last executing test programs:

7.981521799s ago: executing program 4 (id=422):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='backgrgund_compression=none,background_compression=zstd,str_hash=crc32c,str_hash=crc32c,data_checksum=crc64,data_checksum=xxhash,str_hash=siphash,background_compression=none,obj_user=bcachefs\x00,fsuuid=2818af35-153=-\x00032-af49-86c84913,dont_hash,measure,\x00'], 0x1, 0x5afb, &(0x7f0000005bc0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r1, 0x4, 0x30000)
r2 = dup(r1)
pwritev2(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0)

7.825641262s ago: executing program 1 (id=430):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0), 0xfea7)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

5.750070977s ago: executing program 4 (id=438):
r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKafee9u97SV7WCm7G+0qrLQHr2ZsCCEY2A3BK/z7SU8zb57x9x7WvGc+wC+AnnUuItYi4lhE3IuI0fb1pF3iZqtkj3v54tH0+otH00k0m3c+SfL27Fps+ZrMifZzDkXE738T8afkzbj1ldX5qUqlvNSuFxvVxWJ9ZfXyXHVqtjxbXiiVJicmx69fuVY6sLGerf7r+a/nbv3hv//50bP/r/3yL1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeEbSSPiOxFxPr//R6MvfzUBgKOs2RyN5ujW+iv92+oAwNGQ5jmwJC20cwEjkaaFQiuHdyaG00qt3rh0v7a8MNPKlY3FQHp/rlIeb+cKx2IgyeoT+fmremlb/UpEnI6Ivw4ez+uF6VplpptvfACgh53Ytv5/Ptha/wGAI26o2x0AAA6d9R8Aeo/1HwB6j/UfAHqP9R8Aeo/1HwB6j/UfAHrK727fzkpzvf351zMPVpbnaw8uz5Tr84Xq8nRhura0WJit1Wbzz+yp7vV8lVptceJqLD8sNsr1RrG+snq3WlteaNzNP9f7bnngUEYFAOzm9Nmn7ycRsXbjeF5iy14O1mo42tJudwDomr5udwDoGrt9Qe/yMz6wwxa9r+n4J0JPDr4vwOG4+H35f+hV8v/Qu+T/oXfJ/0PvajYTe/wDQI+R4wf8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vpG8JGmhvRf4SKRpoRBxMiLGYiC5P1cpj0fEqYh4b3BgMKtPdLvTAMBbSj9K2vt/XRy9MLK99VjyxWB+jIg///3O3x5ONRpLE9n1TzevN560r5e60X8AYC8b6/TGOr7h5YtH0xvlMPvz/FetzUWzuOvt0mrpj/78OBQDETH8WdKut2TvV/oOIP7a44j43k7jT/LcyFh759Pt8bPYJw81fvpa/DRvax2z78V3D6Av0GueZvPPzZ3uvzTO5ced7/+hfIZ6exvz3/ob81+6Of/1dZj/zu03xtX//bZj2+OIH/TvFD/ZjJ90iH9hn/E/+OGPz3dqa/4j4mLsHH9rrGKjulisr6xenqtOzZZnywul0uTE5Pj1K9dKxTxHXdzIVL/p4xuXTu02/uEO8Yf2GP/P9jn+f355748/2SX+L3668+t/Zpf42Zr4833Gnxr+d8ftu7P4Mx3Gv9frf2mf8Z99uDqzz4cCAIegvrI6P1WplJecdOmk79vRDSdOXjvp9swEvGuvbvpu9wQAAAAAAAAAAAAAAOjkMP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj6KgAA//+r59Ta")
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="55afb6777e0986a7c8e4499fd19500f1826e6e95a3cbf1fcbed722810a264b7aa27d60e2974c5da4944d645f2e5488e2d78557a57962b8d13577ff344822938b26875db1af097656c117d0f7463330cb19f43f66bf4afed4c6ba8ee20f478dc7e35c4d979296716029a3a500af2bc09686605a5d1af0bd3efdbf30bdff551efae82fd4f8b59a0f022af26295e9a389e83a12819d0c12a1be9cf90fb324a191cfeaf82f157d3f91c7aaa88f4070eecb1328d0", 0xb2}, {&(0x7f0000000100)="316820747ee54ef8a1b8dbd5342823d0ee9d176394d45b", 0x17}, {&(0x7f00000001c0)="ef60457487d7c4e9e02fe82b0e93b0b3238ab9b5832ade8c572cf7d074ccc7ce654d4715708e9c97d7eaa1ec43cc684dcc28a6b78660b41d9ecab3073a2a6a4329d6a51671daa84041ca3c942c49bc649fe915c8940582ff69d6db0707ed3c0111c0fa2f07e529771a845b2251dcd7a157c3b3096f18b9a032406104704557d1f2910181428f92d4f70c051935ab07eb30cc76b32cc85d1569b80795fb648f922410e9eb8a1731b278a8a2f6b78ca8e17f34861dcffb77912b53f10b6d8303880a7af7c5c1cea1192a8692a54ddbed24778e5d4ec83e66d35f1fcb95fad4ffc8819f", 0xe2}], 0x3, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0)
renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x44}, {0x6}]})
ioctl$UI_ABS_SETUP(r3, 0xc00c55ca, &(0x7f0000000080))
ioctl$TIOCGPTPEER(r1, 0x5441, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000a00)={'syztnl0\x00', <r4=>0x0, 0x80, 0x40, 0x1, 0x81, {{0x2a, 0x4, 0x0, 0x2c, 0xa8, 0x64, 0x0, 0x40, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x24, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb1b}, {@rand_addr=0x64010101, 0x3}, {@remote, 0xffffff81}, {@private=0xa010100, 0x40000000}]}, @timestamp={0x44, 0xc, 0x67, 0x0, 0x7, [0x7fff, 0x2]}, @rr={0x7, 0x23, 0xe4, [@empty, @remote, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x4, [{@private=0xa010101, 0x8e}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x100}, {@remote}]}, @ssrr={0x89, 0xb, 0x69, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp={0x44, 0x8, 0x25, 0x0, 0x3, [0x2]}]}}}}})
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r1}, 0x8)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r7, r6, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x10000, 0x18}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000006c190018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000002470500090000009500000000000000817c010419c200007f3aff072000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000f703000000001200850000000c000000b700000000000000bf9108000000ff0f000000000000000085b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[r1, r8, r2, r1, r9], &(0x7f0000000b80)=[{0x4, 0x5, 0x6, 0x9}, {0x1, 0x3, 0x2, 0x5}, {0x4, 0x3, 0x5, 0x8}, {0x5, 0x1, 0x3, 0xc}, {0x5, 0x1, 0x4, 0x4}, {0x1, 0x4, 0x3, 0x1}], 0x10, 0x9}, 0x90)

5.745396932s ago: executing program 1 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x400008, 0x0, 0xffffffffffffffff, 0xfffffe23}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

5.37051254s ago: executing program 1 (id=442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)={[{@type={'type', 0x3d, "9ccd34c6"}}, {@type={'type', 0x3d, "1d029e28"}}, {@type={'type', 0x3d, "65ac0527"}}, {@gid}, {@part={'part', 0x3d, 0x8000000000000000}}, {@part={'part', 0x3d, 0x2c1}}, {@barrier}, {@gid}, {@creator={'creator', 0x3d, "1e45a7a9"}}, {@gid}]}, 0x1, 0x5d1, &(0x7f0000000cc0)="$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")
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00')
r3 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0)
readv(r3, &(0x7f0000000280)=[{&(0x7f0000000100)=""/116, 0x74}], 0x1)
lseek(r2, 0x9, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}}, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file1\x00', 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1, 0x1216, &(0x7f00000036c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

4.956143666s ago: executing program 2 (id=444):
syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0xf, 0x0})
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600156f0000000000000000030000"], 0x20}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

3.829144764s ago: executing program 0 (id=446):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x19}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.753689898s ago: executing program 0 (id=447):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730113000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

2.739640904s ago: executing program 2 (id=448):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@usebackuproot}, {@discard}, {@noenospc_debug}, {@space_cache}, {@nospace_cache}]}, 0x1, 0x55c8, &(0x7f000000ac40)="$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")

2.629803942s ago: executing program 0 (id=449):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}], 0x1})

2.519938723s ago: executing program 0 (id=451):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21000e, &(0x7f00000026c0), 0xe1, 0x525, &(0x7f00000001c0)="$eJzs3V9rZGcZAPDnTDJrtpuaVL2ohdbFVnaL7kzS2DZ40VYU7wpKvV9DMgkhk0zITNpNKCXFDyCIaMErr7wR/ACC9CNIoWDvRUUR3dULL9Qj58yZbHZ6Jn/YmUxIfj94Z97znjnned5kc+Y9f/acAK6smxHxRkRMRMSLETFTtFeKEgfdkn3uwf13l7OSzXnr70kkRVtEXj10o1hsqvtWqr23v7HUbDZ2iul6Z3O73t7bv7O+ubTWWGtsLSzMv7L46uLLi3ND6WfWr9e+/eef/uiX33ntt1975w93/3r7vSzpbxXzi34M3Sf5azX7WRyajIidUQQbg4miP9VxJwIAwKlkY/zPRcSX8/H/TEzko7lc/5Bu6vyzAwAAAIYhfX06/pNEpAAAAMCl9XpETEdSqRXXAkxHpVKrda/h/UI8UWm22p2vrrZ2t1ayeRGzUa2srjcbc8U1tbNRTbLp+bz+cPqlvumFiHgqIn4ycz2fri23mivjPvgBAAAAV8SNvv3/f8109/8BAACAS2Z23AkAAAAAIzdo/z855zwAAACA0XH+HwAAAC617775ZlbS3vOvV97e291ovX1npdHeqG3uLteWWzvbtbVWay2/Z9/mSetrtlrbX4+t3Xv1TqPdqbf39u9utna3OnfXPT8QAAAAxuWpL334SRIRB9+4npfMtexlYsACrhWAS6Nylg//aXR5AOdv0Nc8cPlNjjsBYHwOzr7IzVHkAYzNI7f6KBkUHL1455FjBr8bXU4AAMBw3fpi+fn/bBegOu7kgJE60/l/4FJx/h+urjOe//9oVHkA569qBABX3kmP+ii9ecf1Aef/r5V9OE2PXRcAADBy03lJKrXiXOB0VCq1WsST+X/1ryar683GXER8NiJ+P1P9TDY9ny+ZeDwgAAAAAAAAAAAAAAAAAAAAAAAAAJxSmiaRAgAAAJdaROUvSfH8r1szL0z3Hx+4lvx7JopHer3z87d+dm+p09mZz9r/cdje+aBof2kcRzAAAACAfr399N5+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM04P77y73ynnG/ds3I2K2LP5kTOXvU1GNiCf+mcTkkeWSiJgYQvyD9yPi6bL4SZZWzBZZ9MevRMT14cevPpxzGP/ZNE1L498YQny4yj7Mtj9vlP39V+Jm/l7+9z9ZlMc1ePtXOdz+TQzY/j15yhjPfPzr+sD470c8M1m+/evFTwbEf75shSU/lB98f3//U43dlUf6i4hbpd8/ySOx6p3N7Xp7b//O+ubSWmOtsbWwMP/K4quLLy/O1VfXm43itbSPP372N//ra/pv2pX3PwbEnz2h/y9klSNb7Ej7wxTBPr53//PdarVvFXn828+X//6fPiZ+9m/iK8X3QDb/Vq9+0K0f9dyvPnquNLEi/sqA/p/0+789aKV9XvzeD/94yo8CAOegvbe/sdRsNnZGUknTiF7LB2majjKWyuNVeqO7kYWYuig9vQCVbGx9AdIYVBnGkS0AAOCieTjoP/Ui7400IQAAAAAAAAAAAAAAAAAAALiC2ntROf5+YGka8Xi3E+uPeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOv/AQAA//+ybtqI")
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00')
getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'})
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000080), 0x928c8b02834ac9f)
getdents64(r1, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000540)={@multicast, @random="5bfd2e8cf5a3", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "361db3", 0x0, 0x0, 0x0, @local, @mcast2}}}}, 0x0)

