last executing test programs:

2m5.850407417s ago: executing program 5:
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x4, '\x00', @a})
openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x0, 0x0)

2m5.322548426s ago: executing program 5:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lseek(0xffffffffffffffff, 0x0, 0x4)

2m4.41418846s ago: executing program 5:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8034000, 0x0, 0x5e, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a"}, 0x50)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0)

2m3.419333719s ago: executing program 5:
r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000016c0), 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x8030942b, &(0x7f0000001600)={{}, "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"})

2m2.898029158s ago: executing program 5:
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xb827}, 0x90)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x3c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, r6, 0x1, 0x0, 0x3, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0)
close(r4)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}])
read$FUSE(r7, &(0x7f0000003840)={0x2020}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008004500001c0000000000019078ac1e0001ac1414aa11009078000000006e56e26215f8675c5b48b3bc8c16fd133febdb15d232e49eed1f82a826f9e05592d7d44f44fd912b91238c6026f2c8d219cadda0b5f7485dd68d88606e353c13b05bd748883057b0ad73200259d509ce9f617b1e5c35e4061ec26dd6ad70927859e6f89d44a9639dcbcb93e24a7078396c19d212f4098ec78ae6b4f8bea8716a81594e803e65b93a9ee07f8f21042e0046d7ce2b764dfb44ce5bc97e65c0d36b0928925a19"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x1010, r4, 0x8000)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778)
r9 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r9, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="6caa0309086355b54d6ce759b75d384b0fd75d77e5ad1ec101ced0184910b5f0b9b8fed92125b6dcdd2cbea69342ff3266a90464c336b096f646b66a38d89aafdaf76bf6dbc52a6f49963d0b637c1aef5101194210c85042152a65397093a6779886aa0605746bfbd5083bd739acc9bd8c1c92565de8d2119023b9e6886ef636fb974357b3f203d50df5f616d9cb", 0x8e}, {&(0x7f00000001c0)='g', 0x1}, {&(0x7f0000000200)="54eea01dba09c38a29a43baffef23f65fa974d4d9b53f4076ce32784cbf9f57e42b4de1de7ba3c7261d825b95c78ceb91201aef978f7530fd3be9fd814a6c03528f9397f2f91a8b94ef523dd4a7ff090e0756915fda71b527e6fadfeeb9fe767a2b70662f81ed7e289dd87d4829776e89d200ab1bdbc9ff8e8e08831b71bd555a9ed64868b90956075ee11ee1e31d443b1eaa9f5c109c6eb556a7654", 0x9c}, {&(0x7f00000002c0)="a1ac999e0261aabefaec1e6d10e365ebe7bd57f678dfa0d2b892c251e8b89e0d4a7bad30f2d83336eff6bfe8ac1181b1ecb65a7022fc05313e624832004db7c3f1fe049168f7eecdad87f39c9e98205e8aa78275b5839d879ab16519715884e778f15baa1f691a615f1a7d40cd53d64ef87c35075f6a52167196be10caa33ad692b1e0a44aa8b78daa8d3687879da41c530c6a595007b40787b4c54396dfc67fccd023095b0791b7ccf2b776454b6e3b767329d87d34758d582f7294f953483ebfed56c0eab78c4d8a25692c34c3fc0c170810aa48a8b60d1868b6c92ffddc008b1d267e", 0xfffffff4}, {&(0x7f00000003c0)="92f9a1830c0ccafb08c09f35e9a1bc550eee1276396d34f17a8caa5f6146799de3a81b2576795ffeea57aa1d8275b72be8c2a9bf664710d3e61d5fbfe849ae8d571ff2202ffcecc1a670a030fa9dd932ea932742cfc00a89665e0b785c3ff2154f42f45301ebfe27d9e8a7da", 0x6c}], 0x5, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x38}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x6, &(0x7f0000000580), 0x4)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x840)

2m1.980228698s ago: executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x83000000)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r4, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x5}], {0x4, 0x7}, [{0x8, 0x1}, {0x8, 0x5}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x6}}, 0x44, 0x0)
chdir(&(0x7f00000000c0)='./file0/../file0\x00')
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

2m0.61803578s ago: executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0)

2m0.034784848s ago: executing program 0:
socket$nl_sock_diag(0x10, 0x3, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c221}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x40046207, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0})
dup3(r7, r6, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000200)="f1"})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0})

1m51.404370483s ago: executing program 4:
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
rmdir(0x0)
syz_emit_vhci(0x0, 0x7)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a2b0c0000000000000000020000000900020073797a32000000000900010073797a30000000002c000480280001800b0001006f626a726566"], 0x80}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90)
chdir(&(0x7f0000000140)='./bus\x00')
syz_open_dev$tty20(0xc, 0x4, 0x1)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

1m48.335727152s ago: executing program 4:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
shutdown(r0, 0x1)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_subtree(r6, &(0x7f00000006c0)={[{0x2b, 'cpuset'}]}, 0x8)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1, @broadcast}, &(0x7f0000000480)=0xc)

1m46.560110877s ago: executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000080), 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x81, @any, 0x1, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x3, 0xac, "6e1740e3ed6448480d65209185f91c97e243e563872919f1de89fe2bf70cbd657e515ee7df6a530864f9547b08e9c56a7b96f4956acbf99921ba61db2c48ced4df3d4c31278cdfbf1bc2cdd90b1440494a02a96c9193aae71e1e80446b68fe43e59210104cca3ef08ccb15ae04664e1ec688f807b4964bb4f7610eb0d45cf0c492d6dc47431b5065ccde8c27010b5e77afdc362405ccfb6525b37c020f316857829a0bc62ed2242f673a27f1"}})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0)
r3 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1)
r4 = dup2(r2, r3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
lseek(r5, 0xdb7, 0x1)
read$FUSE(r5, &(0x7f0000003180)={0x2020}, 0x2020)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r8, 0xb05, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f00000024c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x2c, r8, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9eb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x80)
sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r8, 0x30374a7462c3ad0c, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x98ea}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x67}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}}, 0x4040084)
r11 = socket(0x10, 0x80002, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x38}}, 0x0)
r14 = socket(0xa, 0x1, 0x0)
sendmsg$AUDIT_GET_FEATURE(r14, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2002024}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r15 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00', <r16=>0x0})
ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000000)={@loopback, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6, r16})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000}, 0x1)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x800)

1m45.935613891s ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000240)=0x4)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000280), 0x1004)
r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305839, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x13}]}, 0x24}}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00'}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r8=>r5}, './file0\x00'})
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f00000000c0)=0x7f, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f0000000600)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r9}, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})

1m43.404183332s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0x0)

1m43.086047641s ago: executing program 4:
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@ref_verify}, {@nossd_spread}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f9, &(0x7f0000005140)="$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")
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
pwrite64(r0, &(0x7f0000000000)="1f", 0x8800000, 0x8000000)

41.279710132s ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20)

41.019775583s ago: executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000000000040ac052a0200100000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0x0, 0x0, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2f}, &(0x7f00000004c0), 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))

38.04264678s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f00000015c0)}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/221, 0xdd, <r8=>0x0, &(0x7f0000000400)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a0000007a0a00ff000000005500000000000000950000000000000018100000", @ANYRESOCT=r1, @ANYBLOB="00000000000061000500000000e8a5230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x10000, 0x95, &(0x7f0000000340)=""/149, 0x0, 0x1a, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000001", @ANYRES16, @ANYBLOB="010000000000000000000400000008000400ffffffff08000500ac1e0001140006006873723000"/50], 0x38}}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)

36.865162834s ago: executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000001b)
close(r1)

36.30604913s ago: executing program 3:
prctl$PR_GET_TSC(0x19, &(0x7f0000000240))
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x800, @none, 0x3}, 0xe)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000580))
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', '', [{0x20, '/dev/uinput\x00'}, {0x20, '#! '}, {0x20, '\xc9P'}, {0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "b4bc2ea5cdbf772ff19cc7bf56a28093c8c17be8c6b3e9fe6af3285a00000000fd2516adb389891eadc4e2"}, 0x4a)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x8, 0x8, 0x101, 0xfffa}, 'syz0\x00', 0xd})
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000740)={0x42}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0xffffffff}, 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', 0x0, r1, 0x1, 0x5, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000440)='GPL\x00', 0x5, 0x94, &(0x7f0000000480)=""/148, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x80000001, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0xfffffff9}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15}, {0x20}, {0x6}]})
bind$tipc(r0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0)

36.164944685s ago: executing program 2:
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

35.301517807s ago: executing program 3:
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c6e742c73686f72746e616d653d6c6f7765722c636f6465706167653d3836342c636f6465706167653d3836392c726f6469722c696f636861727365743d6b6f69382d72752c636865636b3d6e6f726d616c2c75746638f8091182926d6e0e6876ee3d302c726f6469722c0000000000000000000000008c12313bc02408"], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=")
creat(0x0, 0x9c)
rename(0x0, &(0x7f0000000180)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xff, "4feda26323b172e0"})
r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece8", 0x19, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

34.869455992s ago: executing program 1:
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2008410, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5549, &(0x7f0000003d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x4000c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000025c0)}], 0x1}}], 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000000600), 0x4)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e)

