last executing test programs:

5.807913774s ago: executing program 1 (id=1443):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close(0x3)
write$char_usb(r1, 0x0, 0x0)

5.133707821s ago: executing program 2 (id=1445):
creat(&(0x7f0000000380)='./file0\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x101)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
read$proc_mixer(r0, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
fcntl$dupfd(r5, 0x0, r5)
mincore(&(0x7f0000910000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/40)
ppoll(&(0x7f0000000040)=[{r1, 0xa1c2}], 0x1, 0x0, 0x0, 0x0)

3.714708522s ago: executing program 2 (id=1450):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20)

3.583932827s ago: executing program 2 (id=1452):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340))
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000003c0)={r4})

3.583408233s ago: executing program 0 (id=1453):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffff, 0x10}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x5, 0x4, 0x2, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x200000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @alu={0x4, 0x1, 0x3, 0xa, 0x9, 0x100, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r9, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @broadcast}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast2}, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xff7f})
socket(0x15, 0x5, 0x48a)

3.526578554s ago: executing program 4 (id=1454):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_macvtap\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

3.376194991s ago: executing program 4 (id=1455):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00')
readv(r0, &(0x7f0000000180), 0x0)
getpgrp(0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec03010000000000000000000000000a14000000fa030100ee"], 0x28}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
sync()
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000480)={0x1000000})
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4)

3.259617373s ago: executing program 0 (id=1456):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x4, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x200, 0x0, 0x3}, {0x4, 0x3}], "00ba00"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28)

3.233244383s ago: executing program 0 (id=1457):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xca, &(0x7f0000000300), 0xff, 0x463, &(0x7f00000009c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200b00740000ff13c621d6b03eace5bc0d9675e3a33900000000001549349e06000000000000946e000000000000290000000400"], 0x30}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140))
rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xffffff1d})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x12}}, 0x20}}, 0x0)

2.602030944s ago: executing program 2 (id=1458):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='ext4_fc_commit_stop\x00', r1, 0x0, 0x9}, 0xfffffffffffffdab)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$dupfd(r0, 0x406, r0)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = syz_open_procfs(r3, &(0x7f00000144c0)='uid_map\x00')
dup3(r9, r10, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r10, 0x10e, 0x6, 0x0, 0x0)
io_submit(r8, 0x6, &(0x7f00000009c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8080, 0xffffffffffffffff, &(0x7f0000000400)="2008280c51c06df6776206316dd152e03b1192169731277644059864c28d26ebfd425bda17ce097015d9fe237517eb37392d5def4b3453f10d9e8efa9ebe381b45f7dcdde69dd6610b5d7acaae03dee4bcc672cd06da753138cc0748a774f4980b0d68f97fc15a68d2f8ad78bbe9794461d26cc517753e8c3a880dd8bdd992592aef407fcf4b6d3e45d6d140e80315b90b711d6e66d72499c38f781d05c305919aeab2542f8930ecae38b4662d7c3e5f968092a361db3bd5a8195acede5b3cbe2e1b964d1f05f3", 0xc7, 0x7f00000000, 0x0, 0x4, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7fff, r0, &(0x7f0000000300)="9094e6328061d75d881a5be62efda74a06558f8cfa0920a3cd8a0f061148ffe219cced87e9498a9e5d602571f0d73f3f575485adc3677b91324a254d976b6a63941b23569d6cbb8b2e84d94e13f8b2a0569af8f959558794849b0c3d3251a5d5bfdea25da2e0dbc86ef4961393c3dc6ff8626d2cc8e282b82b525730b03490ae92413af4e2a359c67fc8ec847e91c7", 0x8f, 0x4, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000007c0)="b1ce48a8377bc11f27d3b13bb594e0c25567bfdf4c04d410632ff16620428b18421541d42570b70bb260998be5860c94762082842b70a538f88fe18ccf1f6497315f97691c074f9cca1470372664427507000c5a38f900241a2a", 0x5a, 0x3, 0x0, 0x2, r0}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xfff8, r5, &(0x7f0000000880)="d9a1ff4dfa7ec3572ed66b2b079cafe0d2e88eb7ee9613f2e4f35355d8da6da0c028d1dd93d6dc1db78e5616966f682ac9d8bff513491d5abca6baf88830057fae08890003c5e54250458a2a8f26a09dab12afb804c85082f279bcb6db61540192683cb8935089fe43dcda5d0ee05bf667afd1e43410fbfda14e429d0cf6691a7a567e07a251fd3c6c8a58c84a089582228aa72097a45b0721ec9fadde55d3aa4f8cbe691c952f78d0edbad3d757bd185ef56dfb6c7a9bbd380d01f1d290761af32b842913122264028a376e4c1bd403e5c64ea699db", 0xd6, 0xe, 0x0, 0x3}])
process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

