last executing test programs:

1m34.291717619s ago: executing program 5 (id=2473):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000041, 0x0, 0x0, 0x0, &(0x7f0000000040))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=alway'])
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffa}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="1f", 0x1}], 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
open(0x0, 0x14117e, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x4, 0x0, 0xfffffffd, 0x4, 0x1}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x110, 0x110, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

1m32.983440395s ago: executing program 5 (id=2476):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./bus\x00', 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000180)=""/105, 0x69)

1m32.100782764s ago: executing program 5 (id=2483):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc67c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae803645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046fc4e1ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec64ff21318445692e7c4cbd1c3360"], 0x9, 0x1a2, &(0x7f0000000000)="$eJzs0L9r1GAcx/H390nul1DlVBwq2AOLMUe1yVUdnA6nEy7g4CJ46HGNvWKqXHODLS10kYJU+y/oIHVUQScR/QeKg+CgcekmvaE4iIOcJPdU8G/o84Lkk+8Hknx5unEvLgB/9lY61MlYHOYTgg1MyKhTapRv9fxD5+YouKLnDZ0vdI7HS8t321EULlYuVyj/VwA/s+5fFb/ihKIk1JEveyudttwOGNZZULMB5SbVx1gteu4Txu0xjt/CYuhscFXRE6cJR6b7RabjpeVz8wvtuXAuvFerzVzyLnjexXT/KPTeIO4jUTxlFTegEFByV8m1eLhtH2JKELerEkuqA/ItNrets6enBih3lyHCB2dA4ZvdrajrnKF4M12+wTHhGVbAZJOSwubOfBR6DeSaei2+/dn+lVMU1yzrfOd+NLt+Q8nv/FZddovi75BzfGpVn5n0aDjKR9YTJhMaCVsJO9+ZkHfpX/bP1V5L7y/1dJJTPM/zoN3vL/o5QJyAWnqVYSz7nMr2KsN7/Y4Ovu4/GIZhGIZhGIZhGAfA3wAAAP//qqZhEQ==")
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)

1m29.246140297s ago: executing program 5 (id=2497):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21091, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f00000000c0)='./file0/file0\x00', 0x0)

1m28.860556534s ago: executing program 5 (id=2502):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m27.404214291s ago: executing program 5 (id=2513):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, <r1=>0x0})
setpgid(0x0, r1)
llistxattr(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0)

15.24212972s ago: executing program 0 (id=2792):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000540), 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48})

15.179994783s ago: executing program 0 (id=2793):
syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@generic={0x31}, @padn, @ra]}]}}}}}, 0x0)

15.113667249s ago: executing program 0 (id=2794):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000a40)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e40)=ANY=[@ANYBLOB="200100003256bf", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040)
recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000440)}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001740)="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", 0xefd}, {&(0x7f0000000180)="a4cfe41aa13485e8ed62336d8f5ad2f3bf38153f", 0x14}, {&(0x7f0000002740)="76805b855adf89e32622ade1e90bb55e14c938b32de8b2229d517db00c1543e66f4707c5fcfb10bf369010ab553ee370d60325b62a05d6e57cc5841a09bf4f93965530598e258a5c48cd34d559cc2ead91ed97c12bc677a594f216264437dc", 0x5f}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="3000080000000100000000000000000001441c26037f000001000000007f00000100000000ac141400000000000000001c0000000000000000000000080000007c25f24b44657188b5eeb8bc0e443493190a88973e02965c816d35b5a64da428544a6b5256e2a68fa35829444dc00ebd8f0a8a8eee57837e1b550d4e870113b092e8e7affca461ee5e2261a97a13288e39bb18f55a4dda82f7299b0a5348b0c6e98dfb00645ed93f277aa7058f6171212a10e9a89f288b093cfbe0ec09f017b6e58a22ff11bee551ae827e5148ab7449e7ee4c44f377c549e0587d55018d6b44306db61a1da28554a8e828287c6fe217910dbaae52db7d4909d73a3add2a3754c6c4514fcbe84e39d8f8458e8a34", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414aa00000000"], 0x50}, 0x4090)
r3 = dup(r2)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0x727, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x9, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x30}}, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000280)={@mcast1, <r6=>0x0}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00ff800b00010069700900000029744c6e6c00e0bf0002f89896a17371d063d01f7b627602c1b3cb2900ab3c8915f02b919f601372b5c6c14af935f0edc1b44af4bb8b74f96cae57cc845323c7380512696a41bdea408df14d739627c0deddf68aeaf12d1eae47519cf86273ec34ee503b5ee1067ee1eef7c4ce845d9a8395c5adb39e7f94120d741c95fd23176d6d4e1ccb40017e8da2ce9ebef8c3f9612c1ec07d05250cba4fd2d010dadb77eaeb287c588133cade44d63d534af47029a7", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000009c0)="1358b6be93095a34d0028ecbdeccd9ac478724dafd", 0x15}, {&(0x7f0000000b80)="a331504911d3a80276101a2aafd6f172d2224d7e1a08e404760c9810bbeaafd71d649822b747053128ce9bc719440670abeeef7f3ef34bba1fe46a94aa1b4af104d29ba1a41ff845546de344beca814c19c36a0bd813e8a1364820a37c368975c3dcec4d3d9cf3c1dfce22e6c5fa758d4ad958131aaf6845f0661680244728a7881d5483cdbc8152c2b33959a5461968b25f854be33be472901606cef909701cfe165a3a40063b6d1bf834aea1c871cd5df2dec2705a992fa9a79c25f932", 0xbe}, {&(0x7f0000000c80)="eca8510b676a80ac6a2933ff3c8ff9efcd6fd756d49f4eaddfeddc5d3cdaa9f875d943a2e198d14dda4001239c40e881078d96aa9d08c86bc4f8dd14df55c2b6fd39ba22c52488f6a7e7c23e4ddf41fcaed89bdbd6bcd245f5e98f30f833aa3d0195d9ba2d7b18a7b97c8aced9123555cd5d2a31e9249433d085adfbb9", 0x7d}, {&(0x7f0000000d00)="d6e6dbfb7eb1632440507167d71be16f13a4aaa2432964e04a5d91c678137fe9dc011441e8cf07bb875e55f716d210de61e685f43a3b9e1170c210d8330b7c644392679909d4918f9843b0a0393110fe06e745ebe238e184055652eb82a61e19c27c95", 0x63}], 0x4}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa50008c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x60, 0x29, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe5, 0x6}, {0xfff3, 0x5}, {0xe, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @tclass_kind_options=@c_red={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800)

13.950210248s ago: executing program 0 (id=2798):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8052, &(0x7f0000000040)={[{@block_validity}, {@noblock_validity}, {@quota}]}, 0x1, 0x4d3, &(0x7f0000000600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000400)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x2, 'macvlan1\x00', {0x8001}, 0xcb6a})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)

11.222021848s ago: executing program 0 (id=2802):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000540), 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48})

10.236013084s ago: executing program 0 (id=2809):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000a40)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e40)=ANY=[@ANYBLOB="200100003256bf", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00400000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004000000080001007063690011000200303030303a30303a31302e300000000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0002000000080001007063690011000200303030303a30303a31302e300000000008000b00c4000000080001007063690011000200303030303a30303a31302e300000000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffffff"], 0x120}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040)
recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000440)}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001740)="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", 0xefd}, {&(0x7f0000000180)="a4cfe41aa13485e8ed62336d8f5ad2f3bf38153f", 0x14}, {&(0x7f0000002740)="76805b855adf89e32622ade1e90bb55e14c938b32de8b2229d517db00c1543e66f4707c5fcfb10bf369010ab553ee370d60325b62a05d6e57cc5841a09bf4f93965530598e258a5c48cd34d559cc2ead91ed97c12bc677a594f216264437dc", 0x5f}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="3000080000000100000000000000000001441c26037f000001000000007f00000100000000ac141400000000000000001c0000000000000000000000080000007c25f24b44657188b5eeb8bc0e443493190a88973e02965c816d35b5a64da428544a6b5256e2a68fa35829444dc00ebd8f0a8a8eee57837e1b550d4e870113b092e8e7affca461ee5e2261a97a13288e39bb18f55a4dda82f7299b0a5348b0c6e98dfb00645ed93f277aa7058f6171212a10e9a89f288b093cfbe0ec09f017b6e58a22ff11bee551ae827e5148ab7449e7ee4c44f377c549e0587d55018d6b44306db61a1da28554a8e828287c6fe217910dbaae52db7d4909d73a3add2a3754c6c4514fcbe84e39d8f8458e8a34", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414aa00000000"], 0x50}, 0x4090)
r3 = dup(r2)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0x727, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x9, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x30}}, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000280)={@mcast1, <r6=>0x0}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00ff800b00010069700900000029744c6e6c00e0bf0002f89896a17371d063d01f7b627602c1b3cb2900ab3c8915f02b919f601372b5c6c14af935f0edc1b44af4bb8b74f96cae57cc845323c7380512696a41bdea408df14d739627c0deddf68aeaf12d1eae47519cf86273ec34ee503b5ee1067ee1eef7c4ce845d9a8395c5adb39e7f94120d741c95fd23176d6d4e1ccb40017e8da2ce9ebef8c3f9612c1ec07d05250cba4fd2d010dadb77eaeb287c588133cade44d63d534af47029a7", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000009c0)="1358b6be93095a34d0028ecbdeccd9ac478724dafd", 0x15}, {&(0x7f0000000b80)="a331504911d3a80276101a2aafd6f172d2224d7e1a08e404760c9810bbeaafd71d649822b747053128ce9bc719440670abeeef7f3ef34bba1fe46a94aa1b4af104d29ba1a41ff845546de344beca814c19c36a0bd813e8a1364820a37c368975c3dcec4d3d9cf3c1dfce22e6c5fa758d4ad958131aaf6845f0661680244728a7881d5483cdbc8152c2b33959a5461968b25f854be33be472901606cef909701cfe165a3a40063b6d1bf834aea1c871cd5df2dec2705a992fa9a79c25f932", 0xbe}, {&(0x7f0000000c80)="eca8510b676a80ac6a2933ff3c8ff9efcd6fd756d49f4eaddfeddc5d3cdaa9f875d943a2e198d14dda4001239c40e881078d96aa9d08c86bc4f8dd14df55c2b6fd39ba22c52488f6a7e7c23e4ddf41fcaed89bdbd6bcd245f5e98f30f833aa3d0195d9ba2d7b18a7b97c8aced9123555cd5d2a31e9249433d085adfbb9", 0x7d}, {&(0x7f0000000d00)="d6e6dbfb7eb1632440507167d71be16f13a4aaa2432964e04a5d91c678137fe9dc011441e8cf07bb875e55f716d210de61e685f43a3b9e1170c210d8330b7c644392679909d4918f9843b0a0393110fe06e745ebe238e184055652eb82a61e19c27c95", 0x63}], 0x4}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa50008c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x60, 0x29, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe5, 0x6}, {0xfff3, 0x5}, {0xe, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @tclass_kind_options=@c_red={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800)

9.887137868s ago: executing program 3 (id=2811):
r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x27, 0x1, 0x0, "732283ef1acbdaa7abe50000000009be908100000000007100"})

9.886385364s ago: executing program 4 (id=2812):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r1, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x3}, 0x8, 0x0, &(0x7f0000000100)={0x40, 0x5, 0xfff7, 0x100, 0x8001}, 0x8, 0x6000, 0x6, 0x0, 0x0, 0x5fb, &(0x7f00000001c0)="e9ad586f40c495ac02ac99bde9b0ad2c4f2115f8d82a0cb774167bffd3dd7c1af132cad7bfa62f255d83729c038cc206"})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x74}, 0x1, 0x3}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0)

9.756402568s ago: executing program 3 (id=2813):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8052, &(0x7f0000000040)={[{@block_validity}, {@noblock_validity}, {@quota}]}, 0x1, 0x4d3, &(0x7f0000000600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000400)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x2, 'macvlan1\x00', {0x8001}, 0xcb6a})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)

9.285404848s ago: executing program 4 (id=2814):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1})

9.206587122s ago: executing program 1 (id=2815):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a1)

5.350525312s ago: executing program 4 (id=2816):
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x85e31a88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f000001f540), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000005f80)=ANY=[@ANYBLOB="646174615f636865636b73756d3f6e6f6e652c7374725f686173683d6372633332632c646174615f636865636b73756d3d7878686173682c6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c6d657461646174615f636865636b73756d3d63726336342c7374725f686173683d63726336342c636f6d7072657373696f6e3d677a69702c00b12ad55da9e690f3f671e2a963c6e436c7504557f0fbadaab9607da576d448dd11521821e84b69dce1a85442e5ffd2b948d59a9ab54444559714cabaaa60824f890721ff2a820fe81299e633"], 0xff, 0x5d5e, &(0x7f0000000000)="$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")
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005e00)={'wlan1\x00'})
openat$nullb(0xffffffffffffff9c, &(0x7f0000005d80), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000005e40)=0x1010001)
prlimit64(0x0, 0x0, 0x0, &(0x7f00000002c0))
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x6}}, 0x0)
open$dir(0x0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000005ec0))
ftruncate(r3, 0x2007ffb)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r4, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000040))
sendfile(r3, r3, 0x0, 0x800000008)
pread64(r0, &(0x7f0000005e80)=""/38, 0x26, 0x6fd5)