2.129901566s ago: executing program 1 (id=453):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000580)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@fat=@sys_immutable}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

2.122020823s ago: executing program 0 (id=454):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.000288862s ago: executing program 3 (id=455):
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x400400)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xcad80)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r3})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0x0, 0x32a}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r5, 0x47fa, 0x0, 0xc, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="0a0006000802110000000000060066008e8800002200330008030000080211000001080211000000ffffffffffff00000802110000"], 0x54}}, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x11, 0x0, 0x2)
rt_sigsuspend(&(0x7f0000000000), 0x8)
socket$nl_route(0x10, 0x3, 0x0)

1.970649611s ago: executing program 4 (id=456):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
r1 = dup(r0)
connect$802154_dgram(r1, &(0x7f0000000080), 0x14)
syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1)

1.884847742s ago: executing program 1 (id=457):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101201)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0})

1.883104138s ago: executing program 2 (id=458):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="38175ed207001e865247423363236001fa07be47030889be80d49d06a746282b8fef2c2f8769f0ee07cab1907ee285d53c42e0a921f91991520631345f02a7a36722d36443983bf3d734ee9f55d2514d0eb113763bf52f582f87805a7b8867bc0400a8593f928a8194a934b7b615b30a89c87f515f708c750218968027c43480c0df58b0ed48a110ee63b82cbd218c748b7b768015a7b633cf69d3771007105ecaf6f7c9b03c1d6d2db5210febe3a652a8035515e3513046406b628d9e02d09e43895d6c93457d59"})

1.806137251s ago: executing program 4 (id=459):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
socketpair(0x3, 0x80000, 0x4, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setresuid(0x0, r1, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
add_key$user(&(0x7f0000001080), &(0x7f0000001100)={'syz', 0x0}, &(0x7f0000001280)="721b0ca1622aa40a11a1acc5b1f2d131e8a984fdd758e416c0ad2d96bdde48ef44a158a14d5509d79a1645a25ed25a7730b53923cc31c59af50344346295492a52f4469443ed1e77772f634cea09526a8833b9877aa4c35320c71e498b4626d0e90ed32102c12695315a9866a2915930673aa9d37c02e8a18bb0ffef97d285373ac74e3044a2393dfb722a81d452e9d9d0462fa1c77bdc0d1ba9af1bed7d9ae5583c9e58da9fb247de326e24b86d9982adb0e3eedf382238654f104495725b7bea4135bf423076db909355824d0669f74687239e4506", 0xfffffffffffffded, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x1, {}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x0, 0x0, 0x2}]}, @NHA_GROUP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30004044}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="000038af", @ANYRES16=r2, @ANYBLOB="00042cbd7000fcdbdf256f0000000a000600ffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8800)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000433000/0x1000)=nil, 0x1000})

1.792230586s ago: executing program 2 (id=460):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x401c5820, &(0x7f0000000100)=@v1={0x8, @aes256, 0x0, @desc3})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1.648271974s ago: executing program 4 (id=461):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17\x00\x00\x00\x00\xe2{mn\xcc\xbf2\xc0\x90kn\xe8\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,Bd8\x13<\xf0E\x86\xc0v\xd5?\xe5E:+Pm\x1d\xb4\xb8k\x11\x00', 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, &(0x7f0000000140)=0xff01000000000000, 0x6, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000940)="$eJzsmT2v0lAYx/+nLYVLjMbFwUUTb+Id7i1tUcPioF9AE/Btk0glaAEDHYDEROLi4sfwKzgwObi5ueqgJiYOMjofc3pO4UCBAKnRxOeX3HN/7XnOc14oDwmAIIj/lm9ff315fbNSOwZwCofIq/s/zHmMocV/Lij59OZ95/TzyXI+Ecukvtt2DSZMRMo551zvO1T/azCk3ykujL0HBkf5Qxi4qzwAwwPlTzTvHigJA+dRN2w8boWBKxpPNL5oynp+C8B0zNAAUFDrY1p/fzh6Wg/DoLcsOZ7Mk+raVTadnQVY0xsGrmvnJ16D+69ejsV1cjZucn4APBjwlJfBUFVeQR6O44hHQB6Jtv/z1jy/uc3+95FbuWzy2JBy9mRT8HEmc+0pNoC/N/vOMv43lpGNMO3OgRDxhp7dOTedfEiP+v4nF3Yx24QWFksPVM1OBX8sSrHTXVuJrSZaGTOvn6LkXtbqkwVrVj9KUftZqT8cnbTa9WbQDDq+X77mXnHdq34prs2y3VD/CnF9Kmr5c2tibWZjUI+injcAop43u/Zlq1Xc6tvuz3iMEdc/A0eXZA7xqMTbzq+eg6k/+Tko7Mhcu3iCIAiCIAiCIAiCIAiCIIiduAAWfwuqfqjinOMFwM/IXp7g346vfwcAAP//Zp9PGw==")

1.440862229s ago: executing program 0 (id=462):
r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x18})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.43978412s ago: executing program 2 (id=463):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

631.504534ms ago: executing program 3 (id=465):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000003880)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d49631979a42d6884ec11ce1413ac30e00bd0081f8504e19a517bdc69676520e98a263345e44d5187b3c4d86abeb12303ff139fe0d0020000d604000000670000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a75dd098bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d2464ef3c6a7def8bad3ca6e3abdb2dfc61696e340bb8e2a093adc57196b40def3858ef569147fa4108328392d322ab4df10a2f69a6bdf7257d327070e42410f57466f59aea2544047d6d8ac442e0000000000ee16c729300d230180000000000000a87db3670bba302085a22b5a8b051dc254ed5290a8cd8470e776d6b80630d6cbde49b29a6cb5f4fc00a4db9f370e5fe57238aeada5acf3209a08439f1ff01ffbe5b57922b6f6c67e02aa6d7760525b595fe1f697bc114ed1778e97a3f0295f946974cfb458be2a34cf924dc37b558fbf17a76f3547497aba5086e30ec8a57c814382ffab045ca077a9d15251875432e74b54afaf4985683c229ff92be0dade95ae7b68136b0046d535dd39c0f35469869e9b342b953f81447e6b9e522d28b1e6ffdaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e00000e54e9072a22d91744a332e2fa806e63c5cd98a8569a6d6bcfb0000002cf6c75ac636360369ec80dc479e0575ee3f04af77c98a1459ab1664885173b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283f2faf8f40e3992774814d63c933912dd0c6908149cb79c5cb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83df998a7469426ec8b0000000000000010ff2cd18bdd8ad0983bc90770bbd26a82b9d99d17c02297b523c47ef8c33400e90d3fbe011904ff782ca00edf8e47a71bcc738ef636d32b01933556f9afe772cd45af8aeffe2753088e02ca6b690decf0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b506380591a8c48e537dd659a7418c1e122bdb5859ff5a679eec4600e99f017246dc0c18a30160f2ac54f842e3be1c95b15175d0e664beb126000e96549e1a1208c686edb475b705e8a9515c96f4fc6b3c925ea404edbb3845111aed1637ec3890f1de61026dc805a05fa626c661856f6d105671241d48a25989e01eae489ec7052f8ed72c336c7a8aa63999ee1f47ce5cb736577bea52b6dbbd56d222659480e82c6f84d2033d9080097c54ce1822d14b7c7699b9d54f5f11f2e7fdc7557515eb70212e8701e94e7b42dc7294b917f2d21dd474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f54cf881f606b381e4803b500000000000020000000004a2357ba5f2b50b5e1fa88b7165dcfcf2aaee86d48f05b5ae4fc2bbc908fdb686d5da2da1ac8bab2c153ea923c19e6cb723c1923b3eea2d73e136dff383c9fbbac53dfdcb1a68c988be76fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01f9f2772e5fa454d68d90677d8de36c3215d2ff3cfadcf65eb92adc6c624bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a128c76629a362ee9cc624ec454b90200fd9603f96908bddc1450360d6fd25cbc35345f89215bda856002f40af6b6805a01e7287eab5dd849010480b38ff07d881e833617fe25f14d4a80366b7da96d6b17a8a1ec26ff5893287a4a38facae2c16908d93e79980293b62d431a4ad3b5ec464ede81e5c79f76af8ad9e53ba393a0df5d9ce00dccd782232006126286cedf016ee4a33af799a0fb585253b35727959f7077cc917a586c745d8ac792db10f7c6fe35b4b3e6f72eb98dbaaeb87aebadf8953035e8a4f0590d3803bf803845272adb34feb3c4bba4709f903e57e940b432a2f7719ecd4cf5cb1836bf1f3234e39509ea5f3ede3f0000000000000000000000000000000000000000000000000000000000bf28f87806c5f28469a0cfd0ff47e32e2d8e1744d1d71a36bcd82b85424795c00e3348b33eae0733c00102f9039dd2f22a904948964bc03ea60c31914db798d94bc330e9d848d76b6fd5dfa87649e009d72804e03cad5d9572a97cfc5aa21c901896131025f6891d4f54e79f9c87eb3142fc9aca0659edb4f517a1dd605bda9afa912466fda4a6c2bc3ee1b5faccebc6fba7befb1bda0f31d00d7e40a03e594f2d6bdc41709991180d8d9d00712efb5f3f2f76894bcee4ee66d253f7de504083b93987ecb8fa7df05cb0007fa0104afd8ba95f1c150a5fd37d135716f85a8481ccc52ddf5ee88aae03b3dc54500ddee9af69e7b500563b464863c53c998ab9b0c6854a2ebccac5c33b2de390aa5162f6429f727d5140984159de1d70aecabd810ad30b50de073e3a0ded5791b178dc3f92aea11c18326b74b38dbba12650a8e12d0f850585ae55626fc2242121ae65e27a6e4430cc350093e8ad8c8ae1fb600c49ab3be52e79262f7fc7c5ba33557fd80573ecd691e0"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000002880)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x23}, 0x6e)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)