33.99135636s ago: executing program 3:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000000000040ac052a0200100000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0x0, 0x0, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2f}, &(0x7f00000004c0), 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))

33.251121971s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x59, 0x1, {{'xcbc(aes)\x00'}, 0x88, "9758ac069c50ae03d5a5e575509b947a1c"}}]}, 0x194}}, 0x0)

32.415960755s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f00000015c0)}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/221, 0xdd, <r8=>0x0, &(0x7f0000000400)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a0000007a0a00ff000000005500000000000000950000000000000018100000", @ANYRESOCT=r1, @ANYBLOB="00000000000061000500000000e8a5230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x10000, 0x95, &(0x7f0000000340)=""/149, 0x0, 0x1a, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000001", @ANYRES16, @ANYBLOB="010000000000000000000400000008000400ffffffff08000500ac1e0001140006006873723000"/50], 0x38}}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)

32.406185514s ago: executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)

32.365332098s ago: executing program 1:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040))
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
close(r0)

32.147501518s ago: executing program 1:
socket$nl_sock_diag(0x10, 0x3, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c221}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x40046207, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0})
dup3(r7, r6, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000200)="f1"})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0})

30.021807883s ago: executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000001b)
close(r1)

6.140136422s ago: executing program 2:
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
rmdir(0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90)
chdir(&(0x7f0000000140)='./bus\x00')
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

2.110021845s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000009f40)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x9}, {0x9}}}]}]}, 0x60}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max.burst\x00', 0x2, 0x0)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ftruncate(r3, 0x200004)
sendfile(r4, r3, 0x0, 0x2639)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
poll(&(0x7f0000000100)=[{r2}, {r3}, {r5}, {r6}], 0x4, 0xffffff81)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r7, 0x540a, 0x0)
ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000400))