5.350172983s ago: executing program 1 (id=2817):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000880)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)

5.099579573s ago: executing program 1 (id=2818):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet(0x2, 0x0, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4", 0xe9}, {0x0}], 0x2}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a)
bind$alg(r10, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xf0}}, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r11, 0x4)
socket$nl_route(0x10, 0x3, 0x0)

4.918955101s ago: executing program 3 (id=2819):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000540), 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48})

3.715505866s ago: executing program 4 (id=2820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}}, 0x0)

3.599101178s ago: executing program 3 (id=2821):
open(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "b76593ab"}]}}, 0x0}, 0x0)

3.50390936s ago: executing program 2 (id=2822):
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff9b}, 0x48)
r0 = add_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="7b08a44d158296c290734462aeb080305d9756791cde586fda794065f43733ae6a607a1f1e200aeb17d9ad326bfb53124ee9f74cb29f2becb4ca60af0de79d8d940abd5fd6e8092e9c0393e28e20137e50efb14060390998f8fb12b948ca40dc80936e896033dd48ff2a119e37c30d78e8a255d4799b8c99778c42b9790adc6dc3fc24e91a447df15f58fc655f5ea9c4545de9607a919b6979dec2dbcfcd1775524341bce058e65e872c4bafd83590ccf194c4e1d7ca5a6ca673a3c4e6917de573969cbdad209f78b3611f05d0e8624baaaba51ffeaf4fea4d5de9ffcf9a1aeadae6857ac6c98f2a0f67d1c761c4bd1a", 0xf0, 0xfffffffffffffff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x48)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setuid(0x0)
symlinkat(&(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000340)='.\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = epoll_create1(0x0)
r3 = socket$packet(0x11, 0x4000000000002, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x118)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))

3.485607921s ago: executing program 1 (id=2823):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000200030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300883ac1870800010003"], 0x50}}, 0x0)

3.413132157s ago: executing program 1 (id=2824):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r1, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x3}, 0x8, 0x0, &(0x7f0000000100)={0x40, 0x5, 0xfff7, 0x100, 0x8001}, 0x8, 0x6000, 0x6, 0x0, 0x0, 0x5fb, &(0x7f00000001c0)="e9ad586f40c495ac02ac99bde9b0ad2c4f2115f8d82a0cb774167bffd3dd7c1af132cad7bfa62f255d83729c038cc206"})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x74}, 0x1, 0x3}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31}, 0x24}}, 0x0)

3.237197117s ago: executing program 2 (id=2825):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1})

3.089944818s ago: executing program 2 (id=2826):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2101)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$tun(r1, 0x0, 0x126a)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140), 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a5780200", 0x16, 0x0, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_setup(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x48, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x4, 0x0, [], "97de0000"}}}}}}}, 0x0)

2.339492109s ago: executing program 2 (id=2827):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
syz_read_part_table(0x107b, &(0x7f0000000000)="$eJzs0L1NxEAQBeBn34+PKmjlAjIyKIA2nGFqIUa0QEwPRJRAhAANWhaXAJd8XzB6sp5npA0ntR2TYWhpGZIlGZMckvvH/VrZrOG91m7y1EbPXzVV1cvD3e63V228ttG/HJObtqbekuWzdrk9jM9Tsuw3w9XF9WW/2M1rGD+q6tj+bXfmZMq27e5+Kudnf/o0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBvvgMAAP//S7Qi7A==")
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0x4}, 0x2)

1.804339757s ago: executing program 2 (id=2828):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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")
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x0, 0x300)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r2 = epoll_create1(0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000300)={0x90000010})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080), 0x4)
unlinkat(r0, &(0x7f0000000a40)='./file0\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)

1.540330298s ago: executing program 3 (id=2829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r1, 0x201, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}, 0x20}}, 0x0)

483.872109ms ago: executing program 3 (id=2830):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x620742, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0)
r1 = memfd_create(&(0x7f00000014c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x3)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, &(0x7f0000000040)="468bd68196be3d927ca867432303df5c577901305056bdd2117ac86dc06c8cdc97daeac14f96bd326574ec2246247c7b18934da642532a972fe12a2cf5bdd043a2de40feeb8f44735ee30c06324d975c941963591dce0701715b5b45d0a4dc77b18b868dde8d0d9a4e10dacec8615c489a7161951ac25b60cd8f1adbbb477e34fc29ed83bbfb97e65c898cd03cba406d5492f6739ca0d260c64055e2ea3f82eb26dc80", 0xa3, 0x90, &(0x7f0000000200)={0xa, 0x4e24, 0xffffffff, @empty, 0x5}, 0x1c)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x181102, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x0, 0x0, 0x23, 0x0, "68f101fe95e3ff00f225082cbfe56c5a7b6d085b76546ea0f6c0bfc851a94b606597005963f015411c6584f7c32e0e044fa42b143c041278a59bf44f5ade6d6f2e0b28604d114ef621169d895839226b"}, 0xd8)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440), 0x2c}}, 0x40800)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r7, @ANYBLOB="14000200ffff000000000000000000000000000114000600000000000600000000000000000000000800080000040000bf1a57822ae5ba2ba8815368ddef4208fad372b2441021cd87d76a7313db0c99e8a59e2780000000000000003dca5e30d7a6c2007f00cf3d9be52da868c2d8f73fbc9883935a31c277e7570f0909fc317d1d413f0600c0fd3502d73100"/150], 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={@private1, 0xd, r7})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000300)={@remote, r10}, 0x14)
r11 = memfd_create(&(0x7f00000014c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
copy_file_range(r1, 0x0, r11, &(0x7f00000000c0)=0xffffffffffffff01, 0x0, 0x0)
memfd_create(&(0x7f00000014c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
memfd_create(&(0x7f00000014c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)

410.651471ms ago: executing program 4 (id=2831):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @match={{0xa}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0)

329.349617ms ago: executing program 1 (id=2832):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x20200, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040))
preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
dup3(r6, r5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000020042, 0x0)
dup(r7)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x89ffc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_open_dev$tty1(0xc, 0x4, 0x1)

267.588947ms ago: executing program 2 (id=2833):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2})
ioctl$TUNGETVNETHDRSZ(r0, 0x400454d8, 0xffffffffffffffff)

0s ago: executing program 4 (id=2834):
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x6, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000dc0)='./file0\x00')
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0)
pwrite64(r0, &(0x7f0000000000)='+', 0x1, 0x4010000bffd)
r1 = open(&(0x7f0000000a80)='./bus\x00', 0x40002, 0x0)
fallocate(r1, 0x0, 0x0, 0xffeffeff000)
open(&(0x7f0000000240)='./bus\x00', 0x141b42, 0x0)

kernel console output (not intermixed with test programs):

