last executing test programs:

20.431658582s ago: executing program 3 (id=375):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44010000000000000004a1bf2399f37a7f221861e3580bdf025cb470615263a41e0440b1eadfb8650fed3b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014db", 0xb1}], 0x1, 0x739, 0x1)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

19.430171934s ago: executing program 3 (id=380):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f00003bc000/0x1000)=nil, 0x1000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)

13.56048829s ago: executing program 3 (id=404):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$kcm(0x23, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r1, 0x800)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES64=r0], 0x78)

12.741060356s ago: executing program 2 (id=405):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x1, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180), 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
close(r0)

12.142327615s ago: executing program 3 (id=409):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
fsopen(&(0x7f00000000c0)='autofs\x00', 0x1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, 0x0, 0x0)
listen(r2, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
close(0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a0008", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x80000000, 0x0)
ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000040)={0x9})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x2000000)

11.566719403s ago: executing program 2 (id=420):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = io_uring_setup(0x3eaf, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x6}, 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48)
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x55ae, &(0x7f000000ac40)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xfb, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)
truncate(&(0x7f0000000000)='./file2\x00', 0x81c04)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
stat(0x0, 0x0)
writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

11.145102267s ago: executing program 3 (id=411):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='2'], 0x32)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40)
r5 = dup(r4)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd)
close_range(r0, 0xffffffffffffffff, 0x0)

10.987601062s ago: executing program 2 (id=412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202080, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200", 0x4}], 0x1}, 0x4005)

10.000861253s ago: executing program 2 (id=416):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)

9.039172593s ago: executing program 3 (id=417):
unshare(0x40040400)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

8.970918906s ago: executing program 2 (id=419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x2200010, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64], 0x1, 0x318, &(0x7f00000026c0)="$eJzs3c9rE1sUwPEzaX62ry9dPB6Px3twqSCKdGgC7lxYpAUxoLSNYAVhaqcaMk1KJhQiYrMQ3Lp20YVLEURw50bEbTf+Bf7addOdBYsjM5NM02RM02rtD7+fRXM6c87MnbkzzfSW3qyde7hQnLf1L05UPDERcXzL/hKpy+k3K+//n3r9h/+9UhNj05msUhERuX736fCr6sDVF3++TMjq0I219eyn1f+mRb5O35aIKtiq5G5LzZbLVc0tnivYRV2pK5Zp2KYqlGyzUlWGt96YtUw1b5UXF2vKKM0N9i9WTNtWRqmmimZNVcuqWqkp45ZRKCld19Vgv0BEhoIo0rFO61aYf7LhOLLudlCi7nZ7SHa9GcQar4kfaywOk7b+75rbcXH07WfL8CtsONGg/+M79D+OH//+//Col/sfx8/UtZlLY7nc+KRSSZGFB0v5pbz/6q9/NyAFscSUlckzM5vBo6F7qWju14mLufFR5RmSkwvLjfrlpbz/5jA236jPSNp9Tmmpl2Z9xq9X2+tj0t9an5W0/BVen1XiPZWKRFrq43LqREu9Lml5e1PKWl3mvEfcrfp7GaUuXM617T/l5bXjLQ8AAAAAAAAAcBToKrA1fq8Ff+pN6XrCG1sP1qfcxW6enxCMr49KWjbDx+dHQ8f3o/Jv9AAPHAAAAACA34hdu1M0LMus7D6QHnL6Hqe67CImIm4gcn/YbUzXDf7daHHbKncbIVVxEencTl8vbW4EqbP+/p5NNhomez1R+xhERKR1if/PGu7BW8+bOamw82NHdnUBjMRDzrxlJX/OUUjbUXwnaM0Rx3FCkyW5tws70XmAPQbaZnPJP6E5jtalXIv6OYYV85c0b8yd9n4+/HboMXB73wuS7Sdq5KO/XavLD43PwRAfAAAAgCOk5RcnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwQHqYM6xzbrbmvP3bk6XxEfGdU7K1f2gu8/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOIS+BQAA//+8NrDx")
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f0000000240)="fad33075218151db00316f3a277f", 0xe, 0x20000001, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xdd, 0x6, @local}, 0x14)

8.806626791s ago: executing program 1 (id=421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0x1, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840)

8.473135761s ago: executing program 2 (id=422):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_UNLOCK(0x0, 0xc)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c)
sendto$inet6(r2, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0)

7.671041147s ago: executing program 1 (id=423):
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, 0x0, 0x0, 0x7})
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7003f00)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt(r2, 0x184, 0x81, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.594214391s ago: executing program 1 (id=428):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='2'], 0x32)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40)
r5 = dup(r4)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd)
close_range(r0, 0xffffffffffffffff, 0x0)

5.687971089s ago: executing program 0 (id=430):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48)

4.945100723s ago: executing program 1 (id=431):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_read_part_table(0x5f3, &(0x7f00000015c0)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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")
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020)

3.633475085s ago: executing program 4 (id=434):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)

3.632647074s ago: executing program 1 (id=435):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f00003bc000/0x1000)=nil, 0x1000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)

3.387125552s ago: executing program 4 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = io_uring_setup(0x3eaf, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x6}, 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, &(0x7f0000000340), 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48)
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x55ae, &(0x7f000000ac40)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xfb, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)
truncate(&(0x7f0000000000)='./file2\x00', 0x81c04)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
stat(0x0, 0x0)
writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.859991499s ago: executing program 0 (id=437):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @pix={0x8, 0x5, 0x47524247, 0x1, 0xc8, 0xa45, 0x2, 0x3, 0x0, 0x3, 0x2, 0x7}})

2.645181146s ago: executing program 4 (id=438):
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, 0x0, 0x0, 0x7})
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7003f00)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt(r2, 0x184, 0x81, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.87837164s ago: executing program 0 (id=439):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9)

1.787299133s ago: executing program 0 (id=440):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202080, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000)
close(r1)
socket(0x10, 0x3, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200", 0x4}], 0x1}, 0x4005)

1.291936239s ago: executing program 4 (id=441):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='2'], 0x32)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40)
r5 = dup(r4)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd)
close_range(r0, 0xffffffffffffffff, 0x0)

558.386602ms ago: executing program 0 (id=442):
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x26e1, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
dup(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x80, 0x3, 0x215, 0x0, r0}, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

198.715694ms ago: executing program 4 (id=443):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]})
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})

61.107718ms ago: executing program 0 (id=444):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0))

49.269038ms ago: executing program 4 (id=445):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@errors_remount}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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")
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)

0s ago: executing program 1 (id=446):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0x26, '\x00', @st={0x4, [{0x2, @uvalue=0x9}, {0x3, @uvalue=0x5}, {0x0, @uvalue=0x6}, {0x3, @uvalue=0x2}]}, 0x80000001}]})

kernel console output (not intermixed with test programs):