630.800319ms ago: executing program 4 (id=466):
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000300)='./control\x00', 0x41c, &(0x7f0000005e00)=ANY=[], 0x1, 0x5d7d, &(0x7f000000bd00)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c00000012"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a01010000000000000000020000000800031800f000000c00064000000000000000020900010073797a300000000014008f62e579928b0047ac0000110001000000958cc1f500000000000ac6995e710f87b094cf092220a66c3625292f4f2f2b118ce4898405c3cfa762ea3cfeca7e8e2a42357d877f48d55a23341a160fa349e2040266881f7884d2ed0450d669f86cc84ad8419991e87700ea12d3156fd8811d55119e"], 0x5c}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r4, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

512.337057ms ago: executing program 1 (id=467):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

364.389602ms ago: executing program 3 (id=468):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0x2007, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000004c0))
shutdown(r0, 0x0)

199.176209ms ago: executing program 3 (id=469):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'ipvlan1\x00', &(0x7f0000000400)=@ethtool_ringparam={0x7}})

69.480383ms ago: executing program 3 (id=470):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

137.398µs ago: executing program 3 (id=471):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000780)=0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300))
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000010c0)="aabf", 0x2}], 0x1, 0x0, 0x0)

0s ago: executing program 2 (id=472):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts.
[   35.998019][ T6363] cgroup: Unknown subsys name 'net'
[   36.275355][ T6363] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   36.559878][ T6363] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   37.873569][ T6378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.876519][ T6378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.878887][ T6378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.886378][ T6380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.891146][ T6382] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.893381][ T6382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.895431][ T6382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.897978][ T6382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   37.901401][ T6382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.903854][ T6388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   37.907156][ T6386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.909228][ T6386] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.911417][ T6389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.912593][ T6386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.913758][ T6389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.915775][ T6386] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   37.917795][ T6389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   37.919306][ T6386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.921261][ T6389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.923953][ T6386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.925200][ T6389] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.927213][ T6386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   37.929937][ T6389] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   37.931018][ T6386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   37.932622][ T6389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.935239][ T6386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   37.936696][ T6389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.939048][ T6386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.949516][   T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   37.956803][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   38.165189][ T6383] chnl_net:caif_netlink_parms(): no params data found
[   38.221611][ T6385] chnl_net:caif_netlink_parms(): no params data found
[   38.278179][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.280162][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.282426][ T6383] bridge_slave_0: entered allmulticast mode
[   38.284511][ T6383] bridge_slave_0: entered promiscuous mode
[   38.288221][ T6373] chnl_net:caif_netlink_parms(): no params data found
[   38.310929][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.312820][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.314770][ T6383] bridge_slave_1: entered allmulticast mode
[   38.316883][ T6383] bridge_slave_1: entered promiscuous mode
[   38.319542][ T6379] chnl_net:caif_netlink_parms(): no params data found
[   38.372479][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.374389][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.376282][ T6385] bridge_slave_0: entered allmulticast mode
[   38.378353][ T6385] bridge_slave_0: entered promiscuous mode
[   38.382072][ T6374] chnl_net:caif_netlink_parms(): no params data found
[   38.385536][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.387506][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.389562][ T6385] bridge_slave_1: entered allmulticast mode
[   38.391823][ T6385] bridge_slave_1: entered promiscuous mode
[   38.415108][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.426165][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.439811][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.448134][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.487059][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.489049][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.492471][ T6373] bridge_slave_0: entered allmulticast mode
[   38.494621][ T6373] bridge_slave_0: entered promiscuous mode
[   38.499034][ T6383] team0: Port device team_slave_0 added
[   38.520019][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.522893][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.524786][ T6373] bridge_slave_1: entered allmulticast mode
[   38.526855][ T6373] bridge_slave_1: entered promiscuous mode
[   38.533941][ T6383] team0: Port device team_slave_1 added
[   38.541917][ T6385] team0: Port device team_slave_0 added
[   38.545131][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.547542][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.549415][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.551784][ T6379] bridge_slave_0: entered allmulticast mode
[   38.553998][ T6379] bridge_slave_0: entered promiscuous mode
[   38.556880][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.558810][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.561631][ T6379] bridge_slave_1: entered allmulticast mode
[   38.564421][ T6379] bridge_slave_1: entered promiscuous mode
[   38.566888][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.568920][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.571385][ T6374] bridge_slave_0: entered allmulticast mode
[   38.573514][ T6374] bridge_slave_0: entered promiscuous mode
[   38.585781][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.588657][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.591357][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.598174][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.603716][ T6385] team0: Port device team_slave_1 added
[   38.605839][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.607799][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.614949][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.626651][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.628581][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.630528][ T6374] bridge_slave_1: entered allmulticast mode
[   38.632532][ T6374] bridge_slave_1: entered promiscuous mode
[   38.649040][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.651011][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.657422][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.680931][ T6373] team0: Port device team_slave_0 added
[   38.683141][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.685062][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.698014][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.707746][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.752445][ T6383] hsr_slave_0: entered promiscuous mode
[   38.820889][ T6383] hsr_slave_1: entered promiscuous mode
[   38.896716][ T6373] team0: Port device team_slave_1 added
[   38.899644][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.905919][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.919263][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.937856][ T6379] team0: Port device team_slave_0 added
[   38.967133][ T6379] team0: Port device team_slave_1 added
[   38.969105][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.971023][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.977387][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.981518][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.983431][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.990770][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.012476][ T6385] hsr_slave_0: entered promiscuous mode
[   39.051000][ T6385] hsr_slave_1: entered promiscuous mode
[   39.090801][ T6385] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.093161][ T6385] Cannot create hsr debugfs directory
[   39.108632][ T6374] team0: Port device team_slave_0 added
[   39.123769][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.125535][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.132176][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.136806][ T6374] team0: Port device team_slave_1 added
[   39.138832][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.141491][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.148259][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.292183][ T6373] hsr_slave_0: entered promiscuous mode
[   39.330956][ T6373] hsr_slave_1: entered promiscuous mode
[   39.370633][ T6373] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.372674][ T6373] Cannot create hsr debugfs directory
[   39.389729][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.391962][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.398476][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.442443][ T6379] hsr_slave_0: entered promiscuous mode
[   39.490976][ T6379] hsr_slave_1: entered promiscuous mode
[   39.530754][ T6379] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.532784][ T6379] Cannot create hsr debugfs directory
[   39.547238][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.549098][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.555977][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.662111][ T6374] hsr_slave_0: entered promiscuous mode
[   39.710997][ T6374] hsr_slave_1: entered promiscuous mode
[   39.750611][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.752689][ T6374] Cannot create hsr debugfs directory
[   39.844612][ T6383] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.848634][ T6383] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.867984][ T6383] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.872137][ T6383] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.904683][ T6385] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.909877][ T6385] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.914552][ T6385] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.918016][ T6385] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.955353][ T6373] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.958940][ T6373] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.971585][ T6380] Bluetooth: hci1: command tx timeout
[   39.973424][ T6386] Bluetooth: hci3: command tx timeout
[   39.973436][ T6380] Bluetooth: hci2: command tx timeout
[   39.976837][   T52] Bluetooth: hci0: command tx timeout
[   39.978797][ T6373] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.983597][ T6373] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   40.011943][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.028740][ T6383] 8021q: adding VLAN 0 to HW filter on device team0
[   40.052769][   T52] Bluetooth: hci4: command tx timeout
[   40.072003][ T6374] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   40.079979][ T6374] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   40.084593][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.086673][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.090086][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.092117][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.102723][ T6379] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   40.106268][ T6374] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   40.121635][ T6379] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   40.124829][ T6374] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   40.143556][ T6379] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   40.158046][ T6383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.168988][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.175178][ T6379] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   40.219253][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.234772][ T6385] 8021q: adding VLAN 0 to HW filter on device team0
[   40.243567][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.245521][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.255176][ T6373] 8021q: adding VLAN 0 to HW filter on device team0
[   40.258710][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.260699][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.281034][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.282961][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.285809][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.287636][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.323615][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.345642][ T6385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.348457][ T6385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.377622][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.413330][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.419740][ T6374] 8021q: adding VLAN 0 to HW filter on device team0