[T13226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  628.915630][T13226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.092540][T13228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  629.233320][T13226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.257495][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  629.307592][T13226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  629.414543][T13228] team0: Port device team_slave_0 added
[  629.445904][T13228] team0: Port device team_slave_1 added
[  629.501368][T13341] loop1: detected capacity change from 0 to 512
[  629.509633][T13341] EXT4-fs: Ignoring removed oldalloc option
[  629.549861][T13341] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2354: Parent and EA inode have the same ino 15
[  629.566681][T13341] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2354: Parent and EA inode have the same ino 15
[  629.582035][T13341] EXT4-fs (loop1): 1 orphan inode deleted
[  629.592093][T13341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.658694][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.691805][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.733328][T11801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.771015][T13228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.779985][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  629.806997][T13228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.858284][   T35] hsr_slave_0: left promiscuous mode
[  629.871639][   T35] hsr_slave_1: left promiscuous mode
[  629.884529][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  629.896821][T13345] loop1: detected capacity change from 0 to 2048
[  629.902548][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.911851][T13345] NILFS (loop1): invalid segment: Checksum error in segment payload
[  629.920141][T13345] NILFS (loop1): trying rollback from an earlier position
[  629.921517][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.943770][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.979110][T13345] NILFS (loop1): recovery complete
[  629.993123][   T35] veth1_macvtap: left promiscuous mode
[  629.997958][T13346] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  630.012754][   T35] veth0_macvtap: left promiscuous mode
[  630.018734][   T35] veth1_vlan: left promiscuous mode
[  630.024812][   T35] veth0_vlan: left promiscuous mode
[  630.520775][T13353] delete_channel: no stack
[  630.643193][T13353] loop1: detected capacity change from 0 to 128
[  630.657573][   T53] Bluetooth: hci7: command tx timeout
[  630.657615][ T5107] Bluetooth: hci0: command tx timeout
[  630.715050][T13353] VFS: Found a Xenix FS (block size = 512) on device loop1
[  630.763606][T13353] sysv_free_block: trying to free block not in datazone
[  630.775221][T13353] sysv_count_free_blocks: free block count was -2041545929, correcting to 9
[  630.874539][T13353] sysv_count_free_inodes: unable to read inode table
[  630.954368][T11801] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  631.346858][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  631.366929][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  631.393215][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  631.418249][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  631.426610][   T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  631.438094][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  631.627123][   T35] team0 (unregistering): Port device team_slave_1 removed
[  631.717652][   T35] team0 (unregistering): Port device team_slave_0 removed
[  632.835863][T13226] hsr_slave_0: entered promiscuous mode
[  632.843012][T13226] hsr_slave_1: entered promiscuous mode
[  632.892688][T13228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.900173][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.928475][T13228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.037776][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0
[  633.452360][T13228] hsr_slave_0: entered promiscuous mode
[  633.473691][T13228] hsr_slave_1: entered promiscuous mode
[  633.514152][T13228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  633.521821][T13228] Cannot create hsr debugfs directory
[  633.523685][   T53] Bluetooth: hci5: command tx timeout
[  634.251306][T12993] 8021q: adding VLAN 0 to HW filter on device bond0
[  634.287544][T13378] loop1: detected capacity change from 0 to 512
[  634.297386][T13378] EXT4-fs: Ignoring removed mblk_io_submit option
[  634.304697][T12920] veth0_vlan: entered promiscuous mode
[  634.307894][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[  634.307968][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[  634.336146][T13378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  634.391571][T13378] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2366: corrupted in-inode xattr: e_value out of bounds
[  634.403330][T12920] veth1_vlan: entered promiscuous mode
[  634.414554][T13378] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2366: couldn't read orphan inode 15 (err -117)
[  634.445397][T13378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.529810][T13226] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.608157][   T29] audit: type=1800 audit(1719668683.908:258): pid=13381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2366" name="bus" dev="loop1" ino=19 res=0 errno=0
[  634.710297][T12993] 8021q: adding VLAN 0 to HW filter on device team0
[  634.789082][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.991785][T13226] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.177150][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.248849][T11801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.309919][T13226] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.452728][T13226] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.490889][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.508613][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.515798][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.549391][T13359] chnl_net:caif_netlink_parms(): no params data found
[  635.587185][   T53] Bluetooth: hci5: command tx timeout
[  635.618497][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.678041][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.685317][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.804996][T12920] veth0_macvtap: entered promiscuous mode
[  635.823037][T13395] loop1: detected capacity change from 0 to 512
[  635.869982][T13395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.885291][T13395] ext4 filesystem being mounted at /root/syzkaller.17t0hD/121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  636.073140][T12920] veth1_macvtap: entered promiscuous mode
[  636.233165][T13359] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.240614][T13359] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.248111][T13359] bridge_slave_0: entered allmulticast mode
[  636.275011][T13359] bridge_slave_0: entered promiscuous mode
[  636.331484][T13359] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.441807][T13359] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.552805][T13359] bridge_slave_1: entered allmulticast mode
[  636.650887][T13359] bridge_slave_1: entered promiscuous mode
[  636.980009][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.991059][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.009672][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.020952][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.031355][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.041898][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.051841][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.062294][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.075662][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0
[  637.238623][T13359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.254272][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.277066][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.287298][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.298428][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.311466][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.322168][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.333190][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.345197][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.357883][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1
[  637.389045][T13359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.529310][T12920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  637.554480][T12920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  637.563298][T12920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  637.572293][T12920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.603006][T11801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.674634][   T53] Bluetooth: hci5: command tx timeout
[  637.730472][T13359] team0: Port device team_slave_0 added
[  637.765317][   T35] bridge_slave_1: left allmulticast mode
[  637.771062][   T35] bridge_slave_1: left promiscuous mode
[  637.789508][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.805403][   T35] bridge_slave_0: left allmulticast mode
[  637.811687][   T35] bridge_slave_0: left promiscuous mode
[  637.823770][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.921978][T13412] 9pnet: p9_errstr2errno: server reported unknown error �@íÎhQI¸¥Šte
[  638.666909][    C1] vkms_vblank_simulate: vblank timer overrun
[  638.705498][    C1] vkms_vblank_simulate: vblank timer overrun
[  638.739763][    C1] vkms_vblank_simulate: vblank timer overrun
[  638.768066][    C1] vkms_vblank_simulate: vblank timer overrun
[  638.934406][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  638.950392][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  638.964677][   T35] bond0 (unregistering): Released all slaves
[  638.993782][T13359] team0: Port device team_slave_1 added
[  639.262395][T13359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.290873][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  639.316889][    C1] vkms_vblank_simulate: vblank timer overrun
[  639.326038][T13359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  639.437487][T13359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  639.446920][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  639.472860][    C1] vkms_vblank_simulate: vblank timer overrun
[  639.479660][T13359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.690831][T12993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.722616][T13226] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  639.744132][   T53] Bluetooth: hci5: command tx timeout
[  639.751405][T13226] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  639.797218][T13431] 9pnet: p9_errstr2errno: server reported unknown error �@íÎhQI¸¥Šte
[  639.926116][   T35] hsr_slave_0: left promiscuous mode
[  639.933543][   T35] hsr_slave_1: left promiscuous mode
[  639.940075][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.961667][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.972619][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.991491][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  640.040327][   T35] veth1_macvtap: left promiscuous mode
[  640.056365][   T35] veth0_macvtap: left promiscuous mode
[  640.062093][   T35] veth1_vlan: left promiscuous mode
[  640.077456][   T35] veth0_vlan: left promiscuous mode
[  641.116375][    C1] vkms_vblank_simulate: vblank timer overrun
[  641.151598][   T35] team0 (unregistering): Port device team_slave_1 removed
[  641.243807][   T35] team0 (unregistering): Port device team_slave_0 removed
[  641.300048][    C1] vkms_vblank_simulate: vblank timer overrun
[  641.650811][    C1] vkms_vblank_simulate: vblank timer overrun
[  642.417802][    C1] vkms_vblank_simulate: vblank timer overrun
[  642.460296][T13226] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  642.514877][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.522778][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.585757][T13359] hsr_slave_0: entered promiscuous mode
[  642.605135][T13359] hsr_slave_1: entered promiscuous mode
[  642.627599][T13359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  642.643886][T13359] Cannot create hsr debugfs directory
[  642.673613][T13226] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  643.009374][T13228] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  643.093389][T13228] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  643.125321][T13228] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  643.325507][T13228] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  643.376639][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  643.389235][T12993] veth0_vlan: entered promiscuous mode
[  643.398591][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  643.418807][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  643.431303][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  643.440955][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  643.452379][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  643.649311][T13453] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  643.659505][T12993] veth1_vlan: entered promiscuous mode
[  644.139837][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.223241][T13458] loop1: detected capacity change from 0 to 512
[  644.232452][T13458] EXT4-fs: Ignoring removed mblk_io_submit option
[  644.245375][T13458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  644.291943][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.301670][T13458] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2391: corrupted in-inode xattr: e_value out of bounds
[  644.319697][T13458] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2391: couldn't read orphan inode 15 (err -117)
[  644.341778][T13458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.448192][T12993] veth0_macvtap: entered promiscuous mode
[  644.500531][   T29] audit: type=1800 audit(1719668693.798:259): pid=13462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2391" name="bus" dev="loop1" ino=19 res=0 errno=0
[  644.582455][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.660652][T13226] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.699379][T12993] veth1_macvtap: entered promiscuous mode
[  644.909581][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.166040][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  645.183004][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.238024][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  645.315523][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.353553][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  645.383604][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.403543][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  645.423496][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.449666][T12993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  645.468747][T11801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.478343][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  645.478376][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.478397][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  645.478417][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.478436][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  645.478456][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.478477][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  645.478498][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.480962][T12993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  645.523803][ T5107] Bluetooth: hci3: command tx timeout
[  645.643185][T13228] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.700819][T12993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.743834][T12993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.752585][T12993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.768449][T12993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.794066][T13226] 8021q: adding VLAN 0 to HW filter on device team0
[  645.963370][T13469] loop1: detected capacity change from 0 to 64
[  645.971690][T13469] hfs: unable to parse mount options
[  646.201518][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.208995][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.225897][T13447] chnl_net:caif_netlink_parms(): no params data found
[  646.377445][T13359] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  646.415423][T13359] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  646.449026][T13228] 8021q: adding VLAN 0 to HW filter on device team0
[  646.540269][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.547574][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.610167][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.617544][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.647611][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.654940][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.764151][T13359] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  646.787868][   T35] bridge_slave_1: left allmulticast mode
[  646.820455][   T35] bridge_slave_1: left promiscuous mode
[  646.837794][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.895358][   T35] bridge_slave_0: left allmulticast mode
[  646.901092][   T35] bridge_slave_0: left promiscuous mode
[  646.916196][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.599950][ T5107] Bluetooth: hci3: command tx timeout
[  648.102904][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  648.121808][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  648.146190][   T35] bond0 (unregistering): Released all slaves
[  648.352085][T13359] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  648.776229][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  648.803066][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  648.816889][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  648.829824][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  648.841547][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  648.852757][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  649.115408][T13447] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.122622][T13447] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.156716][T13447] bridge_slave_0: entered allmulticast mode
[  649.174800][T13447] bridge_slave_0: entered promiscuous mode
[  649.186477][T13447] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.193722][T13447] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.200939][T13447] bridge_slave_1: entered allmulticast mode
[  649.209629][T13447] bridge_slave_1: entered promiscuous mode
[  649.620921][   T35] hsr_slave_0: left promiscuous mode
[  649.640151][   T35] hsr_slave_1: left promiscuous mode
[  649.721340][   T53] Bluetooth: hci3: command tx timeout