65.182889][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.202080][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.218737][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.226011][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.241442][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.250725][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.260323][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.270273][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.278716][ T4177] Bluetooth: hci0: command 0x041b tx timeout
[   65.280603][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.284956][ T4177] Bluetooth: hci1: command 0x041b tx timeout
[   65.284993][ T4177] Bluetooth: hci2: command 0x041b tx timeout
[   65.308784][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.325647][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.336090][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.346413][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.354243][ T4177] Bluetooth: hci4: command 0x041b tx timeout
[   65.364089][ T4231] Bluetooth: hci3: command 0x041b tx timeout
[   65.384130][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.391936][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.402343][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.409916][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.419307][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.428696][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.438432][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.447246][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.456328][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.463934][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.476653][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.487998][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.500900][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.512174][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.521939][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.533132][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.556026][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.566862][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.586113][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.602159][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.611196][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.619871][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.630764][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.651572][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.669941][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.704646][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.723915][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.784129][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.793181][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.805133][ T4197] device veth0_vlan entered promiscuous mode
[   65.832370][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.844871][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.852755][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.865611][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.887383][ T4197] device veth1_vlan entered promiscuous mode
[   65.900560][ T4196] device veth0_vlan entered promiscuous mode
[   65.917544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.940746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.961144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.987255][ T4196] device veth1_vlan entered promiscuous mode
[   66.010783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.027022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.039782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.048464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.073580][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.081949][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.093062][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.108878][ T4197] device veth0_macvtap entered promiscuous mode
[   66.119474][ T4197] device veth1_macvtap entered promiscuous mode
[   66.127326][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.136496][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.145526][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.175085][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.183634][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.192238][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.201886][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.210503][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.223241][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.232128][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.245335][ T4196] device veth0_macvtap entered promiscuous mode
[   66.254245][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.274010][ T4196] device veth1_macvtap entered promiscuous mode
[   66.288090][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.300454][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.319135][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.329279][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.338772][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.347997][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.357406][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.366431][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.376228][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.384733][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.397109][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.409867][ T4188] device veth0_vlan entered promiscuous mode
[   66.419215][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.429707][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.441810][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.452402][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.461287][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.470116][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.490242][ T4188] device veth1_vlan entered promiscuous mode
[   66.497488][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.508449][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.519397][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.530057][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.541187][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.552844][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.580595][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.590291][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.599401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.609036][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.617741][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.626329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.635569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.651695][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.660673][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.671048][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.680086][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.711088][ T4189] device veth0_vlan entered promiscuous mode
[   66.722089][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.731358][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.742203][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.751136][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.761098][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.770328][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.781296][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.819606][ T4189] device veth1_vlan entered promiscuous mode
[   66.846979][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.856462][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.904674][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.913039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.931913][ T4188] device veth0_macvtap entered promiscuous mode
[   66.944834][ T4203] device veth0_vlan entered promiscuous mode
[   66.964800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.975509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.983227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.994976][ T4188] device veth1_macvtap entered promiscuous mode
[   67.009667][ T4203] device veth1_vlan entered promiscuous mode
[   67.033176][ T4189] device veth0_macvtap entered promiscuous mode
[   67.059910][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.069859][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.078446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.087420][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.097031][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.109368][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.129874][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.134823][ T4189] device veth1_macvtap entered promiscuous mode
[   67.140744][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.154653][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.170189][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.180755][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.191606][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.202992][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.212393][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.223007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.231825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.240611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.249599][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.258769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.276298][ T4203] device veth0_macvtap entered promiscuous mode
[   67.295621][ T4203] device veth1_macvtap entered promiscuous mode
[   67.323120][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.333658][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.333680][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.350963][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.363343][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.365008][ T4190] Bluetooth: hci2: command 0x040f tx timeout
[   67.374557][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.387552][ T4190] Bluetooth: hci1: command 0x040f tx timeout
[   67.390620][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.397717][ T4190] Bluetooth: hci0: command 0x040f tx timeout
[   67.406455][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.407886][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.431655][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.442604][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.448294][ T4190] Bluetooth: hci4: command 0x040f tx timeout
[   67.452960][ T1107] Bluetooth: hci3: command 0x040f tx timeout
[   67.459158][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.475653][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.486795][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.504980][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.513192][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.522113][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.531527][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.540553][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.549720][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.558532][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.579490][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.590404][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.598174][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.609669][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.610897][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.627997][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.638303][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.649054][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.660966][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.671957][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.683779][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.692637][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.702173][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.727863][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.736249][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.745758][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.763222][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.772456][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.782340][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.791376][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.808214][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.819577][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.829479][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.841561][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.851750][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.862580][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.872501][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.883476][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.894881][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.914534][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.929470][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.939838][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.950550][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.960644][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.971132][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.981551][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.992033][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.004758][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.023730][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.031778][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.050461][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.066842][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.076926][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.086680][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.095836][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.169929][ T4203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.197837][ T4203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.208718][ T4203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.217906][ T4203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.251379][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.301081][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.326473][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.336939][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.366550][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.371561][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.388632][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.399742][ T4267] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.405176][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.412684][ T4267] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   68.424558][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.454618][ T4269] device syzkaller0 entered promiscuous mode