[   40.446664][ T6383] veth0_vlan: entered promiscuous mode
[   40.458648][ T6379] 8021q: adding VLAN 0 to HW filter on device team0
[   40.468852][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.470846][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.476699][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.478678][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.489259][ T6383] veth1_vlan: entered promiscuous mode
[   40.509616][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.511566][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.517209][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.519045][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.539752][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.563474][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.573069][ T6383] veth0_macvtap: entered promiscuous mode
[   40.580381][ T6383] veth1_macvtap: entered promiscuous mode
[   40.587389][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.618357][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.626214][ T6379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.651335][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.663939][ T6383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.666457][ T6383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.668597][ T6383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.672029][ T6383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.677494][ T6385] veth0_vlan: entered promiscuous mode
[   40.686857][ T6373] veth0_vlan: entered promiscuous mode
[   40.699493][ T6385] veth1_vlan: entered promiscuous mode
[   40.706138][ T6373] veth1_vlan: entered promiscuous mode
[   40.745154][ T6385] veth0_macvtap: entered promiscuous mode
[   40.749968][ T6385] veth1_macvtap: entered promiscuous mode
[   40.775283][ T6373] veth0_macvtap: entered promiscuous mode
[   40.778539][ T6373] veth1_macvtap: entered promiscuous mode
[   40.785002][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.812503][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.815436][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.818976][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.829888][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.830735][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.837464][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.846606][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.850151][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.877289][ T6385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.879577][ T6385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.884682][ T6385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.886994][ T6385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.898117][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.903999][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.906649][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.909461][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.914621][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.919951][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.924999][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.927595][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.930330][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.936380][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.947516][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.948525][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.949826][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.967646][ T6373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.969972][ T6373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.973324][ T6373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.975647][ T6373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.039160][ T6379] veth0_vlan: entered promiscuous mode
[   41.047678][ T6379] veth1_vlan: entered promiscuous mode
[   41.057387][  T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.059477][  T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.129394][ T6430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.133701][ T6430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.154405][ T6379] veth0_macvtap: entered promiscuous mode
[   41.179831][ T6374] veth0_vlan: entered promiscuous mode
[   41.187374][ T6374] veth1_vlan: entered promiscuous mode
[   41.199169][ T6379] veth1_macvtap: entered promiscuous mode
[   41.217074][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.219220][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.229188][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.240232][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.247482][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.250209][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.257757][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.261472][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.265072][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.280102][ T6374] veth0_macvtap: entered promiscuous mode
[   41.288739][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.292832][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.296338][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.299639][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.304190][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.306847][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.312113][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.315764][ T6374] veth1_macvtap: entered promiscuous mode
[   41.326530][ T6379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.328849][ T6379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.337979][ T6379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.340285][ T6379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.359425][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.362303][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.365382][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.368111][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.371568][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.374552][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.377251][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.380108][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.383272][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.386179][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.391421][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.408286][ T6472] net_ratelimit: 2 callbacks suppressed
[   41.408300][ T6472] netlink: zone id is out of range
[   41.419598][ T6472] netlink: zone id is out of range
[   41.422802][ T6472] netlink: zone id is out of range
[   41.440121][ T6472] netlink: set zone limit has 4 unknown bytes
[   41.442322][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.446189][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.451610][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.454676][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.457278][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.459905][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.464746][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.467499][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.475014][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.486930][ T6374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.489298][ T6374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.505018][ T6374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.508336][ T6374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.530293][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.537015][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.612209][  T651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.614383][  T651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.626654][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.641764][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.671300][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'.
[   41.699245][  T686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.701775][  T686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.739612][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   42.047456][ T6508] netlink: 'syz.4.24': attribute type 21 has an invalid length.
[   42.050745][   T52] Bluetooth: hci0: command tx timeout
[   42.052180][   T52] Bluetooth: hci2: command tx timeout
[   42.053529][   T52] Bluetooth: hci3: command tx timeout
[   42.055382][ T6389] Bluetooth: hci1: command tx timeout
[   42.084906][ T6510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.096852][ T6510] xt_l2tp: missing protocol rule (udp|l2tpip)
[   42.135417][ T6380] Bluetooth: hci4: command tx timeout
[   42.342775][ T6532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.457319][ T6543] loop2: detected capacity change from 0 to 512
[   42.480251][ T6543] EXT4-fs: Ignoring removed nobh option
[   42.527689][ T6548] loop3: detected capacity change from 0 to 128
[   42.529716][ T6548] =======================================================
[   42.529716][ T6548] WARNING: The mand mount option has been deprecated and
[   42.529716][ T6548]          and is ignored by this kernel. Remove the mand
[   42.529716][ T6548]          option from the mount to silence this warning.
[   42.529716][ T6548] =======================================================
[   42.599036][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.602752][ T6550] binder: 6549:6550 got transaction to context manager from process owning it
[   42.605037][ T6550] binder: 6549:6550 transaction call to 6549:0 failed 2/29201/-22, size 0-0 line 3055
[   42.638889][ T6556] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   42.667203][ T6428] binder: undelivered TRANSACTION_ERROR: 29201
[   42.670929][ T6543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.40: bg 0: block 224: padding at end of block bitmap is not set
[   42.702525][ T6543] EXT4-fs (loop2): Remounting filesystem read-only
[   42.709069][   T30] audit: type=1326 audit(42.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6541 comm="syz.2.40" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3459e8 code=0x0
[   42.772369][ T6567] loop1: detected capacity change from 0 to 512
[   42.774432][ T6567] EXT4-fs: Ignoring removed nobh option
[   42.797590][ T6567] fscrypt (loop1, inode 2): Error -61 getting encryption context
[   42.800087][ T6567] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[   42.808962][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.814969][ T6567] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #13: comm syz.1.46: casefold flag without casefold feature
[   42.825402][ T6567] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.46: couldn't read orphan inode 13 (err -117)
[   42.836246][ T6567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.851508][  T205] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   42.859074][  T205] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   42.918075][ T6577] loop4: detected capacity change from 0 to 128
[   42.933682][ T6577] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   42.943592][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.971196][ T6579] netlink: 'syz.0.50': attribute type 29 has an invalid length.
[   42.996220][ T6577] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   43.005942][ T6581] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   43.010278][ T6579] netlink: 'syz.0.50': attribute type 29 has an invalid length.
[   43.034475][ T6582] netlink: 'syz.0.50': attribute type 29 has an invalid length.
[   43.061833][ T6586] loop1: detected capacity change from 0 to 47
[   43.245787][ T6598] loop0: detected capacity change from 0 to 64
[   43.276693][ T6598] MINIX-fs: mounting unchecked file system, running fsck is recommended
[   43.292179][ T6600] loop2: detected capacity change from 0 to 512
[   43.336695][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.423223][ T6615] netlink: 'syz.3.66': attribute type 5 has an invalid length.
[   43.425373][ T6615] netlink: 'syz.3.66': attribute type 4 has an invalid length.
[   44.131226][ T6389] Bluetooth: hci2: command tx timeout
[   44.133727][   T52] Bluetooth: hci1: command tx timeout
[   44.135807][ T6380] Bluetooth: hci3: command tx timeout
[   44.137483][ T6380] Bluetooth: hci0: command tx timeout
[   44.211881][ T6386] Bluetooth: hci4: command tx timeout
[   44.608027][ T6643] netlink: 503 bytes leftover after parsing attributes in process `syz.4.75'.
[   44.745293][ T6651] loop4: detected capacity change from 0 to 512
[   44.758166][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   44.793058][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'.
[   44.970196][ T6661] warning: `syz.1.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   45.344009][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.626760][ T6673] netlink: 'syz.4.87': attribute type 1 has an invalid length.
[   45.828742][ T6682] netlink: 'syz.3.93': attribute type 1 has an invalid length.
[   45.834621][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'.
[   45.834784][ T6684] delete_channel: no stack
[   46.210498][ T6386] Bluetooth: hci0: command tx timeout
[   46.212262][ T6386] Bluetooth: hci1: command tx timeout
[   46.213945][ T6386] Bluetooth: hci2: command tx timeout
[   46.215742][ T6386] Bluetooth: hci3: command tx timeout
[   46.290490][ T6380] Bluetooth: hci4: command tx timeout
[   46.560524][   T30] audit: type=1326 audit(46.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6685 comm="syz.2.92" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab3459e8 code=0x0
[   46.745817][ T6699] netlink: 108 bytes leftover after parsing attributes in process `syz.4.98'.
[   46.858295][ T6711] loop3: detected capacity change from 0 to 512
[   46.903561][ T6717] loop2: detected capacity change from 0 to 8