[  649.756081][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.797849][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.890825][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.950028][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.081042][   T35] veth1_macvtap: left promiscuous mode
[  650.100578][   T35] veth0_macvtap: left promiscuous mode
[  650.110714][   T35] veth1_vlan: left promiscuous mode
[  650.123709][   T35] veth0_vlan: left promiscuous mode
[  650.951653][   T53] Bluetooth: hci1: command tx timeout
[  651.051596][   T35] team0 (unregistering): Port device team_slave_1 removed
[  651.137160][   T35] team0 (unregistering): Port device team_slave_0 removed
[  651.749195][   T53] Bluetooth: hci3: command tx timeout
[  652.289281][T13447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  652.354372][T13447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  652.454538][T13496] loop1: detected capacity change from 0 to 1024
[  652.476575][T13496] hfsplus: invalid catalog max_key_len 1536
[  652.503066][T13496] hfsplus: failed to load catalog file
[  652.651683][T13447] team0: Port device team_slave_0 added
[  652.666832][T13447] team0: Port device team_slave_1 added
[  652.982231][T13447] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.003911][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.032604][T13447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.044090][   T53] Bluetooth: hci1: command tx timeout
[  653.087678][T13226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.099404][T13447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.108022][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.137360][T13447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.490481][T13447] hsr_slave_0: entered promiscuous mode
[  653.501987][T13447] hsr_slave_1: entered promiscuous mode
[  653.540382][T13447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  653.549896][T13447] Cannot create hsr debugfs directory
[  653.649182][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.802499][T13359] 8021q: adding VLAN 0 to HW filter on device bond0
[  654.006173][T13359] 8021q: adding VLAN 0 to HW filter on device team0
[  654.260746][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.342571][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.349825][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  654.379835][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.387204][ T5200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  654.557648][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.590619][T13527] loop1: detected capacity change from 0 to 8192
[  654.622135][T13226] veth0_vlan: entered promiscuous mode
[  654.631929][T13480] chnl_net:caif_netlink_parms(): no params data found
[  654.655899][T13527]  loop1: AHDI p1
[  654.742412][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.087413][T13226] veth1_vlan: entered promiscuous mode
[  655.105085][   T53] Bluetooth: hci1: command tx timeout
[  655.201379][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.523561][T13530] loop1: detected capacity change from 0 to 65536
[  655.593777][T13530] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  655.637495][T13530] XFS (loop1): Ending clean mount
[  655.655418][T13530] XFS (loop1): Quotacheck needed: Please wait.
[  655.711802][T13480] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.721119][T13480] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.728715][T13480] bridge_slave_0: entered allmulticast mode
[  655.737043][T13480] bridge_slave_0: entered promiscuous mode
[  655.793168][T13530] XFS (loop1): Quotacheck: Done.
[  656.107015][T13480] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.125122][T13480] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.132463][T13480] bridge_slave_1: entered allmulticast mode
[  656.145635][T13480] bridge_slave_1: entered promiscuous mode
[  656.193145][T13228] veth0_vlan: entered promiscuous mode
[  656.199941][   T35] bridge_slave_1: left allmulticast mode
[  656.209565][   T35] bridge_slave_1: left promiscuous mode
[  656.215386][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.226697][   T35] bridge_slave_0: left allmulticast mode
[  656.232355][   T35] bridge_slave_0: left promiscuous mode
[  656.239076][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.495973][T11801] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  657.198005][   T53] Bluetooth: hci1: command tx timeout
[  657.563139][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  657.592181][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  657.610015][   T35] bond0 (unregistering): Released all slaves
[  657.738289][T13480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.779678][T13480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.982630][T13480] team0: Port device team_slave_0 added
[  658.022781][T13226] veth0_macvtap: entered promiscuous mode
[  658.048798][T13480] team0: Port device team_slave_1 added
[  658.099225][T13228] veth1_vlan: entered promiscuous mode
[  658.126623][T13226] veth1_macvtap: entered promiscuous mode
[  658.176449][T13565] nbd: socks must be embedded in a SOCK_ITEM attr
[  658.207176][T13480] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.215291][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.244211][T13480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.314705][   T35] hsr_slave_0: left promiscuous mode
[  658.330402][   T35] hsr_slave_1: left promiscuous mode
[  658.336921][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.345578][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.364557][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.372035][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.421544][   T35] veth1_macvtap: left promiscuous mode
[  658.428475][   T35] veth0_macvtap: left promiscuous mode
[  658.435616][   T35] veth1_vlan: left promiscuous mode
[  658.441070][   T35] veth0_vlan: left promiscuous mode
[  659.982394][   T35] team0 (unregistering): Port device team_slave_1 removed
[  660.046905][   T35] team0 (unregistering): Port device team_slave_0 removed
[  661.147035][T13480] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.154356][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.180679][T13480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.235830][T13578] netlink: 'syz.1.2421': attribute type 4 has an invalid length.
[  661.400550][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.413031][T13580] netlink: 'syz.1.2422': attribute type 20 has an invalid length.
[  661.420775][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.443498][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.454583][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.464513][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.475045][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.487904][T13226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  661.555156][T13359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  661.597963][T13447] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  661.657353][T13480] hsr_slave_0: entered promiscuous mode
[  661.684424][T13480] hsr_slave_1: entered promiscuous mode
[  661.691476][T13480] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  661.718490][T13480] Cannot create hsr debugfs directory
[  661.806695][T13584] loop1: detected capacity change from 0 to 1024
[  661.820807][T13447] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  661.870065][T13447] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  661.884929][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  661.901566][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.911874][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  661.922737][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.924976][T13584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  661.932685][T13226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  661.955266][T13226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.968013][T13226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  661.989317][T13226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  662.023568][T13226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.032380][T13226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.065628][T13226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.122681][T13228] veth0_macvtap: entered promiscuous mode
[  662.135233][T11801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.149340][T13447] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  662.245997][T13228] veth1_macvtap: entered promiscuous mode
[  662.424357][T13593] sctp: [Deprecated]: syz.1.2424 (pid 13593) Use of int in max_burst socket option.
[  662.424357][T13593] Use struct sctp_assoc_value instead
[  662.594762][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.613067][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.623226][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.636194][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.646174][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.656722][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.666794][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.681496][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.694781][T13228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.866856][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.900424][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.921174][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.932082][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.942877][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  663.036420][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.189361][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  663.240522][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.298758][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  663.351618][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.481363][T13228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  663.737324][T13228] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.773799][T13228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.787051][T13228] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.801772][T13228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  663.820408][T13359] veth0_vlan: entered promiscuous mode
[  663.855882][   T35] bridge_slave_0: left allmulticast mode
[  663.861627][   T35] bridge_slave_0: left promiscuous mode
[  663.883103][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.038155][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  665.052419][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  665.076144][   T35] bond0 (unregistering): Released all slaves
[  665.325274][T13359] veth1_vlan: entered promiscuous mode
[  665.334749][ T2434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.356984][ T2434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.524422][T13610] loop1: detected capacity change from 0 to 1024
[  665.543764][T13610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  665.577107][T13610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  665.620141][T13610] System zones: 0-1, 3-36
[  665.658600][T13610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  665.704619][T13359] veth0_macvtap: entered promiscuous mode
[  665.759859][T13610] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2430: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  665.968425][   T35] hsr_slave_0: left promiscuous mode
[  666.001046][   T35] hsr_slave_1: left promiscuous mode
[  666.028072][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.035885][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.044920][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  666.071060][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  666.175652][   T35] veth1_macvtap: left promiscuous mode
[  666.181369][   T35] veth0_macvtap: left promiscuous mode
[  666.187303][   T35] veth1_vlan: left promiscuous mode
[  666.192696][   T35] veth0_vlan: left promiscuous mode
[  666.287176][T11801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.935798][   T35] team0 (unregistering): Port device team_slave_1 removed
[  668.011582][   T35] team0 (unregistering): Port device team_slave_0 removed
[  669.151195][T13359] veth1_macvtap: entered promiscuous mode
[  669.213597][T13621] netlink: 'syz.3.2433': attribute type 1 has an invalid length.
[  669.241566][T13621] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2433'.
[  669.252855][T13447] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.259832][T13621] netlink: 'syz.3.2433': attribute type 1 has an invalid length.
[  669.273251][ T2434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.316370][T13447] 8021q: adding VLAN 0 to HW filter on device team0
[  669.365002][ T2434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.675430][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.682729][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.769647][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.840083][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.859972][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.871271][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.881937][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.893715][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.909516][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.921582][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.956772][T13359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.975406][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.982590][  T781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.044525][T13480] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  670.058397][T13480] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  670.090701][T13480] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  670.118895][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.131184][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.169135][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.179633][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.195893][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.213245][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.236476][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.247129][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.268089][T13359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.316787][T13480] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  670.317107][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.361101][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.368294][T13359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.393617][T13359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.402430][T13359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.429579][T13359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.689379][T13652] pim6reg: entered allmulticast mode
[  670.900668][T13447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  670.948604][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.984130][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.159209][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.214008][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.324244][T13480] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.377926][T13480] 8021q: adding VLAN 0 to HW filter on device team0
[  671.460453][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.467775][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.479898][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.487270][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.697144][T13447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.976559][T13447] veth0_vlan: entered promiscuous mode
[  672.041563][T13447] veth1_vlan: entered promiscuous mode
[  672.230326][T13447] veth0_macvtap: entered promiscuous mode
[  672.289412][T13447] veth1_macvtap: entered promiscuous mode
[  672.334650][T13698] loop4: detected capacity change from 0 to 4096
[  672.392630][T13698] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  672.479136][T13698] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  672.480244][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.499952][T13705] xt_ipcomp: unknown flags 12
[  672.539440][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.575194][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.631264][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.661329][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.695668][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.720387][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.745987][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.760319][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.789445][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.825044][T13447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  672.885353][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  672.904419][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.915397][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  672.939891][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.955391][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  672.970784][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.983312][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  672.995037][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.005316][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.018334][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.037075][T13447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  673.111219][T13480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  673.152535][T13447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  673.172338][T13447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  673.209384][T13447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  673.234458][T13447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.260795][ T2468] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22.
[  673.724903][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.773606][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.856242][T13480] veth0_vlan: entered promiscuous mode
[  673.898803][T13480] veth1_vlan: entered promiscuous mode
[  674.125379][T13725] loop5: detected capacity change from 0 to 8
[  674.195338][T13725] SQUASHFS error: lzo decompression failed, data probably corrupt
[  674.217486][T13725] SQUASHFS error: Failed to read block 0x1c0: -5
[  674.232051][T13725] SQUASHFS error: Unable to read metadata cache entry [1be]
[  674.251019][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  674.272289][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.280348][   T29] audit: type=1800 audit(1719668723.578:260): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2465" name="bus" dev="sda1" ino=2086 res=0 errno=0
[  674.438892][T13480] veth0_macvtap: entered promiscuous mode
[  674.519637][T13480] veth1_macvtap: entered promiscuous mode
[  674.596295][T13732] tmpfs: Bad value for 'huge'