0s ago: executing program 3:
timer_create(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000001040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts.
2024/06/04 15:57:28 fuzzer started
2024/06/04 15:57:28 dialing manager at 10.128.0.169:30002
[   72.983938][ T5099] cgroup: Unknown subsys name 'net'
[   73.144827][ T5099] cgroup: Unknown subsys name 'rlimit'
2024/06/04 15:57:30 starting 6 executor processes
[   74.446390][ T5105] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.485177][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.494618][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.510858][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.519265][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.527155][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.536235][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.548859][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.556303][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.556967][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.563989][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.572715][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.578942][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.598523][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.599528][ T5130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.613305][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.615165][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.628378][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.642370][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.688298][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.696533][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.704374][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.715906][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.724674][ T5130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.732763][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.765967][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   76.775103][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   76.784934][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.792762][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   76.793739][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.808711][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.808787][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   76.817154][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.831285][   T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   76.838680][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.846868][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   76.847254][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.487810][ T5118] chnl_net:caif_netlink_parms(): no params data found
[   77.744502][ T5126] chnl_net:caif_netlink_parms(): no params data found
[   77.788882][ T5137] chnl_net:caif_netlink_parms(): no params data found
[   77.818295][ T5131] chnl_net:caif_netlink_parms(): no params data found
[   77.974371][ T5136] chnl_net:caif_netlink_parms(): no params data found
[   78.007150][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.015128][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.023083][ T5118] bridge_slave_0: entered allmulticast mode
[   78.030674][ T5118] bridge_slave_0: entered promiscuous mode
[   78.089784][ T5122] chnl_net:caif_netlink_parms(): no params data found
[   78.109111][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.120363][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.128644][ T5118] bridge_slave_1: entered allmulticast mode
[   78.136862][ T5118] bridge_slave_1: entered promiscuous mode
[   78.295187][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.306383][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.314548][ T5126] bridge_slave_0: entered allmulticast mode
[   78.322680][ T5126] bridge_slave_0: entered promiscuous mode
[   78.353102][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.367524][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.376925][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.384319][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.391575][ T5137] bridge_slave_0: entered allmulticast mode
[   78.400096][ T5137] bridge_slave_0: entered promiscuous mode
[   78.415500][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.423348][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.430558][ T5131] bridge_slave_0: entered allmulticast mode
[   78.438124][ T5131] bridge_slave_0: entered promiscuous mode
[   78.447014][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.454391][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.461616][ T5126] bridge_slave_1: entered allmulticast mode
[   78.469077][ T5126] bridge_slave_1: entered promiscuous mode
[   78.500366][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.508544][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.515925][ T5137] bridge_slave_1: entered allmulticast mode
[   78.523887][ T5137] bridge_slave_1: entered promiscuous mode
[   78.548012][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.555658][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.563317][ T5131] bridge_slave_1: entered allmulticast mode
[   78.570515][ T5131] bridge_slave_1: entered promiscuous mode
[   78.660992][ T5137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.662596][ T5132] Bluetooth: hci2: command tx timeout
[   78.670387][   T53] Bluetooth: hci0: command tx timeout
[   78.736898][ T5118] team0: Port device team_slave_0 added
[   78.747209][ T5118] team0: Port device team_slave_1 added
[   78.752916][ T5132] Bluetooth: hci1: command tx timeout
[   78.790813][ T5137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.817703][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.832329][ T5132] Bluetooth: hci3: command tx timeout
[   78.833670][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.852891][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.869022][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.902854][ T5132] Bluetooth: hci5: command tx timeout
[   78.902881][   T53] Bluetooth: hci4: command tx timeout
[   78.918446][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.926026][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.933719][ T5136] bridge_slave_0: entered allmulticast mode
[   78.940870][ T5136] bridge_slave_0: entered promiscuous mode
[   79.042144][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.049123][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.075946][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.088589][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.095981][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.104317][ T5136] bridge_slave_1: entered allmulticast mode
[   79.112274][ T5136] bridge_slave_1: entered promiscuous mode
[   79.149852][ T5137] team0: Port device team_slave_0 added
[   79.159074][ T5137] team0: Port device team_slave_1 added
[   79.169265][ T5126] team0: Port device team_slave_0 added
[   79.176873][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.184503][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.191757][ T5122] bridge_slave_0: entered allmulticast mode
[   79.199453][ T5122] bridge_slave_0: entered promiscuous mode
[   79.207755][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.215183][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.242128][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.271489][ T5136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.284953][ T5131] team0: Port device team_slave_0 added
[   79.308169][ T5126] team0: Port device team_slave_1 added
[   79.314433][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.321575][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.329651][ T5122] bridge_slave_1: entered allmulticast mode
[   79.337330][ T5122] bridge_slave_1: entered promiscuous mode
[   79.369096][ T5136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.385160][ T5131] team0: Port device team_slave_1 added
[   79.500469][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.508092][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.534104][ T5137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.548039][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.555202][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.581713][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.613001][ T5118] hsr_slave_0: entered promiscuous mode
[   79.619725][ T5118] hsr_slave_1: entered promiscuous mode
[   79.631228][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.687955][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.695228][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.721595][ T5137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.733807][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.740904][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.767161][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.808798][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.824702][ T5136] team0: Port device team_slave_0 added
[   79.831517][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.839240][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.865890][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.880060][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.887076][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.913614][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.979607][ T5136] team0: Port device team_slave_1 added
[   80.077884][ T5126] hsr_slave_0: entered promiscuous mode
[   80.086025][ T5126] hsr_slave_1: entered promiscuous mode
[   80.093240][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.101207][ T5126] Cannot create hsr debugfs directory
[   80.182007][ T5137] hsr_slave_0: entered promiscuous mode
[   80.188711][ T5137] hsr_slave_1: entered promiscuous mode
[   80.196611][ T5137] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.204261][ T5137] Cannot create hsr debugfs directory
[   80.240001][ T5122] team0: Port device team_slave_0 added
[   80.253123][ T5122] team0: Port device team_slave_1 added
[   80.259808][ T5136] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.267111][ T5136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.293638][ T5136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.308202][ T5136] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.315479][ T5136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.341536][ T5136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.374604][ T5131] hsr_slave_0: entered promiscuous mode
[   80.381909][ T5131] hsr_slave_1: entered promiscuous mode
[   80.388577][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.396845][ T5131] Cannot create hsr debugfs directory
[   80.459237][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.470755][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.497543][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.511295][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.518468][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.544699][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.741910][ T5132] Bluetooth: hci2: command tx timeout
[   80.742017][   T53] Bluetooth: hci0: command tx timeout
[   80.779633][ T5136] hsr_slave_0: entered promiscuous mode
[   80.786732][ T5136] hsr_slave_1: entered promiscuous mode
[   80.793659][ T5136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.801244][ T5136] Cannot create hsr debugfs directory
[   80.821840][   T53] Bluetooth: hci1: command tx timeout
[   80.902243][   T53] Bluetooth: hci3: command tx timeout
[   80.983545][   T53] Bluetooth: hci4: command tx timeout
[   80.983562][ T5132] Bluetooth: hci5: command tx timeout
[   81.000213][ T5122] hsr_slave_0: entered promiscuous mode
[   81.008143][ T5122] hsr_slave_1: entered promiscuous mode
[   81.015109][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.022990][ T5122] Cannot create hsr debugfs directory
[   81.460312][ T5118] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   81.479332][ T5118] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   81.496222][ T5118] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   81.542294][ T5118] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   81.783263][ T5126] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.817304][ T5126] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.830265][ T5126] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.879173][ T5126] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.061824][ T5131] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.082893][ T5131] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.100093][ T5131] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.113534][ T5131] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.186002][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.276704][ T5137] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.289682][ T5137] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.329186][ T5118] 8021q: adding VLAN 0 to HW filter on device team0
[   82.339939][ T5137] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.353981][ T5137] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.399472][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.407559][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.449071][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.456327][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.540757][ T5136] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.556975][ T5136] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.607190][ T5136] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.619158][ T5136] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.676890][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.797713][ T5122] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.815041][ T5126] 8021q: adding VLAN 0 to HW filter on device team0
[   82.822804][   T53] Bluetooth: hci2: command tx timeout
[   82.832466][   T53] Bluetooth: hci0: command tx timeout
[   82.877815][ T5122] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.890359][ T5122] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.912423][   T53] Bluetooth: hci1: command tx timeout
[   82.929814][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.937048][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.949834][ T5122] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.974913][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.982858][   T53] Bluetooth: hci3: command tx timeout
[   83.006828][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.014079][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.065209][   T53] Bluetooth: hci5: command tx timeout
[   83.067687][ T5132] Bluetooth: hci4: command tx timeout
[   83.189750][ T5131] 8021q: adding VLAN 0 to HW filter on device team0
[   83.267882][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.275335][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.294066][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.301239][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.369720][ T5137] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.516888][ T5137] 8021q: adding VLAN 0 to HW filter on device team0
[   83.530854][ T5136] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.654415][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.661639][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.695756][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.703044][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.808537][ T5136] 8021q: adding VLAN 0 to HW filter on device team0
[   83.842476][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.849711][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.860316][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.867704][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.909211][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.077274][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.107917][ T5122] 8021q: adding VLAN 0 to HW filter on device team0