[   46.907727][ T6717] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   46.935777][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   46.936510][ T6723] loop1: detected capacity change from 0 to 512
[   46.942714][ T6723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.037564][ T6726] 9pnet_fd: Insufficient options for proto=fd
[   47.164754][ T6723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   47.780064][ T6392] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   47.841584][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   47.971391][ T6740] 9pnet_fd: p9_fd_create_unix (6740): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   48.119961][ T6373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   48.121656][ T6748] loop2: detected capacity change from 0 to 128
[   48.144519][    C0] vkms_vblank_simulate: vblank timer overrun
[   48.212742][ T6748] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.287614][ T6379] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.324877][ T6755] loop3: detected capacity change from 0 to 256
[   48.389214][ T6755] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   48.603819][ T6770] loop2: detected capacity change from 0 to 512
[   48.606041][ T6770] EXT4-fs: Ignoring removed nobh option
[   48.617156][ T6770] fscrypt (loop2, inode 2): Error -61 getting encryption context
[   48.619792][ T6770] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[   48.625006][ T6770] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #13: comm syz.2.128: casefold flag without casefold feature
[   48.628942][ T6770] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.128: couldn't read orphan inode 13 (err -117)
[   48.640807][ T6770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.675064][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.745099][ T6778] binder: 6776:6778 got transaction to invalid handle, 1
[   48.752550][ T6778] binder: 6778:6776 cannot find target node
[   48.761889][ T6778] binder: 6776:6778 transaction async to 0:0 failed 3/29201/-22, size 0-0 line 3066
[   48.790479][ T6427] binder: undelivered TRANSACTION_ERROR: 29201
[   48.871515][ T6782] vivid-000: disconnect
[   48.929573][ T6782] vivid-000: reconnect
[   49.155225][ T6798] loop1: detected capacity change from 0 to 256
[   49.176629][ T6800] loop0: detected capacity change from 0 to 64
[   49.180115][ T6800] hfs: unable to parse mount options
[   49.243466][ T6365] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   49.288237][ T6805] loop4: detected capacity change from 0 to 64
[   49.374796][ T6808] vlan2: entered allmulticast mode
[   49.421845][ T6810] binder: 6809:6810 tried to acquire reference to desc 0, got 1 instead
[   49.425537][ T6427] binder: release 6809:6810 transaction 8 out, still active
[   49.427835][ T6427] binder: undelivered TRANSACTION_COMPLETE
[   49.442370][ T6427] binder: send failed reply for transaction 8, target dead
[   49.448478][ T6374] hfs: request for non-existent node 131072 in B*Tree
[   49.499482][ T6816] loop2: detected capacity change from 0 to 256
[   49.535244][ T6818] capability: warning: `syz.4.147' uses deprecated v2 capabilities in a way that may be insecure
[   49.553540][ T6820] loop0: detected capacity change from 0 to 256
[   49.602133][ T6820] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x12727065, utbl_chksum : 0xe619d30d)
[   49.660786][ T6827] loop3: detected capacity change from 0 to 2048
[   49.662889][ T6827] udf: Unknown parameter '0xffffffffffffffff0000N000000000000F'
[   50.121466][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'.
[   50.780424][    C0] sched: RT throttling activated
[   50.929668][ T6851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.163'.
[   50.942755][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'.
[   50.951554][ T6857] loop2: detected capacity change from 0 to 64
[   50.954653][ T6857] hfs: invalid gid -1
[   50.955803][ T6857] hfs: unable to parse mount options
[   50.994033][ T6365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   51.047510][ T6857] Zero length message leads to an empty skb
[   51.200784][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'.
[   51.414785][ T6897] netlink: 'syz.2.185': attribute type 16 has an invalid length.
[   51.472624][ T6902] loop2: detected capacity change from 0 to 16
[   51.474842][ T6902] erofs: Unknown parameter 'ž‡vž@l
‡¶JpÎô¥HÊ«ÜËP•¤X®Ÿmíäýʦ'
[   51.590877][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.593716][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.317761][ T6912] loop4: detected capacity change from 0 to 256
[   52.333271][ T6912] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x12727065, utbl_chksum : 0xe619d30d)
[   52.400910][ T6902] loop2: detected capacity change from 0 to 512
[   52.445462][ T6902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.447153][ T6918] loop3: detected capacity change from 0 to 1024
[   52.574147][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'.
[   52.642119][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.644537][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.697315][ T6933] netlink: 108 bytes leftover after parsing attributes in process `syz.1.198'.
[   52.848928][ T6946] netlink: 'syz.3.200': attribute type 2 has an invalid length.
[   52.873639][ T6946] netlink: 723 bytes leftover after parsing attributes in process `syz.3.200'.
[   53.771524][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.856409][ T6974] loop4: detected capacity change from 0 to 512
[   54.009655][ T6974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.039817][ T6978] loop2: detected capacity change from 0 to 2048
[   54.044882][ T6978] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   54.048762][ T6978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   54.085477][ T6974] EXT4-fs error (device loop4): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.4.210: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   54.237801][ T6974] EXT4-fs error (device loop4): ext4_get_first_dir_block:3548: inode #12: comm syz.4.210: directory missing '.'
[   54.893770][ T6374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.086214][ T7005] overlay: Unknown parameter 'obj_type'
[   55.156158][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.169806][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.238737][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'.
[   56.241447][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'.
[   56.570100][ T6380] Bluetooth: hci4: ISO packet for unknown connection handle 0
[   56.757021][ T7056] loop2: detected capacity change from 0 to 512
[   57.252672][ T7056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   57.523605][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   57.648151][ T7092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.251'.
[   57.696313][ T7094] loop0: detected capacity change from 0 to 512
[   57.698919][ T7094] EXT4-fs: Ignoring removed nobh option
[   57.729327][ T7094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.767750][ T7094] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.253: bg 0: block 224: padding at end of block bitmap is not set
[   57.772117][ T7094] EXT4-fs (loop0): Remounting filesystem read-only
[   57.779567][   T30] audit: type=1326 audit(57.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.0.253" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45459e8 code=0x0
[   58.655150][ T7112] loop2: detected capacity change from 0 to 2048
[   58.807305][ T7112] EXT4-fs: Ignoring removed mblk_io_submit option
[   58.809098][ T7112] EXT4-fs: Ignoring removed nobh option
[   58.868005][ T7112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.047897][ T7120] netlink: 100 bytes leftover after parsing attributes in process `syz.1.259'.
[   59.058185][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.107034][  T686] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   59.110243][  T686] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   59.114102][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.116806][ T7124] loop3: detected capacity change from 0 to 512
[   59.119476][ T7124] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   59.137796][ T7124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.171814][ T7124] EXT4-fs (loop3): 1 truncate cleaned up
[   59.173847][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.214610][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   59.237235][ T6373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.254469][ T7141] loop2: detected capacity change from 0 to 512
[   59.257338][ T7141] EXT4-fs: Ignoring removed orlov option
[   59.336571][ T7141] EXT4-fs (loop2): Test dummy encryption mode enabled
[   59.351580][ T7141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a054e09c, mo2=0002]
[   59.355149][ T7141] System zones: 1-12
[   59.386332][ T7145] loop4: detected capacity change from 0 to 1024
[   59.409370][ T7141] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.268: casefold flag without casefold feature
[   59.425337][ T7145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.433037][ T7141] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.268: couldn't read orphan inode 15 (err -117)
[   59.443690][ T7141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.514424][ T7141] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   59.526753][ T7158] loop0: detected capacity change from 0 to 1024
[   59.528902][ T7158] EXT4-fs: Ignoring removed orlov option
[   59.533170][ T7158] EXT4-fs (loop0): Test dummy encryption mode enabled
[   59.536852][ T7158] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   59.694183][ T7145] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   60.026431][ T7158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.302316][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.324764][ T7162] loop1: detected capacity change from 0 to 512
[   60.326874][ T7162] EXT4-fs: Ignoring removed nobh option
[   60.339314][ T6374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.376258][ T7162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.389476][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.470150][ T7162] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.273: bg 0: block 224: padding at end of block bitmap is not set
[   60.490000][ T7162] EXT4-fs (loop1): Remounting filesystem read-only
[   60.506430][   T30] audit: type=1326 audit(60.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.1.273" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff987459e8 code=0x0
[   60.519882][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'.
[   60.632789][ T7188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.283'.
[   60.689526][ T7194] loop2: detected capacity change from 0 to 64
[   60.707576][ T7196] loop0: detected capacity change from 0 to 1024
[   60.815999][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'.
[   60.869976][ T7022] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   60.940049][ T7210] loop4: detected capacity change from 0 to 764
[   60.945963][ T7210] iso9660: Unknown parameter '00000000000000000000'
[   61.265571][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.269608][   T11] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   61.353904][ T7232] loop2: detected capacity change from 0 to 64
[   61.363031][ T7232] hfs: unable to parse mount options
[   61.405043][   T11] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   62.291713][ T7235] loop4: detected capacity change from 0 to 4096
[   62.413193][ T7238] loop2: detected capacity change from 0 to 8192
[   62.468037][ T7235] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   62.489822][ T7238]  loop2: AHDI p3 p4
[   62.510616][ T7244] loop0: detected capacity change from 0 to 2048
[   62.516791][ T7238] loop2: p3 start 4294901760 is beyond EOD, truncated
[   62.570553][ T7244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   62.587711][ T7244] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0
[   62.601025][ T5991] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.607969][ T5991] Buffer I/O error on dev loop2, logical block 0, async page read
[   62.610187][ T5991] ldm_validate_partition_table(): Disk read failed.
[   62.616968][ T5991] Dev loop2: unable to read RDB block 0
[   62.621701][ T5991]  loop2: unable to read partition table
[   62.623261][ T5991] loop2: partition table beyond EOD, truncated
[   62.651797][ T7256] loop3: detected capacity change from 0 to 2048
[   62.889738][ T7272] loop1: detected capacity change from 0 to 512
[   62.993226][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[   63.181413][ T7277] loop0: detected capacity change from 0 to 1024
[   64.532872][ T2324] ieee802154 phy0 wpan0: encryption failed: -22
[   64.535011][ T2324] ieee802154 phy1 wpan1: encryption failed: -22
[   64.539889][  T686] hfsplus: b-tree write err: -5, ino 8
[   64.543166][ T7272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.567637][ T7282] loop2: detected capacity change from 0 to 256
[   64.575079][ T7282] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d)
[   64.792439][ T7286] loop3: detected capacity change from 0 to 4096
[   64.850014][ T7286] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[   64.990508][ T7293] loop4: detected capacity change from 0 to 256
[   65.574370][ T7295] Core dump to core aborted: cannot preserve file permissions
[   65.587509][ T6374] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   65.590326][ T6374] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   65.610078][ T7286] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   65.637999][ T7297] loop2: detected capacity change from 0 to 512
[   66.585823][ T7315] trusted_key: syz.0.331 sent an empty control message without MSG_MORE.
[   67.108491][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.121966][ T7323] loop0: detected capacity change from 0 to 16
[   67.133323][ T7323] erofs: (device loop0): mounted with root inode @ nid 36.
[   67.348184][ T7337] loop0: detected capacity change from 0 to 512