[  675.722954][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.744000][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.755142][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.766121][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.783111][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.799040][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.809390][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.850838][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.892512][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.932934][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.954926][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.996138][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.039873][T13480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  676.152759][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.232562][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.284020][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.315990][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.352000][T13749] unsupported nlmsg_type 40
[  676.359151][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.424329][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.466905][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.481638][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.565776][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.605661][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.876596][T13480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  677.044104][T13480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.128990][T13480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.859959][T13480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.872654][T13480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.908128][T13480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.933674][T13480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.964791][T13764] kernel read not supported for file /file0 (pid: 13764 comm: syz.1.2486)
[  678.008997][   T29] audit: type=1800 audit(1719668727.308:261): pid=13764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2486" name="file0" dev="mqueue" ino=50539 res=0 errno=0
[  678.121227][T13768] loop2: detected capacity change from 0 to 2048
[  678.158545][T13770] tmpfs: Bad value for 'huge'
[  678.164291][T13768] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[  678.457361][T13774] loop5: detected capacity change from 0 to 8
[  679.063827][T13774] SQUASHFS error: lzo decompression failed, data probably corrupt
[  679.141378][T13774] SQUASHFS error: Failed to read block 0x1c0: -5
[  679.197956][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.215578][T13774] SQUASHFS error: Unable to read metadata cache entry [1be]
[  679.262363][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.315854][   T29] audit: type=1800 audit(1719668728.618:262): pid=13774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2483" name="file1" dev="loop5" ino=5 res=0 errno=0
[  679.480176][ T5707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.504316][ T5707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.675716][ T5707] Bluetooth: hci6: Frame reassembly failed (-84)
[  679.791301][T13798] loop0: detected capacity change from 0 to 8
[  679.914655][T13802] kernel read not supported for file /file0 (pid: 13802 comm: syz.2.2501)
[  679.963566][   T29] audit: type=1800 audit(1719668729.238:263): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2501" name="file0" dev="mqueue" ino=51436 res=0 errno=0
[  681.407043][T13824] loop2: detected capacity change from 0 to 4096
[  681.430937][T13824] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  681.531886][T13824] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  681.579788][   T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.580257][T13824] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  681.664993][   T53] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  681.699572][T13834] kernel read not supported for file /file0 (pid: 13834 comm: syz.3.2516)
[  681.834398][   T29] audit: type=1800 audit(1719668731.138:264): pid=13834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2516" name="file0" dev="mqueue" ino=51474 res=0 errno=0
[  682.180992][T13833] loop4: detected capacity change from 0 to 32768
[  682.231547][T13833] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  682.240912][T13833] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  682.312415][T13842] loop1: detected capacity change from 0 to 8
[  682.318985][T13833] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  682.333955][T13839] loop0: detected capacity change from 0 to 64
[  682.351814][   T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  682.364995][   T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.375498][   T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  682.394199][   T29] audit: type=1804 audit(1719668731.688:265): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2519" name="/root/syzkaller.CtAMPU/29/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="sda1" ino=2092 res=1 errno=0
[  682.731005][   T53] Bluetooth: hci0: Malformed MSFT vendor event: 0x02
[  682.743065][   T53] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  684.938782][   T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2563ms
[  684.973086][   T25] gfs2: fsid=syz:syz.0: jid=0: Done
[  685.230109][   T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.333705][T13833] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  685.458012][T13833] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  685.997211][ T5107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  686.009374][ T5107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  686.027466][ T5107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  686.046708][   T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.057433][ T5107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  686.058901][ T5107] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  686.073217][ T5107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  686.416798][ T5159] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  686.610026][T13869] loop0: detected capacity change from 0 to 4096
[  686.668273][T13869] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  686.901847][   T29] audit: type=1804 audit(1719668736.168:266): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2532" name="/root/syzkaller.MnZyVV/15/file0" dev="sda1" ino=2092 res=1 errno=0
[  686.985020][T13869] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  686.997095][T13882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2533'.
[  687.021726][T13882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2533'.
[  687.054764][T13869] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  687.155080][ T5159] usb 4-1: Using ep0 maxpacket: 8
[  687.163627][ T1268] Bluetooth: hci7: Frame reassembly failed (-84)
[  687.212500][ T5159] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  687.228544][ T5159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.237249][   T35] bridge_slave_1: left allmulticast mode
[  687.253620][   T35] bridge_slave_1: left promiscuous mode
[  687.255794][T13887] loop4: detected capacity change from 0 to 8
[  687.259409][ T5159] usb 4-1: Product: syz
[  687.274031][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.302698][ T5159] usb 4-1: Manufacturer: syz
[  687.323140][ T5159] usb 4-1: SerialNumber: syz
[  687.344093][ T5159] usb 4-1: config 0 descriptor??
[  687.356632][ T5159] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[  687.398465][   T35] bridge_slave_0: left allmulticast mode
[  687.446499][   T35] bridge_slave_0: left promiscuous mode
[  687.462982][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.607328][ T5159] usb 4-1: USB disconnect, device number 13
[  688.213849][ T5107] Bluetooth: hci6: command tx timeout
[  689.021757][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.184572][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.191229][   T53] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  689.286063][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.354456][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.651353][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.701951][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.711686][   T29] audit: type=1804 audit(1719668739.008:267): pid=13922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2545" name="/root/syzkaller.CtAMPU/32/file0" dev="sda1" ino=2086 res=1 errno=0
[  689.734203][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.904093][   T53] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  690.307592][   T53] Bluetooth: hci6: command tx timeout
[  690.560955][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.579832][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.637886][   T35] bond0 (unregistering): Released all slaves
[  690.939791][T13860] chnl_net:caif_netlink_parms(): no params data found
[  691.268099][T13941] loop0: detected capacity change from 0 to 4096
[  691.700638][   T29] audit: type=1804 audit(1719668740.988:268): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2560" name="/root/syzkaller.MnZyVV/21/file0" dev="sda1" ino=2074 res=1 errno=0
[  691.951151][   T53] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[  692.383569][   T53] Bluetooth: hci6: command tx timeout
[  692.553789][   T35] hsr_slave_0: left promiscuous mode
[  692.626000][   T35] hsr_slave_1: left promiscuous mode
[  692.981886][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.018182][T13974] loop1: detected capacity change from 0 to 1024
[  693.025056][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  693.033224][   T29] audit: type=1326 audit(1719668742.328:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.036421][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.084014][T13974] hfsplus: unable to parse mount options
[  693.091741][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  693.104871][   T29] audit: type=1326 audit(1719668742.398:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.203397][   T29] audit: type=1326 audit(1719668742.398:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.225101][   T35] veth1_macvtap: left promiscuous mode
[  693.261285][   T35] veth0_macvtap: left promiscuous mode
[  693.279596][   T35] veth1_vlan: left promiscuous mode
[  693.292148][   T35] veth0_vlan: left promiscuous mode
[  693.319103][   T29] audit: type=1326 audit(1719668742.398:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.383606][   T29] audit: type=1326 audit(1719668742.398:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.462751][   T29] audit: type=1326 audit(1719668742.408:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.574251][   T29] audit: type=1326 audit(1719668742.408:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.702376][T13980] loop0: detected capacity change from 0 to 32768
[  693.703547][   T29] audit: type=1326 audit(1719668742.408:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.732643][T13980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2565 (13980)
[  693.778040][T13980] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  693.788560][T13980] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  693.797348][T13980] BTRFS info (device loop0): using free-space-tree
[  693.806083][   T29] audit: type=1326 audit(1719668742.408:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.833206][   T29] audit: type=1326 audit(1719668742.408:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13967 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78ed75b99 code=0x7ffc0000
[  693.855625][    C1] vkms_vblank_simulate: vblank timer overrun
[  693.856384][T13984] loop1: detected capacity change from 0 to 4096
[  693.877282][T13984] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  693.946721][T13984] ntfs3: loop1: Failed to load $MFT (-2).
[  693.974423][   T53] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  693.993788][   T53] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  694.542371][   T53] Bluetooth: hci6: command tx timeout
[  695.414483][T13480] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  695.628656][T14012] loop2: detected capacity change from 0 to 4096
[  695.747510][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[  695.754838][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[  695.950577][    C1] vkms_vblank_simulate: vblank timer overrun
[  697.684495][T14041] loop1: detected capacity change from 0 to 1024
[  697.703837][T14041] hfsplus: unable to parse mount options
[  698.155285][    C1] vkms_vblank_simulate: vblank timer overrun
[  698.174228][T14025] loop2: detected capacity change from 0 to 32768
[  698.193814][T14025] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2576 (14025)
[  698.223125][T14025] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  698.277882][T14025] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  698.305658][T14025] BTRFS info (device loop2): using free-space-tree
[  699.501876][    C1] vkms_vblank_simulate: vblank timer overrun
[  699.539484][T14025] BTRFS error (device loop2): open_ctree failed
[  699.652637][    C1] vkms_vblank_simulate: vblank timer overrun
[  699.875773][   T35] team0 (unregistering): Port device team_slave_1 removed
[  699.950882][    C1] vkms_vblank_simulate: vblank timer overrun
[  700.074994][   T35] team0 (unregistering): Port device team_slave_0 removed
[  700.236919][T14082] loop0: detected capacity change from 0 to 4096
[  700.266365][T14082] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  700.380403][T14082] ntfs3: loop0: Failed to load $MFT (-2).
[  701.103687][ T5159] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  701.374659][ T5159] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  701.384136][ T5159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.392300][ T5159] usb 1-1: Product: syz
[  701.408700][ T5159] usb 1-1: Manufacturer: syz
[  701.413614][ T5159] usb 1-1: SerialNumber: syz
[  701.421452][ T5159] usb 1-1: config 0 descriptor??
[  701.451453][ T5159] ch341 1-1:0.0: ch341-uart converter detected
[  701.949689][T13860] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.993756][T13860] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.001140][T13860] bridge_slave_0: entered allmulticast mode
[  702.064841][T13860] bridge_slave_0: entered promiscuous mode
[  702.107052][T13860] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.143234][T13860] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.168894][T13860] bridge_slave_1: entered allmulticast mode
[  702.180579][T13860] bridge_slave_1: entered promiscuous mode
[  702.275617][ T5159] usb 1-1: failed to send control message: -71
[  702.313936][ T5159] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  702.367974][ T5159] usb 1-1: USB disconnect, device number 14
[  702.386935][ T5159] ch341 1-1:0.0: device disconnected
[  702.485247][ T5107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  702.502011][ T5107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  702.521349][ T5107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  702.545351][ T5107] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  702.556701][ T5107] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  702.574097][ T5107] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  702.634846][T13860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  702.678923][T13860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  703.087970][T13860] team0: Port device team_slave_0 added
[  703.354092][T13860] team0: Port device team_slave_1 added
[  703.453288][T14117] loop0: detected capacity change from 0 to 64
[  704.713742][ T5107] Bluetooth: hci7: command tx timeout
[  705.115455][T13860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.122606][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.233745][T13860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.362915][T13860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.389229][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.508009][T13860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.979483][T14143] loop2: detected capacity change from 0 to 4096
[  706.083692][T14143] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  706.112408][T13860] hsr_slave_0: entered promiscuous mode
[  706.151716][T13860] hsr_slave_1: entered promiscuous mode
[  706.157864][T14126] loop1: detected capacity change from 0 to 32768
[  706.183571][T13860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  706.203585][T13860] Cannot create hsr debugfs directory
[  706.211979][T14126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2611 (14126)
[  706.285652][T14126] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  706.299730][T14143] ntfs3: loop2: Failed to load $MFT (-2).
[  706.318426][T14126] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  706.359996][T14126] BTRFS info (device loop1): using free-space-tree
[  706.550075][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.784157][ T5107] Bluetooth: hci7: command tx timeout
[  706.969948][T14171] loop2: detected capacity change from 0 to 8
[  706.999818][T14171] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  707.648708][T14176] cramfs: Error -3 while decompressing!
[  707.673710][T14176] cramfs: ffffffff948d19f8(42)->ffff888028de6000(4096)
[  707.701126][T14176] overlayfs: failed to resolve './file1': -5
[  707.805505][T11801] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  708.136597][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.670190][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.742626][T14185] tipc: Started in network mode
[  708.763732][T14185] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  708.815561][T14185] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  708.854410][T14185] tipc: Enabled bearer <udp:syz1>, priority 10
[  708.863726][ T5107] Bluetooth: hci7: command tx timeout
[  709.746457][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.849104][T14100] chnl_net:caif_netlink_parms(): no params data found
[  709.873164][ T5160] tipc: Node number set to 1
[  710.189487][T14210] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2639'.
[  710.944641][ T5107] Bluetooth: hci7: command tx timeout
[  711.111781][T14100] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.147666][T14100] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.184028][T14100] bridge_slave_0: entered allmulticast mode
[  711.192002][T14100] bridge_slave_0: entered promiscuous mode
[  711.224761][T14100] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.252429][T14100] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.264818][T14100] bridge_slave_1: entered allmulticast mode
[  711.298851][T14100] bridge_slave_1: entered promiscuous mode
[  711.489837][   T35] bridge_slave_1: left allmulticast mode
[  711.501275][   T35] bridge_slave_1: left promiscuous mode