[   84.137076][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.208545][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.215954][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.238265][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.245526][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.547860][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.647284][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.682709][ T5126] veth0_vlan: entered promiscuous mode
[   84.761536][ T5126] veth1_vlan: entered promiscuous mode
[   84.849841][ T5131] veth0_vlan: entered promiscuous mode
[   84.906401][ T5132] Bluetooth: hci0: command tx timeout
[   84.916294][ T5132] Bluetooth: hci2: command tx timeout
[   84.982609][   T53] Bluetooth: hci1: command tx timeout
[   85.003545][ T5131] veth1_vlan: entered promiscuous mode
[   85.071919][   T53] Bluetooth: hci3: command tx timeout
[   85.080196][ T5136] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.091742][ T5137] veth0_vlan: entered promiscuous mode
[   85.106355][ T5118] veth0_vlan: entered promiscuous mode
[   85.142561][   T53] Bluetooth: hci5: command tx timeout
[   85.142614][ T5132] Bluetooth: hci4: command tx timeout
[   85.157921][ T5118] veth1_vlan: entered promiscuous mode
[   85.188706][ T5126] veth0_macvtap: entered promiscuous mode
[   85.207817][ T5137] veth1_vlan: entered promiscuous mode
[   85.253631][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.269886][ T5126] veth1_macvtap: entered promiscuous mode
[   85.380065][ T5118] veth0_macvtap: entered promiscuous mode
[   85.425005][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.439952][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.450475][ T5118] veth1_macvtap: entered promiscuous mode
[   85.472858][ T5131] veth0_macvtap: entered promiscuous mode
[   85.518757][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.529884][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.544361][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.559641][ T5126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.568827][ T5126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.578158][ T5126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.587332][ T5126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.629503][ T5131] veth1_macvtap: entered promiscuous mode
[   85.644404][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.656406][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.668329][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.677142][ T5137] veth0_macvtap: entered promiscuous mode
[   85.746898][ T5137] veth1_macvtap: entered promiscuous mode
[   85.754146][ T5122] veth0_vlan: entered promiscuous mode
[   85.761112][ T5118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.776141][ T5118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.789697][ T5118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.804939][ T5118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.879447][ T5122] veth1_vlan: entered promiscuous mode
[   85.888395][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.899380][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.910234][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.921080][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.934157][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.005330][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.016431][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.027836][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.038406][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.048823][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.059727][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.071509][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.080396][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.093795][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.104186][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.117745][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.130040][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.170706][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.186909][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.197175][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.208658][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.218571][ T5137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.229570][ T5137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.241172][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.254469][ T5131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.265354][ T5131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.274575][ T5131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.283403][ T5131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.350463][ T5137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.360755][ T5137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.370333][ T5137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.380344][ T5137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.393588][ T5136] veth0_vlan: entered promiscuous mode
[   86.431396][   T45] cfg80211: failed to load regulatory.db
[   86.474296][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.495295][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.518816][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.526948][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.569206][ T5136] veth1_vlan: entered promiscuous mode
[   86.585938][ T5122] veth0_macvtap: entered promiscuous mode
[   86.670157][ T5122] veth1_macvtap: entered promiscuous mode
[   86.682896][ T2877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.694063][ T2877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.723032][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.748304][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.792617][   T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.800504][   T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.833147][  T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.852325][  T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.868167][ T5136] veth0_macvtap: entered promiscuous mode
[   86.909808][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.921509][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.933627][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.944225][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.954483][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.970413][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.980679][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.991803][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.005515][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.059205][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.083981][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.095795][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.106737][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.116881][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.127751][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.138164][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.158546][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.171385][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.183015][ T5136] veth1_macvtap: entered promiscuous mode
[   87.225949][ T1789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.243553][ T5230] loop5: detected capacity change from 0 to 128
[   87.249540][ T1789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.307688][ T5230] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   87.329243][ T5230] ext4 filesystem being mounted at /root/syzkaller-testdir1920976707/syzkaller.9Nqu5u/0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.329432][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.383296][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.394638][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.405300][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.418323][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.435655][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.453248][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.466323][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.478301][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.498901][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.519847][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.574046][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.592598][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.603345][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.605984][ T5237] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[   87.632700][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.672344][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.689157][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.700700][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.722991][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.740075][ T5243] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
[   87.747156][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.770182][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.798129][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.834305][ T5118] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   87.843851][ T5122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.875399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   87.894861][ T5122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.920896][ T5122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.940616][ T5122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.959285][ T5248] loop1: detected capacity change from 0 to 1024
[   88.062060][ T5248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.102024][ T5136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.110788][ T5136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.158270][ T5252] loop5: detected capacity change from 0 to 1024
[   88.176491][ T5136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.207780][ T5136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.242621][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.250501][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.261795][ T5252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.343127][ T5131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.494904][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   88.744169][ T5118] EXT4-fs error (device loop5): ext4_lookup:1858: inode #2: comm syz-executor.5: deleted inode referenced: 11
[   88.796585][ T5118] EXT4-fs error (device loop5): ext4_lookup:1858: inode #2: comm syz-executor.5: deleted inode referenced: 11
[   88.906594][ T5183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.923231][ T5183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.366580][  T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.406340][  T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.422360][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.433521][ T5118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.450876][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.501316][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.630114][   T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.763378][ T5258] loop2: detected capacity change from 0 to 32768
[   89.980140][   T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.087677][ T5256] loop1: detected capacity change from 0 to 32768
[   90.125141][ T5256] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5256)
[   90.158022][ T5258] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[   90.173783][ T5183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.207346][ T5183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.238297][   T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.262714][ T5258] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   90.492152][ T5256] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.500114][ T5258] bcachefs (loop2): alloc_read...
[   90.525185][ T5256] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   90.593585][ T5258]  done
[   90.602531][ T5258] bcachefs (loop2): stripes_read... done
[   90.626798][   T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.651542][ T5258] bcachefs (loop2): snapshots_read... done
[   90.706498][ T5256] BTRFS info (device loop1): using free-space-tree
[   90.796316][ T5258] bcachefs (loop2): journal_replay... done
[   90.863625][ T5258] bcachefs (loop2): resume_logged_ops... done
[   90.967713][ T5287] loop4: detected capacity change from 0 to 128
[   90.977816][ T5258] bcachefs (loop2): going read-write
[   91.040651][ T5258] bcachefs (loop2): done starting filesystem
[   91.381262][ T5287] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.483005][ T5287] ext4 filesystem being mounted at /root/syzkaller-testdir954586149/syzkaller.wQpjnC/0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.250841][ T5258] syz-executor.2 (5258) used greatest stack depth: 13080 bytes left
[   92.338427][ T5131] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.456837][ T5287] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[   92.513691][ T5137] bcachefs (loop2): shutting down
[   92.519103][ T5137] bcachefs (loop2): going read-only
[   92.673417][ T5137] bcachefs (loop2): finished waiting for writes to stop
[   92.744563][ T5136] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.754267][   T51] bridge_slave_1: left allmulticast mode
[   92.776026][ T5314] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[   92.781824][   T51] bridge_slave_1: left promiscuous mode
[   92.803621][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.844895][ T5137] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13
[   92.932783][ T5137] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13
[   92.972346][ T5137] bcachefs (loop2): shutdown complete, journal seq 14
[   92.980506][ T5137] bcachefs (loop2): marking filesystem clean
[   93.014543][   T51] bridge_slave_0: left allmulticast mode
[   93.020260][   T51] bridge_slave_0: left promiscuous mode
[   93.089733][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.295799][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.324562][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.969334][ T5326] binder: 5319:5326 ioctl c0306201 20000280 returned -14
[   94.042156][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.068103][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.136206][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   94.143920][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.209863][ T5137] bcachefs (loop2): shutdown complete
[   94.763844][ T5322] loop4: detected capacity change from 0 to 32768
[   94.779396][ T5322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5322)
[   94.855213][ T5322] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.865788][ T5322] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   94.878252][ T5322] BTRFS info (device loop4): using free-space-tree
[   95.270401][   T29] audit: type=1800 audit(1717516671.186:2): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=260 res=0 errno=0
[   95.861622][ T5348] loop3: detected capacity change from 0 to 1024
[   95.886781][ T5136] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.925903][ T5348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.949800][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.009830][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.044199][ T5329] loop1: detected capacity change from 0 to 32768
[   96.057063][ T5329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5329)