[   68.478173][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.488551][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.491680][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.512483][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.526255][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.535310][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.543001][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.549151][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.559509][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.565972][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.609607][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.624729][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.633770][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.644907][ T4267] wlan0 speed is unknown, defaulting to 1000
[   68.716277][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.734459][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.773949][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.019797][ T4279] device syzkaller0 entered promiscuous mode
[   69.089698][ T4285] loop0: detected capacity change from 0 to 512
[   69.198475][ T4290] loop1: detected capacity change from 0 to 256
[   69.240853][ T4290] =======================================================
[   69.240853][ T4290] WARNING: The mand mount option has been deprecated and
[   69.240853][ T4290]          and is ignored by this kernel. Remove the mand
[   69.240853][ T4290]          option from the mount to silence this warning.
[   69.240853][ T4290] =======================================================
[   69.317071][ T4285] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1: iget: bad i_size value: 38620345925642
[   69.349350][ T4285] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1: couldn't read orphan inode 15 (err -117)
[   69.366253][ T4285] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[   69.435223][ T1107] Bluetooth: hci1: command 0x0419 tx timeout
[   69.435418][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   69.441966][ T1107] Bluetooth: hci2: command 0x0419 tx timeout
[   69.514418][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[   69.522306][ T1107] Bluetooth: hci3: command 0x0419 tx timeout
[   69.749652][ T4299] EXT4-fs (loop0): shut down requested (1)
[   69.818907][ T4285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1: bg 0: block 5: invalid block bitmap
[   69.919584][ T4308] device syzkaller0 entered promiscuous mode
[   69.948397][ T4306] loop4: detected capacity change from 0 to 8192
[   70.021360][ T4306] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.228115][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[   72.515057][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[   73.489483][ T4357] device syzkaller0 entered promiscuous mode
[   73.504848][ T4358] loop3: detected capacity change from 0 to 512
[   73.549243][ T4357] tipc: Started in network mode
[   73.575298][   T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.586439][ T4357] tipc: Node identity bac01bcf7c7e, cluster identity 4711
[   73.615699][ T4357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.625295][   T13] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   73.673009][ T4354] tipc: Resetting bearer <eth:syzkaller0>
[   73.702865][ T4358] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.31: iget: bad i_size value: 38620345925642
[   73.731513][ T4358] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.31: couldn't read orphan inode 15 (err -117)
[   73.746161][ T4354] tipc: Disabling bearer <eth:syzkaller0>
[   73.807016][ T4358] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[   73.988702][ T4363] fido_id[4363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   74.040883][ T4370] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.31: bg 0: block 5: invalid block bitmap
[   74.167548][ T4369] loop2: detected capacity change from 0 to 4096
[   74.172393][ T4370] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28
[   74.207521][ T4370] EXT4-fs (loop3): This should not happen!! Data will be lost
[   74.207521][ T4370] 
[   74.226286][ T4369] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   74.235667][ T4370] EXT4-fs (loop3): Total free blocks count 0
[   74.262204][ T4370] EXT4-fs (loop3): Free/Dirty block details
[   74.264664][ T4369] EXT4-fs (loop2): inline encryption not supported
[   74.280377][ T4370] EXT4-fs (loop3): free_blocks=0
[   74.293326][ T4369] EXT4-fs (loop2): Test dummy encryption mode enabled
[   74.301241][ T4370] EXT4-fs (loop3): dirty_blocks=245
[   74.321857][ T4370] EXT4-fs (loop3): Block reservation details
[   74.340639][ T4370] EXT4-fs (loop3): i_reserved_data_blocks=245
[   74.381087][ T4373] EXT4-fs (loop3): shut down requested (0)
[   74.399868][ T4369] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,usrquota,delalloc,nogrpid,grpquota,. Quota mode: writeback.
[   75.680875][ T4400] loop4: detected capacity change from 0 to 512
[   75.751804][ T4404] loop1: detected capacity change from 0 to 512
[   75.752956][ T4403] loop0: detected capacity change from 0 to 512
[   75.767482][ T4407] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[   75.851798][ T4404] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   75.899758][ T4403] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.41: inode #1: comm syz.0.41: iget: illegal inode #
[   75.937785][ T4404] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   75.951197][ T4404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   75.966449][ T4400] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   76.066265][ T4403] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.41: error while reading EA inode 1 err=-117
[   76.078829][ T4400] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.359947][ T4404] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.44: Invalid block bitmap block 0 in block_group 0
[   76.435086][ T4403] EXT4-fs (loop0): 1 orphan inode deleted
[   76.478716][ T4400] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback.
[   76.582650][ T4403] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.695977][ T4404] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   76.897979][   T26] audit: type=1800 audit(1778789931.253:2): pid=4428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.42" name="file1" dev="loop4" ino=15 res=0 errno=0
[   76.923146][ T4404] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.44: attempt to clear invalid blocks 983261 len 1
[   77.028481][ T4404] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.44: Invalid inode table block 0 in block_group 0
[   77.123602][ T4404] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   77.141845][ T4404] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   77.151141][ T4404] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.44: Invalid inode table block 0 in block_group 0
[   77.205305][ T4404] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   77.234226][ T4404] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.44: mark_inode_dirty error
[   77.273470][ T4404] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   77.293281][ T4404] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.44: Invalid inode table block 0 in block_group 0
[   77.338652][ T4404] EXT4-fs (loop1): 1 truncate cleaned up
[   77.361027][ T4404] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[   77.459758][ T4404] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.44: Invalid inode bitmap blk 0 in block_group 0
[   77.475578][ T4440] binder: BINDER_SET_CONTEXT_MGR already set
[   77.482595][ T4440] binder: 4439:4440 ioctl 4018620d 200000004a80 returned -16
[   77.689953][ T4442] device syzkaller0 entered promiscuous mode
[   77.885122][ T4447] loop4: detected capacity change from 0 to 128
[   80.326844][ T4477] loop1: detected capacity change from 0 to 512
[   80.341021][ T4475] device syzkaller0 entered promiscuous mode
[   80.863430][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   80.873454][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   80.883436][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   80.893446][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   80.903439][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   80.913438][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   80.923435][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   80.933438][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   80.943435][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   80.953439][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   80.996622][ T4493] loop1: detected capacity change from 0 to 512
[   81.063191][ T4493] EXT4-fs (loop1): Ignoring removed nobh option
[   81.106966][ T4493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   81.346720][ T4493] EXT4-fs (loop1): 1 truncate cleaned up
[   81.372604][ T4493] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[   81.591038][   T26] audit: type=1326 audit(1778789935.943:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.0.72" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2c2e0e59 code=0x7ffc0000
[   81.672622][   T26] audit: type=1326 audit(1778789935.943:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.0.72" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2c2e0e59 code=0x7ffc0000
[   82.198936][ T4516] loop4: detected capacity change from 0 to 2048
[   82.527057][ T4516] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[   82.849815][ T4516] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.074151][ T4535] loop0: detected capacity change from 0 to 512
[   83.218658][ T4535] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   83.799684][ T4546] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   83.860145][ T4550] loop9: detected capacity change from 0 to 524287936
[   83.883697][ T4548] syz.3.86 uses obsolete (PF_INET,SOCK_PACKET)
[   83.920519][ T4548] loop3: detected capacity change from 0 to 8
[   83.982131][ T4548] SQUASHFS error: Failed to read block 0xffffff: -5
[   84.029200][ T4548] unable to read xattr id index table
[   84.393157][ T4234] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   84.994079][ T4234] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   85.370760][ T4566] device syzkaller0 entered promiscuous mode
[   85.440041][ T4568] fido_id[4568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   85.506130][ T4574] loop4: detected capacity change from 0 to 2048
[   85.583173][ T4574] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   85.610263][ T4471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.918711][ T4471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.110898][ T4471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.155985][ T4586] loop0: detected capacity change from 0 to 512
[   86.236032][ T4471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.316826][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback.
[   86.347561][ T4586] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.961933][ T2856] cfg80211: failed to load regulatory.db
[   87.053082][ T4471] tipc: Left network mode
[   87.778722][ T4595] wlan0 speed is unknown, defaulting to 1000
[   88.629730][ T4595] chnl_net:caif_netlink_parms(): no params data found
[   88.793678][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   89.060116][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.067531][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.076186][ T4595] device bridge_slave_0 entered promiscuous mode
[   89.092001][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.100665][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.109370][ T4595] device bridge_slave_1 entered promiscuous mode
[   89.175060][ T4595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.249935][ T4595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.582830][ T4595] team0: Port device team_slave_0 added
[   89.620983][ T4595] team0: Port device team_slave_1 added
[   89.874335][ T4638] wlan0 speed is unknown, defaulting to 1000
[   89.943223][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.997023][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.271795][ T4595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.935264][ T2856] Bluetooth: hci3: command 0x041b tx timeout
[   90.952791][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.009376][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.073464][ T4595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.958762][ T4595] device hsr_slave_0 entered promiscuous mode
[   91.967128][ T4595] device hsr_slave_1 entered promiscuous mode
[   91.974889][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[   91.982548][ T4595] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.001625][ T4595] Cannot create hsr debugfs directory
[   92.658756][ T4694] loop0: detected capacity change from 0 to 128
[   92.703126][ T4638] chnl_net:caif_netlink_parms(): no params data found
[   93.034906][   T21] Bluetooth: hci3: command 0x040f tx timeout
[   93.093808][   T26] audit: type=1800 audit(1778789947.423:5): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.122" name="file1" dev="loop0" ino=1048594 res=0 errno=0
[   93.256707][ T4471] device hsr_slave_0 left promiscuous mode
[   93.264354][ T4471] device hsr_slave_1 left promiscuous mode
[   93.271038][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.280746][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.290631][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.337460][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.384436][ T4471] device bridge_slave_1 left promiscuous mode
[   93.421540][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.448461][ T4704] loop0: detected capacity change from 0 to 512
[   93.497015][ T4704] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   93.547300][ T4471] device bridge_slave_0 left promiscuous mode
[   93.588694][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.599979][ T4704] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.124: bad orphan inode 131083
[   93.646527][ T4704] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   93.696256][ T4704] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #2: block 13: comm syz.0.124: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   93.748604][ T4471] device veth1_macvtap left promiscuous mode
[   93.761845][ T4471] device veth0_macvtap left promiscuous mode
[   93.772282][ T4471] device veth1_vlan left promiscuous mode
[   93.786654][ T4471] device veth0_vlan left promiscuous mode
[   93.993732][ T2856] Bluetooth: hci2: command 0x041b tx timeout
[   94.214128][ T4708] Process accounting resumed
[   94.789950][ T4471] team0 (unregistering): Port device team_slave_1 removed
[   94.812720][ T4471] team0 (unregistering): Port device team_slave_0 removed
[   94.836581][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.857656][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.115302][ T2856] Bluetooth: hci3: command 0x0419 tx timeout
[   95.307977][ T4471] bond0 (unregistering): Released all slaves
[   96.046911][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.064460][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.073904][   T21] Bluetooth: hci2: command 0x040f tx timeout
[   96.120084][ T4638] device bridge_slave_0 entered promiscuous mode