[  711.526002][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.649667][   T35] bridge_slave_0: left allmulticast mode
[  711.672889][   T35] bridge_slave_0: left promiscuous mode
[  711.725204][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.760533][T14240] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2650'.
[  712.902491][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'.
[  712.952593][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'.
[  714.588595][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.618560][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.647458][   T35] bond0 (unregistering): Released all slaves
[  714.970477][T14100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  715.127419][T14100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.173233][T14273] netlink: 'syz.1.2663': attribute type 29 has an invalid length.
[  715.337406][T14273] netlink: 'syz.1.2663': attribute type 29 has an invalid length.
[  715.363064][T14276] netlink: 'syz.1.2663': attribute type 29 has an invalid length.
[  715.559129][T14277] netlink: 'syz.1.2663': attribute type 29 has an invalid length.
[  715.594663][T14273] netlink: 'syz.1.2663': attribute type 29 has an invalid length.
[  715.668843][   T35] hsr_slave_0: left promiscuous mode
[  715.703663][   T35] hsr_slave_1: left promiscuous mode
[  715.712464][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  715.731836][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.752005][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  715.786588][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.874087][   T35] veth1_macvtap: left promiscuous mode
[  715.894339][   T35] veth0_macvtap: left promiscuous mode
[  715.913921][   T35] veth1_vlan: left promiscuous mode
[  715.943616][   T35] veth0_vlan: left promiscuous mode
[  716.319625][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  716.339529][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  716.351391][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  716.361919][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  716.370559][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  716.382365][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  718.469280][   T53] Bluetooth: hci3: command tx timeout
[  719.477903][   T35] team0 (unregistering): Port device team_slave_1 removed
[  719.646331][   T35] team0 (unregistering): Port device team_slave_0 removed
[  720.557073][   T53] Bluetooth: hci3: command tx timeout
[  720.733239][T14100] team0: Port device team_slave_0 added
[  720.757631][T14100] team0: Port device team_slave_1 added
[  721.075222][T14100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.089891][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.150957][T14100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.259275][T14100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.264362][T14329] loop0: detected capacity change from 0 to 256
[  721.272519][T14330] overlay: Unknown parameter 'ime
[  721.272519][T14330] string
[  721.272519][T14330] statistic
[  721.272519][T14330] state
[  721.272519][T14330] realm
[  721.272519][T14330] rateest
[  721.272519][T14330] quota
[  721.272519][T14330] pkttype
[  721.272519][T14330] physdev
[  721.272519][T14330] cgroup
[  721.272519][T14330] cgroup
[  721.272519][T14330] cgroup
[  721.272519][T14330] owner
[  721.272519][T14330] nfacct
[  721.272519][T14330] nfacct
[  721.272519][T14330] mac
[  721.272519][T14330] limit
[  721.272519][T14330] ipvs
[  721.272519][T14330] helper
[  721.272519][T14330] devgroup
[  721.272519][T14330] cpu
[  721.272519][T14330] conntrack
[  721.272519][T14330] conntrack
[  721.272519][T14330] conntrack
[  721.272519][T14330] connlimit
[  721.272519][T14330] connlabel
[  721.272519][T14330] connbytes
[  721.272519][T14330] comment
[  721.272519][T14330] cluster
[  721.272519][T14330] bpf
[  721.272519][T14330] bpf
[  721.272519][T14330] addrtype
[  721.272519][T14330] connmark
[  721.272519][T14330] mark
[  721.272519][T14330] rpfilter
[  721.272519][T14330] ah
[  721.272519][T14330] tcpmss
[  721.272519][T14330] socket
[  721.272519][T14330] socket
[  721.272519][T14330] socket
[  721.272519][T14330] socket
[  721.272519][T14330] sctp
[  721.272519][T14330] recent
[  721.272519][T14330] recent
[  721.272519][T14330] policy
[  721.272519][T14330] osf
[  721.272519][T14330] multiport
[  721.272519][T14330] length
[  721.272519][T14330] l2tp
[  721.272519][T14330] iprange
[  721.272519][T14330] ipcomp
[  721.272519][T14330] ttl
[  721.272519][T14330] hashlimit
[  721.272519][T14330] hashlimit
[  721.272519][T14330] hashlimit
[  721.272519][T14330] esp
[  721.272519][T14330] ecn
[  721.272519][T14330] tos
[  721.272519][T14330] dscp
[  721.272519][T14330] dccp
[  721.272519][T14330] addrtype
[  721.272519][T14330] set
[  721.272519][T14330] set
[  721.272519][T14330] set
[  721.272519][T14330] set
[  721.272519][T14330] set
[  721.272519][T14330] icmp
[  721.465575][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.495533][T14100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  724.646750][   T53] Bluetooth: hci3: command tx timeout
[  724.745548][T14100] hsr_slave_0: entered promiscuous mode
[  724.778764][T14100] hsr_slave_1: entered promiscuous mode
[  724.796727][T14100] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  724.810897][T14100] Cannot create hsr debugfs directory
[  724.868714][T13860] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  725.115028][T13860] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  726.055201][T14362] loop1: detected capacity change from 0 to 8
[  726.087957][T14365] overlay: Unknown parameter 'ime
[  726.087957][T14365] string
[  726.087957][T14365] statistic
[  726.087957][T14365] state
[  726.087957][T14365] realm
[  726.087957][T14365] rateest
[  726.087957][T14365] quota
[  726.087957][T14365] pkttype
[  726.087957][T14365] physdev
[  726.087957][T14365] cgroup
[  726.087957][T14365] cgroup
[  726.087957][T14365] cgroup
[  726.087957][T14365] owner
[  726.087957][T14365] nfacct
[  726.087957][T14365] nfacct
[  726.087957][T14365] mac
[  726.087957][T14365] limit
[  726.087957][T14365] ipvs
[  726.087957][T14365] helper
[  726.087957][T14365] devgroup
[  726.087957][T14365] cpu
[  726.087957][T14365] conntrack
[  726.087957][T14365] conntrack
[  726.087957][T14365] conntrack
[  726.087957][T14365] connlimit
[  726.087957][T14365] connlabel
[  726.087957][T14365] connbytes
[  726.087957][T14365] comment
[  726.087957][T14365] cluster
[  726.087957][T14365] bpf
[  726.087957][T14365] bpf
[  726.087957][T14365] addrtype
[  726.087957][T14365] connmark
[  726.087957][T14365] mark
[  726.087957][T14365] rpfilter
[  726.087957][T14365] ah
[  726.087957][T14365] tcpmss
[  726.087957][T14365] socket
[  726.087957][T14365] socket
[  726.087957][T14365] socket
[  726.087957][T14365] socket
[  726.087957][T14365] sctp
[  726.087957][T14365] recent
[  726.087957][T14365] recent
[  726.087957][T14365] policy
[  726.087957][T14365] osf
[  726.087957][T14365] multiport
[  726.087957][T14365] length
[  726.087957][T14365] l2tp
[  726.087957][T14365] iprange
[  726.087957][T14365] ipcomp
[  726.087957][T14365] ttl
[  726.087957][T14365] hashlimit
[  726.087957][T14365] hashlimit
[  726.087957][T14365] hashlimit
[  726.087957][T14365] esp
[  726.087957][T14365] ecn
[  726.087957][T14365] tos
[  726.087957][T14365] dscp
[  726.087957][T14365] dccp
[  726.087957][T14365] addrtype
[  726.087957][T14365] set
[  726.087957][T14365] set
[  726.087957][T14365] set
[  726.087957][T14365] set
[  726.087957][T14365] set
[  726.087957][T14365] icmp
[  726.097799][T14362] unable to read inode lookup table
[  726.290390][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.547071][T13860] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  726.596353][T13860] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  726.758902][T14376] fuse: Bad value for 'fd'
[  726.771857][T14376] kAFS: Can only specify source 'none' with -o dyn
[  726.788499][ T5107] Bluetooth: hci3: command tx timeout
[  727.099378][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.770059][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.912381][T14391] overlay: Unknown parameter 'ime
[  727.912381][T14391] string
[  727.912381][T14391] statistic
[  727.912381][T14391] state
[  727.912381][T14391] realm
[  727.912381][T14391] rateest
[  727.912381][T14391] quota
[  727.912381][T14391] pkttype
[  727.912381][T14391] physdev
[  727.912381][T14391] cgroup
[  727.912381][T14391] cgroup
[  727.912381][T14391] cgroup
[  727.912381][T14391] owner
[  727.912381][T14391] nfacct
[  727.912381][T14391] nfacct
[  727.912381][T14391] mac
[  727.912381][T14391] limit
[  727.912381][T14391] ipvs
[  727.912381][T14391] helper
[  727.912381][T14391] devgroup
[  727.912381][T14391] cpu
[  727.912381][T14391] conntrack
[  727.912381][T14391] conntrack
[  727.912381][T14391] conntrack
[  727.912381][T14391] connlimit
[  727.912381][T14391] connlabel
[  727.912381][T14391] connbytes
[  727.912381][T14391] comment
[  727.912381][T14391] cluster
[  727.912381][T14391] bpf
[  727.912381][T14391] bpf
[  727.912381][T14391] addrtype
[  727.912381][T14391] connmark
[  727.912381][T14391] mark
[  727.912381][T14391] rpfilter
[  727.912381][T14391] ah
[  727.912381][T14391] tcpmss
[  727.912381][T14391] socket
[  727.912381][T14391] socket
[  727.912381][T14391] socket
[  727.912381][T14391] socket
[  727.912381][T14391] sctp
[  727.912381][T14391] recent
[  727.912381][T14391] recent
[  727.912381][T14391] policy
[  727.912381][T14391] osf
[  727.912381][T14391] multiport
[  727.912381][T14391] length
[  727.912381][T14391] l2tp
[  727.912381][T14391] iprange
[  727.912381][T14391] ipcomp
[  727.912381][T14391] ttl
[  727.912381][T14391] hashlimit
[  727.912381][T14391] hashlimit
[  727.912381][T14391] hashlimit
[  727.912381][T14391] esp
[  727.912381][T14391] ecn
[  727.912381][T14391] tos
[  727.912381][T14391] dscp
[  727.912381][T14391] dccp
[  727.912381][T14391] addrtype
[  727.912381][T14391] set
[  727.912381][T14391] set
[  727.912381][T14391] set
[  727.912381][T14391] set
[  727.912381][T14391] set
[  727.912381][T14391] icmp
[  727.940961][T14390] binder: BINDER_SET_CONTEXT_MGR already set
[  728.093880][    C0] vkms_vblank_simulate: vblank timer overrun
[  728.132855][T14390] binder: 14388:14390 ioctl 4018620d 20000040 returned -16
[  728.176042][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.543322][T14377] loop0: detected capacity change from 0 to 40427
[  728.696394][T14377] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[  728.743840][T14377] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  728.798595][T14298] chnl_net:caif_netlink_parms(): no params data found
[  728.830116][T14377] F2FS-fs (loop0): invalid crc value
[  728.850402][T14377] F2FS-fs (loop0): Found nat_bits in checkpoint
[  729.535576][   T35] bridge_slave_1: left allmulticast mode
[  729.554759][T14377] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  729.561876][T14377] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  729.574970][   T35] bridge_slave_1: left promiscuous mode
[  729.604574][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.639295][   T35] bridge_slave_0: left allmulticast mode
[  729.646903][   T35] bridge_slave_0: left promiscuous mode
[  729.652857][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.754464][T14377] syz.0.2701: attempt to access beyond end of device
[  729.754464][T14377] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427
[  729.887116][T13480] syz-executor: attempt to access beyond end of device
[  729.887116][T13480] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  729.933770][T13480] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  730.286112][T14417] loop1: detected capacity change from 0 to 40427
[  730.323333][T14417] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  730.351086][T14417] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  730.374472][T14417] F2FS-fs (loop1): invalid crc_offset: 33558524
[  730.384265][T14417] F2FS-fs (loop1): Found nat_bits in checkpoint
[  730.423646][    C0] vkms_vblank_simulate: vblank timer overrun
[  730.476666][    C0] vkms_vblank_simulate: vblank timer overrun
[  730.524906][T14417] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  730.532032][T14417] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  730.894343][T14417] syz.1.2713: attempt to access beyond end of device
[  730.894343][T14417] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  730.939695][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  730.999679][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  731.012128][T14426] netlink: zone id is out of range
[  731.029633][T14426] netlink: zone id is out of range
[  731.039250][T14426] netlink: zone id is out of range
[  731.053774][T14426] netlink: zone id is out of range
[  731.055516][   T35] bond0 (unregistering): Released all slaves
[  731.059478][T14426] netlink: zone id is out of range
[  731.070965][T14426] netlink: zone id is out of range
[  731.077889][T14426] netlink: zone id is out of range
[  731.083774][T14426] netlink: zone id is out of range
[  731.088997][T14426] netlink: zone id is out of range
[  731.105151][T14426] netlink: zone id is out of range
[  731.201647][T13860] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.570917][T14435] overlay: Unknown parameter 'ime
[  731.570917][T14435] string
[  731.570917][T14435] statistic
[  731.570917][T14435] state
[  731.570917][T14435] realm
[  731.570917][T14435] rateest
[  731.570917][T14435] quota
[  731.570917][T14435] pkttype
[  731.570917][T14435] physdev
[  731.570917][T14435] cgroup
[  731.570917][T14435] cgroup
[  731.570917][T14435] cgroup
[  731.570917][T14435] owner
[  731.570917][T14435] nfacct
[  731.570917][T14435] nfacct
[  731.570917][T14435] mac
[  731.570917][T14435] limit
[  731.570917][T14435] ipvs
[  731.570917][T14435] helper
[  731.570917][T14435] devgroup
[  731.570917][T14435] cpu
[  731.570917][T14435] conntrack
[  731.570917][T14435] conntrack
[  731.570917][T14435] conntrack
[  731.570917][T14435] connlimit
[  731.570917][T14435] connlabel
[  731.570917][T14435] connbytes
[  731.570917][T14435] comment
[  731.570917][T14435] cluster
[  731.570917][T14435] bpf
[  731.570917][T14435] bpf
[  731.570917][T14435] addrtype
[  731.570917][T14435] connmark
[  731.570917][T14435] mark
[  731.570917][T14435] rpfilter
[  731.570917][T14435] ah
[  731.570917][T14435] tcpmss
[  731.570917][T14435] socket
[  731.570917][T14435] socket
[  731.570917][T14435] socket
[  731.570917][T14435] socket
[  731.570917][T14435] sctp
[  731.570917][T14435] recent
[  731.570917][T14435] recent
[  731.570917][T14435] policy
[  731.570917][T14435] osf
[  731.570917][T14435] multiport
[  731.570917][T14435] length
[  731.570917][T14435] l2tp
[  731.570917][T14435] iprange
[  731.570917][T14435] ipcomp
[  731.570917][T14435] ttl
[  731.570917][T14435] hashlimit
[  731.570917][T14435] hashlimit
[  731.570917][T14435] hashlimit
[  731.570917][T14435] esp
[  731.570917][T14435] ecn
[  731.570917][T14435] tos
[  731.570917][T14435] dscp
[  731.570917][T14435] dccp
[  731.570917][T14435] addrtype
[  731.570917][T14435] set
[  731.570917][T14435] set
[  731.570917][T14435] set
[  731.570917][T14435] set
[  731.570917][T14435] set
[  731.570917][T14435] icmp
[  732.208551][T13860] 8021q: adding VLAN 0 to HW filter on device team0
[  732.356278][T14298] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.374191][T14298] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.381604][T14298] bridge_slave_0: entered allmulticast mode
[  732.405816][T14298] bridge_slave_0: entered promiscuous mode
[  732.476069][T14298] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.483287][T14298] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.525397][T14298] bridge_slave_1: entered allmulticast mode
[  732.533273][T14298] bridge_slave_1: entered promiscuous mode
[  732.659388][T13293] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.666624][T13293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  732.749864][   T35] hsr_slave_0: left promiscuous mode
[  732.779447][   T35] hsr_slave_1: left promiscuous mode
[  732.801053][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  732.824401][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  732.844465][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  732.862109][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  732.926487][   T35] veth1_macvtap: left promiscuous mode
[  732.939788][   T35] veth0_macvtap: left promiscuous mode
[  732.964948][   T35] veth1_vlan: left promiscuous mode
[  732.973027][   T35] veth0_vlan: left promiscuous mode
[  733.501514][T14468] overlay: Unknown parameter 'ime
[  733.501514][T14468] string
[  733.501514][T14468] statistic
[  733.501514][T14468] state
[  733.501514][T14468] realm
[  733.501514][T14468] rateest
[  733.501514][T14468] quota
[  733.501514][T14468] pkttype
[  733.501514][T14468] physdev
[  733.501514][T14468] cgroup
[  733.501514][T14468] cgroup
[  733.501514][T14468] cgroup
[  733.501514][T14468] owner
[  733.501514][T14468] nfacct
[  733.501514][T14468] nfacct
[  733.501514][T14468] mac
[  733.501514][T14468] limit
[  733.501514][T14468] ipvs
[  733.501514][T14468] helper
[  733.501514][T14468] devgroup
[  733.501514][T14468] cpu
[  733.501514][T14468] conntrack
[  733.501514][T14468] conntrack
[  733.501514][T14468] conntrack
[  733.501514][T14468] connlimit
[  733.501514][T14468] connlabel
[  733.501514][T14468] connbytes
[  733.501514][T14468] comment
[  733.501514][T14468] cluster
[  733.501514][T14468] bpf
[  733.501514][T14468] bpf
[  733.501514][T14468] addrtype
[  733.501514][T14468] connmark
[  733.501514][T14468] mark
[  733.501514][T14468] rpfilter
[  733.501514][T14468] ah
[  733.501514][T14468] tcpmss
[  733.501514][T14468] socket
[  733.501514][T14468] socket
[  733.501514][T14468] socket
[  733.501514][T14468] socket
[  733.501514][T14468] sctp
[  733.501514][T14468] recent
[  733.501514][T14468] recent
[  733.501514][T14468] policy
[  733.501514][T14468] osf
[  733.501514][T14468] multiport
[  733.501514][T14468] length
[  733.501514][T14468] l2tp
[  733.501514][T14468] iprange
[  733.501514][T14468] ipcomp
[  733.501514][T14468] ttl
[  733.501514][T14468] hashlimit
[  733.501514][T14468] hashlimit
[  733.501514][T14468] hashlimit
[  733.501514][T14468] esp
[  733.501514][T14468] ecn
[  733.501514][T14468] tos
[  733.501514][T14468] dscp
[  733.501514][T14468] dccp
[  733.501514][T14468] addrtype
[  733.501514][T14468] set
[  733.501514][T14468] set
[  733.501514][T14468] set
[  733.501514][T14468] set
[  733.501514][T14468] set
[  733.501514][T14468] icmp
[  733.655709][T14458] loop1: detected capacity change from 0 to 40427
[  733.725963][T14458] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  733.774441][T14458] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  733.822677][T14458] F2FS-fs (loop1): invalid crc_offset: 33558524
