orlov,data_err=abort,errors=remount-ro,nobarrier,quota,. Quota mode: writeback.
[  135.624017][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.636369][ T4215] usb 1-1: USB disconnect, device number 5
[  135.659561][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  135.668019][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  135.693118][ T5435] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz.5.247: path /46/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  135.721185][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  135.747124][ T5435] EXT4-fs (loop5): Remounting filesystem read-only
[  135.751017][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  135.786576][ T5285] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.842993][ T5151] device veth0_vlan entered promiscuous mode
[  135.947940][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.971146][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.006508][ T5151] device veth1_vlan entered promiscuous mode
[  136.026428][ T5285] 8021q: adding VLAN 0 to HW filter on device team0
[  136.078064][   T26] audit: type=1400 audit(1750176431.975:13): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5446 comm="syz.5.250"
[  136.097386][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.106785][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.116375][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  136.126819][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.136496][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.143657][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.153321][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  136.165195][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.175825][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.183063][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.212951][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.226800][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.341682][ T5151] device veth0_macvtap entered promiscuous mode
[  136.367931][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.377949][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.387013][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.396082][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  136.406590][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  136.415534][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  136.430076][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  136.441344][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  136.450129][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  136.591222][ T5151] device veth1_macvtap entered promiscuous mode
[  136.625796][ T5285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  136.884174][ T5285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.160143][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.223376][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.388359][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.441760][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.475917][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.511148][ T5467] loop5: detected capacity change from 0 to 256
[  137.529047][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.585414][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.599908][ T1107] Bluetooth: hci4: command 0x0419 tx timeout
[  137.626738][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.677399][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.698301][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.727357][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.749797][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.769982][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.812635][ T5151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.836994][ T5467] FAT-fs (loop5): Directory bread(block 64) failed
[  137.870039][ T5467] FAT-fs (loop5): Directory bread(block 65) failed
[  137.876719][ T5467] FAT-fs (loop5): Directory bread(block 66) failed
[  137.911414][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  137.925911][ T5467] FAT-fs (loop5): Directory bread(block 67) failed
[  137.930584][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.969874][ T5467] FAT-fs (loop5): Directory bread(block 68) failed
[  137.978496][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.985959][ T5467] FAT-fs (loop5): Directory bread(block 69) failed
[  138.039516][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.044697][ T5467] FAT-fs (loop5): Directory bread(block 70) failed
[  138.049907][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.088050][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.091735][ T5478] loop2: detected capacity change from 0 to 512
[  138.100396][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.114092][ T5467] FAT-fs (loop5): Directory bread(block 71) failed
[  138.126030][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.130748][ T5467] FAT-fs (loop5): Directory bread(block 72) failed
[  138.148022][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.151288][ T5467] FAT-fs (loop5): Directory bread(block 73) failed
[  138.179476][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.201583][ T5151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.212987][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  138.233675][ T5478] EXT4-fs (loop2): Test dummy encryption mode enabled
[  138.280512][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  138.282923][ T5478] EXT4-fs error (device loop2): ext4_fill_super:4841: inode #2: comm syz.2.258: casefold flag without casefold feature
[  138.338850][ T5478] EXT4-fs (loop2): get root inode failed
[  138.365727][ T5151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.372072][ T5478] EXT4-fs (loop2): mount failed
[  138.381023][ T5482] raw_sendmsg: syz.0.260 forgot to set AF_INET. Fix it!
[  138.402721][ T5151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.483787][ T5489] 
[  138.486169][ T5489] ======================================================
[  138.493204][ T5489] WARNING: possible circular locking dependency detected
[  138.500384][ T5489] 5.15.185-syzkaller #0 Not tainted
[  138.503545][ T5151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.505597][ T5489] ------------------------------------------------------
[  138.505606][ T5489] syz.0.261/5489 is trying to acquire lock:
[  138.526583][ T5151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.527202][ T5489] ffff888063bb4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  138.546972][ T5489] 
[  138.546972][ T5489] but task is already holding lock:
[  138.554480][ T5489] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  138.564277][ T5489] 
[  138.564277][ T5489] which lock already depends on the new lock.