[   96.238254][ T4728] loop4: detected capacity change from 0 to 512
[   96.255177][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.262376][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.308616][ T4638] device bridge_slave_1 entered promiscuous mode
[   96.316355][ T4728] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   96.483067][ T4638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.517890][ T4638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.766092][ T4638] team0: Port device team_slave_0 added
[   96.829693][ T4638] team0: Port device team_slave_1 added
[   96.917799][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.941691][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.008384][ T4638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.051594][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.094518][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.183454][ T4638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.384733][ T4638] device hsr_slave_0 entered promiscuous mode
[   97.497515][ T4638] device hsr_slave_1 entered promiscuous mode
[   97.509966][ T4638] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.557943][ T4638] Cannot create hsr debugfs directory
[   97.589380][ T4595] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.668264][ T4595] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.805471][ T4595] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.818324][ T4595] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.886601][ T4752] Process accounting resumed
[   98.153732][ T4190] Bluetooth: hci2: command 0x0419 tx timeout
[   98.219000][ T4638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.330613][ T4595] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.436553][ T4638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.520701][ T4595] 8021q: adding VLAN 0 to HW filter on device team0
[   98.557542][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   98.578091][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   98.605631][ T4638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.647824][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   98.648447][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   98.648875][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.648955][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.649739][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   98.651840][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   98.654078][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.654476][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.654515][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.670741][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   98.873100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.874286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.875084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.875483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.875911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.876272][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.876606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.876900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.877186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.877928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.889522][ T4638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.067458][ T4780] loop4: detected capacity change from 0 to 512
[   99.070124][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   99.070204][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:5 Not tainted syzkaller #0
[   99.070225][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   99.070238][ T4201] Workqueue: hci0 hci_rx_work
[   99.070269][ T4201] Call Trace:
[   99.070277][ T4201]  <TASK>
[   99.070287][ T4201]  dump_stack_lvl+0x188/0x250
[   99.070315][ T4201]  ? show_regs_print_info+0x20/0x20
[   99.070337][ T4201]  ? load_image+0x400/0x400
[   99.070373][ T4201]  sysfs_create_dir_ns+0x26a/0x290
[   99.070399][ T4201]  ? sysfs_warn_dup+0xa0/0xa0
[   99.070416][ T4201]  ? process_one_work+0x85f/0x1010
[   99.070442][ T4201]  ? do_raw_spin_unlock+0x11d/0x230
[   99.070470][ T4201]  kobject_add_internal+0x6e0/0xd90
[   99.070501][ T4201]  kobject_add+0x160/0x230
[   99.070529][ T4201]  ? kobject_init+0x1d0/0x1d0
[   99.070556][ T4201]  ? klist_children_get+0x50/0x50
[   99.070580][ T4201]  ? get_device_parent+0x121/0x3f0
[   99.070607][ T4201]  device_add+0x483/0xfb0
[   99.070641][ T4201]  hci_conn_add_sysfs+0xd1/0x1e0
[   99.070668][ T4201]  le_conn_complete_evt+0xc48/0x15c0
[   99.070705][ T4201]  ? cs_le_create_conn+0x5e0/0x5e0
[   99.070737][ T4201]  ? __mutex_trylock_common+0x155/0x260
[   99.070768][ T4201]  hci_le_meta_evt+0x285/0x3c90
[   99.070791][ T4201]  ? hci_event_packet+0x37b/0x1370
[   99.070815][ T4201]  ? __lock_acquire+0x7d10/0x7d10
[   99.070850][ T4201]  ? hci_remote_host_features_evt+0x280/0x280
[   99.070874][ T4201]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[   99.070905][ T4201]  ? mark_lock+0x94/0x320
[   99.070922][ T4201]  ? mutex_unlock+0x10/0x10
[   99.070950][ T4201]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[   99.070975][ T4201]  ? lock_chain_count+0x20/0x20
[   99.070997][ T4201]  ? __rwlock_init+0x140/0x140
[   99.071022][ T4201]  hci_event_packet+0xe48/0x1370
[   99.071049][ T4201]  ? lockdep_hardirqs_on+0x94/0x140
[   99.071081][ T4201]  ? rcu_lock_release+0x20/0x20
[   99.071108][ T4201]  ? hci_send_to_monitor+0x9c/0x4a0
[   99.071135][ T4201]  hci_rx_work+0x255/0xa10
[   99.071172][ T4201]  process_one_work+0x85f/0x1010
[   99.071211][ T4201]  ? worker_detach_from_pool+0x240/0x240
[   99.071231][ T4201]  ? lockdep_hardirqs_off+0x70/0x100
[   99.071258][ T4201]  ? _raw_spin_lock_irq+0xb7/0xf0
[   99.071278][ T4201]  ? _raw_spin_lock_irqsave+0x100/0x100
[   99.071301][ T4201]  ? wq_worker_running+0x97/0x170
[   99.071323][ T4201]  worker_thread+0xaa6/0x1290
[   99.071377][ T4201]  kthread+0x436/0x520
[   99.071397][ T4201]  ? rcu_lock_release+0x20/0x20
[   99.071415][ T4201]  ? kthread_blkcg+0xd0/0xd0
[   99.071438][ T4201]  ret_from_fork+0x1f/0x30
[   99.071477][ T4201]  </TASK>
[   99.071973][ T4201] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   99.072001][ T4201] Bluetooth: hci0: failed to register connection device
[  100.413403][    C1] sched: RT throttling activated
[  100.462502][ T4780] EXT4-fs (loop4): Unsupported blocksize for fs-verity
[  102.416199][ T4638] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  102.455010][ T4638] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  102.461401][ T4638] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  102.820309][ T4791] loop1: detected capacity change from 0 to 512
[  102.968789][ T4791] EXT4-fs (loop1): Ignoring removed bh option
[  102.990969][ T4791] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  103.019513][ T4797] loop4: detected capacity change from 0 to 128
[  103.082363][ T4791] EXT4-fs (loop1): 1 truncate cleaned up
[  103.103959][ T4791] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  103.132185][ T4638] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.511952][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.521588][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.553670][ T4638] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.568093][ T4595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.641184][ T4638] 8021q: adding VLAN 0 to HW filter on device team0
[  103.711989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  103.734310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.780877][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  103.814123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.838713][ T4595] device veth0_vlan entered promiscuous mode
[  103.918913][ T4814] Process accounting resumed
[  103.959885][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.993403][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.061765][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.068961][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.203919][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.255661][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.264390][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.273239][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.282016][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.289158][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.298653][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.307874][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.316301][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.334338][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.627072][ T4595] device veth1_vlan entered promiscuous mode
[  105.640244][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.669891][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.744820][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.801200][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.854715][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.902264][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.960678][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.388347][ T4638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  106.423520][ T4638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.452640][ T4852] loop4: detected capacity change from 0 to 8192
[  106.469651][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.481470][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.521797][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.556452][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  106.576702][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  106.609452][ T4862] loop0: detected capacity change from 0 to 512
[  106.668425][ T4862] EXT4-fs (loop0): Ignoring removed nobh option
[  106.726723][ T4862] EXT4-fs (loop0): orphan cleanup on readonly fs
[  106.759640][ T4862] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #11: block 1: comm syz.0.152: lblock 0 mapped to illegal pblock 1 (length 1)
[  106.794500][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.815139][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.877067][ T4595] device veth0_macvtap entered promiscuous mode
[  106.909289][ T4862] EXT4-fs (loop0): Remounting filesystem read-only
[  106.926308][ T4862] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  106.947546][ T4862] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.152: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  106.993849][ T4862] EXT4-fs (loop0): Remounting filesystem read-only
[  107.011795][ T4862] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.0.152: ea_inode dec ref err=-117
[  107.027956][ T4595] device veth1_macvtap entered promiscuous mode
[  107.082204][ T4862] EXT4-fs (loop0): 1 orphan inode deleted
[  107.123575][ T4862] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,nobh,resgid=0x0000000000000000,acl,init_itable=0x0000000000000e4d,. Quota mode: none.
[  107.165902][ T4878] device syzkaller0 entered promiscuous mode
[  107.190940][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.222665][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.244085][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.302128][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.312513][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.323159][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.333320][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.344789][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.358840][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.461275][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.500101][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  107.522364][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.604109][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.654676][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.674239][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.704765][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.714794][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.725516][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.735521][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.746095][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.761374][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.787148][ T4595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.796093][ T4595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.806147][ T4595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.816862][ T4595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.855545][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.875530][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.885177][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.905630][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.919787][ T4638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.032255][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.057359][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.143500][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.164570][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.186746][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.193321][ T4638] device veth0_vlan entered promiscuous mode
[  108.246255][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.269876][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.283336][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.297458][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.321280][ T4638] device veth1_vlan entered promiscuous mode
[  108.366272][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.397707][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.421585][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  108.435978][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  108.448545][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  108.468282][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  108.488056][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.691587][ T4638] device veth0_macvtap entered promiscuous mode
[  109.037045][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.084756][ T4638] device veth1_macvtap entered promiscuous mode
[  109.254667][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.303700][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.354258][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.374284][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.393458][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.428881][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.591033][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.623887][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.634485][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.645122][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.657591][ T4638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.744812][ T4919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'.
[  110.358821][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[  110.479535][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.513550][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.541274][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.543753][ T4931] process 'syz.2.167' launched './file1' with NULL argv: empty string added