2.351971773s ago: executing program 1 (id=1459):
creat(&(0x7f0000000380)='./file0\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x101)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
read$proc_mixer(r0, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
fcntl$dupfd(r5, 0x0, r5)
mincore(&(0x7f0000910000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/40)
ppoll(&(0x7f0000000040)=[{r1, 0xa1c2}], 0x1, 0x0, 0x0, 0x0)

2.35166073s ago: executing program 4 (id=1460):
socket$kcm(0x10, 0x2, 0x0)
keyctl$clear(0x5, 0xfffffffffffffffe)
request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0)
r0 = io_uring_setup(0x4401, &(0x7f00000002c0)={0x0, 0x1, 0x400})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
lseek(r1, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}}, 0x0)
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
syz_open_pts(r5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.252576954s ago: executing program 0 (id=1461):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4)

2.016298496s ago: executing program 4 (id=1462):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="0e1d1f00"})

2.003838859s ago: executing program 0 (id=1463):
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='ext4_fc_commit_stop\x00', r0, 0x0, 0x9}, 0xfffffffffffffdab)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = syz_open_procfs(r1, &(0x7f00000144c0)='uid_map\x00')
dup3(r7, r8, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, 0x0, 0x0)
process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

2.003123586s ago: executing program 1 (id=1464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x18, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7256}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000180)={0x0, [0x8, 0x4, 0x3e1916f5], [{0x0, 0x1, 0x1}, {}, {}, {0x0, 0x3}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0x0, 0x0}, 0x10)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7", 0x5}], 0x1)
write$sndseq(r2, &(0x7f0000000280)=[{0x5, 0xd, 0x6, 0x6, @tick=0x3, {0xfe, 0x7f}, {0xd, 0x65}, @time=@tick=0x9}], 0x1c)
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x70)

1.420217878s ago: executing program 4 (id=1465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="003000000000000024001280110001006272696467655f736c617665000000000c0005800500190002"], 0x44}}, 0x0)

1.380723044s ago: executing program 2 (id=1466):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x4, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x200, 0x0, 0x3}, {0x4, 0x3}], "00ba00"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28)

1.338823666s ago: executing program 3 (id=1431):
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000000)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x36]}}]})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x1e, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r5, &(0x7f0000000240), 0x2000011a)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2084)
splice(r5, 0x0, r4, 0x0, 0x4ff9c, 0x0)

897.663368ms ago: executing program 0 (id=1467):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340))
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3})

864.562063ms ago: executing program 2 (id=1468):
syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f00000002c0)={[{@nospace_cache}, {@nodatacow}, {@nossd_spread}, {@noautodefrag}, {@nobarrier}, {@nospace_cache}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x5100, &(0x7f000000f3c0)="$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")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000}])
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
setresuid(0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

804.267511ms ago: executing program 4 (id=1469):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close(0x3)
write$char_usb(r1, 0x0, 0x0)

778.761507ms ago: executing program 3 (id=1470):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

727.906264ms ago: executing program 3 (id=1471):
socket$kcm(0x10, 0x2, 0x0)
keyctl$clear(0x5, 0xfffffffffffffffe)
request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0)
r0 = io_uring_setup(0x4401, &(0x7f00000002c0)={0x0, 0x1, 0x400})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
lseek(r1, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}}, 0x0)
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
syz_open_pts(r5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

506.446013ms ago: executing program 1 (id=1472):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d6", 0x2}, {&(0x7f0000000700)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b145f0cbd9da663d841f2a683f8e05d77affe4878070afd287d9499d1be807cb045c34b0125bac962701eae08b9a7d233a9ff8ca1b5a70869a701917781398ef463761fcbfdb9d206f11f566b9086adcc62f8bcd2f851bb98325f7587480f8cc638afce6102dbca56bd2ffeef0fe54d707f4ffe956c1c03586d01cb0510c4783862e1e693a2d7e38a2b0c7f14edc535f020826b65fcde4a5a00915098af6a4ff0ccfe65996527ad36b95ba9745be47826c1b2b1aeb5b5430011e592723afb3b", 0xee}], 0x2}}], 0x1, 0x0)

466.356112ms ago: executing program 3 (id=1473):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[], 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x101, 0x4)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x401)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0xc015, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000240)='cgroup.max.descendants\x00', 0x2, 0x0)
sendfile(r4, r6, 0x0, 0x40000000000004)