[   96.093371][   T51] bond0 (unregistering): Released all slaves
[   96.137017][ T5329] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.169567][ T5329] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[   96.193301][ T5132] Bluetooth: hci0: command tx timeout
[   96.194574][ T5126] EXT4-fs error (device loop3): ext4_lookup:1858: inode #2: comm syz-executor.3: deleted inode referenced: 11
[   96.211511][ T5329] BTRFS info (device loop1): using free-space-tree
[   96.280275][ T5325] geneve2: entered allmulticast mode
[   96.351144][ T5126] EXT4-fs error (device loop3): ext4_lookup:1858: inode #2: comm syz-executor.3: deleted inode referenced: 11
[   97.034613][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.068399][ T5376] loop4: detected capacity change from 0 to 8
[   97.143041][ T5376] SQUASHFS error: lzo decompression failed, data probably corrupt
[   97.153858][ T5376] SQUASHFS error: Failed to read block 0x91: -5
[   97.205196][ T5376] SQUASHFS error: Unable to read metadata cache entry [8f]
[   97.241789][ T5376] SQUASHFS error: Unable to read inode 0x11f
[   97.318872][ T1268] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   97.398897][ T5131] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   97.422054][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.665421][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.714308][    T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   97.771954][    T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[   97.781071][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.905859][    T8] usb 3-1: config 0 descriptor??
[   97.957378][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.966595][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.977990][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   97.993158][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.001155][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   98.012936][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.276145][   T53] Bluetooth: hci0: command tx timeout
[   98.331155][    T9] usb 3-1: USB disconnect, device number 2
[   98.651571][   T51] hsr_slave_0: left promiscuous mode
[   98.694382][   T51] hsr_slave_1: left promiscuous mode
[   98.710850][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.727662][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.749716][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.760766][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.800054][   T51] veth1_macvtap: left promiscuous mode
[   98.816068][   T51] veth0_macvtap: left promiscuous mode
[   98.830228][   T51] veth1_vlan: left promiscuous mode
[   98.844834][   T51] veth0_vlan: left promiscuous mode
[   98.917523][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   98.929470][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   98.939072][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   98.957048][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   98.973492][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   98.995518][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.504838][ T5409] loop4: detected capacity change from 0 to 128
[   99.541420][ T5409] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.588636][ T5409] ext4 filesystem being mounted at /root/syzkaller-testdir954586149/syzkaller.wQpjnC/3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   99.763087][ T5406] loop2: detected capacity change from 0 to 32768
[   99.786719][ T5406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5406)
[   99.836146][ T5406] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   99.854765][ T5406] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   99.876944][ T5406] BTRFS info (device loop2): using free-space-tree
[   99.896315][ T5409] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[   99.980604][ T5136] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.102314][   T53] Bluetooth: hci1: command tx timeout
[  100.104197][   T29] audit: type=1800 audit(1717516676.026:3): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0
[  100.209014][    C1] net_ratelimit: 2 callbacks suppressed
[  100.209034][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  100.341829][   T53] Bluetooth: hci0: command tx timeout
[  100.407258][ T5435] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  100.486635][ T5137] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.525028][   T51] team0 (unregistering): Port device team_slave_1 removed
[  100.630365][   T51] team0 (unregistering): Port device team_slave_0 removed
[  101.039059][ T5439] loop2: detected capacity change from 0 to 8
[  101.061995][   T53] Bluetooth: hci2: command tx timeout
[  101.223501][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  101.262517][ T5441] overlay: filesystem on ./file0 is read-only
[  102.152904][ T5448] syz-executor.4[5448] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.153098][ T5448] syz-executor.4[5448] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.654272][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  102.676570][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  104.431751][   T53] Bluetooth: hci1: command tx timeout
[  104.431872][   T53] Bluetooth: hci0: command tx timeout
[  104.431935][   T53] Bluetooth: hci2: command tx timeout
[  104.459844][ T5449] tty tty29: ldisc open failed (-12), clearing slot 28
[  104.769860][ T5450] geneve2: entered allmulticast mode
[  105.272400][ T5461] syz-executor.1[5461] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.272594][ T5461] syz-executor.1[5461] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.001624][ T5321] chnl_net:caif_netlink_parms(): no params data found
[  106.501894][ T5132] Bluetooth: hci2: command tx timeout
[  106.507476][   T53] Bluetooth: hci1: command tx timeout
[  109.146773][ T5132] Bluetooth: hci2: command tx timeout
[  109.152367][ T5132] Bluetooth: hci1: command tx timeout
[  109.223100][   T53] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  109.232445][   T53] Bluetooth: hci3: Injecting HCI hardware error event
[  109.240635][   T53] Bluetooth: hci3: hardware error 0x00
[  109.311322][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.339224][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.351629][ T5321] bridge_slave_0: entered allmulticast mode
[  109.359842][ T5321] bridge_slave_0: entered promiscuous mode
[  109.369147][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.376574][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.383926][ T5321] bridge_slave_1: entered allmulticast mode
[  109.393290][ T5321] bridge_slave_1: entered promiscuous mode
[  109.419730][ T5491] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  109.864241][ T5321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.906084][ T5321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.215833][ T5380] chnl_net:caif_netlink_parms(): no params data found
[  110.304160][ T5321] team0: Port device team_slave_0 added
[  110.355792][ T5321] team0: Port device team_slave_1 added
[  110.508430][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.772565][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.930769][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.949747][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.985145][ T5321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.069925][ T5508] loop4: detected capacity change from 0 to 32768
[  111.092396][ T5508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5508)
[  111.118520][ T5508] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.136394][ T5508] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  111.147246][ T5508] BTRFS info (device loop4): using free-space-tree
[  111.220517][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.287470][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.294684][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.344922][ T5321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.382255][   T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  111.449062][   T29] audit: type=1800 audit(1717516687.356:4): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=260 res=0 errno=0
[  111.548922][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.887466][ T5136] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.071016][ T5400] chnl_net:caif_netlink_parms(): no params data found
[  112.298494][ T5321] hsr_slave_0: entered promiscuous mode
[  112.323788][ T5321] hsr_slave_1: entered promiscuous mode
[  112.342598][ T5380] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.392322][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.399607][ T5380] bridge_slave_0: entered allmulticast mode
[  112.443679][ T5380] bridge_slave_0: entered promiscuous mode
[  112.486225][ T5380] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.512319][ T5380] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.547327][ T5380] bridge_slave_1: entered allmulticast mode
[  112.562323][ T5380] bridge_slave_1: entered promiscuous mode
[  113.358089][ T5566] binder: 5559:5566 ioctl c0306201 20000280 returned -14
[  113.722553][ T5132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  113.742553][ T5132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  113.751071][ T5132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  113.760567][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.768859][ T5132] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  113.777354][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.097146][ T5565] geneve2: entered allmulticast mode
[  115.110631][ T5380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.866004][   T53] Bluetooth: hci6: command tx timeout
[  116.062479][ T5380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.466597][ T5602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.815450][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.399737][ T5380] team0: Port device team_slave_0 added
[  117.456451][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.507083][ T5608] loop1: detected capacity change from 0 to 128
[  117.537308][ T5608] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.550653][ T5608] ext4 filesystem being mounted at /root/syzkaller-testdir1062011449/syzkaller.QYW0yi/18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.586110][ T5380] team0: Port device team_slave_1 added
[  117.627266][ T5131] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.659980][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.699769][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.708707][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.716187][ T5400] bridge_slave_0: entered allmulticast mode
[  117.724213][ T5400] bridge_slave_0: entered promiscuous mode
[  117.803250][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.941827][   T53] Bluetooth: hci6: command tx timeout
[  117.956280][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.965044][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.995004][ T5615] loop2: detected capacity change from 0 to 8
[  118.044726][ T5380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.069460][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.077092][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.091033][ T5400] bridge_slave_1: entered allmulticast mode
[  118.116538][ T5400] bridge_slave_1: entered promiscuous mode
[  118.118933][ T5616] overlay: filesystem on ./file0 is read-only
[  118.250418][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.273285][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.310705][ T5380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.447862][ T5400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.516249][ T5400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.714773][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  119.067296][ T5400] team0: Port device team_slave_0 added
[  119.225171][ T5400] team0: Port device team_slave_1 added
[  119.399469][ T5380] hsr_slave_0: entered promiscuous mode
[  119.425725][ T5380] hsr_slave_1: entered promiscuous mode
[  119.444923][ T5380] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.464210][ T5380] Cannot create hsr debugfs directory
[  119.921408][   T51] bridge_slave_1: left allmulticast mode
[  119.941780][   T51] bridge_slave_1: left promiscuous mode
[  119.960874][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.995279][   T51] bridge_slave_0: left allmulticast mode
[  120.000951][   T51] bridge_slave_0: left promiscuous mode
[  120.013453][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.021827][   T53] Bluetooth: hci6: command tx timeout
[  120.033103][   T51] bridge_slave_1: left allmulticast mode
[  120.051990][   T51] bridge_slave_1: left promiscuous mode
[  120.057698][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.076001][   T51] bridge_slave_0: left allmulticast mode
[  120.098267][   T51] bridge_slave_0: left promiscuous mode
[  120.105275][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.344014][   T29] audit: type=1804 audit(1717516697.256:5): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1062011449/syzkaller.QYW0yi/21/bus" dev="sda1" ino=1945 res=1 errno=0
[  121.574401][ T5658] tipc: Failed to remove unknown binding: 66,1,1/0:1246545196/1246545198
[  121.595640][ T5658] tipc: Failed to remove unknown binding: 66,1,1/0:1246545196/1246545198
[  121.692730][ T5133] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  121.725648][ T5662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.896162][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.915434][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.928950][ T5133] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00
[  121.940529][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.973048][ T5133] usb 3-1: config 0 descriptor??
[  122.101128][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.112489][   T53] Bluetooth: hci6: command tx timeout
[  122.124841][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.139171][   T51] bond0 (unregistering): Released all slaves
[  122.238867][ T5133] appletouch 3-1:0.0: Failed to read mode from device.
[  122.246671][ T5133] appletouch 3-1:0.0: probe with driver appletouch failed with error -5
[  122.282292][ T5133] usb 3-1: USB disconnect, device number 3
[  122.304883][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.334101][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.357716][   T51] bond0 (unregistering): Released all slaves
[  122.408475][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.418697][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.446813][ T5400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.593417][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.611752][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.639552][ T5400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.872871][ T5669] loop2: detected capacity change from 0 to 256
[  122.895937][ T5669] FAT-fs (loop2): Unrecognized mount option "nt" or missing value
[  122.947162][ T5315] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  123.068234][ T5400] hsr_slave_0: entered promiscuous mode
[  123.111609][ T5400] hsr_slave_1: entered promiscuous mode
[  123.161082][ T5400] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.181094][ T5400] Cannot create hsr debugfs directory
[  123.209292][ T5570] chnl_net:caif_netlink_parms(): no params data found
[  124.195105][   T29] audit: type=1326 audit(1717516700.116:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.289214][   T29] audit: type=1326 audit(1717516700.136:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.290644][ T5677] loop2: detected capacity change from 0 to 512
[  124.318590][   T29] audit: type=1326 audit(1717516700.136:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.344661][   T29] audit: type=1326 audit(1717516700.136:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.393535][   T29] audit: type=1326 audit(1717516700.146:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.413449][ T5677] =======================================================