[  138.564277][ T5489] 
[  138.574710][ T5489] 
[  138.574710][ T5489] the existing dependency chain (in reverse order) is:
[  138.583746][ T5489] 
[  138.583746][ T5489] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  138.591773][ T5489]        __mutex_lock_common+0x1eb/0x2390
[  138.597527][ T5489]        mutex_lock_nested+0x17/0x20
[  138.602945][ T5489]        rfkill_register+0x33/0x8a0
[  138.608188][ T5489]        hci_register_dev+0x452/0x970
[  138.613599][ T5489]        vhci_create_device+0x32c/0x5c0
[  138.619177][ T5489]        vhci_write+0x391/0x450
[  138.624156][ T5489]        vfs_write+0x712/0xd00
[  138.628996][ T5489]        ksys_write+0x14d/0x250
[  138.633872][ T5489]        do_syscall_64+0x4c/0xa0
[  138.638840][ T5489]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  138.645460][ T5489] 
[  138.645460][ T5489] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  138.653318][ T5489]        __mutex_lock_common+0x1eb/0x2390
[  138.659082][ T5489]        mutex_lock_nested+0x17/0x20
[  138.664408][ T5489]        vhci_send_frame+0x88/0x100
[  138.669637][ T5489]        hci_send_frame+0x1a9/0x2e0
[  138.674879][ T5489]        hci_tx_work+0x9f9/0x1710
[  138.679940][ T5489]        process_one_work+0x863/0x1000
[  138.685433][ T5489]        worker_thread+0xaa8/0x12a0
[  138.690674][ T5489]        kthread+0x436/0x520
[  138.695294][ T5489]        ret_from_fork+0x1f/0x30
[  138.700352][ T5489] 
[  138.700352][ T5489] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  138.709594][ T5489]        __flush_work+0xdd/0x1b0
[  138.714571][ T5489]        hci_dev_do_close+0x1e7/0x1030
[  138.720078][ T5489]        hci_unregister_dev+0x2d7/0x580
[  138.725851][ T5489]        vhci_release+0x73/0xc0
[  138.730751][ T5489]        __fput+0x234/0x930
[  138.735299][ T5489]        task_work_run+0x125/0x1a0
[  138.740446][ T5489]        do_exit+0x616/0x20a0
[  138.745156][ T5489]        do_group_exit+0x12e/0x300
[  138.750298][ T5489]        __x64_sys_exit_group+0x3b/0x40
[  138.756053][ T5489]        do_syscall_64+0x4c/0xa0
[  138.761134][ T5489]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  138.767711][ T5489] 
[  138.767711][ T5489] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  138.775478][ T5489]        __mutex_lock_common+0x1eb/0x2390
[  138.781237][ T5489]        mutex_lock_nested+0x17/0x20
[  138.786556][ T5489]        bg_scan_update+0x44/0x3b0
[  138.791707][ T5489]        process_one_work+0x863/0x1000
[  138.797295][ T5489]        worker_thread+0xaa8/0x12a0
[  138.802525][ T5489]        kthread+0x436/0x520
[  138.807156][ T5489]        ret_from_fork+0x1f/0x30
[  138.812131][ T5489] 
[  138.812131][ T5489] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  138.821987][ T5489]        __lock_acquire+0x2c33/0x7c60
[  138.827404][ T5489]        lock_acquire+0x197/0x3f0
[  138.832471][ T5489]        __flush_work+0xdd/0x1b0
[  138.837448][ T5489]        __cancel_work_timer+0x3ac/0x520
[  138.843620][ T5489]        hci_request_cancel_all+0xcc/0x300
[  138.849475][ T5489]        hci_dev_do_close+0x4e/0x1030
[  138.854883][ T5489]        hci_rfkill_set_block+0x10a/0x190
[  138.860633][ T5489]        rfkill_set_block+0x1c6/0x420
[  138.866052][ T5489]        rfkill_fop_write+0x458/0x560
[  138.871640][ T5489]        vfs_write+0x300/0xd00
[  138.876530][ T5489]        ksys_write+0x14d/0x250
[  138.881421][ T5489]        do_syscall_64+0x4c/0xa0
[  138.886394][ T5489]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  138.892845][ T5489] 
[  138.892845][ T5489] other info that might help us debug this:
[  138.892845][ T5489] 
[  138.903098][ T5489] Chain exists of:
[  138.903098][ T5489]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  138.903098][ T5489] 
[  138.918863][ T5489]  Possible unsafe locking scenario:
[  138.918863][ T5489] 
[  138.926332][ T5489]        CPU0                    CPU1
[  138.931824][ T5489]        ----                    ----
[  138.937210][ T5489]   lock(rfkill_global_mutex);
[  138.942022][ T5489]                                lock(&data->open_mutex);
[  138.949166][ T5489]                                lock(rfkill_global_mutex);
[  138.956491][ T5489]   lock((work_completion)(&hdev->bg_scan_update));
[  138.963114][ T5489] 
[  138.963114][ T5489]  *** DEADLOCK ***
[  138.963114][ T5489] 
[  138.971275][ T5489] 1 lock held by syz.0.261/5489:
[  138.976248][ T5489]  #0: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  138.986386][ T5489] 