368.118313ms ago: executing program 3 (id=1474):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a0500000000000000000007000000080002400000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000b0c00104000000000000000020800034000000008ec0500000c0a0101000000000000000007000000a0050380940400800900090073797a3100000000a0010a8014000280080003400000000408000180fffffffb180002800900020073797a300000000008000180fffffffb85000100bbdad43eb83e21bf3229d4c844fd3fd9dc7d5cee13b64981d7a60d25fd6cd1c090ed1a86ab86a45dba8d8ecd269fba6bbfc5d474fde1398789981b161b9dfb87a5d08c4093cf3806a469352fb2db019d7393ff8da56242e50e5be273977f1165671be598280bf58381d642c76fbb415bb62f4b8a926578276bb781ea6501"], 0x680}}, 0x0)
unshare(0x20040600)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x200, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
accept4$tipc(r2, &(0x7f0000000040), &(0x7f0000000200)=0x10, 0x80000)
r4 = accept4$packet(r2, 0x0, &(0x7f0000000180)=0xfd3d, 0x80000)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}]}, 0x24}}, 0x100d0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

111.554897ms ago: executing program 1 (id=1475):
unshare(0x2000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)

47.096807ms ago: executing program 3 (id=1476):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

0s ago: executing program 1 (id=1477):
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
fsync(0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDENABIO(r3, 0x4b36)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=<r6=>0x0)
sched_setscheduler(r6, 0x5, &(0x7f00000003c0))
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r7 = inotify_init1(0x0)
fcntl$setown(r7, 0x8, 0xffffffffffffffff)
fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, <r8=>0x0})
syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00')
mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)

kernel console output (not intermixed with test programs):