[  733.886442][T14458] F2FS-fs (loop1): Found nat_bits in checkpoint
[  734.029101][T14458] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  734.061198][T14458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  734.223254][T14484] syz.1.2727: attempt to access beyond end of device
[  734.223254][T14484] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  734.460792][T14492] loop0: detected capacity change from 0 to 2048
[  734.482108][T14492] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  734.528390][T14492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  734.930713][   T35] team0 (unregistering): Port device team_slave_1 removed
[  735.057180][   T35] team0 (unregistering): Port device team_slave_0 removed
[  736.168779][T14495] loop0: detected capacity change from 0 to 40427
[  736.203541][T14495] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[  736.234558][T14495] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  737.154747][T14495] F2FS-fs (loop0): invalid crc value
[  737.164419][T14495] F2FS-fs (loop0): Found nat_bits in checkpoint
[  737.372036][T14516] loop1: detected capacity change from 0 to 40427
[  737.389461][T14516] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  737.397312][T14516] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  737.423863][T14495] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  737.444263][T14516] F2FS-fs (loop1): Found nat_bits in checkpoint
[  737.451294][T14495] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  737.511347][T14495] syz.0.2741: attempt to access beyond end of device
[  737.511347][T14495] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427
[  737.534117][T14516] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  737.541176][T14516] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  737.576092][T14515] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  737.603363][T14515] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  737.628743][T13480] syz-executor: attempt to access beyond end of device
[  737.628743][T13480] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  737.674099][T13480] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  737.742926][ T5159] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  737.956724][ T5159] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  737.999451][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.013519][ T5159] usb 4-1: config 0 has no interfaces?
[  738.020498][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.040801][ T5159] usb 4-1: config 0 has no interfaces?
[  738.051066][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.063440][ T5159] usb 4-1: config 0 has no interfaces?
[  738.072923][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.093746][ T5159] usb 4-1: config 0 has no interfaces?
[  738.101959][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.130891][ T5159] usb 4-1: config 0 has no interfaces?
[  738.140983][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.171770][ T5159] usb 4-1: config 0 has no interfaces?
[  738.181134][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.201133][ T5159] usb 4-1: config 0 has no interfaces?
[  738.208186][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.223777][ T5159] usb 4-1: config 0 has no interfaces?
[  738.236903][ T5159] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  738.253465][ T5159] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  738.275078][ T5159] usb 4-1: Product: syz
[  738.279265][ T5159] usb 4-1: Manufacturer: syz
[  738.291396][ T5159] usb 4-1: SerialNumber: syz
[  738.306908][ T5159] usb 4-1: config 0 descriptor??
[  738.375165][T14298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  738.417091][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.424289][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  738.477330][T14298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  738.629475][T14298] team0: Port device team_slave_0 added
[  738.677797][T14298] team0: Port device team_slave_1 added
[  738.709963][T14100] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  738.741384][T14100] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  738.764094][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.782998][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.813950][T14100] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  738.837302][   T25] usb 4-1: USB disconnect, device number 14
[  738.891339][T14100] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  738.932516][T14298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.948574][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.977874][T14298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  739.003928][T14298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  739.015951][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  739.047174][T14298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  739.164987][ T5160] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  739.191247][T14298] hsr_slave_0: entered promiscuous mode
[  739.210354][T14298] hsr_slave_1: entered promiscuous mode
[  739.217376][T14298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  739.229145][T14298] Cannot create hsr debugfs directory
[  739.367682][ T5160] usb 2-1: New USB device found, idVendor=2100, idProduct=9e5a, bcdDevice=5e.95
[  739.404621][ T5160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.430267][ T5160] usb 2-1: Product: syz
[  739.451264][ T5160] usb 2-1: Manufacturer: syz
[  739.468258][ T5160] usb 2-1: SerialNumber: syz
[  739.494772][ T5160] usb 2-1: config 0 descriptor??
[  739.502943][ T5160] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  739.536793][T14530] loop0: detected capacity change from 0 to 40427
[  739.554758][ T5160] ftdi_sio ttyUSB0: unknown device type: 0x5e95
[  739.558072][T14530] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  739.570119][T14530] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  739.588014][T14530] F2FS-fs (loop0): invalid crc_offset: 33558524
[  739.626566][T14530] F2FS-fs (loop0): Found nat_bits in checkpoint
[  739.804396][T14530] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  739.819972][T14530] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  739.852643][T14534] loop1: detected capacity change from 0 to 128
[  739.866816][T14534] ufs: Invalid option: "" or missing value
[  739.881792][T14534] ufs: wrong mount options
[  739.967212][T13293] usb 2-1: USB disconnect, device number 12
[  740.023725][T13293] ftdi_sio 2-1:0.0: device disconnected
[  740.035318][T14549] syz.0.2750: attempt to access beyond end of device
[  740.035318][T14549] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  740.077260][T13860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  740.178438][T14100] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.265126][T14100] 8021q: adding VLAN 0 to HW filter on device team0
[  740.332149][T13293] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.339377][T13293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  740.366940][T13293] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.374143][T13293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  740.625874][T14100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  740.913175][T14298] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  740.941666][T14298] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  740.985168][T14298] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  741.017191][T14298] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  741.030581][T14568] loop1: detected capacity change from 0 to 2048
[  741.057110][T14568] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  741.116347][T14568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  741.317037][T14100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  741.414067][T13860] veth0_vlan: entered promiscuous mode
[  741.524893][T13860] veth1_vlan: entered promiscuous mode
[  741.561639][T14298] 8021q: adding VLAN 0 to HW filter on device bond0
[  741.655644][T14298] 8021q: adding VLAN 0 to HW filter on device team0
[  741.810382][T13293] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.817692][T13293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.856532][T13293] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.863770][T13293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.051177][T14595] net_ratelimit: 79 callbacks suppressed
[  743.051207][T14595] netlink: zone id is out of range
[  743.072284][T14298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  743.085553][T14595] netlink: zone id is out of range
[  743.090739][T14595] netlink: zone id is out of range
[  743.133682][T14595] netlink: zone id is out of range
[  743.162786][T14595] netlink: zone id is out of range
[  743.202499][T14595] netlink: zone id is out of range
[  743.234786][T14595] netlink: zone id is out of range
[  743.239986][T14595] netlink: zone id is out of range
[  743.322385][T14595] netlink: zone id is out of range
[  743.352698][T14595] netlink: zone id is out of range
[  743.475531][T14100] veth0_vlan: entered promiscuous mode
[  743.534450][T14100] veth1_vlan: entered promiscuous mode
[  743.737086][T14100] veth0_macvtap: entered promiscuous mode
[  743.884417][T13230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  743.900026][T13230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  743.907452][ T4487] Bluetooth: hci0: command 0x0406 tx timeout
[  743.916028][T13230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  743.935787][T13230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  743.943693][T13230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  743.951690][T13230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  744.041966][T14100] veth1_macvtap: entered promiscuous mode
[  744.137907][T14618] netlink: 'syz.0.2773': attribute type 1 has an invalid length.
[  744.161026][T14618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2773'.
[  744.411713][T14607] loop1: detected capacity change from 0 to 32768
[  744.442682][T14298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  744.566755][T14607] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  744.606862][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.627883][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.638547][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.817356][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.920358][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  745.077505][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.131741][T14607] XFS (loop1): Ending clean mount
[  745.287905][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  745.323032][T14607] XFS (loop1): Quotacheck needed: Please wait.
[  745.366982][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.474701][T14100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  745.649351][T14607] XFS (loop1): Quotacheck: Done.
[  745.657434][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  745.688143][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.708770][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  745.720689][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.731389][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  745.746476][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.752338][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  745.752356][   T29] audit: type=1804 audit(1719668795.048:290): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2770" name="/root/syzkaller.17t0hD/269/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  745.756732][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  745.788020][   T29] audit: type=1804 audit(1719668795.088:291): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2770" name="/root/syzkaller.17t0hD/269/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  745.809132][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.841325][T14100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  745.849356][   T29] audit: type=1804 audit(1719668795.118:292): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2770" name="/root/syzkaller.17t0hD/269/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  745.923149][T11801] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  745.962958][T14637] netlink: 'syz.3.2777': attribute type 10 has an invalid length.
[  745.995412][T13230] Bluetooth: hci5: command tx timeout
[  746.062343][T14100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  746.073985][T14100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  746.083063][T14100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  746.094867][T14100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  746.520025][T14298] veth0_vlan: entered promiscuous mode
[  746.800745][T14298] veth1_vlan: entered promiscuous mode
[  746.873787][ T1101] bridge_slave_1: left allmulticast mode
[  746.879527][ T1101] bridge_slave_1: left promiscuous mode
[  746.898036][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.964513][ T1101] bridge_slave_0: left allmulticast mode
[  746.970321][ T1101] bridge_slave_0: left promiscuous mode
[  747.049402][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.063626][T13230] Bluetooth: hci5: command tx timeout
[  749.119585][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  749.142145][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  749.165148][ T1101] bond0 (unregistering): Released all slaves
[  749.213312][T14613] chnl_net:caif_netlink_parms(): no params data found
[  749.335007][T14669] loop0: detected capacity change from 0 to 32768
[  749.370325][ T5707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.387872][ T5707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.485407][T14669] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  749.586187][T14669] XFS (loop0): Ending clean mount
[  749.618339][T14669] XFS (loop0): Quotacheck needed: Please wait.
[  749.737711][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2789'.
[  749.802580][T14669] XFS (loop0): Quotacheck: Done.
[  749.837153][ T1101] hsr_slave_0: left promiscuous mode
[  749.861872][ T1101] hsr_slave_1: left promiscuous mode
[  749.877374][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  749.898203][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  749.911275][   T29] audit: type=1804 audit(1719668799.208:293): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2788" name="/root/syzkaller.MATGoq/83/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[  749.974613][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'.
[  750.008245][ T1101] veth1_vlan: left promiscuous mode
[  750.035343][   T29] audit: type=1804 audit(1719668799.328:294): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2788" name="/root/syzkaller.MATGoq/83/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[  750.039960][ T1101] veth0_vlan: left promiscuous mode
[  750.128017][   T29] audit: type=1804 audit(1719668799.328:295): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2788" name="/root/syzkaller.MATGoq/83/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[  750.151349][T13230] Bluetooth: hci5: command tx timeout
[  750.237413][T13480] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  752.189368][T14703] loop0: detected capacity change from 0 to 40427
[  752.203782][T14703] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  752.211590][T14703] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  752.223794][T13230] Bluetooth: hci5: command tx timeout
[  752.286996][T14703] F2FS-fs (loop0): Found nat_bits in checkpoint
[  752.374104][T14703] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  752.381217][T14703] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  752.410262][T14701] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  752.415202][ T1101] team0 (unregistering): Port device team_slave_1 removed
[  752.421105][T14701] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  752.550038][ T1101] team0 (unregistering): Port device team_slave_0 removed
[  754.036378][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'.
[  754.055445][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'.
[  754.074446][T14718] tc_dump_action: action bad kind
[  754.101192][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.114010][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.300408][T14613] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.314446][T14613] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.373711][T14613] bridge_slave_0: entered allmulticast mode
[  754.411523][T14613] bridge_slave_0: entered promiscuous mode
[  754.437926][T14613] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.474108][T14613] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.484706][T14613] bridge_slave_1: entered allmulticast mode
[  754.492429][T14613] bridge_slave_1: entered promiscuous mode
[  754.730157][T14613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.771525][T14298] veth0_macvtap: entered promiscuous mode
[  754.814396][T14734] netlink: 'syz.4.2797': attribute type 21 has an invalid length.
[  754.831789][T14734] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2797'.
[  754.857229][T14613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.860135][T14737] loop0: detected capacity change from 0 to 512
[  754.973058][T14737] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2798: invalid block
[  754.998714][T14737] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2798: invalid indirect mapped block 4294967295 (level 1)
[  755.017808][T14737] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2798: invalid indirect mapped block 4294967295 (level 1)
[  755.051525][T14298] veth1_macvtap: entered promiscuous mode
[  755.060662][T14737] EXT4-fs (loop0): 2 truncates cleaned up
[  755.080515][T14737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  755.133342][T14613] team0: Port device team_slave_0 added
[  755.155511][T14613] team0: Port device team_slave_1 added
[  755.169762][T14742] loop4: detected capacity change from 0 to 4096
[  755.178641][T14742] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  755.197561][  T928] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  756.027908][T14745] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2798: bg 0: block 5: invalid block bitmap
[  756.331551][T14746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  756.661559][  T928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  756.696936][   T58] IPVS: starting estimator thread 0...
[  756.772138][  T928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  756.820981][T14613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  756.878351][  T928] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  756.897148][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  756.945520][T14747] IPVS: using max 15 ests per chain, 36000 per kthread
[  756.987741][  T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.060963][  T928] usb 4-1: config 0 descriptor??