[  124.413449][ T5677] WARNING: The mand mount option has been deprecated and
[  124.413449][ T5677]          and is ignored by this kernel. Remove the mand
[  124.413449][ T5677]          option from the mount to silence this warning.
[  124.413449][ T5677] =======================================================
[  124.427494][   T29] audit: type=1326 audit(1717516700.156:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.513244][ T5677] EXT4-fs (loop2): 1 truncate cleaned up
[  124.527538][ T5677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.575057][   T29] audit: type=1326 audit(1717516700.156:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.658048][   T29] audit: type=1326 audit(1717516700.156:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.758371][   T29] audit: type=1326 audit(1717516700.156:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  124.936340][ T5685] geneve2: entered allmulticast mode
[  125.071926][ T5187] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  125.145713][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.163602][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.170904][ T5570] bridge_slave_0: entered allmulticast mode
[  125.189101][ T5570] bridge_slave_0: entered promiscuous mode
[  125.219076][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.236614][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.244193][ T5570] bridge_slave_1: entered allmulticast mode
[  125.263668][ T5570] bridge_slave_1: entered promiscuous mode
[  125.276397][ T5187] usb 3-1: config 0 has an invalid interface number: 156 but max is 0
[  125.292646][ T5187] usb 3-1: config 0 has no interface number 0
[  125.305563][ T5187] usb 3-1: config 0 interface 156 has no altsetting 0
[  125.319624][ T5187] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  125.340095][ T5187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.378469][ T5187] usb 3-1: config 0 descriptor??
[  125.400646][ T5187] hub 3-1:0.156: bad descriptor, ignoring hub
[  125.414990][ T5187] hub 3-1:0.156: probe with driver hub failed with error -5
[  125.439795][ T5187] option 3-1:0.156: GSM modem (1-port) converter detected
[  125.762371][ T5187] usb 3-1: USB disconnect, device number 4
[  125.790255][ T5187] option 3-1:0.156: device disconnected
[  125.792592][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.885178][ T5321] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  125.910403][ T5321] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  125.985741][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.060842][ T5321] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  126.118049][   T51] hsr_slave_0: left promiscuous mode
[  126.140613][   T51] hsr_slave_1: left promiscuous mode
[  126.159597][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.172446][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.191369][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.205234][ T5137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.207790][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.246757][   T51] hsr_slave_0: left promiscuous mode
[  126.253687][   T51] hsr_slave_1: left promiscuous mode
[  126.260349][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.268871][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.277565][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.310962][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.388662][   T51] veth1_macvtap: left promiscuous mode
[  126.402270][   T51] veth0_macvtap: left promiscuous mode
[  126.411417][   T51] veth1_vlan: left promiscuous mode
[  126.422264][   T51] veth0_vlan: left promiscuous mode
[  126.433118][   T51] veth1_macvtap: left promiscuous mode
[  126.445395][   T51] veth0_macvtap: left promiscuous mode
[  126.451625][   T51] veth1_vlan: left promiscuous mode
[  126.474095][   T51] veth0_vlan: left promiscuous mode
[  126.879492][ T5705] syz-executor.2[5705] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.879675][ T5705] syz-executor.2[5705] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.146531][ T5711] loop2: detected capacity change from 0 to 256
[  128.213831][ T5711] FAT-fs (loop2): Unrecognized mount option "nt" or missing value
[  128.600304][   T29] kauditd_printk_skb: 85 callbacks suppressed
[  128.600352][   T29] audit: type=1804 audit(1717516704.516:100): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1062011449/syzkaller.QYW0yi/29/bus" dev="sda1" ino=1951 res=1 errno=0
[  129.447274][ T5723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.449394][   T51] team0 (unregistering): Port device team_slave_1 removed
[  130.666241][   T51] team0 (unregistering): Port device team_slave_0 removed
[  130.807535][ T5738] loop2: detected capacity change from 0 to 128
[  130.822803][   T53] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  130.831490][   T53] Bluetooth: hci4: Injecting HCI hardware error event
[  130.846427][ T5132] Bluetooth: hci4: hardware error 0x00
[  130.873339][ T5738] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.889364][ T5738] ext4 filesystem being mounted at /root/syzkaller-testdir1695401291/syzkaller.Fj8RFO/25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.922089][ T5187] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  131.004500][ T5137] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.183647][ T5187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.211707][ T5187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.221597][ T5187] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00
[  131.232565][ T5187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.259859][ T5187] usb 2-1: config 0 descriptor??
[  131.491907][ T5187] appletouch 2-1:0.0: Failed to read mode from device.
[  131.499046][ T5187] appletouch 2-1:0.0: probe with driver appletouch failed with error -5
[  131.556070][ T5187] usb 2-1: USB disconnect, device number 2
[  132.126252][ T5746] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  132.212488][   T51] team0 (unregistering): Port device team_slave_1 removed
[  132.272692][   T51] team0 (unregistering): Port device team_slave_0 removed
[  132.512458][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[  132.519197][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[  132.841427][ T5570] team0: Port device team_slave_0 added
[  132.858905][ T5570] team0: Port device team_slave_1 added
[  132.883033][ T5321] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.917521][ T5744] geneve2: entered allmulticast mode
[  132.981971][ T5132] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  133.164605][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.171594][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.199456][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.339453][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.364455][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.400233][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.300070][ T5570] hsr_slave_0: entered promiscuous mode
[  134.325824][ T5570] hsr_slave_1: entered promiscuous mode
[  134.342679][ T5570] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.353735][ T5758] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  134.382636][ T5570] Cannot create hsr debugfs directory
[  134.533725][   T29] audit: type=1804 audit(1717516710.456:101): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1695401291/syzkaller.Fj8RFO/28/bus" dev="sda1" ino=1949 res=1 errno=0
[  134.989355][ T5770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.156480][ T5773] loop1: detected capacity change from 0 to 24
[  135.205587][ T5773] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  135.268215][ T5773] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  135.582695][ T5321] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.998328][   T29] audit: type=1326 audit(1717516711.916:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.056349][ T5783] loop2: detected capacity change from 0 to 512
[  136.084983][   T29] audit: type=1326 audit(1717516711.916:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.115132][   T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.175226][ T5783] EXT4-fs (loop2): 1 truncate cleaned up
[  136.215185][ T5321] 8021q: adding VLAN 0 to HW filter on device team0
[  136.222118][   T29] audit: type=1326 audit(1717516711.916:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.246228][ T5783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.284750][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.292214][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.302994][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.310229][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.321027][ T5400] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  136.328721][   T29] audit: type=1326 audit(1717516711.916:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.370682][ T5400] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  136.405540][ T5400] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  136.419114][   T29] audit: type=1326 audit(1717516711.926:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.450172][ T5400] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  136.465478][   T29] audit: type=1326 audit(1717516711.946:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.511936][   T29] audit: type=1326 audit(1717516711.946:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.545087][   T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.562953][   T29] audit: type=1326 audit(1717516711.946:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.594977][   T29] audit: type=1326 audit(1717516711.946:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd437c7cf69 code=0x7ffc0000
[  136.736475][   T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.751830][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  136.865525][   T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.953544][   T25] usb 3-1: config 0 has an invalid interface number: 156 but max is 0
[  136.974041][   T25] usb 3-1: config 0 has no interface number 0
[  136.999354][   T25] usb 3-1: config 0 interface 156 has no altsetting 0
[  137.013204][   T25] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  137.030763][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.039997][ T5380] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  137.056631][   T25] usb 3-1: config 0 descriptor??
[  137.091546][   T25] hub 3-1:0.156: bad descriptor, ignoring hub
[  137.097811][   T25] hub 3-1:0.156: probe with driver hub failed with error -5
[  137.113245][   T25] option 3-1:0.156: GSM modem (1-port) converter detected
[  137.178462][ T5380] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  137.210744][ T5380] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  137.344222][ T5380] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  137.492338][ T5187] usb 3-1: USB disconnect, device number 5
[  137.514192][   T51] bridge_slave_1: left allmulticast mode
[  137.517995][ T5187] option 3-1:0.156: device disconnected
[  137.519885][   T51] bridge_slave_1: left promiscuous mode
[  137.520139][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.627320][   T51] bridge_slave_0: left allmulticast mode
[  137.640381][   T51] bridge_slave_0: left promiscuous mode
[  137.648670][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.917744][ T5187] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  137.976266][ T5137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.133943][ T5187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.152618][ T5187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.170474][ T5187] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00
[  138.203352][ T5187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.217913][ T5187] usb 2-1: config 0 descriptor??
[  138.421308][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.445584][ T5187] appletouch 2-1:0.0: Failed to read mode from device.
[  138.463344][ T5187] appletouch 2-1:0.0: probe with driver appletouch failed with error -5
[  138.475174][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.494179][   T51] bond0 (unregistering): Released all slaves
[  138.515938][ T5187] usb 2-1: USB disconnect, device number 3
[  138.975865][ T5321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.263416][   T51] hsr_slave_0: left promiscuous mode
[  139.282340][   T51] hsr_slave_1: left promiscuous mode
[  139.290685][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.301826][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.322804][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.330246][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.409173][   T51] veth1_macvtap: left promiscuous mode
[  139.425804][   T51] veth0_macvtap: left promiscuous mode
[  139.431542][   T51] veth1_vlan: left promiscuous mode
[  139.448640][   T51] veth0_vlan: left promiscuous mode
[  139.534449][ T5838] syz-executor.2[5838] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.534627][ T5838] syz-executor.2[5838] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.646816][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  139.787509][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  141.059132][   T51] team0 (unregistering): Port device team_slave_1 removed
[  141.198669][   T51] team0 (unregistering): Port device team_slave_0 removed
[  142.404830][ T5865] loop2: detected capacity change from 0 to 24
[  142.418848][ T5865] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  142.524491][ T5865] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  142.657343][ T5846] geneve2: entered allmulticast mode
[  142.912400][ T5400] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.187216][ T5400] 8021q: adding VLAN 0 to HW filter on device team0
[  143.374808][ T5570] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  143.472984][ T5570] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  143.580813][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.589250][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.622300][ T5882] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  143.664823][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.672085][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.815091][   T29] kauditd_printk_skb: 82 callbacks suppressed
[  143.815114][   T29] audit: type=1804 audit(1717516719.736:193): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1062011449/syzkaller.QYW0yi/40/bus" dev="sda1" ino=1949 res=1 errno=0
[  143.949850][ T5570] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  144.085425][ T5380] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.114590][ T5570] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  145.403343][ T5321] veth0_vlan: entered promiscuous mode
[  145.460290][ T5380] 8021q: adding VLAN 0 to HW filter on device team0
[  145.744633][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.751945][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.799746][ T5321] veth1_vlan: entered promiscuous mode
[  146.517610][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.524909][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.840820][ T5927] loop1: detected capacity change from 0 to 1024
[  146.857227][ T5321] veth0_macvtap: entered promiscuous mode
[  146.947136][ T5927] hfsplus: failed to load root directory
[  146.988335][ T5321] veth1_macvtap: entered promiscuous mode
[  147.243724][ T5400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.254635][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.310231][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.321616][ T5927] loop1: detected capacity change from 0 to 4096