 filter on device batadv0
[  394.499776][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.507724][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.535330][T13561] veth0_vlan: entered promiscuous mode
[  394.555584][T13561] veth1_vlan: entered promiscuous mode
[  394.665875][T13561] veth0_macvtap: entered promiscuous mode
[  394.720777][T13561] veth1_macvtap: entered promiscuous mode
[  394.740780][T13537] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.763318][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.785222][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.809866][ T5247] Bluetooth: hci4: command tx timeout
[  394.810083][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.842449][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.852430][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.863157][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.873650][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.895359][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.916273][T13561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.944209][T13537] 8021q: adding VLAN 0 to HW filter on device team0
[  394.978238][T13537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  394.989060][T13537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  395.009016][T11748] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.016274][T11748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.024634][T11748] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.031714][T11748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.069066][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.107440][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.128281][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.170493][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.192905][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.211937][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.237390][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.258870][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.270175][T13561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.282504][T13561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.295180][T13561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.308342][T13561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.321674][T13712] loop4: detected capacity change from 0 to 32768
[  395.323227][T13561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.379449][T13712] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  395.434971][T13712] XFS (loop4): Ending clean mount
[  395.449096][T13712] XFS (loop4): Quotacheck needed: Please wait.
[  395.477430][T13537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.518361][T13712] XFS (loop4): Quotacheck: Done.
[  395.530321][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.559356][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.614117][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.635272][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.637593][T13537] veth0_vlan: entered promiscuous mode
[  395.679146][T13537] veth1_vlan: entered promiscuous mode
[  395.731637][T13473] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  395.859389][T13537] veth0_macvtap: entered promiscuous mode
[  395.891523][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'.
[  395.977284][T13537] veth1_macvtap: entered promiscuous mode
[  396.004452][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.016942][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.028625][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.040143][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.050397][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.173480][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.187014][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.201631][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.211977][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.225256][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.282621][T13537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.338883][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.358913][ T5247] Bluetooth: hci2: command tx timeout
[  396.413203][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.426897][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.466018][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.520211][ T5247] Bluetooth: hci1: command tx timeout
[  396.568600][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.582093][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.623764][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.647413][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.679320][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.691760][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.714113][T13537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.744289][T13537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.753263][T13537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.762449][T13537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.771358][T13537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.925238][T13770] input: syz0 as /devices/virtual/input/input20
[  396.933233][T13772] netlink: 'syz.4.1255': attribute type 10 has an invalid length.
[  397.046879][T13772] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  397.065819][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.124075][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.342610][T11748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.351070][T11748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.757638][T13781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1226'.
[  397.774841][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  397.783484][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  397.808930][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  397.860441][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  397.884264][   T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  397.907063][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  397.970779][T13789] loop1: detected capacity change from 0 to 512
[  398.135297][T13789] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  398.289125][T13782] chnl_net:caif_netlink_parms(): no params data found
[  398.583249][   T53] Bluetooth: hci2: command tx timeout
[  398.853841][T13782] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.893292][T13782] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.911631][T13782] bridge_slave_0: entered allmulticast mode
[  398.962118][T13782] bridge_slave_0: entered promiscuous mode
[  398.986144][T13782] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.023756][T13782] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.040258][T13782] bridge_slave_1: entered allmulticast mode
[  399.058886][T13782] bridge_slave_1: entered promiscuous mode
[  399.125031][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.161621][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.179374][T13794] loop4: detected capacity change from 0 to 32768
[  399.236705][T13794] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  399.264388][T13782] team0: Port device team_slave_0 added
[  399.272339][T13782] team0: Port device team_slave_1 added
[  399.342080][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.351725][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.381864][T13794] XFS (loop4): Ending clean mount
[  399.399860][T13794] XFS (loop4): Quotacheck needed: Please wait.
[  399.413374][T13794] XFS (loop4): Quotacheck: Done.
[  399.418581][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.465436][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.485673][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.545817][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.683534][T13782] hsr_slave_0: entered promiscuous mode
[  399.687082][T13473] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  399.698805][T13782] hsr_slave_1: entered promiscuous mode
[  399.749761][T13782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.757396][T13782] Cannot create hsr debugfs directory
[  400.114462][   T53] Bluetooth: hci5: command tx timeout
[  400.270698][T13782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.377366][T13782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.460600][T13782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.633385][T13782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.706705][T13837] input: syz0 as /devices/virtual/input/input21