[  757.112467][T14613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  757.214707][T14613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  757.221911][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  757.274525][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[  757.281029][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[  757.398075][T14613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  757.412318][T13480] EXT4-fs error (device loop0): ext4_lookup:1854: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  757.440252][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  757.488083][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.504190][T13480] EXT4-fs error (device loop0): ext4_lookup:1854: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  757.531716][  T928] holtek_kbd 0003:04D9:A055.000B: collection stack underflow
[  757.545014][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  757.571737][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.577500][  T928] holtek_kbd 0003:04D9:A055.000B: item 0 4 0 12 parsing failed
[  757.594762][  T928] holtek_kbd 0003:04D9:A055.000B: probe with driver holtek_kbd failed with error -22
[  757.604567][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  757.627075][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.647474][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  757.665508][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.677030][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  757.694007][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.718179][T14298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  757.746315][  T928] usb 4-1: USB disconnect, device number 15
[  757.750876][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  757.782894][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.792940][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  757.798276][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2804'.
[  757.803645][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.822533][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  757.837369][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.849178][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  757.859752][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.871039][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  757.882831][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.897293][T14298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  757.934848][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'.
[  758.188531][T14613] hsr_slave_0: entered promiscuous mode
[  758.196415][T14613] hsr_slave_1: entered promiscuous mode
[  758.205399][T14613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  758.213949][T14613] Cannot create hsr debugfs directory
[  758.251161][T14298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  758.261452][T14298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  758.272237][T14298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  758.281137][T14298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  758.326294][T14767] trusted_key: encrypted_key: insufficient parameters specified
[  758.348946][T13480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.370029][   T29] audit: type=1804 audit(1719668807.668:296): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2807" name="/root/syzkaller.0V5kJV/6/file1" dev="sda1" ino=2089 res=1 errno=0
[  758.632291][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.793068][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.073086][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.041088][  T928] IPVS: starting estimator thread 0...
[  763.184957][T14783] IPVS: using max 15 ests per chain, 36000 per kthread
[  763.242317][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.634423][T14788] loop4: detected capacity change from 0 to 32768
[  763.737583][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  763.750717][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  763.764516][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  763.779108][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  763.787527][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  763.795873][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  763.807498][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.823530][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.879612][T14788] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names
[  763.896790][T14788] bcachefs (loop4): recovering from clean shutdown, journal seq 7
[  764.035079][T14788] bcachefs (loop4): alloc_read... done
[  764.040674][T14788] bcachefs (loop4): stripes_read... done
[  764.048252][T14788] bcachefs (loop4): snapshots_read... done
[  764.057529][T14788] bcachefs (loop4): journal_replay... done
[  764.063493][T14788] bcachefs (loop4): resume_logged_ops... done
[  764.073610][T14788] bcachefs (loop4): going read-write
[  764.096673][T14788] bcachefs (loop4): done starting filesystem
[  764.098359][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'.
[  764.217266][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.280821][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'.
[  764.299069][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.427567][   T29] audit: type=1800 audit(1719668813.678:297): pid=14810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2816" name="bus" dev="loop4" ino=1073741825 res=0 errno=0
[  764.993197][T14100] bcachefs (loop4): shutting down
[  765.003727][T14100] bcachefs (loop4): going read-only
[  765.008955][T14100] bcachefs (loop4): finished waiting for writes to stop
[  765.061930][   T12] bridge_slave_1: left allmulticast mode
[  765.070438][T14100] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  765.090353][   T12] bridge_slave_1: left promiscuous mode
[  765.118094][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.129533][T14100] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12
[  765.155511][T14100] bcachefs (loop4): shutdown complete, journal seq 13
[  765.163254][T14100] bcachefs (loop4): marking filesystem clean
[  765.175575][   T12] bridge_slave_0: left allmulticast mode
[  765.181332][   T12] bridge_slave_0: left promiscuous mode
[  765.224731][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.299497][T14819] trusted_key: encrypted_key: insufficient parameters specified
[  765.303191][T14100] bcachefs (loop4): shutdown complete
[  765.315302][   T29] audit: type=1804 audit(1719668814.618:298): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2822" name="/root/syzkaller.DeIkWn/1/file1" dev="sda1" ino=2108 res=1 errno=0
[  765.413902][ T5156] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  765.624680][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  765.648749][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  765.679633][ T5156] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  765.696969][ T5156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.708137][ T5156] usb 4-1: config 0 descriptor??
[  765.913778][T13230] Bluetooth: hci1: command tx timeout
[  766.128104][ T5156] holtek_kbd 0003:04D9:A055.000C: collection stack underflow
[  766.186726][ T5156] holtek_kbd 0003:04D9:A055.000C: item 0 4 0 12 parsing failed
[  766.209496][ T5156] holtek_kbd 0003:04D9:A055.000C: probe with driver holtek_kbd failed with error -22
[  766.366262][ T5157] usb 4-1: USB disconnect, device number 16
[  766.501695][T14831] loop2: detected capacity change from 0 to 8192
[  766.562504][T14831] Dev loop2: RDB in block 1 has bad checksum
[  766.967768][T14835] loop2: detected capacity change from 0 to 512
[  766.980386][T14835] EXT4-fs: Ignoring removed bh option
[  767.008162][T14835] EXT4-fs error (device loop2): __ext4_iget:4906: inode #15: block 1803188595: comm syz.2.2828: invalid block
[  767.022198][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  767.035041][T14835] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2828: couldn't read orphan inode 15 (err -117)
[  767.053045][T14835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  767.090266][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  767.148406][   T12] bond0 (unregistering): Released all slaves
[  767.983746][T13230] Bluetooth: hci1: command tx timeout
[  768.284096][   T12] tipc: Disabling bearer <udp:syz1>
[  768.294445][   T12] tipc: Left network mode
[  768.505239][T14298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.704820][   T30] INFO: task syz.3.2315:13204 blocked for more than 143 seconds.
[  768.734974][   T30]       Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0
[  768.757488][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  768.781064][   T30] task:syz.3.2315      state:D stack:24824 pid:13204 tgid:13189 ppid:8936   flags:0x00004004
[  768.799230][   T30] Call Trace:
[  768.802655][   T30]  <TASK>
[  768.809344][   T30]  __schedule+0x17e8/0x4a20
[  768.823488][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  768.830524][   T30]  ? __pfx___schedule+0x10/0x10
[  768.856086][   T30]  ? __pfx_lock_release+0x10/0x10
[  768.862580][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  768.877902][T14852] loop4: detected capacity change from 0 to 2048
[  768.879134][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  768.893500][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  768.903981][   T30]  ? schedule+0x90/0x320
[  768.908487][   T30]  schedule+0x14b/0x320
[  768.913128][   T30]  io_schedule+0x8d/0x110
[  768.927760][   T30]  folio_wait_bit_common+0x882/0x12b0
[  768.933888][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  768.940071][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  768.946497][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  768.952395][   T30]  ? jfs_error+0x21d/0x2e0
[  768.957414][   T30]  ? __pfx_folio_mark_accessed+0x10/0x10
[  768.957541][T14852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  768.963275][   T30]  ? __get_metapage+0x555/0x1050
[  768.980681][   T30]  release_metapage+0x8c/0x870
[  768.985642][   T30]  ? __pfx_metapage_read_folio+0x10/0x10
[  768.991784][   T30]  __get_metapage+0xb1d/0x1050
[  768.996927][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  769.002536][   T30]  jfs_readdir+0x2945/0x4660
[  769.007442][   T30]  ? __pfx_jfs_readdir+0x10/0x10
[  769.012785][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  769.018817][   T30]  ? __pfx___down_write_common+0x10/0x10
[  769.021687][T14852] ext4 filesystem being mounted at /root/syzkaller.0V5kJV/12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  769.028897][   T30]  ? end_current_label_crit_section+0x14e/0x180
[  769.044589][   T30]  ? __pfx_jfs_readdir+0x10/0x10
[  769.049624][   T30]  wrap_directory_iterator+0x96/0xe0
[  769.055289][   T30]  iterate_dir+0x660/0x820
[  769.059763][   T30]  __se_sys_getdents64+0x20d/0x4f0
[  769.065097][   T30]  ? __pfx___se_sys_getdents64+0x10/0x10
[  769.071071][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  769.077157][   T30]  ? __pfx_filldir64+0x10/0x10
[  769.082308][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  769.088878][   T30]  ? do_syscall_64+0x100/0x230
[  769.094053][   T30]  ? do_syscall_64+0xb6/0x230
[  769.098794][   T30]  do_syscall_64+0xf3/0x230
[  769.103349][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.109943][   T30] RIP: 0033:0x7fd0bb375b99
[  769.114487][   T30] RSP: 002b:00007fd0bc0d1048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  769.123216][   T30] RAX: ffffffffffffffda RBX: 00007fd0bb504078 RCX: 00007fd0bb375b99
[  769.140374][   T30] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000007
[  769.157368][   T30] RBP: 00007fd0bb3f677e R08: 0000000000000000 R09: 0000000000000000
[  769.169861][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  769.180614][   T30] R13: 000000000000006e R14: 00007fd0bb504078 R15: 00007fff91c68b68
[  769.198459][   T30]  </TASK>
[  769.201792][   T30] 
[  769.201792][   T30] Showing all locks held in the system:
[  769.210392][   T30] 5 locks held by kworker/u8:1/12:
[  769.215586][   T30] 3 locks held by kworker/1:0/25:
[  769.238455][   T30]  #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  769.268892][   T30]  #1: ffffc900001f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  769.284104][   T30]  #2: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  769.293342][   T30] 1 lock held by khungtaskd/30:
[  769.300862][   T30]  #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  769.319690][   T30] 3 locks held by kworker/u8:9/2434:
[  769.326547][   T30]  #0: ffff88801d2ee948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  769.351700][   T30]  #1: ffffc90009337d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  769.373502][   T30]  #2: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610
[  769.384629][   T30] 2 locks held by getty/4855:
[  769.389332][   T30]  #0: ffff88802a50b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  769.399286][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  769.409539][   T30] 3 locks held by kworker/u8:12/5707:
[  769.414999][   T30]  #0: ffff888029eca148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  769.426832][   T30]  #1: ffffc900040c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  769.441378][   T30]  #2: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  769.450954][   T30] 2 locks held by syz.3.2315/13204:
[  769.456286][   T30]  #0: ffff88807ca39748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310
[  769.468869][   T30]  #1: ffff88805fa18ec0 (&type->i_mutex_dir_key#20){++++}-{3:3}, at: wrap_directory_iterator+0x5d/0xe0
[  769.480261][   T30] 1 lock held by syz-executor/14100:
[  769.485629][   T30]  #0: ffffffff8e339338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  769.496737][   T30] 7 locks held by syz-executor/14613:
[  769.502133][   T30]  #0: ffff88802f6c6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90
[  769.512783][   T30]  #1: ffff888066fed488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500
[  769.522686][   T30]  #2: ffff8880228dc4b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500
[  769.532865][   T30]  #3: ffffffff8eef4848 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  769.544934][   T30]  #4: ffff8880234b70e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  769.555655][   T30]  #5: ffff8880234b0250 (&devlink->lock_key#36){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160
[  769.565971][   T30]  #6: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: unregister_nexthop_notifier+0x17/0x40
[  769.578532][   T30] 1 lock held by syz-executor/14791:
[  769.584360][   T30]  #0: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180
[  769.594085][   T30] 2 locks held by syz.3.2830/14841:
[  769.599312][   T30]  #0: ffff888078397a10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  769.609665][   T30]  #1: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_sock_ac_close+0xc9/0x130
[  769.619241][   T30] 1 lock held by syz.2.2833/14853:
[  769.624423][   T30]  #0: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0
[  769.633618][   T30] 
[  769.635960][   T30] =============================================
[  769.635960][   T30] 
[  769.645787][   T30] NMI backtrace for cpu 1
[  769.650155][   T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0
[  769.660172][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  769.670264][   T30] Call Trace:
[  769.673570][   T30]  <TASK>
[  769.676508][   T30]  dump_stack_lvl+0x241/0x360
[  769.681217][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  769.686445][   T30]  ? __pfx__printk+0x10/0x10
[  769.691055][   T30]  ? vprintk_emit+0x631/0x770
[  769.695761][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  769.700853][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  769.705851][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  769.711345][   T30]  ? _printk+0xd5/0x120
[  769.715542][   T30]  ? __pfx__printk+0x10/0x10
[  769.720199][   T30]  ? __wake_up_klogd+0xcc/0x110
[  769.725070][   T30]  ? __pfx__printk+0x10/0x10
[  769.729720][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  769.735368][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  769.740435][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  769.746491][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  769.752500][   T30]  watchdog+0xfde/0x1020
[  769.756776][   T30]  ? watchdog+0x1ea/0x1020
[  769.761238][   T30]  ? __pfx_watchdog+0x10/0x10
[  769.765940][   T30]  kthread+0x2f2/0x390
[  769.770025][   T30]  ? __pfx_watchdog+0x10/0x10
[  769.774749][   T30]  ? __pfx_kthread+0x10/0x10
[  769.779361][   T30]  ret_from_fork+0x4d/0x80
[  769.783802][   T30]  ? __pfx_kthread+0x10/0x10
[  769.788414][   T30]  ret_from_fork_asm+0x1a/0x30
[  769.793219][   T30]  </TASK>
[  769.797128][   T30] Sending NMI from CPU 1 to CPUs 0:
[  769.802423][    C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30
[  769.817395][T14100] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.832143][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  769.839044][   T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0
[  769.848973][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  769.859072][   T30] Call Trace:
[  769.862380][   T30]  <TASK>
[  769.865331][   T30]  dump_stack_lvl+0x241/0x360
[  769.870076][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  769.875324][   T30]  ? __pfx__printk+0x10/0x10
[  769.879962][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  769.885983][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  769.891656][   T30]  ? vscnprintf+0x5d/0x90
[  769.896026][   T30]  panic+0x349/0x860
[  769.899958][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  769.905629][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  769.911831][   T30]  ? __pfx_panic+0x10/0x10
[  769.916312][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  769.921730][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  769.927386][   T30]  ? __irq_work_queue_local+0x137/0x410
[  769.932943][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  769.938592][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  769.943992][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  769.950186][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  769.956369][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  769.962021][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  769.968212][   T30]  watchdog+0x101d/0x1020
[  769.972572][   T30]  ? watchdog+0x1ea/0x1020
[  769.977028][   T30]  ? __pfx_watchdog+0x10/0x10
[  769.981735][   T30]  kthread+0x2f2/0x390
[  769.985832][   T30]  ? __pfx_watchdog+0x10/0x10
[  769.990571][   T30]  ? __pfx_kthread+0x10/0x10
[  769.995188][   T30]  ret_from_fork+0x4d/0x80
[  769.999628][   T30]  ? __pfx_kthread+0x10/0x10
[  770.004251][   T30]  ret_from_fork_asm+0x1a/0x30
[  770.009057][   T30]  </TASK>
[  770.012315][   T30] Kernel Offset: disabled
[  770.016654][   T30] Rebooting in 86400 seconds..