[  147.338389][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.372005][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.379284][ T5927] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  147.406889][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.476266][ T5927] ntfs3: loop1: Failed to load $MFT (-2).
[  147.490689][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.536900][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.559287][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.585263][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.622003][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.650095][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.769264][ T5321] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.806823][ T5321] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.845151][ T5321] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.861031][ T5321] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.912253][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  147.925378][ T5570] 8021q: adding VLAN 0 to HW filter on device team0
[  147.934440][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  147.962098][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  147.970473][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  147.996445][ T5923] loop2: detected capacity change from 0 to 32768
[  148.100103][ T5923] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5923)
[  148.144010][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.151207][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.201605][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.209027][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.245445][ T5923] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.275569][ T5923] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  148.291318][ T5923] BTRFS info (device loop2): using free-space-tree
[  148.611170][ T5400] veth0_vlan: entered promiscuous mode
[  148.625876][ T5380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.796362][   T51] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  148.877457][ T5400] veth1_vlan: entered promiscuous mode
[  148.935855][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.949562][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.038265][ T5137] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.194659][ T5570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.855938][ T5974] loop1: detected capacity change from 0 to 24
[  149.870639][ T5974] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  149.940295][ T5974] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  150.413937][ T5400] veth0_macvtap: entered promiscuous mode
[  150.494481][ T5400] veth1_macvtap: entered promiscuous mode
[  150.585349][ T5380] veth0_vlan: entered promiscuous mode
[  150.668647][ T5400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.723994][ T5400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.734106][ T5400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.746529][ T5400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.757835][ T5400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.768376][ T5400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.782066][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.228853][ T5400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.345984][ T5400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.400541][ T5400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.472145][ T5400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.509664][ T5400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.551858][ T5400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.591352][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.635841][ T5400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.683126][ T5400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.713354][ T5400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.758908][ T5400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.869292][ T5380] veth1_vlan: entered promiscuous mode
[  151.986541][ T6000] syz-executor.1[6000] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  151.986727][ T6000] syz-executor.1[6000] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.019478][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.041557][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.605812][ T1093] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.668109][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.785917][ T1093] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.883383][ T5991] geneve2: entered allmulticast mode
[  153.131338][ T1093] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.147043][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.161191][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.172373][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.180945][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.190867][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  153.202971][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.313154][ T5380] veth0_macvtap: entered promiscuous mode
[  153.426081][ T1093] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.536043][ T5380] veth1_macvtap: entered promiscuous mode
[  153.694623][ T5182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.747952][ T5182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.854886][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.886304][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.930055][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.952139][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.963590][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.976895][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.987219][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.998230][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.020960][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.604728][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.757992][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.876113][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.945124][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.964246][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.978873][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.992415][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.009710][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.037279][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.093783][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.114241][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.253734][ T1093] bridge_slave_1: left allmulticast mode
[  155.273801][ T1093] bridge_slave_1: left promiscuous mode
[  155.286698][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.303784][ T5132] Bluetooth: hci0: command tx timeout
[  155.315609][ T1093] bridge_slave_0: left allmulticast mode
[  155.324916][ T1093] bridge_slave_0: left promiscuous mode
[  155.337359][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.232189][ T6040] binder: 6036:6040 ioctl c0306201 20000280 returned -14
[  157.496305][ T5132] Bluetooth: hci0: command tx timeout
[  157.570713][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.588738][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.601603][ T1093] bond0 (unregistering): Released all slaves
[  157.701229][ T6039] geneve2: entered allmulticast mode
[  157.862319][ T6043] loop3: detected capacity change from 0 to 128
[  157.930051][ T6043] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.998454][ T6043] ext4 filesystem being mounted at /root/syzkaller-testdir1560220536/syzkaller.smvjIv/0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  158.334098][ T5400] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.404021][   T29] audit: type=1804 audit(1717516734.316:194): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1695401291/syzkaller.Fj8RFO/42/bus" dev="sda1" ino=1952 res=1 errno=0
[  160.231053][ T6059] loop2: detected capacity change from 0 to 24
[  160.240695][ T6059] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  160.466256][ T5132] Bluetooth: hci0: command tx timeout
[  160.898506][ T6059] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  161.031361][ T1093] hsr_slave_0: left promiscuous mode
[  161.190470][ T1093] hsr_slave_1: left promiscuous mode
[  161.237311][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.254018][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.284578][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.303491][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.461661][ T1093] veth1_macvtap: left promiscuous mode
[  161.478143][ T1093] veth0_macvtap: left promiscuous mode
[  161.506719][ T1093] veth1_vlan: left promiscuous mode
[  161.514987][ T1093] veth0_vlan: left promiscuous mode
[  161.757844][ T6078] loop3: detected capacity change from 0 to 256
[  161.801081][ T6078] FAT-fs (loop3): Unrecognized mount option "nt" or missing value
[  163.776293][ T5132] Bluetooth: hci0: command tx timeout
[  164.552514][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.597008][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.606273][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.616195][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.628200][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  164.636878][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  164.807826][ T6099] syz-executor.3[6099] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.808014][ T6099] syz-executor.3[6099] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.728355][ T6101] loop1: detected capacity change from 0 to 32768
[  165.868892][ T6101] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.966938][ T1093] team0 (unregistering): Port device team_slave_1 removed
[  166.021472][ T1093] team0 (unregistering): Port device team_slave_0 removed
[  166.099799][ T6101] XFS (loop1): Ending clean mount
[  166.164938][ T6101] XFS (loop1): Quotacheck needed: Please wait.
[  166.311200][ T6101] XFS (loop1): Quotacheck: Done.
[  166.676223][ T5132] Bluetooth: hci1: command tx timeout
[  168.735473][ T5570] veth0_vlan: entered promiscuous mode
[  168.754010][ T5132] Bluetooth: hci1: command tx timeout
[  168.759547][ T5132] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  168.769030][ T5132] Bluetooth: hci2: Injecting HCI hardware error event
[  168.784331][ T5132] Bluetooth: hci2: hardware error 0x00
[  168.982385][ T6010] chnl_net:caif_netlink_parms(): no params data found
[  169.160199][ T5570] veth1_vlan: entered promiscuous mode
[  169.355422][ T5131] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.831687][ T6137] loop2: detected capacity change from 0 to 24
[  169.846817][ T6137] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  170.038385][ T6137] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  170.822041][   T53] Bluetooth: hci1: command tx timeout
[  170.981940][ T5132] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  171.808435][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.841961][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.850077][ T6010] bridge_slave_0: entered allmulticast mode
[  171.883983][ T6010] bridge_slave_0: entered promiscuous mode
[  171.931038][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.972017][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.979430][ T6010] bridge_slave_1: entered allmulticast mode
[  172.010355][ T6010] bridge_slave_1: entered promiscuous mode
[  172.094307][ T6140] loop3: detected capacity change from 0 to 40427
[  172.186680][ T6140] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  172.232074][ T6140] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  172.730061][ T6140] F2FS-fs (loop3): Found nat_bits in checkpoint
[  172.937046][ T5132] Bluetooth: hci1: command tx timeout
[  173.260713][ T6140] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  173.319589][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.550094][ T5133] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  173.705371][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.722698][ T6182] syz-executor.1[6182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  173.722879][ T6182] syz-executor.1[6182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  173.773577][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.831237][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.850382][ T5133] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00
[  173.875534][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.911016][ T5133] usb 3-1: config 0 descriptor??
[  174.081563][ T6010] team0: Port device team_slave_0 added
[  174.257355][ T6010] team0: Port device team_slave_1 added
[  174.334434][ T5133] appletouch 3-1:0.0: Failed to read mode from device.
[  174.372077][ T5133] appletouch 3-1:0.0: probe with driver appletouch failed with error -5
[  174.451819][ T5133] usb 3-1: USB disconnect, device number 6
[  174.502386][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  174.511599][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  174.700734][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.729214][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.821145][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.889094][ T6092] chnl_net:caif_netlink_parms(): no params data found
[  175.028707][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.059626][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.374078][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.877218][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.960860][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.969957][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.094576][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.102635][   T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  176.122710][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  176.728365][ T6010] hsr_slave_0: entered promiscuous mode
[  176.800487][ T6010] hsr_slave_1: entered promiscuous mode
[  176.917773][   T29] audit: type=1326 audit(1717516752.836:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6f0c7cf69 code=0x0
[  177.749125][ T6244] loop3: detected capacity change from 0 to 256
[  177.760096][ T6244] FAT-fs (loop3): Unrecognized mount option "nt" or missing value
[  177.824023][ T5315] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  178.186234][   T53] Bluetooth: hci5: command tx timeout
[  179.344454][ T6247] loop1: detected capacity change from 0 to 40427
[  179.354435][ T6247] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  179.371983][ T6247] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  179.374760][   T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  179.415762][ T6247] F2FS-fs (loop1): Found nat_bits in checkpoint
[  179.516100][ T6247] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  179.583513][ T6247] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  179.590775][ T6247] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  179.637231][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.648467][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.670011][   T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00
[  179.679785][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.705520][   T25] usb 4-1: config 0 descriptor??
[  180.042964][   T25] appletouch 4-1:0.0: Failed to read mode from device.
[  180.070329][   T25] appletouch 4-1:0.0: probe with driver appletouch failed with error -5
[  180.098249][   T25] usb 4-1: USB disconnect, device number 2
[  180.434321][   T53] Bluetooth: hci5: command tx timeout
[  182.540178][ T6271] binder: 6266:6271 ioctl c0306201 20000280 returned -14
[  182.590397][ T5132] Bluetooth: hci5: command tx timeout
[  184.661723][ T5132] Bluetooth: hci5: command tx timeout