[  138.986386][ T5489] stack backtrace:
[  138.992414][ T5489] CPU: 0 PID: 5489 Comm: syz.0.261 Not tainted 5.15.185-syzkaller #0
[  139.000609][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  139.011111][ T5489] Call Trace:
[  139.014424][ T5489]  <TASK>
[  139.017499][ T5489]  dump_stack_lvl+0x168/0x230
[  139.022293][ T5489]  ? load_image+0x3b0/0x3b0
[  139.026839][ T5489]  ? show_regs_print_info+0x20/0x20
[  139.032164][ T5489]  ? print_circular_bug+0x12b/0x1a0
[  139.037402][ T5489]  check_noncircular+0x274/0x310
[  139.042464][ T5489]  ? add_chain_block+0x940/0x940
[  139.047432][ T5489]  ? lockdep_lock+0xdc/0x1e0
[  139.052061][ T5489]  ? __lock_acquire+0x12d9/0x7c60
[  139.057120][ T5489]  ? lockdep_lock+0x1e0/0x1e0
[  139.061835][ T5489]  ? mark_lock+0x94/0x320
[  139.066292][ T5489]  __lock_acquire+0x2c33/0x7c60
[  139.071189][ T5489]  ? verify_lock_unused+0x140/0x140
[  139.076424][ T5489]  ? mark_lock+0x94/0x320
[  139.080803][ T5489]  ? verify_lock_unused+0x140/0x140
[  139.086055][ T5489]  lock_acquire+0x197/0x3f0
[  139.090607][ T5489]  ? __flush_work+0xc1/0x1b0
[  139.095228][ T5489]  ? __lock_acquire+0x7c60/0x7c60
[  139.100288][ T5489]  ? read_lock_is_recursive+0x10/0x10
[  139.105699][ T5489]  ? start_flush_work+0x776/0x820
[  139.110754][ T5489]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  139.116701][ T5489]  ? _raw_spin_unlock+0x40/0x40
[  139.121588][ T5489]  __flush_work+0xdd/0x1b0
[  139.126044][ T5489]  ? __flush_work+0xc1/0x1b0
[  139.130664][ T5489]  ? flush_work+0x20/0x20
[  139.135118][ T5489]  ? try_to_grab_pending+0xf3/0x7e0
[  139.140348][ T5489]  ? lockdep_hardirqs_off+0x70/0x100
[  139.145668][ T5489]  ? mark_lock+0x94/0x320
[  139.150030][ T5489]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  139.156054][ T5489]  ? lock_chain_count+0x20/0x20
[  139.160937][ T5489]  ? mark_lock+0x94/0x320
[  139.165306][ T5489]  ? __cancel_work_timer+0x331/0x520
[  139.170625][ T5489]  __cancel_work_timer+0x3ac/0x520
[  139.175773][ T5489]  ? cancel_work_sync+0x20/0x20
[  139.180715][ T5489]  ? __cancel_work+0x1f4/0x2d0
[  139.185527][ T5489]  ? lockdep_hardirqs_on+0x94/0x140
[  139.190774][ T5489]  ? __cancel_work+0x26f/0x2d0
[  139.195665][ T5489]  ? cancel_work+0x20/0x20
[  139.200198][ T5489]  ? lock_chain_count+0x20/0x20
[  139.205084][ T5489]  hci_request_cancel_all+0xcc/0x300
[  139.210412][ T5489]  hci_dev_do_close+0x4e/0x1030
[  139.215307][ T5489]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  139.221238][ T5489]  ? _raw_spin_unlock+0x40/0x40
[  139.226126][ T5489]  hci_rfkill_set_block+0x10a/0x190
[  139.231362][ T5489]  ? rcu_lock_release+0x20/0x20
[  139.236248][ T5489]  rfkill_set_block+0x1c6/0x420
[  139.241142][ T5489]  rfkill_fop_write+0x458/0x560
[  139.246037][ T5489]  ? rfkill_fop_read+0x4b0/0x4b0
[  139.251133][ T5489]  ? common_file_perm+0x160/0x1c0
[  139.256315][ T5489]  ? fsnotify_perm+0x5d/0x560
[  139.261038][ T5489]  ? security_file_permission+0x75/0xa0
[  139.266619][ T5489]  ? rfkill_fop_read+0x4b0/0x4b0
[  139.271605][ T5489]  vfs_write+0x300/0xd00
[  139.275891][ T5489]  ? file_end_write+0x250/0x250
[  139.280792][ T5489]  ? __fget_files+0x40f/0x480
[  139.285515][ T5489]  ? __fdget_pos+0x1e2/0x370
[  139.290139][ T5489]  ? ksys_write+0x71/0x250
[  139.294699][ T5489]  ksys_write+0x14d/0x250
[  139.299171][ T5489]  ? __ia32_sys_read+0x80/0x80
[  139.303980][ T5489]  ? lockdep_hardirqs_on+0x94/0x140
[  139.309230][ T5489]  do_syscall_64+0x4c/0xa0
[  139.313782][ T5489]  ? clear_bhb_loop+0x30/0x80
[  139.318494][ T5489]  ? clear_bhb_loop+0x30/0x80
[  139.323204][ T5489]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  139.329153][ T5489] RIP: 0033:0x7fb97a88d929
[  139.333603][ T5489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.353242][ T5489] RSP: 002b:00007fb9786d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.361703][ T5489] RAX: ffffffffffffffda RBX: 00007fb97aab5080 RCX: 00007fb97a88d929
[  139.369711][ T5489] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000007
[  139.377720][ T5489] RBP: 00007fb97a90fb39 R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  139.385724][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.393729][ T5489] R13: 0000000000000000 R14: 00007fb97aab5080 R15: 00007ffcc80eb148
[  139.401741][ T5489]  </TASK>
[  139.444396][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  139.450605][ T5531] loop5: detected capacity change from 0 to 256