[  110.575048][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.618713][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.649931][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.817540][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.907875][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.942211][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.961121][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.972568][ T4638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.980813][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.003344][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.020823][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.044654][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.185304][ T4951] loop0: detected capacity change from 0 to 4096
[  111.985278][ T4231] wlan0 speed is unknown, defaulting to 1000
[  111.995019][ T4638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.063632][ T4638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.102989][ T4638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.133593][ T4638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.177956][ T4951] EXT4-fs (loop0): Test dummy encryption mode enabled
[  112.333260][ T4471] device hsr_slave_0 left promiscuous mode
[  112.353162][ T4471] device hsr_slave_1 left promiscuous mode
[  112.361729][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'.
[  112.416123][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.425062][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.442435][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.510255][ T4982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.177'.
[  112.569681][ T4951] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000008,user_xattr,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,noblock_validity,init_itable,journal_dev=0x0000000000000003,noinit_itable,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  112.599927][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.788552][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.018747][ T4471] device bridge_slave_1 left promiscuous mode
[  113.099395][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.145669][ T4471] device bridge_slave_0 left promiscuous mode
[  113.213911][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.259383][ T4471] device veth1_macvtap left promiscuous mode
[  113.273588][ T4471] device veth0_macvtap left promiscuous mode
[  113.279779][ T4471] device veth1_vlan left promiscuous mode
[  113.293689][ T4471] device veth0_vlan left promiscuous mode
[  114.365441][ T5006] loop0: detected capacity change from 0 to 512
[  114.446594][ T5006] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  114.521640][ T5006] EXT4-fs (loop0): orphan cleanup on readonly fs
[  114.570784][ T5006] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0).
[  114.684480][ T5006] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  114.760564][ T5006] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  114.814265][ T5006] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.184: bg 0: block 40: padding at end of block bitmap is not set
[  114.866578][ T5006] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  114.889182][ T5006] EXT4-fs (loop0): 1 truncate cleaned up
[  114.910405][ T5006] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  115.347309][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  115.416927][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  115.447379][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.570291][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.755007][ T4471] bond0 (unregistering): Released all slaves
[  116.145733][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.191943][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.249051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  116.554917][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.625408][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.840208][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.175513][ T5046] device syzkaller0 entered promiscuous mode
[  123.771186][ T5099] device syzkaller0 entered promiscuous mode
[  128.690974][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'.
[  130.624093][ T5124] chnl_net:caif_netlink_parms(): no params data found
[  130.786356][ T4471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.626149][ T1340] Bluetooth: hci4: command 0x0409 tx timeout
[  132.704674][ T4471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.885397][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  132.891805][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  132.916292][ T4471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.981104][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.988678][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.014682][ T5124] device bridge_slave_0 entered promiscuous mode
[  133.049604][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.071784][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.098365][ T5124] device bridge_slave_1 entered promiscuous mode
[  133.137235][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.194355][   T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  133.613768][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.679440][   T13] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  133.891393][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.956558][   T13] usb 5-1: config 0 descriptor??
[  134.020939][ T4471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.065648][   T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  134.122672][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.096562][   T13] Bluetooth: hci4: command 0x041b tx timeout
[  135.112271][ T5124] team0: Port device team_slave_0 added
[  135.122158][ T5124] team0: Port device team_slave_1 added
[  135.408133][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.574740][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.370437][   T13] usb 5-1: USB disconnect, device number 2
[  136.413516][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.461516][ T5188] loop3: detected capacity change from 0 to 2048
[  136.615409][ T5188] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000800,errors=remount-ro,resgid=0x0000000000000000,journal_dev=0x0000000000000800,quota,noblock_validity,. Quota mode: writeback.
[  136.640751][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.653076][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.736055][ T5188] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.346078][ T1107] Bluetooth: hci4: command 0x040f tx timeout
[  137.352154][ T1107] Bluetooth: hci1: command 0x0409 tx timeout
[  137.364515][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.578872][ T5124] device hsr_slave_0 entered promiscuous mode
[  138.636311][ T5124] device hsr_slave_1 entered promiscuous mode
[  138.673454][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.687420][ T5124] Cannot create hsr debugfs directory
[  139.279764][ T5173] chnl_net:caif_netlink_parms(): no params data found
[  139.353511][ T4234] Bluetooth: hci4: command 0x0419 tx timeout
[  139.433823][ T4234] Bluetooth: hci1: command 0x041b tx timeout
[  139.755400][ T5237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.243'.
[  140.335675][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.377194][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.423810][ T5173] device bridge_slave_0 entered promiscuous mode
[  140.516582][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.569989][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.586369][ T5173] device bridge_slave_1 entered promiscuous mode
[  140.964405][ T5173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.019470][ T5173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.056190][ T4471] device hsr_slave_0 left promiscuous mode
[  141.083110][ T4471] device hsr_slave_1 left promiscuous mode
[  141.093765][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.102597][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.112214][ T5248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'.
[  141.112665][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.130155][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.150861][ T4471] device bridge_slave_1 left promiscuous mode
[  141.163604][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.182845][ T4471] device bridge_slave_0 left promiscuous mode
[  141.200938][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.215306][ T5252] loop2: detected capacity change from 0 to 128
[  141.229277][ T4471] device veth1_macvtap left promiscuous mode
[  141.239285][ T4471] device veth0_macvtap left promiscuous mode
[  141.251384][ T4471] device veth1_vlan left promiscuous mode
[  141.262495][ T4471] device veth0_vlan left promiscuous mode
[  141.454445][ T5252] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.467450][ T5252] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.846012][ T2856] Bluetooth: hci1: command 0x040f tx timeout
[  142.192125][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  142.220858][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  142.251325][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.281024][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.450141][ T4471] bond0 (unregistering): Released all slaves
[  142.553571][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[  142.821426][ T5173] team0: Port device team_slave_0 added
[  142.924947][ T5173] team0: Port device team_slave_1 added
[  142.932846][ T5124] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  143.003880][ T5124] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  143.044842][ T5124] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  143.300214][ T5270] loop3: detected capacity change from 0 to 128
[  143.319136][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.348656][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.396464][ T5270] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  143.405962][ T5173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.430181][ T5124] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  143.438933][ T5270] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  143.471059][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.497348][ T5239] chnl_net:caif_netlink_parms(): no params data found
[  143.521836][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.568146][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.643905][ T5173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.850234][ T5173] device hsr_slave_0 entered promiscuous mode
[  143.858234][ T5173] device hsr_slave_1 entered promiscuous mode
[  143.913948][ T4190] Bluetooth: hci1: command 0x0419 tx timeout
[  143.976047][ T5173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.996923][ T5173] Cannot create hsr debugfs directory
[  144.046134][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.075088][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.083333][ T5239] device bridge_slave_0 entered promiscuous mode
[  144.136018][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.147960][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.163061][ T5239] device bridge_slave_1 entered promiscuous mode
[  144.306563][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.321597][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.359637][ T5124] 8021q: adding VLAN 0 to HW filter on device team0
[  144.387954][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  144.409589][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  144.443118][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.599110][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  144.633730][ T4190] Bluetooth: hci0: command 0x041b tx timeout
[  144.667427][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  144.711268][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.718448][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.737747][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  144.753223][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  144.767241][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.774407][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.788474][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  144.801698][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  144.865562][ T5239] team0: Port device team_slave_0 added
[  144.890442][ T5239] team0: Port device team_slave_1 added
[  144.906908][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  144.924512][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  144.947954][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  144.964630][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  144.984032][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.004022][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.029674][ T5173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.088456][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.105291][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.133276][ T5173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.214347][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.221572][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.252402][ T5300] input: syz0 as /devices/virtual/input/input5
[  145.302590][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.329666][ T5124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.371862][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  145.391192][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.411899][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.527065][ T5173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.598277][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.622847][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.888138][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.354627][ T5239] device hsr_slave_0 entered promiscuous mode
[  146.402733][ T5239] device hsr_slave_1 entered promiscuous mode
[  146.442290][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.450454][ T5239] Cannot create hsr debugfs directory
[  146.497053][ T5310] loop3: detected capacity change from 0 to 256
[  146.504561][ T5173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.712843][ T5310] FAT-fs (loop3): Directory bread(block 64) failed
[  146.719669][ T4190] Bluetooth: hci0: command 0x040f tx timeout
[  146.743751][ T5310] FAT-fs (loop3): Directory bread(block 65) failed
[  146.766224][ T5310] FAT-fs (loop3): Directory bread(block 66) failed
[  146.791590][ T5310] FAT-fs (loop3): Directory bread(block 67) failed
[  146.808677][ T5310] FAT-fs (loop3): Directory bread(block 68) failed
[  146.824023][ T5310] FAT-fs (loop3): Directory bread(block 69) failed
[  146.845372][ T5310] FAT-fs (loop3): Directory bread(block 70) failed
[  146.862269][ T5310] FAT-fs (loop3): Directory bread(block 71) failed
[  146.865603][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  146.873850][ T5310] FAT-fs (loop3): Directory bread(block 72) failed
[  146.885234][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.900941][ T5310] FAT-fs (loop3): Directory bread(block 73) failed