[   67.352554][ T7337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   67.409552][ T7343] netlink: 'syz.3.342': attribute type 10 has an invalid length.
[   67.412881][ T7343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.342'.
[   67.424546][ T7337] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   67.430354][ T7337] EXT4-fs (loop0): 1 truncate cleaned up
[   67.443105][ T7343] team0: Port device syz_tun added
[   67.445628][ T7337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.539877][ T7346] loop3: detected capacity change from 0 to 512
[   69.179312][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.606416][ T6386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.626125][ T6386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.631168][ T6386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.635600][ T6386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.640249][ T6386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   69.647797][ T6386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.673436][ T6961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.683880][ T2246] cfg80211: failed to load regulatory.db
[   69.885997][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.908993][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.984272][ T6961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.111051][ T7389] input: syz0 as /devices/virtual/input/input3
[   70.248292][ T7398] loop2: detected capacity change from 0 to 64
[   70.251710][ T7394] block nbd0: shutting down sockets
[   70.272100][ T6961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.319082][ T7399] loop1: detected capacity change from 0 to 2048
[   70.395825][ T7399]  loop1: p1 < > p2 p3 < p5 > p4
[   70.397110][ T7399] loop1: partition table partially beyond EOD, truncated
[   70.398932][ T7399] loop1: p1 start 4278190080 is beyond EOD, truncated
[   70.422047][ T7399] loop1: p2 start 16908800 is beyond EOD, truncated
[   70.432414][ T6961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.441423][ T7399] loop1: p4 start 11326 is beyond EOD, truncated
[   70.443130][ T7399] loop1: p5 start 16908800 is beyond EOD, truncated
[   70.478767][ T5991]  loop1: p1 < > p2 p3 < p5 > p4
[   70.480136][ T5991] loop1: partition table partially beyond EOD, truncated
[   70.483885][ T5991] loop1: p1 start 4278190080 is beyond EOD, truncated
[   70.485631][ T5991] loop1: p2 start 16908800 is beyond EOD, truncated
[   70.499616][ T5991] loop1: p4 start 11326 is beyond EOD, truncated
[   70.501991][ T5991] loop1: p5 start 16908800 is beyond EOD, truncated
[   70.578128][ T7407] loop0: detected capacity change from 0 to 1024
[   70.622573][ T6365] udevd[6365]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   70.661466][ T7407] hfsplus: failed to load catalog file
[   70.669288][ T6365] udevd[6365]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   70.726961][ T7358] chnl_net:caif_netlink_parms(): no params data found
[   70.816672][ T7407] loop0: detected capacity change from 0 to 1024
[   70.822866][ T7407] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   70.822915][ T7407] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869)
[   70.823013][ T7407] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   70.823965][ T7407] EXT4-fs error (device loop0): ext4_get_journal_inode:5752: inode #5: comm syz.0.364: casefold flag without casefold feature
[   70.832139][ T7407] EXT4-fs (loop0): no journal found
[   70.893967][ T7021] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   70.960195][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.963683][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.972635][ T7358] bridge_slave_0: entered allmulticast mode
[   70.974972][ T7358] bridge_slave_0: entered promiscuous mode
[   70.980150][ T6961] bridge_slave_1: left allmulticast mode
[   70.982886][ T6961] bridge_slave_1: left promiscuous mode
[   70.989217][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.020563][ T7427] loop1: detected capacity change from 0 to 512
[   71.024763][ T6961] bridge_slave_0: left allmulticast mode
[   71.028628][ T6961] bridge_slave_0: left promiscuous mode
[   71.030341][ T7427] EXT4-fs (loop1): Test dummy encryption mode enabled
[   71.033737][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.043837][ T7427] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.370: corrupted in-inode xattr: invalid ea_ino
[   71.055795][ T7427] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.370: couldn't read orphan inode 12 (err -117)
[   71.070342][ T7427] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.212097][ T7430] loop3: detected capacity change from 0 to 512
[   71.222211][ T7430] EXT4-fs (loop3): bad geometry: block count 257 exceeds size of device (256 blocks)
[   71.228465][ T7402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.296865][ T6365] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   71.733508][ T6380] Bluetooth: hci1: command tx timeout
[   72.212587][ T7439] loop3: detected capacity change from 0 to 512
[   72.214686][ T7439] EXT4-fs: Ignoring removed nobh option
[   72.235558][ T7439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.279168][ T7439] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.373: bg 0: block 224: padding at end of block bitmap is not set
[   72.298418][ T7439] EXT4-fs (loop3): Remounting filesystem read-only
[   72.314230][   T30] audit: type=1326 audit(72.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7438 comm="syz.3.373" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83459e8 code=0x0
[   72.314988][ T7446] loop0: detected capacity change from 0 to 4096
[   72.323528][ T7446] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[   72.333390][ T7446] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   72.366144][   T30] audit: type=1400 audit(72.310:7): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=7445 comm="syz.0.382"
[   72.421397][  T686] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22.
[   73.052742][ T6373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.055844][   T13] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   73.069264][   T13] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   73.077842][ T7453] loop0: detected capacity change from 0 to 512
[   73.088489][ T7453] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.387: casefold flag without casefold feature
[   73.094739][ T7453] EXT4-fs (loop0): Remounting filesystem read-only
[   73.097103][ T7453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.152816][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.638627][ T7459] xt_TCPMSS: Only works on TCP SYN packets
[   73.747738][ T7459] loop7: detected capacity change from 0 to 16384
[   73.765597][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.821680][ T6380] Bluetooth: hci1: command tx timeout
[   74.033365][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.136952][ T6961] bond0 (unregistering): Released all slaves
[   74.150278][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.155305][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.159221][ T7358] bridge_slave_1: entered allmulticast mode
[   74.162788][ T7358] bridge_slave_1: entered promiscuous mode
[   74.184044][ T7358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.248251][ T7448] hsr0: entered promiscuous mode
[   74.251772][ T7448] batman_adv: batadv0: Adding interface: macsec1
[   74.253430][ T7448] batman_adv: batadv0: The MTU of interface macsec1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.254382][ T7459] I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   74.261983][ T7448] batman_adv: batadv0: Interface activated: macsec1
[   74.854910][ T7459] Buffer I/O error on dev loop7, logical block 144, lost async page write
[   75.007516][ T7358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.063307][ T6383] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[   75.265203][ T7476] loop3: detected capacity change from 0 to 8192
[   75.304145][ T7487] loop0: detected capacity change from 0 to 128
[   75.342221][ T7487] VFS: Found a Xenix FS (block size = 1024) on device loop0
[   75.424271][ T7022] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   75.548547][ T7358] team0: Port device team_slave_0 added
[   75.590694][ T7358] team0: Port device team_slave_1 added
[   75.645514][ T7513] loop1: detected capacity change from 0 to 512
[   75.681633][ T7513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   75.716361][ T7517] loop2: detected capacity change from 0 to 4096
[   75.719576][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.740498][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.747057][ T7358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.755814][ T7517] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[   75.850623][ T7517] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   75.856681][ T7517] ntfs3: loop2: Failed to load $Extend (-22).
[   75.858567][ T7517] ntfs3: loop2: Failed to initialize $Extend.
[   75.873059][ T7525] ieee802154 phy0 wpan0: encryption failed: -22
[   75.895080][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   75.900651][ T6380] Bluetooth: hci1: command tx timeout
[   75.919940][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.926907][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.940951][ T7358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.955047][ T7529] netlink: 'syz.3.400': attribute type 1 has an invalid length.
[   76.060946][ T7531] loop1: detected capacity change from 0 to 512
[   76.133716][ T7536] loop0: detected capacity change from 0 to 4096
[   76.163637][ T7358] hsr_slave_0: entered promiscuous mode
[   76.173935][ T7531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.192863][ T7536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.230766][ T7358] hsr_slave_1: entered promiscuous mode
[   76.270513][ T7536] fs-verity: sha512 using implementation "sha512-arm64"
[   76.308877][ T6383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.320500][ T7358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.322590][ T7358] Cannot create hsr debugfs directory
[   76.343555][ T7536] fs-verity (loop0, inode 13): Error -27 writing Merkle tree block 8709239245
[   76.350033][ T7536] fs-verity (loop0, inode 13): Error -27 building Merkle tree
[   76.396637][ T6961] hsr_slave_0: left promiscuous mode
[   76.442555][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.463786][ T6961] hsr_slave_1: left promiscuous mode
[   76.512688][ T7544] loop3: detected capacity change from 0 to 32768
[   76.561162][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.563194][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.568035][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.570229][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.582786][ T7544] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.628528][ T6961] veth1_macvtap: left promiscuous mode
[   76.636032][ T6961] veth0_macvtap: left promiscuous mode
[   76.641460][ T6961] veth1_vlan: left promiscuous mode
[   76.646803][ T6961] veth0_vlan: left promiscuous mode
[   76.684066][ T7544] XFS (loop3): Ending clean mount
[   76.790527][ T6373] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.853430][ T7568] loop0: detected capacity change from 0 to 32768
[   76.865447][ T7568] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.407 (7568)
[   76.896767][ T7568] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   76.907379][ T7568] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   76.910059][ T7568] BTRFS info (device loop0): using free-space-tree
[   77.179082][   T30] audit: type=1400 audit(77.120:8): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=7595 comm="syz.3.411" daddr=::ffff:0.0.0.0
[   77.223029][ T6385] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   77.419091][ T7602] loop0: detected capacity change from 0 to 512
[   77.436790][ T7602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   77.561750][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   77.970582][ T6380] Bluetooth: hci1: command tx timeout
[   78.595291][ T6961] team0 (unregistering): Port device team_slave_1 removed
[   78.763071][ T6961] team0 (unregistering): Port device team_slave_0 removed
[   81.788657][ T7358] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.796929][ T7358] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.801386][ T7358] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.805598][ T7358] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.852819][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.862795][ T7358] 8021q: adding VLAN 0 to HW filter on device team0
[   81.871822][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.873834][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.884360][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.886237][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.908742][ T7358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.915320][ T7358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.997558][ T7358] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.102915][ T7358] veth0_vlan: entered promiscuous mode
[   82.107991][ T7358] veth1_vlan: entered promiscuous mode
[   82.128648][ T7358] veth0_macvtap: entered promiscuous mode
[   82.133509][ T7358] veth1_macvtap: entered promiscuous mode