[  400.876711][T13782] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  400.894148][T13782] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  400.929175][T13782] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  400.949352][T13841] loop3: detected capacity change from 0 to 512
[  400.963587][T13782] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  401.065639][T13841] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[  401.760371][T13782] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.774746][T13782] 8021q: adding VLAN 0 to HW filter on device team0
[  401.799757][T13782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  401.810347][T13782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  401.825315][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.832429][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.873082][T13836] loop4: detected capacity change from 0 to 32768
[  401.913358][T13849] loop2: detected capacity change from 0 to 1024
[  401.919459][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.921730][T13836] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1264 (13836)
[  401.926784][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.967330][T13849] hfsplus: extend alloc file! (8192,65536,366)
[  402.115484][T13836] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  402.158432][T13836] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  402.177512][T13836] BTRFS info (device loop4): using free-space-tree
[  402.335700][   T53] Bluetooth: hci5: command tx timeout
[  402.419820][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.454395][T13782] veth0_vlan: entered promiscuous mode
[  402.467005][T13782] veth1_vlan: entered promiscuous mode
[  402.491520][T13782] veth0_macvtap: entered promiscuous mode
[  402.502647][T13782] veth1_macvtap: entered promiscuous mode
[  402.516097][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.527946][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.539287][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.550472][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.561049][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.571674][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.582177][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.595049][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.605927][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.616652][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.626752][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.637510][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.663141][T13782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.663342][   T29] audit: type=1800 audit(1728405556.743:259): pid=13836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1264" name="file1" dev="loop4" ino=260 res=0 errno=0
[  402.672592][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.735086][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.771661][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.923660][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.933536][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.063580][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.169331][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.180121][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.190645][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.224890][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.235300][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.246139][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.258271][T13782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.262492][T13473] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  403.292987][T13880] sp0: Synchronizing with TNC
[  403.311155][T13782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.330100][T13782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.343356][T13782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.352127][T13782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.369109][T13877] fuse: Unknown parameter '0x0000000000000009'
[  403.491269][T11745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.521660][T11745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.574277][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.594869][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.559493][   T53] Bluetooth: hci5: command tx timeout
[  404.773090][T13903] input: syz0 as /devices/virtual/input/input22
[  405.093387][T13909] 9pnet_virtio: no channels available for device syz
[  405.504919][T13892] loop2: detected capacity change from 0 to 32768
[  405.514044][T13892] btrfs: Deprecated parameter 'usebackuproot'
[  405.520142][T13892] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  405.530127][T13892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1277 (13892)
[  405.547824][T13892] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  405.559320][T13892] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  405.598879][T13915] loop4: detected capacity change from 0 to 128
[  405.608546][T13915] ufs: You didn't specify the type of your ufs filesystem
[  405.608546][T13915] 
[  405.608546][T13915] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  405.608546][T13915] 
[  405.608546][T13915] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  405.641513][T13915] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  405.737464][T11748] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[  405.750816][T13892] BTRFS warning (device loop2): couldn't read tree root
[  405.759390][T13892] BTRFS warning (device loop2): try to load backup roots slot 1
[  405.769264][ T1088] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0
[  405.783411][T13892] BTRFS warning (device loop2): couldn't read tree root
[  405.795517][T13892] BTRFS warning (device loop2): try to load backup roots slot 2
[  405.803632][ T1088] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  405.814377][T13892] BTRFS warning (device loop2): couldn't read tree root
[  405.824981][T13892] BTRFS warning (device loop2): try to load backup roots slot 3
[  405.838245][T13892] BTRFS info (device loop2): rebuilding free space tree
[  405.861986][T13892] BTRFS info (device loop2): disabling free space tree
[  405.871877][T13892] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  405.892434][T13892] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  405.960830][T13892] loop2: detected capacity change from 32768 to 0
[  406.138049][T11751] bio_check_eod: 6 callbacks suppressed
[  406.138069][T11751] kworker/u8:15: attempt to access beyond end of device
[  406.138069][T11751] loop2: rw=4097, sector=10384, nr_sectors = 8 limit=0
[  406.158397][T11751] btrfs_dev_stat_inc_and_print: 1 callbacks suppressed
[  406.158415][T11751] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  406.176310][T13200] BTRFS error (device loop2 state A): Transaction aborted (error -5)
[  406.185994][T13200] BTRFS: error (device loop2 state A) in __btrfs_update_delayed_inode:1096: errno=-5 IO failure
[  406.212105][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.234929][T13200] BTRFS info (device loop2 state EA): forced readonly
[  406.262863][T13200] BTRFS: error (device loop2 state EA) in __btrfs_run_delayed_items:1174: errno=-5 IO failure
[  406.291213][T13200] BTRFS warning (device loop2 state EA): Skipping commit of aborted transaction.
[  406.300416][T13200] BTRFS: error (device loop2 state EA) in cleanup_transaction:2017: errno=-5 IO failure
[  406.328391][T13200] BTRFS info (device loop2 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  406.341297][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.419884][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  406.427271][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  406.435645][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  406.443371][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  406.450729][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  406.459650][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  406.526119][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.835991][ T5247] Bluetooth: hci5: command tx timeout
[  407.049728][T13939] loop4: detected capacity change from 0 to 32768
[  407.066348][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.181801][T13939] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1288 (13939)
[  407.512444][ T1088] bridge_slave_1: left allmulticast mode
[  407.518155][ T1088] bridge_slave_1: left promiscuous mode
[  407.524059][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.540848][ T1088] bridge_slave_0: left allmulticast mode
[  407.547480][ T1088] bridge_slave_0: left promiscuous mode