[  146.907331][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.947791][ T5239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.995170][ T5173] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  147.050006][ T5239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.121403][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.140891][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.160534][ T5173] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  147.183598][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.211376][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.242901][ T5239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.376995][ T5239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.417363][ T5173] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  147.431974][ T5173] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  147.442320][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.450240][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.462855][ T5124] device veth0_vlan entered promiscuous mode
[  147.479081][ T5124] device veth1_vlan entered promiscuous mode
[  147.536738][ T5322] netlink: 92 bytes leftover after parsing attributes in process `syz.3.261'.
[  147.676937][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.178606][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.197905][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.227918][ T5124] device veth0_macvtap entered promiscuous mode
[  148.284612][ T5124] device veth1_macvtap entered promiscuous mode
[  148.360784][ T5324] loop3: detected capacity change from 0 to 128
[  148.416642][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.443526][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.462807][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.464384][ T5324] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.481822][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.503708][ T5324] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.522340][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.553168][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.592755][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.634494][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.683830][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.727355][ T5173] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.738190][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.747633][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.758451][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.768237][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.789165][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.799838][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[  148.823432][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.833293][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.863394][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.884370][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.913665][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.940704][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.969530][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.990182][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.027288][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.037098][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.051366][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.060668][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.069573][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.079061][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.100051][ T5173] 8021q: adding VLAN 0 to HW filter on device team0
[  149.107182][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.115837][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.143209][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.162335][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.224499][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.263480][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.272378][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.289615][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.296787][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.305690][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.314801][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.323121][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.330232][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.338506][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.348814][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.358890][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.373252][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  149.414384][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.423740][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.432186][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.455205][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.466090][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.494733][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.509482][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.524660][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.533038][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.562082][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.639579][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.650335][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.678292][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  149.725924][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.739105][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.756353][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.835259][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.867598][ T5239] 8021q: adding VLAN 0 to HW filter on device team0
[  149.894960][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.902827][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.994051][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.002747][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.012113][ T5340] loop2: detected capacity change from 0 to 256
[  150.031614][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.038771][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.173995][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.245600][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.262330][ T5344] loop2: detected capacity change from 0 to 128
[  150.289756][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.296927][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.341569][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.351748][ T5344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.359257][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  150.371513][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  150.383051][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.392731][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.401568][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.411141][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.425537][ T5173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.472568][ T5344] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  150.974239][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.982338][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.994643][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  151.003848][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  151.012433][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.024147][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  151.032870][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.047909][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  152.909245][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  152.925837][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.945360][ T4202] Bluetooth: unknown link type 128
[  153.117816][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  153.147190][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  153.178092][ T5173] device veth0_vlan entered promiscuous mode
[  153.187905][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  153.227547][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  153.285517][ T5173] device veth1_vlan entered promiscuous mode
[  153.332902][ T5173] device veth0_macvtap entered promiscuous mode
[  153.354937][ T5366] loop3: detected capacity change from 0 to 512
[  153.414341][ T5366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  153.444039][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  153.452045][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  153.510406][ T5366] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.273: invalid indirect mapped block 4294967295 (level 0)
[  153.641407][ T5366] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.273: invalid indirect mapped block 4294967295 (level 1)
[  153.727839][ T5366] EXT4-fs (loop3): 1 orphan inode deleted
[  153.740961][ T5366] EXT4-fs (loop3): 1 truncate cleaned up
[  153.776295][ T5366] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  154.240082][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  154.284659][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  154.308424][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  154.365786][ T5173] device veth1_macvtap entered promiscuous mode
[  154.522494][ T5371] device syzkaller0 entered promiscuous mode
[  155.033966][ T1340] Bluetooth: hci2: command 0x0409 tx timeout
[  157.023985][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.393495][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.403527][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.414840][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.424865][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.435646][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.446263][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.457050][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.467094][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.477636][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.504276][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.543587][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.554323][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.600145][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.634499][ T5380] loop3: detected capacity change from 0 to 128
[  157.641116][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.663009][ T4202] Bluetooth: Unexpected continuation frame (len 16)
[  157.673268][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.697298][ T5380] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value
[  157.716333][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.728436][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.739179][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.750358][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.763534][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.773645][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.786269][ T5384] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  157.804565][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.864213][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.899815][ T5388] loop0: detected capacity change from 0 to 512
[  157.900320][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.940917][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.987821][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.016548][ T5390] loop2: detected capacity change from 0 to 2048
[  158.025051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.065763][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.081964][ T5388] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.280: Invalid inode bitmap blk 4 in block_group 0
[  158.096068][ T5388] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback.
[  158.127026][ T5173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.145255][ T5173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.162393][ T5173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.174692][ T5173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.242708][ T5388] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  158.334436][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'.
[  158.495593][ T5390] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none.
[  158.943919][ T5388] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.280: Invalid inode bitmap blk 4 in block_group 0
[  158.960687][ T5390] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.978932][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.006465][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.044753][ T5388] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[  159.121373][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  159.148848][ T4432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.163750][ T4432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.206285][ T5404] device syzkaller0 entered promiscuous mode
[  159.299047][ T5409] loop0: detected capacity change from 0 to 512
[  159.333623][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.343773][ T5409] EXT4-fs (loop0): Ignoring removed nobh option
[  159.435014][ T5409] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.285: corrupted inode contents
[  159.439148][ T5390] fs-verity: sha512 using implementation "sha512-avx2"
[  159.479811][ T5390] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.281: bg 0: block 345: padding at end of block bitmap is not set
[  159.515902][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  159.522818][ T5409] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #3: comm syz.0.285: mark_inode_dirty error
[  159.536945][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.544616][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  159.557248][ T5409] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.285: corrupted inode contents
[  159.577378][ T5415] Zero length message leads to an empty skb
[  159.582843][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.583572][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  159.619297][ T5409] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.285: mark_inode_dirty error
[  159.620167][ T5417] loop1: detected capacity change from 0 to 512
[  159.637309][ T5390] EXT4-fs (loop2): Remounting filesystem read-only
[  159.654035][ T5390] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 0
[  159.663269][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  159.691315][ T5390] fs-verity (loop2, inode 13): Error -28 building Merkle tree
[  159.701987][ T5409] Quota error (device loop0): write_blk: dquota write failed
[  159.717571][ T4471] device hsr_slave_0 left promiscuous mode
[  159.729466][ T5409] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  159.743700][ T4471] device hsr_slave_1 left promiscuous mode
[  159.758065][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.766125][ T5409] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.285: Failed to acquire dquot type 0
[  159.801271][ T5417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  159.837372][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.854176][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  159.856016][ T5417] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.229: bad orphan inode 131083