[  139.464485][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  139.536785][ T5531] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.632495][ T5531] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  139.676267][ T5531] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  140.330593][  T560] device hsr_slave_0 left promiscuous mode
[  140.337251][  T560] device hsr_slave_1 left promiscuous mode
[  140.346696][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.357998][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.368915][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.376474][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.387569][  T560] device bridge_slave_1 left promiscuous mode
[  140.394064][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.405705][  T560] device bridge_slave_0 left promiscuous mode
[  140.412403][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.427537][  T560] device hsr_slave_0 left promiscuous mode
[  140.434087][  T560] device hsr_slave_1 left promiscuous mode
[  140.440720][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.448158][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.455901][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.465139][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.473594][  T560] device bridge_slave_1 left promiscuous mode
[  140.479851][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.487884][  T560] device bridge_slave_0 left promiscuous mode
[  140.494256][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.505922][  T560] device veth1_macvtap left promiscuous mode
[  140.512303][  T560] device veth0_macvtap left promiscuous mode
[  140.518416][  T560] device veth1_vlan left promiscuous mode
[  140.524341][  T560] device veth0_vlan left promiscuous mode
[  140.530788][  T560] device veth1_macvtap left promiscuous mode
[  140.536805][  T560] device veth0_macvtap left promiscuous mode
[  140.543021][  T560] device veth1_vlan left promiscuous mode
[  140.548804][  T560] device veth0_vlan left promiscuous mode
[  140.741470][  T560] team0 (unregistering): Port device team_slave_1 removed
[  140.752856][  T560] team0 (unregistering): Port device team_slave_0 removed
[  140.766365][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.784006][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.839311][  T560] bond0 (unregistering): Released all slaves
[  140.927440][  T560] team0 (unregistering): Port device team_slave_1 removed
[  140.939203][  T560] team0 (unregistering): Port device team_slave_0 removed
[  140.951083][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.964435][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.011307][  T560] bond0 (unregistering): Released all slaves
[  142.384915][  T560] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.444838][  T560] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.493692][  T560] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.534071][  T560] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.614338][  T560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.643972][  T560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.706569][  T560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.767028][  T560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.856774][  T560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.913580][  T560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.967051][  T560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.014144][  T560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.432537][  T560] device hsr_slave_0 left promiscuous mode
[  144.438824][  T560] device hsr_slave_1 left promiscuous mode
[  144.445747][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.453591][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.462393][  T560] device bridge_slave_1 left promiscuous mode
[  144.468734][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.477300][  T560] device bridge_slave_0 left promiscuous mode
[  144.483679][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.494290][  T560] device hsr_slave_0 left promiscuous mode
[  144.504363][  T560] device hsr_slave_1 left promiscuous mode
[  144.511379][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.518917][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.526663][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.534262][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.542019][  T560] device bridge_slave_1 left promiscuous mode