[  407.553467][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.723426][T13939] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  407.751102][T13939] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  407.968623][T13939] BTRFS info (device loop4): using free-space-tree
[  408.118036][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  408.214290][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  408.238929][ T1088] bond0 (unregistering): Released all slaves
[  408.250558][   T29] audit: type=1800 audit(1728405561.972:260): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1288" name="file1" dev="loop4" ino=260 res=0 errno=0
[  408.281011][T13941] chnl_net:caif_netlink_parms(): no params data found
[  408.346844][T13473] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  408.430568][T13941] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.437743][T13941] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.464567][T13941] bridge_slave_0: entered allmulticast mode
[  408.483136][T13941] bridge_slave_0: entered promiscuous mode
[  408.571090][T13941] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.592463][T13941] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.614187][T13941] bridge_slave_1: entered allmulticast mode
[  408.644210][T13941] bridge_slave_1: entered promiscuous mode
[  408.664933][   T53] Bluetooth: hci2: command tx timeout
[  408.740262][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.827030][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.911146][T13941] team0: Port device team_slave_0 added
[  408.918161][T13941] team0: Port device team_slave_1 added
[  409.443756][ T1088] hsr_slave_0: left promiscuous mode
[  409.453413][ T1088] hsr_slave_1: left promiscuous mode
[  409.476594][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.520778][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.537454][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.550119][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.571135][ T1088] veth1_macvtap: left promiscuous mode
[  409.589716][ T1088] veth0_macvtap: left promiscuous mode
[  409.596404][ T1088] veth1_vlan: left promiscuous mode
[  409.601846][ T1088] veth0_vlan: left promiscuous mode
[  409.870025][ T1088] team0 (unregistering): Port device team_slave_1 removed
[  409.886169][ T1088] team0 (unregistering): Port device team_slave_0 removed
[  410.013324][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.031198][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.089946][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.137976][T13941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.145581][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.176105][T13941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.251687][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'.
[  410.689850][T13941] hsr_slave_0: entered promiscuous mode
[  410.699447][T13941] hsr_slave_1: entered promiscuous mode
[  410.705488][T13941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  410.716208][T13941] Cannot create hsr debugfs directory
[  410.889946][   T53] Bluetooth: hci2: command tx timeout
[  411.257918][T14041] loop2: detected capacity change from 0 to 40427
[  411.465988][T14041] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff
[  411.619843][T14041] F2FS-fs (loop2): invalid crc value
[  411.753616][T13941] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  411.777579][T14041] F2FS-fs (loop2): Found nat_bits in checkpoint
[  411.807273][T13941] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  411.913921][T13941] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  412.146834][T14041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  412.193068][T13941] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  412.365609][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'.
[  412.397074][   T29] audit: type=1800 audit(1728405565.854:261): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1305" name="bus" dev="loop2" ino=17 res=0 errno=0
[  412.411170][T14084] vlan2: entered promiscuous mode
[  412.433893][T14041] overlay: Unknown parameter '! 
[  412.433893][T14041] '
[  412.464999][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  412.473754][T13200] syz-executor: attempt to access beyond end of device
[  412.473754][T13200] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  412.497256][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  412.506964][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  412.517371][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  412.530143][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  412.538400][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  412.547596][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  412.555114][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  412.567490][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  412.583392][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  412.602818][T13941] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.658204][T11751] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.681478][T13941] 8021q: adding VLAN 0 to HW filter on device team0
[  412.710658][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.717804][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.764927][T11751] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.882335][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.889489][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.905655][T11751] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.119170][T13941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  413.209062][ T5247] Bluetooth: hci2: command tx timeout
[  413.505498][T11751] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.510409][T14117] loop4: detected capacity change from 0 to 128
[  413.542987][T14117] ufs: You didn't specify the type of your ufs filesystem
[  413.542987][T14117] 
[  413.542987][T14117] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  413.542987][T14117] 
[  413.542987][T14117] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  413.623375][T14088] chnl_net:caif_netlink_parms(): no params data found
[  413.668409][T14117] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  413.924842][T14110] loop2: detected capacity change from 0 to 32768
[  413.937546][T11751] bridge_slave_1: left allmulticast mode
[  413.943299][T11751] bridge_slave_1: left promiscuous mode
[  413.950647][T14110] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1315 (14110)
[  413.955173][T11751] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.994871][T14110] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  414.005262][T14110] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  414.042909][T14110] BTRFS info (device loop2): using free-space-tree
[  414.101426][T11751] bridge_slave_0: left allmulticast mode
[  414.113097][T11751] bridge_slave_0: left promiscuous mode
[  414.124974][T11751] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.581833][   T29] audit: type=1800 audit(1728405567.893:262): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1315" name="file1" dev="loop2" ino=260 res=0 errno=0
[  414.630280][   T29] audit: type=1800 audit(1728405567.931:263): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1315" name="file1" dev="loop2" ino=260 res=0 errno=0
[  414.665963][T13200] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  414.737550][ T5247] Bluetooth: hci1: command tx timeout
[  414.743420][T11751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.771439][T11751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.793074][T11751] bond0 (unregistering): Released all slaves
[  414.824541][T14088] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.831727][T14088] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.844133][T14088] bridge_slave_0: entered allmulticast mode
[  414.850775][T14088] bridge_slave_0: entered promiscuous mode
[  414.858272][T14088] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.865558][T14088] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.872660][T14088] bridge_slave_1: entered allmulticast mode
[  414.879250][T14088] bridge_slave_1: entered promiscuous mode
[  414.971270][T14171] input: syz0 as /devices/virtual/input/input23
[  415.124179][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.135779][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.498643][ T5247] Bluetooth: hci2: command tx timeout
[  415.620494][T14088] team0: Port device team_slave_0 added
[  415.628040][T14088] team0: Port device team_slave_1 added
[  415.675582][T13941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.728797][T11751] hsr_slave_0: left promiscuous mode
[  415.745751][T11751] hsr_slave_1: left promiscuous mode