[  159.890206][ T5417] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  159.914584][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.922063][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.930261][ T5409] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.285: corrupted inode contents
[  159.948616][ T4471] device bridge_slave_1 left promiscuous mode
[  159.992495][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  159.994307][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.153510][ T5409] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.285: mark_inode_dirty error
[  160.176520][ T4471] device bridge_slave_0 left promiscuous mode
[  160.182847][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.194241][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  160.223852][ T5409] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.285: corrupted inode contents
[  161.024739][ T5428] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  161.540813][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  161.810534][ T5409] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.285: mark_inode_dirty error
[  161.843526][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  161.856500][ T4471] device hsr_slave_0 left promiscuous mode
[  161.863629][ T5409] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.285: corrupted inode contents
[  161.896005][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  161.902781][ T5409] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  161.926400][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  161.953216][ T4471] device hsr_slave_1 left promiscuous mode
[  161.959281][ T5409] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.285: corrupted inode contents
[  161.986784][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.987418][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  162.017508][ T5409] EXT4-fs error (device loop0): ext4_truncate:4286: inode #16: comm syz.0.285: mark_inode_dirty error
[  162.023502][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.048646][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  162.083536][ T5409] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  162.119479][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.127609][ T5409] EXT4-fs (loop0): Remounting filesystem read-only
[  162.136097][ T5409] EXT4-fs (loop0): 1 truncate cleaned up
[  162.143325][ T5409] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback.
[  162.147176][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.157104][ T5409] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.255660][ T4471] device bridge_slave_1 left promiscuous mode
[  162.263642][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.291949][ T4471] device bridge_slave_0 left promiscuous mode
[  162.402121][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.790678][ T4471] device veth1_macvtap left promiscuous mode
[  162.812063][ T4471] device veth0_macvtap left promiscuous mode
[  162.820167][ T4471] device veth1_vlan left promiscuous mode
[  162.832502][ T4471] device veth0_vlan left promiscuous mode
[  162.840460][ T4471] device veth1_macvtap left promiscuous mode
[  162.849961][ T4471] device veth0_macvtap left promiscuous mode
[  162.857426][ T4471] device veth1_vlan left promiscuous mode
[  162.863201][ T4471] device veth0_vlan left promiscuous mode
[  163.468906][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  163.491356][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  163.508778][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.541803][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.736414][ T4471] bond0 (unregistering): Released all slaves
[  164.051506][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  164.069238][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  164.086670][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.127346][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.132752][ T5469] loop3: detected capacity change from 0 to 512
[  164.160674][ T5469] EXT4-fs (loop3): Ignoring removed bh option
[  164.202901][ T5469] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.299: inode #13: comm syz.3.299: iget: illegal inode #
[  164.224136][ T5469] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.299: couldn't read orphan inode 13 (err -117)
[  164.238259][ T5469] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000005,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,,errors=continue. Quota mode: none.
[  164.240359][ T4471] bond0 (unregistering): Released all slaves
[  164.283113][ T5469] EXT4-fs (loop3): shut down requested (2)
[  164.336204][ T5239] device veth0_vlan entered promiscuous mode
[  164.345607][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.354742][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.363021][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.371727][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.429713][ T5239] device veth1_vlan entered promiscuous mode
[  164.498653][ T5476] binder_alloc: 5475: binder_alloc_buf size 4294966784 failed, no address space
[  164.535057][ T5476] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  164.537788][ T5478] loop3: detected capacity change from 0 to 8
[  164.582927][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.626019][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.651573][ T5239] device veth0_macvtap entered promiscuous mode
[  164.721838][ T5478] SQUASHFS error: Failed to read block 0x4e8: -5
[  164.754212][ T5478] SQUASHFS error: Failed to read block 0xdfa: -5
[  164.772780][ T5483] loop0: detected capacity change from 0 to 512
[  164.813129][ T5478] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  164.857150][ T5478] SQUASHFS error: Failed to read block 0x4e8: -5
[  164.865206][   T26] audit: type=1800 audit(1778790019.223:6): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.302" name="file1" dev="loop3" ino=5 res=0 errno=0
[  164.899105][ T5239] device veth1_macvtap entered promiscuous mode
[  164.916727][ T5483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  165.354063][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.376255][ T5483] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.304: bad orphan inode 131083
[  165.453300][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.640130][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  165.684848][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.718895][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.767818][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.801035][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.812506][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.839527][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.883545][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.941048][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.953026][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.963274][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.973801][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.985147][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.995657][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.013561][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.033075][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.287617][ T5502] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  166.339954][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.374759][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.418957][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.463933][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.493549][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.502285][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.542256][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.727779][ T5058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.746082][ T5058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.829015][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.848588][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.436884][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.466284][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.477034][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.486386][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.495901][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  167.527039][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  167.753157][ T5510] team0 (unregistering): Port device team_slave_0 removed
[  167.780026][ T5514] loop2: detected capacity change from 0 to 256
[  167.866647][ T5514] FAT-fs (loop2): Directory bread(block 64) failed
[  167.882982][ T5514] FAT-fs (loop2): Directory bread(block 65) failed
[  167.891512][ T5514] FAT-fs (loop2): Directory bread(block 66) failed
[  167.901438][ T5514] FAT-fs (loop2): Directory bread(block 67) failed
[  167.918700][ T5510] team0 (unregistering): Port device team_slave_1 removed
[  167.920798][ T5514] FAT-fs (loop2): Directory bread(block 68) failed
[  167.948421][ T5514] FAT-fs (loop2): Directory bread(block 69) failed
[  167.961809][ T5514] FAT-fs (loop2): Directory bread(block 70) failed
[  167.971809][ T5514] FAT-fs (loop2): Directory bread(block 71) failed
[  168.022994][ T5514] FAT-fs (loop2): Directory bread(block 72) failed
[  168.071802][ T5514] FAT-fs (loop2): Directory bread(block 73) failed
[  169.782868][ T5526] device syzkaller0 entered promiscuous mode
[  170.339064][ T5530] loop2: detected capacity change from 0 to 512
[  170.351276][ T5529] binder_alloc: 5527: binder_alloc_buf size 4294966784 failed, no address space
[  170.382156][ T5529] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  170.507098][ T5530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  170.714425][ T5530] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.316: bad orphan inode 131083
[  170.782147][ T5530] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  170.866465][ T5541] loop4: detected capacity change from 0 to 128
[  173.509883][ T5557] loop1: detected capacity change from 0 to 256
[  173.784057][ T5557] FAT-fs (loop1): Directory bread(block 64) failed
[  173.791369][ T5557] FAT-fs (loop1): Directory bread(block 65) failed
[  173.820496][ T5557] FAT-fs (loop1): Directory bread(block 66) failed
[  173.858425][ T5557] FAT-fs (loop1): Directory bread(block 67) failed
[  173.886271][ T5560] device syzkaller0 entered promiscuous mode
[  173.892522][ T5557] FAT-fs (loop1): Directory bread(block 68) failed
[  173.923998][ T5557] FAT-fs (loop1): Directory bread(block 69) failed
[  173.952444][ T5557] FAT-fs (loop1): Directory bread(block 70) failed
[  173.979908][ T5557] FAT-fs (loop1): Directory bread(block 71) failed
[  174.001162][ T5557] FAT-fs (loop1): Directory bread(block 72) failed
[  174.010335][ T5557] FAT-fs (loop1): Directory bread(block 73) failed
[  177.656864][ T5598] capability: warning: `syz.4.335' uses deprecated v2 capabilities in a way that may be insecure
[  177.932863][ T5602] loop4: detected capacity change from 0 to 128
[  178.286267][   T26] audit: type=1800 audit(1778790032.643:7): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.337" name="file1" dev="loop4" ino=1048611 res=0 errno=0
[  179.533942][ T5630] netlink: 'syz.0.345': attribute type 2 has an invalid length.
[  181.373485][ T5647] loop2: detected capacity change from 0 to 128
[  181.917745][   T26] audit: type=1800 audit(1778790036.273:8): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.350" name="file1" dev="loop2" ino=1048613 res=0 errno=0
[  182.523131][ T5665] team0 (unregistering): Port device team_slave_0 removed
[  183.440118][ T5665] team0 (unregistering): Port device team_slave_1 removed
[  185.364562][ T5698] loop4: detected capacity change from 0 to 128
[  185.800004][   T26] audit: type=1800 audit(1778790040.153:9): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.367" name="file1" dev="loop4" ino=1048615 res=0 errno=0
[  185.824472][ T5704] xt_TCPMSS: Only works on TCP SYN packets
[  187.671214][ T5719] loop2: detected capacity change from 0 to 512
[  187.952721][ T5719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  188.076400][ T5719] EXT4-fs (loop2): bad geometry: first data block 2147483649 is beyond end of filesystem (256)
[  188.619621][   T26] audit: type=1326 audit(1778790042.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.1.377" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc1362e59 code=0x7ffc0000
[  188.734896][   T26] audit: type=1326 audit(1778790043.023:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.1.377" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cc1362e59 code=0x7ffc0000
[  188.849044][   T26] audit: type=1326 audit(1778790043.023:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.1.377" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc1362e59 code=0x7ffc0000
[  188.889764][   T26] audit: type=1326 audit(1778790043.023:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.1.377" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cc1362e59 code=0x7ffc0000
[  188.912345][ T5739] device syzkaller0 entered promiscuous mode
[  188.939094][   T26] audit: type=1326 audit(1778790043.023:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.1.377" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc1362e59 code=0x7ffc0000
[  188.964689][   T26] audit: type=1326 audit(1778790043.023:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.1.377" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7cc1362e59 code=0x7ffc0000
[  188.990175][   T26] audit: type=1326 audit(1778790043.023:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.1.377" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cc1362e59 code=0x7ffc0000
[  189.959793][ T5748] loop4: detected capacity change from 0 to 8
[  190.145267][ T5748] SQUASHFS error: zlib decompression failed, data probably corrupt
[  190.175425][ T5748] SQUASHFS error: Failed to read block 0x9b: -5
[  190.220808][ T5748] SQUASHFS error: Unable to read metadata cache entry [99]
[  190.257237][ T5748] SQUASHFS error: Unable to read inode 0x127
[  190.583730][ T5748] netlink: 'syz.4.384': attribute type 2 has an invalid length.
[  191.321416][ T5753] ODEBUG: Out of memory. ODEBUG disabled
[  191.518822][ T5768] loop1: detected capacity change from 0 to 512
[  191.578188][ T5768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  191.796748][ T5768] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  191.998334][ T5768] EXT4-fs (loop1): 1 truncate cleaned up
[  192.008836][ T5768] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,stripe=0x00000000000000ef,. Quota mode: none.
[  192.652977][ T5778] binder: 5777:5778 ioctl c0306201 200000000680 returned -14
[  193.977376][ T5793] block device autoloading is deprecated and will be removed.
[  194.219035][ T5800] loop4: detected capacity change from 0 to 256
[  194.236868][ T5798] device syzkaller0 entered promiscuous mode
[  194.350230][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  194.356673][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  195.507046][ T5819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'.
[  195.609742][ T5824] loop2: detected capacity change from 0 to 1024