[  144.548198][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.556605][  T560] device bridge_slave_0 left promiscuous mode
[  144.562927][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.573316][  T560] device hsr_slave_0 left promiscuous mode
[  144.579646][  T560] device hsr_slave_1 left promiscuous mode
[  144.586323][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.593921][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.602121][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.609878][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.617463][  T560] device bridge_slave_1 left promiscuous mode
[  144.624009][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.632739][  T560] device bridge_slave_0 left promiscuous mode
[  144.639076][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.651229][  T560] device hsr_slave_0 left promiscuous mode
[  144.657419][  T560] device hsr_slave_1 left promiscuous mode
[  144.663928][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.671556][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.679118][  T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.687037][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.695312][  T560] device bridge_slave_1 left promiscuous mode
[  144.701856][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.710102][  T560] device bridge_slave_0 left promiscuous mode
[  144.716257][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.727392][  T560] device hsr_slave_0 left promiscuous mode
[  144.733771][  T560] device hsr_slave_1 left promiscuous mode
[  144.740418][  T560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.747934][  T560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.755568][  T560] device bridge_slave_1 left promiscuous mode
[  144.761922][  T560] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.770027][  T560] device bridge_slave_0 left promiscuous mode
[  144.776201][  T560] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.789009][  T560] device veth1_macvtap left promiscuous mode
[  144.795587][  T560] device veth0_macvtap left promiscuous mode
[  144.801767][  T560] device veth1_vlan left promiscuous mode
[  144.807546][  T560] device veth0_vlan left promiscuous mode
[  144.814143][  T560] device veth1_macvtap left promiscuous mode
[  144.820312][  T560] device veth0_macvtap left promiscuous mode
[  144.826381][  T560] device veth1_vlan left promiscuous mode
[  144.832384][  T560] device veth0_vlan left promiscuous mode
[  144.838797][  T560] device veth1_macvtap left promiscuous mode
[  144.845113][  T560] device veth0_macvtap left promiscuous mode
[  144.851281][  T560] device veth1_vlan left promiscuous mode
[  144.857032][  T560] device veth0_vlan left promiscuous mode
[  145.085298][  T560] team0 (unregistering): Port device team_slave_1 removed
[  145.096227][  T560] team0 (unregistering): Port device team_slave_0 removed
[  145.106537][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.122125][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.167181][  T560] bond0 (unregistering): Released all slaves
[  145.273865][  T560] team0 (unregistering): Port device team_slave_1 removed
[  145.284509][  T560] team0 (unregistering): Port device team_slave_0 removed
[  145.298914][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.312660][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.361649][  T560] bond0 (unregistering): Released all slaves
[  145.463666][  T560] team0 (unregistering): Port device team_slave_1 removed
[  145.475148][  T560] team0 (unregistering): Port device team_slave_0 removed
[  145.486124][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.499156][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.546957][  T560] bond0 (unregistering): Released all slaves
[  145.633407][  T560] team0 (unregistering): Port device team_slave_1 removed
[  145.645807][  T560] team0 (unregistering): Port device team_slave_0 removed
[  145.658410][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.672782][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.723811][  T560] bond0 (unregistering): Released all slaves
[  145.834980][  T560] team0 (unregistering): Port device team_slave_1 removed
[  145.845720][  T560] team0 (unregistering): Port device team_slave_0 removed
[  145.861349][  T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.874270][  T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.920397][  T560] bond0 (unregistering): Released all slaves