[  415.765035][T11751] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.790153][T11751] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.806870][T11751] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.823404][T11751] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.943488][T11751] veth1_macvtap: left promiscuous mode
[  415.992048][T14167] loop2: detected capacity change from 0 to 40427
[  416.019657][T11751] veth0_macvtap: left promiscuous mode
[  416.025310][T11751] veth1_vlan: left promiscuous mode
[  416.050045][T11751] veth0_vlan: left promiscuous mode
[  416.089024][T14167] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff
[  416.146909][T14167] F2FS-fs (loop2): invalid crc value
[  416.166183][T14167] F2FS-fs (loop2): Found nat_bits in checkpoint
[  416.581029][T14167] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  416.612770][   T29] audit: type=1800 audit(1728405569.792:264): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1323" name="bus" dev="loop2" ino=17 res=0 errno=0
[  416.644568][T14167] overlay: Unknown parameter '! 
[  416.644568][T14167] '
[  416.680909][T13200] syz-executor: attempt to access beyond end of device
[  416.680909][T13200] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  416.699348][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  416.707970][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  416.719307][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  416.727041][T13200] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  416.756489][T11751] team0 (unregistering): Port device team_slave_1 removed
[  416.784234][T11751] team0 (unregistering): Port device team_slave_0 removed
[  416.899747][T14088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.923540][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  416.953784][T14088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.961015][ T5247] Bluetooth: hci1: command tx timeout
[  417.056041][T13941] veth0_vlan: entered promiscuous mode
[  417.065828][T13941] veth1_vlan: entered promiscuous mode
[  417.101070][T13941] veth0_macvtap: entered promiscuous mode
[  417.198548][T13941] veth1_macvtap: entered promiscuous mode
[  417.228452][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.240312][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.260291][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.273621][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.283848][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.299243][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.309804][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.321231][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.331201][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.341778][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.379508][T13941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.390366][T14088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.397443][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.427358][T14088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.456959][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.468311][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.489326][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.501981][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.513001][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.523816][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.533894][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.547052][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.557234][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.570883][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.584405][T13941] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.673358][T14088] hsr_slave_0: entered promiscuous mode
[  417.694911][T14088] hsr_slave_1: entered promiscuous mode
[  417.702545][T14088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  417.714943][T14088] Cannot create hsr debugfs directory
[  417.729717][T13941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.741058][T13941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.749956][T13941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.765724][T13941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.984184][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.050362][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.186456][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.198333][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.570253][T14088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  418.603590][T14088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  418.618018][T14088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  418.683165][T14088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  418.879412][T14088] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.932412][T14088] 8021q: adding VLAN 0 to HW filter on device team0
[  418.962030][T11745] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.969144][T11745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.056635][T11751] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.063749][T11751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.184675][ T5247] Bluetooth: hci1: command tx timeout
[  419.197140][T14236] loop3: detected capacity change from 0 to 32768
[  419.205284][T14236] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1330 (14236)
[  419.251141][T14088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  419.282714][T14236] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  419.302312][T14236] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  419.310996][T14236] BTRFS info (device loop3): using free-space-tree
[  419.594238][T14088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.616031][T14088] veth0_vlan: entered promiscuous mode
[  419.627503][T14088] veth1_vlan: entered promiscuous mode
[  419.649027][T14088] veth0_macvtap: entered promiscuous mode
[  419.656948][T14088] veth1_macvtap: entered promiscuous mode
[  419.699925][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.731392][   T29] audit: type=1800 audit(1728405572.664:265): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1330" name="file1" dev="loop3" ino=260 res=0 errno=0
[  419.756344][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.766535][   T29] audit: type=1800 audit(1728405572.673:266): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1330" name="file1" dev="loop3" ino=260 res=0 errno=0
[  419.788673][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.799540][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.809727][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.820355][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.858763][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.879191][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.889078][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.899916][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.911777][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.924010][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.935799][T14088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.950518][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.964095][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.980016][T13941] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  419.994166][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.005214][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.017043][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.028455][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.040801][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.053125][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.066086][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.077385][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.089416][T14088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.100976][T14088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.113656][T14088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.126927][T14088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.140174][T14088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.151551][T14088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.215322][T14088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.442078][T14278] loop3: detected capacity change from 0 to 128
[  420.455421][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.493229][T14278] ufs: You didn't specify the type of your ufs filesystem
[  420.493229][T14278] 
[  420.493229][T14278] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  420.493229][T14278] 