[  193.948941][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[  193.955592][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[  207.355406][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  207.364797][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  207.373404][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  207.386977][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  207.404164][   T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  207.413434][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  209.462145][   T53] Bluetooth: hci6: command tx timeout
[  211.316019][ T5132] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  211.325892][ T5132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  211.339000][ T5132] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  211.348063][ T5132] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  211.362366][ T5132] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  211.369763][ T5132] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  211.541941][ T5132] Bluetooth: hci6: command tx timeout
[  213.349038][   T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  213.358883][   T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  213.369451][   T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  213.380072][   T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  213.394639][   T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  213.408547][   T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  213.464184][   T53] Bluetooth: hci7: command tx timeout
[  213.621936][   T53] Bluetooth: hci6: command tx timeout
[  215.463147][   T53] Bluetooth: hci8: command tx timeout
[  215.542012][   T53] Bluetooth: hci7: command tx timeout
[  215.702741][   T53] Bluetooth: hci6: command tx timeout
[  217.542780][   T53] Bluetooth: hci8: command tx timeout
[  217.631811][   T53] Bluetooth: hci7: command tx timeout
[  217.739937][ T5132] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  217.758809][ T5132] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  217.767348][ T5132] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  217.781952][ T5132] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  217.797992][ T5132] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  217.806554][ T5132] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  219.622131][ T5132] Bluetooth: hci8: command tx timeout
[  219.701751][ T5132] Bluetooth: hci7: command tx timeout
[  219.861871][ T5132] Bluetooth: hci9: command tx timeout
[  221.704328][ T5132] Bluetooth: hci8: command tx timeout
[  221.941784][ T5132] Bluetooth: hci9: command tx timeout
[  224.039394][ T5132] Bluetooth: hci9: command tx timeout
[  226.101786][ T5132] Bluetooth: hci9: command tx timeout
[  226.455655][   T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  226.473932][   T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  226.489949][   T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  226.498893][   T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  226.517458][   T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  226.539617][   T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  228.582177][   T53] Bluetooth: hci10: command tx timeout
[  230.671289][   T53] Bluetooth: hci10: command tx timeout
[  232.743786][   T53] Bluetooth: hci10: command tx timeout
[  234.821876][   T53] Bluetooth: hci10: command tx timeout
[  239.308449][ T5132] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  239.318697][ T5132] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  239.328474][ T5132] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  239.337787][ T5132] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  239.345930][ T5132] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  239.359491][ T5132] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  241.381814][ T5132] Bluetooth: hci11: command tx timeout
[  243.461736][ T5132] Bluetooth: hci11: command tx timeout
[  245.541796][ T5132] Bluetooth: hci11: command tx timeout
[  247.621782][ T5132] Bluetooth: hci11: command tx timeout
[  255.388948][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[  255.395540][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[  272.597952][   T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  272.611007][   T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  272.621982][   T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  272.630297][   T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  272.638358][   T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  272.647342][   T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  274.661834][ T5132] Bluetooth: hci12: command tx timeout
[  276.360675][ T5123] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  276.371332][ T5123] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  276.380479][ T5123] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  276.403708][ T5123] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  276.416001][ T5123] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  276.431565][ T5123] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  276.741909][ T5123] Bluetooth: hci12: command tx timeout
[  277.950567][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  278.432610][   T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  278.444578][   T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  278.460408][   T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  278.480492][   T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  278.494354][   T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  278.502563][   T53] Bluetooth: hci13: command tx timeout
[  278.509078][   T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  278.821885][   T53] Bluetooth: hci12: command tx timeout
[  280.582091][   T53] Bluetooth: hci14: command tx timeout
[  280.588550][   T53] Bluetooth: hci13: command tx timeout
[  280.901992][   T53] Bluetooth: hci12: command tx timeout
[  282.661738][ T5123] Bluetooth: hci14: command tx timeout
[  282.667372][   T53] Bluetooth: hci13: command tx timeout
[  282.739991][ T5123] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  282.750193][ T5123] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  282.771713][ T5123] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  282.781463][ T5123] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  282.789565][ T5123] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  282.801808][ T5123] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  284.741969][ T5123] Bluetooth: hci13: command tx timeout
[  284.747550][ T5123] Bluetooth: hci14: command tx timeout
[  284.912069][ T5123] Bluetooth: hci15: command tx timeout
[  286.821739][   T53] Bluetooth: hci14: command tx timeout
[  286.981926][   T53] Bluetooth: hci15: command tx timeout
[  288.181760][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  289.061947][ T5123] Bluetooth: hci15: command tx timeout
[  291.151723][ T5123] Bluetooth: hci15: command tx timeout
[  291.433950][   T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  291.445078][   T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  291.455020][   T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  291.478683][   T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  291.486957][   T53] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  291.494753][   T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  293.541994][ T5123] Bluetooth: hci16: command tx timeout
[  295.621799][ T5123] Bluetooth: hci16: command tx timeout
[  297.703340][   T53] Bluetooth: hci16: command tx timeout
[  298.427809][   T53] Bluetooth: hci5: command 0x0406 tx timeout
[  299.781684][ T5123] Bluetooth: hci16: command tx timeout
[  304.442331][   T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  304.452004][   T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  304.470478][   T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  304.491893][   T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  304.499960][   T53] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  304.507852][   T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  306.585072][   T53] Bluetooth: hci17: command tx timeout
[  308.661942][   T53] Bluetooth: hci17: command tx timeout
[  310.752824][   T53] Bluetooth: hci17: command tx timeout
[  312.831828][   T53] Bluetooth: hci17: command tx timeout
[  316.828388][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[  316.834905][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[  334.283065][   T53] Bluetooth: hci7: command 0x0406 tx timeout
[  334.289161][   T53] Bluetooth: hci6: command 0x0406 tx timeout
[  337.719667][ T5132] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  337.732111][ T5132] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  337.744871][ T5132] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  337.755849][ T5132] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  337.769686][ T5132] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  337.777453][ T5132] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  339.391677][ T5132] Bluetooth: hci8: command 0x0406 tx timeout
[  339.862020][   T30] INFO: task kworker/u8:6:1093 blocked for more than 143 seconds.
[  339.870412][   T53] Bluetooth: hci18: command tx timeout
[  339.882755][   T30]       Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0
[  339.898023][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
2024/06/04 16:01:55 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  339.912345][   T30] task:kworker/u8:6    state:D stack:19384 pid:1093  tgid:1093  ppid:2      flags:0x00004000
[  339.943217][   T30] Workqueue: netns cleanup_net
[  339.948083][   T30] Call Trace:
[  339.951372][   T30]  <TASK>
[  339.954397][   T30]  __schedule+0x17e8/0x4a20
[  339.958956][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  339.966174][   T30]  ? __pfx___schedule+0x10/0x10
[  339.971078][   T30]  ? __pfx_lock_release+0x10/0x10
[  339.977483][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  339.983085][   T30]  ? kthread_data+0x52/0xd0
[  339.987636][   T30]  ? schedule+0x90/0x320
[  339.993002][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  339.998688][   T30]  ? wq_worker_sleeping+0x66/0x240
[  340.004505][   T30]  ? schedule+0x90/0x320
[  340.008800][   T30]  schedule+0x14b/0x320
[  340.014847][   T30]  schedule_preempt_disabled+0x13/0x30
[  340.020345][   T30]  __mutex_lock+0x6a4/0xd70
[  340.027692][   T30]  ? __mutex_lock+0x527/0xd70
[  340.032700][   T30]  ? nsim_create+0x408/0x890
[  340.037332][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  340.042882][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.048548][   T30]  ? kmemdup_noprof+0x45/0x60
[  340.053745][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.059412][   T30]  ? nsim_udp_tunnels_info_create+0x592/0x7c0
[  340.066072][   T30]  nsim_create+0x408/0x890
[  340.070535][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.082805][   T30]  ? debugfs_create_symlink+0x191/0x1f0
[  340.088413][   T30]  __nsim_dev_port_add+0x6c0/0xae0
[  340.111621][   T30]  ? queue_delayed_work_on+0x1eb/0x390
[  340.117166][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.134187][   T30]  ? __pfx___nsim_dev_port_add+0x10/0x10
[  340.139908][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  340.161694][   T30]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  340.167592][   T30]  ? nsim_dev_hwstats_init+0x3c2/0x3d0
[  340.173743][   T30]  nsim_dev_reload_up+0x69b/0x8e0
[  340.178890][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.186398][   T30]  ? __pfx_nsim_dev_reload_up+0x10/0x10
[  340.194473][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.200173][   T30]  devlink_reload+0x47a/0x870
[  340.205505][   T30]  ? __pfx_devlink_reload+0x10/0x10
[  340.210765][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.217002][   T30]  devlink_pernet_pre_exit+0x1f3/0x440
[  340.222930][   T30]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  340.228970][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.238459][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.250905][   T30]  ? class_remove_file_ns+0x121/0x160
[  340.260182][   T30]  cleanup_net+0x617/0xcc0
[  340.269297][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  340.274900][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  340.280326][   T30]  ? process_scheduled_works+0x945/0x1830
[  340.299815][   T30]  process_scheduled_works+0xa2e/0x1830
[  340.312817][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.318975][   T30]  ? assign_work+0x364/0x3d0
[  340.341662][   T30]  worker_thread+0x86d/0xd70
[  340.346359][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  340.363421][   T30]  ? __kthread_parkme+0x169/0x1d0
[  340.368529][   T30]  ? __pfx_worker_thread+0x10/0x10
[  340.381651][   T30]  kthread+0x2f2/0x390
[  340.385802][   T30]  ? __pfx_worker_thread+0x10/0x10
[  340.390947][   T30]  ? __pfx_kthread+0x10/0x10
[  340.411634][   T30]  ret_from_fork+0x4d/0x80
[  340.416132][   T30]  ? __pfx_kthread+0x10/0x10
[  340.420763][   T30]  ret_from_fork_asm+0x1a/0x30
[  340.441661][   T30]  </TASK>
[  340.444823][   T30] INFO: task kworker/u8:10:2803 blocked for more than 143 seconds.
[  340.453187][   T30]       Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0
[  340.461133][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  340.469968][   T30] task:kworker/u8:10   state:D stack:21840 pid:2803  tgid:2803  ppid:2      flags:0x00004000
[  340.482361][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  340.488396][   T30] Call Trace:
[  340.492344][   T30]  <TASK>
[  340.495319][   T30]  __schedule+0x17e8/0x4a20
[  340.499883][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.517405][   T30]  ? __pfx___schedule+0x10/0x10
[  340.527340][   T30]  ? __pfx_lock_release+0x10/0x10
[  340.535311][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  340.540922][   T30]  ? kthread_data+0x52/0xd0
[  340.561632][   T30]  ? schedule+0x90/0x320
[  340.566075][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.592503][   T30]  ? wq_worker_sleeping+0x66/0x240
[  340.597707][   T30]  ? schedule+0x90/0x320
[  340.622278][   T30]  schedule+0x14b/0x320
[  340.626551][   T30]  schedule_preempt_disabled+0x13/0x30
[  340.641608][   T30]  __mutex_lock+0x6a4/0xd70
[  340.646217][   T30]  ? mark_lock+0x9a/0x350
[  340.650593][   T30]  ? __mutex_lock+0x527/0xd70
[  340.662951][   T30]  ? addrconf_dad_work+0xd0/0x16f0
[  340.668156][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  340.683603][   T30]  addrconf_dad_work+0xd0/0x16f0
[  340.688731][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.700403][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  340.710809][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  340.723156][   T30]  ? process_scheduled_works+0x945/0x1830
[  340.728956][   T30]  process_scheduled_works+0xa2e/0x1830
[  340.751782][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.757875][   T30]  ? assign_work+0x364/0x3d0
[  340.771629][   T30]  worker_thread+0x86d/0xd70
[  340.776322][   T30]  ? __kthread_parkme+0x169/0x1d0
[  340.781379][   T30]  ? __pfx_worker_thread+0x10/0x10
[  340.801740][   T30]  kthread+0x2f2/0x390
[  340.805900][   T30]  ? __pfx_worker_thread+0x10/0x10
[  340.821773][   T30]  ? __pfx_kthread+0x10/0x10
[  340.826469][   T30]  ret_from_fork+0x4d/0x80
[  340.830924][   T30]  ? __pfx_kthread+0x10/0x10
[  340.851640][   T30]  ret_from_fork_asm+0x1a/0x30
[  340.856518][   T30]  </TASK>
[  340.871684][   T30] INFO: task dhcpcd:4761 blocked for more than 144 seconds.
[  340.879034][   T30]       Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0
[  340.901921][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  340.921690][   T30] task:dhcpcd          state:D stack:20672 pid:4761  tgid:4761  ppid:4760   flags:0x00000002
[  340.941721][   T30] Call Trace:
[  340.945078][   T30]  <TASK>
[  340.948026][   T30]  __schedule+0x17e8/0x4a20
[