[   82.141957][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.145071][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.147555][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.150292][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.153529][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.156371][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.159112][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.162097][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.165694][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.171311][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.174184][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.177212][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.179877][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.183341][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.186254][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.188800][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.191751][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.195345][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.201381][ T7358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.203827][ T7358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.206133][ T7358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.208378][ T7358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.252923][  T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.255106][  T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.269822][  T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.272178][  T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.369380][ T7684] loop1: detected capacity change from 0 to 512
[   82.377947][ T7684] EXT4-fs (loop1): Test dummy encryption mode enabled
[   82.401999][ T7684] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.424: corrupted in-inode xattr: invalid ea_ino
[   82.437727][ T7684] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.424: couldn't read orphan inode 12 (err -117)
[   82.447963][ T7684] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.466579][ T7691] loop4: detected capacity change from 0 to 512
[   82.476902][ T7684] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   82.498024][ T7691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.552529][ T6383] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[   82.608150][ T7686] loop3: detected capacity change from 0 to 32768
[   82.730333][ T7686] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[   82.742718][ T7686] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[   82.809437][ T7686] bcachefs (loop3): alloc_read... done
[   82.811558][ T7686] bcachefs (loop3): stripes_read... done
[   82.813139][ T7686] bcachefs (loop3): snapshots_read... done
[   82.818469][ T7686] bcachefs (loop3): journal_replay... done
[   82.820202][ T7686] bcachefs (loop3): resume_logged_ops... done
[   82.827985][ T7686] bcachefs (loop3): going read-write
[   82.833184][ T7686] bcachefs (loop3): done starting filesystem
[   82.943198][ T6373] bcachefs (loop3): shutting down
[   82.945057][ T6373] bcachefs (loop3): going read-only
[   82.946863][ T6373] bcachefs (loop3): finished waiting for writes to stop
[   82.957278][ T7358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.979830][ T7707] loop2: detected capacity change from 0 to 512
[   82.979906][ T7705] loop1: detected capacity change from 0 to 256
[   82.986192][ T7707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   83.001885][ T6373] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12
[   83.004443][ T7707] EXT4-fs (loop2): 1 truncate cleaned up
[   83.006623][ T7705] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   83.012655][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.028706][ T6373] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14
[   83.052268][ T6373] bcachefs (loop3): shutdown complete, journal seq 15
[   83.054944][ T6373] bcachefs (loop3): marking filesystem clean
[   83.097981][ T7710] loop4: detected capacity change from 0 to 512
[   83.103201][ T7710] EXT4-fs: Ignoring removed nobh option
[   83.117125][ T7705] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[   83.117125][ T7705] 
[   83.126203][ T6373] bcachefs (loop3): shutdown complete
[   83.172790][ T7705] exFAT-fs (loop1): Filesystem has been set read-only
[   83.176099][ T7705] exFAT-fs (loop1): error, failed to bmap (inode : 000000008a17f9d7 iblock : 0, err : -5)
[   83.196482][ T7705] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[   83.196482][ T7705] 
[   83.206207][ T7705] exFAT-fs (loop1): error, failed to bmap (inode : 0000000058bd1ff3 iblock : 0, err : -5)
[   83.259644][ T7710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.277531][ T7710] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.414: bg 0: block 224: padding at end of block bitmap is not set
[   83.285979][ T7710] EXT4-fs (loop4): Remounting filesystem read-only
[   83.300492][   T30] audit: type=1326 audit(83.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7709 comm="syz.4.414" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff903459e8 code=0x0
[   84.002483][ T6379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.031551][ T7719] loop0: detected capacity change from 0 to 2048
[   84.076029][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'.
[   84.076935][ T7358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.094805][   T11] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   84.097932][   T11] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   84.108511][ T7719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.309801][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.547005][ T7740] syz.3.416 uses obsolete (PF_INET,SOCK_PACKET)
[   84.603759][ T7740] loop3: detected capacity change from 0 to 64
[   84.605829][ T7740] minix: Unknown parameter '€'
[   84.736862][ T7734] loop2: detected capacity change from 0 to 32768
[   84.749163][ T7736] loop4: detected capacity change from 0 to 32768
[   84.806882][ T7735] loop1: detected capacity change from 0 to 32768
[   84.815634][ T7735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.430 (7735)
[   84.839154][ T7735] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.842227][ T7735] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   84.844637][ T7735] BTRFS info (device loop1): using free-space-tree
[   85.061671][ T7736] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,nojournal_transaction_names
[   85.065827][ T7736] bcachefs (loop4): recovering from clean shutdown, journal seq 8
[   86.067803][ T7736] bcachefs (loop4): alloc_read... done
[   86.069343][ T7736] bcachefs (loop4): stripes_read... done
[   86.087374][ T7736] bcachefs (loop4): snapshots_read... done
[   86.089992][ T7736] bcachefs (loop4): journal_replay... done
[   86.106402][ T7736] bcachefs (loop4): resume_logged_ops... done
[   86.116370][ T7736] bcachefs (loop4): going read-write
[   86.132257][ T7736] bcachefs (loop4): done starting filesystem
[   86.270065][ T7777] loop2: detected capacity change from 0 to 4096
[   86.331701][ T6383] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.333308][ T7358] bcachefs (loop4): shutting down
[   86.336964][ T7358] bcachefs (loop4): going read-only
[   86.343124][ T7358] bcachefs (loop4): finished waiting for writes to stop
[   86.368038][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'.
[   86.401916][ T7358] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9
[   86.422711][ T7358] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[   86.496918][ T7358] bcachefs (loop4): shutdown complete, journal seq 11
[   86.499302][ T7358] bcachefs (loop4): marking filesystem clean
[   86.649639][ T7358] bcachefs (loop4): shutdown complete
[   87.093411][ T7797] loop1: detected capacity change from 0 to 1024
[   87.095613][ T7797] hfsplus: part requires an argument
[   87.097044][ T7797] hfsplus: unable to parse mount options
[   87.262880][ T7801] loop0: detected capacity change from 0 to 128
[   87.587593][ T7806] x_tables: unsorted underflow at hook 3
[   88.295068][ T7802] loop1: detected capacity change from 0 to 8192
[   88.527840][ T7796] loop3: detected capacity change from 0 to 32768
[   88.544943][ T7796] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   88.555193][ T7796] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[   88.745290][ T7796] XFS (loop3): Quotacheck needed: Please wait.
[   89.229126][ T7821] loop4: detected capacity change from 0 to 512
[   89.231288][ T7821] EXT4-fs: Ignoring removed nobh option
[   89.352279][ T7821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.366849][ T7796] XFS (loop3): Quotacheck: Done.
[   89.404942][ T7821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.438: bg 0: block 224: padding at end of block bitmap is not set
[   89.432447][ T7821] EXT4-fs (loop4): Remounting filesystem read-only
[   89.455974][   T30] audit: type=1326 audit(89.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.4.438" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff903459e8 code=0x0
[   89.527469][ T6373] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.624260][ T7833] loop0: detected capacity change from 0 to 512
[   89.661619][ T7833] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   89.682817][ T7833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   89.684897][ T7833] System zones: 0-2, 18-18, 34-34
[   89.699867][ T7833] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   89.729454][ T7828] loop2: detected capacity change from 0 to 32768
[   89.744586][ T7833] EXT4-fs (loop0): 1 truncate cleaned up
[   89.746487][ T7833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.758441][ T7828] btrfs: Deprecated parameter 'usebackuproot'
[   89.760373][ T7828] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   89.789031][ T7828] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.448 (7828)
[   89.827872][ T7828] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   89.834987][ T7828] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   89.886842][ T6961] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0x1df122de6744d8a61353419e82c54008fc662bc11a0e4cbba0bab408e735b343 level 0
[   89.925313][ T6385] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /107/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   89.925810][ T7828] BTRFS warning (device loop2): failed to read root (objectid=9): -5
[   89.933755][ T7828] BTRFS warning (device loop2): try to load backup roots slot 1
[   89.936195][ T6961] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0xb53a00f31c45f7321a9313703acec781446109140709e23ccf9d3c8a07c32708 found 0x757466c1ace39a208423b3ed41d61feef5514f42ccb833ffb2b28fc5a8abf61f level 0
[   89.948470][ T7828] BTRFS warning (device loop2): couldn't read tree root
[   89.952392][ T7828] BTRFS warning (device loop2): try to load backup roots slot 2
[   89.954821][   T11] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   89.959203][ T7828] BTRFS warning (device loop2): couldn't read tree root
[   89.967605][ T7828] BTRFS warning (device loop2): try to load backup roots slot 3
[   89.977011][  T268] BTRFS warning (device loop2): checksum verify failed on logical 5242880 mirror 1 wanted 0x8d90b910ec13d95ec17ddbe87d1d5dca5d3dff1259e90cf51f7cd4ff39170caa found 0x51545db27486f4efe1f3452d03fc39183e4c7f4f2ee697c8a9798d6e150aa9b8 level 0
[   90.005331][ T7828] BTRFS warning (device loop2): couldn't read tree root
[   90.078119][ T7828] BTRFS error (device loop2): open_ctree failed
[   90.088897][ T7358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.095312][ T7856] loop1: detected capacity change from 0 to 128
[   90.100002][  T268] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   90.118814][  T268] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   90.315205][ T7875] loop2: detected capacity change from 0 to 128
[   90.321793][ T7875] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.404600][ T7875] overlayfs: upper fs needs to support d_type.
[   90.548812][ T7881] overlayfs: cleanup of 'file0/work' failed (-1)
[   90.551915][ T7881] overlayfs: failed to create directory ./file0/work (errno: 17); mounting read-only
[   90.574899][ T6480] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.692344][ T7883] loop4: detected capacity change from 0 to 16
[   90.719171][ T7883] erofs: (device loop4): erofs_read_inode: bogus i_mode (3) @ nid 36
[   91.558025][ T6380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.570200][ T6380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.585874][ T6380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.588924][ T6380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.599419][ T6380] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   91.609315][ T6380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.724620][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.825160][ T7887] loop4: detected capacity change from 0 to 32768
[   91.894114][ T6386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   91.905687][ T6386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   91.910275][ T6386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   91.920380][ T6386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   91.926638][ T6386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   91.928775][ T6386] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   91.932310][ T7887] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   91.935406][ T7887] bcachefs (loop4): recovering from clean shutdown, journal seq 7
[   91.942172][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.969704][ T6379] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.049870][ T7887] bcachefs (loop4): alloc_read... done
[   92.058779][ T7887] bcachefs (loop4): stripes_read... done
[   92.060382][ T7887] bcachefs (loop4): snapshots_read... done
[   92.068272][ T7887] bcachefs (loop4): journal_replay... done
[   92.069930][ T7887] bcachefs (loop4): resume_logged_ops... done
[   92.077323][ T7887] bcachefs (loop4): going read-write
[   92.091766][ T7887] bcachefs (loop4): done starting filesystem
[   92.102236][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.191805][ T7909] ------------[ cut here ]------------
[   92.192245][ T7909] 
[   92.192251][ T7909] ======================================================
[   92.192255][ T7909] WARNING: possible circular locking dependency detected
[   92.192260][ T7909] 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 Tainted: G        W         
[   92.192267][ T7909] ------------------------------------------------------
[   92.192271][ T7909] syz.3.471/7909 is trying to acquire lock:
[   92.192276][ T7909] ffff80008f58d020 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x88/0xec
[   92.192310][ T7909] 
[   92.192310][ T7909] but task is already holding lock:
[   92.192313][ T7909] ffff800094049db8 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x114/0x2ec