[  195.704587][ T5824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  195.780243][ T5824] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.000854][ T5835] loop4: detected capacity change from 0 to 1024
[  196.061771][ T5835] EXT4-fs (loop4): Ignoring removed bh option
[  196.092030][ T5839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.409'.
[  196.144578][ T5835] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  196.599075][ T5850] loop2: detected capacity change from 0 to 128
[  196.956475][   T26] audit: type=1800 audit(1778790051.313:17): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="file1" dev="loop2" ino=1048618 res=0 errno=0
[  197.861226][ T5862] device syzkaller0 entered promiscuous mode
[  198.032424][ T5867] loop4: detected capacity change from 0 to 2048
[  198.114022][ T5867] GPT:first_usable_lbas don't match.
[  198.119716][ T5867] GPT:34 != 290
[  198.143508][ T5867] GPT: Use GNU Parted to correct GPT errors.
[  198.149647][ T5867]  loop4: p1 p2 p3
[  199.247413][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  199.247462][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  199.260133][ T4422] udevd[4422]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  199.543763][ T5877] netlink: 96 bytes leftover after parsing attributes in process `syz.3.417'.
[  199.813233][ T4471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.279002][ T4471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.397965][ T4471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.489877][ T4471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.646773][ T5890] loop4: detected capacity change from 0 to 128
[  201.039797][   T26] audit: type=1800 audit(1778790055.393:18): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.424" name="file1" dev="loop4" ino=1048620 res=0 errno=0
[  202.132939][ T5895] chnl_net:caif_netlink_parms(): no params data found
[  202.457903][ T5921] loop4: detected capacity change from 0 to 128
[  202.885939][ T5931] xt_TCPMSS: Only works on TCP SYN packets
[  202.958488][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.021435][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.078672][ T5895] device bridge_slave_0 entered promiscuous mode
[  203.131710][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.208207][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.234195][ T5936] loop1: detected capacity change from 0 to 512
[  203.240895][ T5895] device bridge_slave_1 entered promiscuous mode
[  203.273448][ T2856] Bluetooth: hci3: command 0x0409 tx timeout
[  203.345464][ T5936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  203.361568][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.406497][ T5936] EXT4-fs (loop1): 1 truncate cleaned up
[  203.412206][ T5936] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  203.474213][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.677717][ T5895] team0: Port device team_slave_0 added
[  203.731110][ T5895] team0: Port device team_slave_1 added
[  203.934202][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.093860][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.323465][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.508600][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.533573][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.550213][ T5951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  204.613420][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.842158][ T4471] device hsr_slave_0 left promiscuous mode
[  204.851313][ T5959] loop4: detected capacity change from 0 to 128
[  204.873858][ T4471] device hsr_slave_1 left promiscuous mode
[  204.891088][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.948358][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.976627][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.033424][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.111950][ T4471] device bridge_slave_1 left promiscuous mode
[  205.163711][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.232333][   T26] audit: type=1800 audit(1778790059.583:19): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.436" name="file1" dev="loop4" ino=1048625 res=0 errno=0
[  205.273961][ T4471] device bridge_slave_0 left promiscuous mode
[  205.280291][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.373467][ T4471] device veth1_macvtap left promiscuous mode
[  205.379604][ T4471] device veth0_macvtap left promiscuous mode
[  205.453610][ T4471] device veth1_vlan left promiscuous mode
[  205.459478][ T4471] device veth0_vlan left promiscuous mode
[  205.479332][ T2856] Bluetooth: hci3: command 0x041b tx timeout
[  206.831757][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  206.872102][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  206.900168][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.949943][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.158863][ T4471] bond0 (unregistering): Released all slaves
[  207.244152][ T5895] device hsr_slave_0 entered promiscuous mode
[  207.264256][ T5895] device hsr_slave_1 entered promiscuous mode
[  207.514023][ T4830] Bluetooth: hci3: command 0x040f tx timeout
[  208.185546][ T6004] loop4: detected capacity change from 0 to 512
[  208.187575][ T6007] ==================================================================
[  208.200272][ T6007] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[  208.207509][ T6007] Read of size 8 at addr ffff88814bf66c18 by task syz.1.446/6007
[  208.215347][ T6007] 
[  208.217702][ T6007] CPU: 0 PID: 6007 Comm: syz.1.446 Not tainted syzkaller #0
[  208.225010][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  208.235095][ T6007] Call Trace:
[  208.238411][ T6007]  <TASK>
[  208.241371][ T6007]  dump_stack_lvl+0x188/0x250
[  208.246173][ T6007]  ? show_regs_print_info+0x20/0x20
[  208.251405][ T6007]  ? _printk+0xda/0x130
[  208.255599][ T6007]  ? dvb_device_open+0xc6/0x370
[  208.260491][ T6007]  ? load_image+0x400/0x400
[  208.265283][ T6007]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  208.270782][ T6007]  print_address_description+0x60/0x2d0
[  208.276981][ T6007]  ? dvb_device_open+0xc6/0x370
[  208.281871][ T6007]  kasan_report+0xdf/0x130
[  208.286343][ T6007]  ? dvb_device_open+0xc6/0x370
[  208.291235][ T6007]  dvb_device_open+0xc6/0x370
[  208.295938][ T6007]  ? do_raw_spin_unlock+0x11d/0x230
[  208.301183][ T6007]  chrdev_open+0x5c5/0x6a0
[  208.305638][ T6007]  ? cd_forget+0x160/0x160
[  208.310106][ T6007]  ? fsnotify_perm+0x3a7/0x560
[  208.314901][ T6007]  ? cd_forget+0x160/0x160
[  208.319352][ T6007]  do_dentry_open+0x7ff/0xf80
[  208.324077][ T6007]  path_openat+0x26f5/0x2fa0
[  208.328821][ T6007]  ? verify_lock_unused+0x140/0x140
[  208.334051][ T6007]  ? slab_post_alloc_hook+0x4c/0x380
[  208.339374][ T6007]  ? do_filp_open+0x410/0x410
[  208.344114][ T6007]  do_filp_open+0x1e2/0x410
[  208.348655][ T6007]  ? vfs_tmpfile+0x300/0x300
[  208.353382][ T6007]  ? _raw_spin_unlock+0x24/0x40
[  208.358262][ T6007]  ? alloc_fd+0x598/0x630
[  208.362626][ T6007]  do_sys_openat2+0x150/0x4b0
[  208.367336][ T6007]  ? __lock_acquire+0x7d10/0x7d10
[  208.372411][ T6007]  ? do_sys_open+0xe0/0xe0
[  208.376864][ T6007]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  208.382971][ T6007]  ? lock_chain_count+0x20/0x20
[  208.387853][ T6007]  ? vtime_user_exit+0x2c8/0x3e0
[  208.392834][ T6007]  __x64_sys_openat+0x135/0x160
[  208.397722][ T6007]  do_syscall_64+0x4c/0xa0
[  208.402176][ T6007]  ? clear_bhb_loop+0x30/0x80
[  208.406881][ T6007]  ? clear_bhb_loop+0x30/0x80
[  208.411584][ T6007]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.417596][ T6007] RIP: 0033:0x7f7cc132368e
[  208.422039][ T6007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  208.441794][ T6007] RSP: 002b:00007f7cbf5bbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  208.450532][ T6007] RAX: ffffffffffffffda RBX: 00007f7cbf5bc6c0 RCX: 00007f7cc132368e
[  208.458839][ T6007] RDX: 0000000000141000 RSI: 00007f7cbf5bbc00 RDI: ffffffffffffff9c
[  208.466858][ T6007] RBP: 00007f7cbf5bbc00 R08: 0000000000000000 R09: 0000000000000000
[  208.474872][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  208.482886][ T6007] R13: 00007f7cc15dc038 R14: 00007f7cc15dbfa0 R15: 00007ffc23538478
[  208.490916][ T6007]  </TASK>
[  208.493967][ T6007] 
[  208.496308][ T6007] Allocated by task 1:
[  208.500411][ T6007]  __kasan_kmalloc+0xb5/0xf0
[  208.505035][ T6007]  dvb_register_device+0x311/0x2170
[  208.510395][ T6007]  dvb_register_frontend+0x645/0x920
[  208.515707][ T6007]  vidtv_bridge_probe+0x9a1/0xf70
[  208.520776][ T6007]  platform_probe+0x137/0x1c0
[  208.525587][ T6007]  really_probe+0x284/0xc80
[  208.530125][ T6007]  __driver_probe_device+0x18c/0x330
[  208.535440][ T6007]  driver_probe_device+0x4f/0x420
[  208.540506][ T6007]  __driver_attach+0x46b/0x670
[  208.545315][ T6007]  bus_for_each_dev+0x182/0x1f0
[  208.550204][ T6007]  bus_add_driver+0x30a/0x5a0
[  208.554911][ T6007]  driver_register+0x32d/0x430
[  208.559840][ T6007]  vidtv_bridge_init+0x39/0x70
[  208.564661][ T6007]  do_one_initcall+0x272/0x730
[  208.569470][ T6007]  do_initcall_level+0x137/0x1f0
[  208.574444][ T6007]  do_initcalls+0x4b/0x90
[  208.578808][ T6007]  kernel_init_freeable+0x3e9/0x570
[  208.584121][ T6007]  kernel_init+0x19/0x1b0
[  208.588480][ T6007]  ret_from_fork+0x1f/0x30
[  208.592933][ T6007] 
[  208.595277][ T6007] The buggy address belongs to the object at ffff88814bf66c00
[  208.595277][ T6007]  which belongs to the cache kmalloc-256 of size 256
[  208.609792][ T6007] The buggy address is located 24 bytes inside of
[  208.609792][ T6007]  256-byte region [ffff88814bf66c00, ffff88814bf66d00)
[  208.623097][ T6007] The buggy address belongs to the page:
[  208.628853][ T6007] page:ffffea00052fd980 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814bf66c00 pfn:0x14bf66
[  208.640426][ T6007] head:ffffea00052fd980 order:1 compound_mapcount:0
[  208.647043][ T6007] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[  208.655185][ T6007] raw: 057ff00000010200 ffffea00050f6708 ffffea00050ef288 ffff888016c41b40
[  208.663795][ T6007] raw: ffff88814bf66c00 000000000010000f 00000001ffffffff 0000000000000000
[  208.672395][ T6007] page dumped because: kasan: bad access detected
[  208.678913][ T6007] page_owner tracks the page as allocated
[  208.684837][ T6007] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 19779462157, free_ts 0
[  208.703052][ T6007]  get_page_from_freelist+0x1bbd/0x1ca0
[  208.708680][ T6007]  __alloc_pages+0x1ee/0x480
[  208.713315][ T6007]  alloc_page_interleave+0x24/0x1e0
[  208.718535][ T6007]  new_slab+0xc0/0x4b0
[  208.722767][ T6007]  ___slab_alloc+0x80a/0xdd0
[  208.727392][ T6007]  __kmalloc_node+0x200/0x3b0
[  208.732156][ T6007]  kvmalloc_node+0x84/0x130
[  208.736782][ T6007]  v4l2_ctrl_new+0x70f/0x1310
[  208.741485][ T6007]  v4l2_ctrl_new_std+0x247/0x300
[  208.746846][ T6007]  handler_new_ref+0x14a/0x950
[  208.751635][ T6007]  v4l2_ctrl_add_handler+0x197/0x280
[  208.757102][ T6007]  vivid_create_controls+0x2be8/0x3460
[  208.762684][ T6007]  vivid_probe+0x3c47/0x67a0
[  208.767312][ T6007]  platform_probe+0x137/0x1c0
[  208.772052][ T6007]  really_probe+0x284/0xc80
[  208.776585][ T6007]  __driver_probe_device+0x18c/0x330
[  208.781898][ T6007] page_owner free stack trace missing
[  208.787282][ T6007] 
[  208.789627][ T6007] Memory state around the buggy address:
[  208.795272][ T6007]  ffff88814bf66b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  208.803352][ T6007]  ffff88814bf66b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  208.811443][ T6007] >ffff88814bf66c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  208.819524][ T6007]                             ^
[  208.824482][ T6007]  ffff88814bf66c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  208.832561][ T6007]  ffff88814bf66d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  208.840762][ T6007] ==================================================================
[  208.848851][ T6007] Disabling lock debugging due to kernel taint
[  208.855328][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.896561][ T6004] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,errors=continue,noblock_validity,. Quota mode: none.
[  208.910083][ T6007] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  208.917374][ T6007] CPU: 0 PID: 6007 Comm: syz.1.446 Tainted: G    B             syzkaller #0
[  208.926255][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  208.937220][ T6007] Call Trace:
[  208.940518][ T6007]  <TASK>
[  208.943451][ T6007]  dump_stack_lvl+0x188/0x250
[  208.948139][ T6007]  ? show_regs_print_info+0x20/0x20
[  208.953345][ T6007]  ? load_image+0x400/0x400
[  208.957862][ T6007]  panic+0x2e5/0x810
[  208.961765][ T6007]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  208.968102][ T6007]  ? bpf_jit_dump+0xd0/0xd0
[  208.972639][ T6007]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  208.978621][ T6007]  ? _raw_spin_unlock+0x40/0x40
[  208.983477][ T6007]  ? dvb_device_open+0xc6/0x370
[  208.988555][ T6007]  check_panic_on_warn+0x80/0xa0
[  208.993519][ T6007]  ? dvb_device_open+0xc6/0x370
[  208.998393][ T6007]  end_report+0x6d/0xf0
[  209.002587][ T6007]  kasan_report+0x102/0x130
[  209.007179][ T6007]  ? dvb_device_open+0xc6/0x370
[  209.012066][ T6007]  dvb_device_open+0xc6/0x370
[  209.016769][ T6007]  ? do_raw_spin_unlock+0x11d/0x230
[  209.021976][ T6007]  chrdev_open+0x5c5/0x6a0
[  209.026404][ T6007]  ? cd_forget+0x160/0x160
[  209.030870][ T6007]  ? fsnotify_perm+0x3a7/0x560
[  209.035635][ T6007]  ? cd_forget+0x160/0x160
[  209.040053][ T6007]  do_dentry_open+0x7ff/0xf80
[  209.044736][ T6007]  path_openat+0x26f5/0x2fa0
[  209.049334][ T6007]  ? verify_lock_unused+0x140/0x140
[  209.054733][ T6007]  ? slab_post_alloc_hook+0x4c/0x380
[  209.060110][ T6007]  ? do_filp_open+0x410/0x410
[  209.064888][ T6007]  do_filp_open+0x1e2/0x410
[  209.069403][ T6007]  ? vfs_tmpfile+0x300/0x300
[  209.073996][ T6007]  ? _raw_spin_unlock+0x24/0x40
[  209.078846][ T6007]  ? alloc_fd+0x598/0x630
[  209.083177][ T6007]  do_sys_openat2+0x150/0x4b0
[  209.087863][ T6007]  ? __lock_acquire+0x7d10/0x7d10
[  209.092904][ T6007]  ? do_sys_open+0xe0/0xe0
[  209.097317][ T6007]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  209.103331][ T6007]  ? lock_chain_count+0x20/0x20
[  209.108186][ T6007]  ? vtime_user_exit+0x2c8/0x3e0
[  209.113213][ T6007]  __x64_sys_openat+0x135/0x160
[  209.118065][ T6007]  do_syscall_64+0x4c/0xa0
[  209.122497][ T6007]  ? clear_bhb_loop+0x30/0x80
[  209.127258][ T6007]  ? clear_bhb_loop+0x30/0x80
[  209.131939][ T6007]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  209.137834][ T6007] RIP: 0033:0x7f7cc132368e
[  209.142265][ T6007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  209.161882][ T6007] RSP: 002b:00007f7cbf5bbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  209.170644][ T6007] RAX: ffffffffffffffda RBX: 00007f7cbf5bc6c0 RCX: 00007f7cc132368e
[  209.178703][ T6007] RDX: 0000000000141000 RSI: 00007f7cbf5bbc00 RDI: ffffffffffffff9c
[  209.186764][ T6007] RBP: 00007f7cbf5bbc00 R08: 0000000000000000 R09: 0000000000000000
[  209.194736][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  209.202709][ T6007] R13: 00007f7cc15dc038 R14: 00007f7cc15dbfa0 R15: 00007ffc23538478
[  209.210685][ T6007]  </TASK>
[  209.213788][ T6007] Kernel Offset: disabled
[  209.218106][ T6007] Rebooting in 86400 seconds..