[   92.192335][ T7909] 
[   92.192335][ T7909] which lock already depends on the new lock.
[   92.192335][ T7909] 
[   92.192339][ T7909] 
[   92.192339][ T7909] the existing dependency chain (in reverse order) is:
[   92.192342][ T7909] 
[   92.192342][ T7909] -> #1 (&port_lock_key){-.-.}-{2:2}:
[   92.192367][ T7909]        _raw_spin_lock_irqsave+0x5c/0x7c
[   92.192382][ T7909]        pl011_console_write+0x148/0x724
[   92.192395][ T7909]        console_flush_all+0x5cc/0xb74
[   92.192405][ T7909]        console_unlock+0xec/0x3d4
[   92.192413][ T7909]        vprintk_emit+0x1ec/0x350
[   92.192422][ T7909]        vprintk_default+0xa0/0xe4
[   92.192431][ T7909]        vprintk+0x200/0x2d4
[   92.192440][ T7909]        _printk+0xdc/0x128
[   92.192453][ T7909]        register_console+0x700/0xa8c
[   92.192462][ T7909]        serial_core_register_port+0x1428/0x1bf4
[   92.192471][ T7909]        serial_ctrl_register_port+0x28/0x38
[   92.192481][ T7909]        uart_add_one_port+0x28/0x38
[   92.192491][ T7909]        pl011_register_port+0x1b4/0x44c
[   92.192503][ T7909]        sbsa_uart_probe+0x488/0x608
[   92.192514][ T7909]        platform_probe+0x148/0x1c0
[   92.192526][ T7909]        really_probe+0x38c/0x8fc
[   92.192536][ T7909]        __driver_probe_device+0x194/0x374
[   92.192547][ T7909]        driver_probe_device+0x78/0x330
[   92.192557][ T7909]        __device_attach_driver+0x2a8/0x4f4
[   92.192567][ T7909]        bus_for_each_drv+0x228/0x2bc
[   92.192576][ T7909]        __device_attach+0x2b4/0x434
[   92.192585][ T7909]        device_initial_probe+0x24/0x34
[   92.192595][ T7909]        bus_probe_device+0x178/0x240
[   92.192604][ T7909]        device_add+0x728/0xa6c
[   92.192616][ T7909]        platform_device_add+0x3e8/0x6e8
[   92.192627][ T7909]        platform_device_register_full+0x4ec/0x604
[   92.192639][ T7909]        acpi_create_platform_device+0x5bc/0x744
[   92.192651][ T7909]        acpi_default_enumeration+0x6c/0xdc
[   92.192664][ T7909]        acpi_bus_attach+0x8b8/0xaa8
[   92.192676][ T7909]        acpi_dev_for_one_check+0xa0/0xb4
[   92.192688][ T7909]        device_for_each_child+0xec/0x174
[   92.192700][ T7909]        acpi_dev_for_each_child+0xc4/0x108
[   92.192712][ T7909]        acpi_bus_attach+0x358/0xaa8
[   92.192730][ T7909]        acpi_dev_for_one_check+0xa0/0xb4
[   92.192742][ T7909]        device_for_each_child+0xec/0x174
[   92.192754][ T7909]        acpi_dev_for_each_child+0xc4/0x108
[   92.192765][ T7909]        acpi_bus_attach+0x358/0xaa8
[   92.192778][ T7909]        acpi_bus_scan+0x118/0x4f0
[   92.192790][ T7909]        acpi_scan_init+0x214/0x6b0
[   92.192804][ T7909]        acpi_init+0x190/0x254
[   92.192815][ T7909]        do_one_initcall+0x254/0x9e4
[   92.192825][ T7909]        do_initcall_level+0x154/0x214
[   92.192836][ T7909]        do_initcalls+0x58/0xac
[   92.192844][ T7909]        do_basic_setup+0x8c/0xa0
[   92.192852][ T7909]        kernel_init_freeable+0x324/0x478
[   92.192861][ T7909]        kernel_init+0x24/0x2a0
[   92.192873][ T7909]        ret_from_fork+0x10/0x20
[   92.192883][ T7909] 
[   92.192883][ T7909] -> #0 (console_owner){-.-.}-{0:0}:
[   92.192897][ T7909]        __lock_acquire+0x3384/0x763c
[   92.192910][ T7909]        lock_acquire+0x248/0x73c
[   92.192921][ T7909]        console_lock_spinning_enable+0xb4/0xec
[   92.192932][ T7909]        console_flush_all+0x58c/0xb74
[   92.192941][ T7909]        console_unlock+0xec/0x3d4
[   92.192950][ T7909]        vprintk_emit+0x1ec/0x350
[   92.192958][ T7909]        vprintk_default+0xa0/0xe4
[   92.192967][ T7909]        vprintk+0x200/0x2d4
[   92.192976][ T7909]        _printk+0xdc/0x128
[   92.192988][ T7909]        report_bug+0x3b8/0x5b0
[   92.192998][ T7909]        bug_handler+0x50/0x1fc
[   92.193008][ T7909]        brk_handler+0x17c/0x2e0
[   92.193017][ T7909]        do_debug_exception+0x1e4/0x398
[   92.193029][ T7909]        el1_dbg+0x64/0x80
[   92.193039][ T7909]        el1h_64_sync_handler+0x40/0xac
[   92.193049][ T7909]        el1h_64_sync+0x64/0x68
[   92.193057][ T7909]        uart_write+0x280/0x2ec
[   92.193065][ T7909]        ppp_async_push+0x258/0x1608
[   92.193079][ T7909]        ppp_async_send+0xb0/0x114
[   92.193091][ T7909]        __ppp_channel_push+0xe0/0x1ac
[   92.193102][ T7909]        ppp_channel_push+0xe0/0x208
[   92.193113][ T7909]        ppp_write+0x288/0x374
[   92.193125][ T7909]        vfs_writev+0x6c8/0xb80
[   92.193138][ T7909]        __arm64_sys_pwritev+0x18c/0x29c
[   92.193149][ T7909]        invoke_syscall+0x98/0x2b8
[   92.193158][ T7909]        el0_svc_common+0x130/0x23c
[   92.193166][ T7909]        do_el0_svc+0x48/0x58
[   92.193173][ T7909]        el0_svc+0x54/0x168
[   92.193183][ T7909]        el0t_64_sync_handler+0x84/0xfc
[   92.193193][ T7909]        el0t_64_sync+0x190/0x194
[   92.193201][ T7909] 
[   92.193201][ T7909] other info that might help us debug this:
[   92.193201][ T7909] 
[   92.193205][ T7909]  Possible unsafe locking scenario:
[   92.193205][ T7909] 
[   92.193208][ T7909]        CPU0                    CPU1
[   92.193211][ T7909]        ----                    ----
[   92.193214][ T7909]   lock(&port_lock_key);
[   92.193221][ T7909]                                lock(console_owner);
[   92.193228][ T7909]                                lock(&port_lock_key);
[   92.193235][ T7909]   lock(console_owner);
[   92.193241][ T7909] 
[   92.193241][ T7909]  *** DEADLOCK ***
[   92.193241][ T7909] 
[   92.193244][ T7909] 6 locks held by syz.3.471/7909:
[   92.193251][ T7909]  #0: ffff0000ee746248 (&pch->upl){++..}-{2:2}, at: ppp_channel_push+0x38/0x208
[   92.193277][ T7909]  #1: ffff0000ee7461e0 (&pch->downl){+...}-{2:2}, at: __ppp_channel_push+0x3c/0x1ac
[   92.193303][ T7909]  #2: ffff0000f21c8030 (&ap->xmit_lock){+...}-{2:2}, at: ppp_async_push+0x8c/0x1608
[   92.193330][ T7909]  #3: ffff800094049db8 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x114/0x2ec
[   92.193359][ T7909]  #4: ffff80008f474940 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x1d0/0x350
[   92.193383][ T7909]  #5: ffff80008f474570 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire+0x10/0x4c
[   92.193408][ T7909] 
[   92.193408][ T7909] stack backtrace:
[   92.193412][ T7909] CPU: 0 PID: 7909 Comm: syz.3.471 Tainted: G        W          6.10.0-rc2-syzkaller-g8867bbd4a056 #0
[   92.193424][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   92.193431][ T7909] Call trace:
[   92.193435][ T7909]  dump_backtrace+0x1b8/0x1e4
[   92.193444][ T7909]  show_stack+0x2c/0x3c
[   92.193456][ T7909]  dump_stack_lvl+0xe4/0x150
[   92.193465][ T7909]  dump_stack+0x1c/0x28
[   92.193474][ T7909]  print_circular_bug+0x150/0x1b8
[   92.193483][ T7909]  check_noncircular+0x310/0x404
[   92.193491][ T7909]  __lock_acquire+0x3384/0x763c
[   92.193503][ T7909]  lock_acquire+0x248/0x73c
[   92.193515][ T7909]  console_lock_spinning_enable+0xb4/0xec
[   92.193525][ T7909]  console_flush_all+0x58c/0xb74
[   92.193535][ T7909]  console_unlock+0xec/0x3d4
[   92.193543][ T7909]  vprintk_emit+0x1ec/0x350
[   92.193552][ T7909]  vprintk_default+0xa0/0xe4
[   92.193560][ T7909]  vprintk+0x200/0x2d4
[   92.193569][ T7909]  _printk+0xdc/0x128
[   92.193580][ T7909]  report_bug+0x3b8/0x5b0
[   92.193590][ T7909]  bug_handler+0x50/0x1fc
[   92.193599][ T7909]  brk_handler+0x17c/0x2e0
[   92.193608][ T7909]  do_debug_exception+0x1e4/0x398
[   92.193620][ T7909]  el1_dbg+0x64/0x80
[   92.193629][ T7909]  el1h_64_sync_handler+0x40/0xac
[   92.193639][ T7909]  el1h_64_sync+0x64/0x68
[   92.193647][ T7909]  uart_write+0x280/0x2ec
[   92.193655][ T7909]  ppp_async_push+0x258/0x1608
[   92.193667][ T7909]  ppp_async_send+0xb0/0x114
[   92.193679][ T7909]  __ppp_channel_push+0xe0/0x1ac
[   92.193691][ T7909]  ppp_channel_push+0xe0/0x208
[   92.193702][ T7909]  ppp_write+0x288/0x374
[   92.193713][ T7909]  vfs_writev+0x6c8/0xb80
[   92.193729][ T7909]  __arm64_sys_pwritev+0x18c/0x29c
[   92.193742][ T7909]  invoke_syscall+0x98/0x2b8
[   92.193750][ T7909]  el0_svc_common+0x130/0x23c
[   92.193758][ T7909]  do_el0_svc+0x48/0x58
[   92.193765][ T7909]  el0_svc+0x54/0x168
[   92.193775][ T7909]  el0t_64_sync_handler+0x84/0xfc
[   92.193785][ T7909]  el0t_64_sync+0x190/0x194
[   92.271874][ T6380] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.272076][ T7909] WARNING: CPU: 0 PID: 7909 at drivers/tty/serial/serial_core.c:625 uart_write+0x280/0x2ec
[   92.273883][ T6380] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.275329][ T7909] Modules linked in:
[   92.277073][ T6380] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.278191][ T7909] CPU: 0 PID: 7909 Comm: syz.3.471 Tainted: G        W          6.10.0-rc2-syzkaller-g8867bbd4a056 #0
[   92.280063][ T6380] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.280883][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   92.280896][ T7909] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[   92.280910][ T7909] pc : uart_write+0x280/0x2ec
[   92.280925][ T7909] lr : uart_write+0x278/0x2ec
[   92.280933][ T7909] sp : ffff8000989177a0
[   92.280938][ T7909] x29: ffff8000989177a0 x28: ffff0000f21c80e8 x27: ffff0000f21c80e0
[   92.280958][ T7909] x26: 0000000000000001 x25: dfff800000000000 x24: ffff0000c9280f48
[   92.280975][ T7909] x23: 0000000000000000 x22: ffff800094049da0 x21: ffff0000f21c8210
[   92.280992][ T7909] x20: 0000000000000009 x19: ffff0000c9280be8 x18: ffff800098917440
[   92.281009][ T7909] x17: 000000000000d6f0 x16: ffff8000803514ec x15: ffff700013122ed8
[   92.281026][ T7909] x14: 1ffff00013122ed8 x13: 0000000000000004 x12: ffffffffffffffff
[   92.281043][ T7909] x11: 0000000000040000 x10: 000000000000262f x9 : ffff8000a0d3a000
[   92.289929][ T6380] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.291115][ T7909] 
[   92.291123][ T7909] x8 : 0000000000002630 x7 : 0000000000000000 x6 : 0000000000000000
[   92.291143][ T7909] x5 : ffff80009308f160 x4 : 0000000000000008 x3 : ffff80008035161c
[   92.291159][ T7909] x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff800094049da0
[   92.291175][ T7909] Call trace:
[   92.291180][ T7909]  uart_write+0x280/0x2ec
[   92.291193][ T7909]  ppp_async_push+0x258/0x1608
[   92.291209][ T7909]  ppp_async_send+0xb0/0x114
[   92.291220][ T7909]  __ppp_channel_push+0xe0/0x1ac
[   92.293729][ T6380] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.294642][ T7909]  ppp_channel_push+0xe0/0x208
[   92.310185][ T7890] chnl_net:caif_netlink_parms(): no params data found
[   92.311297][ T7909]  ppp_write+0x288/0x374
[   92.311321][ T7909]  vfs_writev+0x6c8/0xb80
[   92.311335][ T7909]  __arm64_sys_pwritev+0x18c/0x29c
[   92.311356][ T7909]  invoke_syscall+0x98/0x2b8
[   92.311366][ T7909]  el0_svc_common+0x130/0x23c
[   92.311375][ T7909]  do_el0_svc+0x48/0x58
[   92.311383][ T7909]  el0_svc+0x54/0x168
[   92.311395][ T7909]  el0t_64_sync_handler+0x84/0xfc
[   92.494246][ T7909]  el0t_64_sync+0x190/0x194
[   92.495536][ T7909] irq event stamp: 3309
[   92.496701][ T7909] hardirqs last  enabled at (3308): [<ffff800080a691b4>] kasan_quarantine_put+0x1a0/0x1c8
[   92.499468][ T7909] hardirqs last disabled at (3309): [<ffff80008b2f9ba8>] _raw_spin_lock_irqsave+0x2c/0x7c
[   92.502314][ T7909] softirqs last  enabled at (3280): [<ffff800080030830>] local_bh_enable+0x10/0x34
[   92.504921][ T7909] softirqs last disabled at (3292): [<ffff800085d427d0>] ppp_channel_push+0x38/0x208
[   92.507599][ T7909] ---[ end trace 0000000000000000 ]---
[   92.509156][    C0] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   92.525681][ T7897] chnl_net:caif_netlink_parms(): no params data found
[   92.554966][ T7890] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[   92.621881][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.805038][   T11] bridge_slave_1: left allmulticast mode
[   92.806635][   T11] bridge_slave_1: left promiscuous mode
[   92.808057][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.813009][   T11] bridge_slave_0: left allmulticast mode
[   92.814629][   T11] bridge_slave_0: left promiscuous mode
[   92.816185][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.906936][ T7922] bcachefs (loop4): shutting down
[   92.908358][ T7922] bcachefs (loop4): going read-only
[   92.909667][ T7922] bcachefs (loop4): finished waiting for writes to stop
[   92.931960][ T7922] bcachefs (loop4): flushing journal and stopping allocators, journal seq 7
[   92.934315][ T7922] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 7
[   92.937373][ T7922] bcachefs (loop4): shutdown complete, journal seq 8
[   92.939346][ T7922] bcachefs (loop4): marking filesystem clean
[   92.945736][ T7922] bcachefs (loop4): shutdown complete
[   94.293577][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.332303][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.370547][ T6380] Bluetooth: hci4: command tx timeout
[   94.382064][   T11] bond0 (unregistering): Released all slaves
[   94.472235][ T7908] team0: Port device syz_tun removed
[   95.057360][   T11] hsr_slave_0: left promiscuous mode
[   95.100892][   T11] hsr_slave_1: left promiscuous mode
[   95.190569][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.192544][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.195669][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.197551][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.201659][   T11] veth1_macvtap: left promiscuous mode
[   95.203169][   T11] veth0_macvtap: left promiscuous mode
[   95.204590][   T11] veth1_vlan: left promiscuous mode
[   95.206085][   T11] veth0_vlan: left promiscuous mode
[   97.031567][   T11] team0 (unregistering): Port device team_slave_1 removed
[   97.191364][   T11] team0 (unregistering): Port device team_slave_0 removed
[  101.512651][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.602331][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.681823][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.802101][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.992048][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.071613][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.161834][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0