[  420.493229][T14278] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  420.550837][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.578242][T14278] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  420.629751][T11745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.637609][T11745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.408177][ T5247] Bluetooth: hci1: command tx timeout
[  421.428930][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'.
[  422.089673][T14284] loop4: detected capacity change from 0 to 40427
[  422.131142][T14284] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff
[  422.221626][T14284] F2FS-fs (loop4): invalid crc value
[  423.248704][T14314] loop2: detected capacity change from 0 to 32768
[  423.253204][T14284] F2FS-fs (loop4): Found nat_bits in checkpoint
[  423.291307][T14314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1342 (14314)
[  423.309453][T14325] netlink: 'syz.1.1346': attribute type 10 has an invalid length.
[  423.624424][T14284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  423.646103][   T29] audit: type=1800 audit(1728405576.368:267): pid=14284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1335" name="bus" dev="loop4" ino=17 res=0 errno=0
[  423.681960][T14325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.693400][T14314] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  423.728398][T14314] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  423.743421][T14325] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  423.757332][T14284] overlay: Unknown parameter '! 
[  423.757332][T14284] '
[  423.764677][T14314] BTRFS info (device loop2): using free-space-tree
[  423.839478][T13473] syz-executor: attempt to access beyond end of device
[  423.839478][T13473] loop4: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  423.855955][T13473] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  423.863251][T13473] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  423.872586][T13473] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  423.879722][T13473] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  423.996466][T14314] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  424.112703][T14314] loop2: detected capacity change from 32768 to 0
[  424.193327][T14314] syz.2.1342: attempt to access beyond end of device
[  424.193327][T14314] loop2: rw=6145, sector=10256, nr_sectors = 8 limit=0
[  424.239370][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  424.246621][T14355] loop3: detected capacity change from 0 to 512
[  424.270295][T14314] syz.2.1342: attempt to access beyond end of device
[  424.270295][T14314] loop2: rw=6145, sector=10480, nr_sectors = 8 limit=0
[  424.319313][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  424.341189][T14314] syz.2.1342: attempt to access beyond end of device
[  424.341189][T14314] loop2: rw=6145, sector=10488, nr_sectors = 8 limit=0
[  424.358508][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[  424.379798][T14314] syz.2.1342: attempt to access beyond end of device
[  424.379798][T14314] loop2: rw=6145, sector=10496, nr_sectors = 8 limit=0
[  424.492865][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[  424.518857][T14355] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[  424.535618][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'.
[  424.571990][T14314] syz.2.1342: attempt to access beyond end of device
[  424.571990][T14314] loop2: rw=6145, sector=10504, nr_sectors = 8 limit=0
[  424.601608][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0
[  424.670288][T14314] syz.2.1342: attempt to access beyond end of device
[  424.670288][T14314] loop2: rw=6145, sector=10512, nr_sectors = 8 limit=0
[  424.683979][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0
[  424.740720][T14314] syz.2.1342: attempt to access beyond end of device
[  424.740720][T14314] loop2: rw=6145, sector=10520, nr_sectors = 8 limit=0
[  424.761036][T14367] loop4: detected capacity change from 0 to 128
[  424.768308][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0
[  424.778640][T14367] EXT4-fs (loop4): Test dummy encryption mode enabled
[  424.791400][T14367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002]
[  424.933228][T14367] System zones: 1-3, 19-19, 35-36
[  424.966087][T14314] syz.2.1342: attempt to access beyond end of device
[  424.966087][T14314] loop2: rw=6145, sector=10528, nr_sectors = 8 limit=0
[  425.172121][T14367] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  425.208737][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 8, rd 0, flush 0, corrupt 0, gen 0
[  425.219014][T14314] syz.2.1342: attempt to access beyond end of device
[  425.219014][T14314] loop2: rw=6145, sector=10536, nr_sectors = 8 limit=0
[  425.232515][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 9, rd 0, flush 0, corrupt 0, gen 0
[  425.257088][T14367] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  425.276325][T14314] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 10, rd 0, flush 0, corrupt 0, gen 0
[  425.306964][T14314] BTRFS: error (device loop2) in btrfs_commit_transaction:2524: errno=-5 IO failure (Error while writing out transaction)
[  425.338048][   T29] audit: type=1800 audit(1728405577.921:268): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1351" name="bus" dev="loop4" ino=12 res=0 errno=0
[  425.410000][T14314] BTRFS info (device loop2 state E): forced readonly
[  425.499059][T14314] BTRFS warning (device loop2 state E): Skipping commit of aborted transaction.
[  425.508517][T14314] BTRFS error (device loop2 state EA): Transaction aborted (error -5)
[  425.517906][T14314] BTRFS: error (device loop2 state EA) in cleanup_transaction:2017: errno=-5 IO failure
[  426.312092][T13473] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  426.442536][T13200] BTRFS info (device loop2 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  427.470903][T14390] loop3: detected capacity change from 0 to 40427
[  428.203122][T14390] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff
[  428.246960][T14390] F2FS-fs (loop3): invalid crc value
[  428.308385][T14413] loop1: detected capacity change from 0 to 512
[  428.381971][T14390] F2FS-fs (loop3): Found nat_bits in checkpoint
[  428.429780][T14390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  428.449060][T14402] loop4: detected capacity change from 0 to 32768
[  428.489678][   T29] audit: type=1800 audit(1728405580.895:269): pid=14390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1359" name="bus" dev="loop3" ino=17 res=0 errno=0
[  428.518396][T14413] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  428.532442][T14390] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  428.543443][T14390] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  428.649912][T11745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.679016][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  428.686701][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  428.698141][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  428.714678][T14402] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  428.725264][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  429.040698][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  429.066270][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  429.080630][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  429.106933][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  429.118556][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  429.125904][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  429.144386][T14402] XFS (loop4): Ending clean mount
[  429.151009][T11745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.160227][T14402] XFS (loop4): Quotacheck needed: Please wait.
[  429.261495][T14402] XFS (loop4): Quotacheck: Done.
[  429.329181][T14428] chnl_net:caif_netlink_parms(): no params data found
[  429.426216][T11745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.887737][T14443] loop3: detected capacity change from 0 to 128
[  429.949687][T14443] EXT4-fs (loop3): Test dummy encryption mode enabled
[  429.986530][T13473] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  429.998811][T14443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002]
[  430.008121][T14443] System zones: 1-3, 19-19, 35-36
[  430.020604][T14443] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  430.034040][T14443] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.048962][T11745] bond0: (slave netdevsim0): Releasing backup interface
[  430.063416][T11745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.084773][   T29] audit: type=1800 audit(1728405582.392:270): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1368" name="bus" dev="loop3" ino=12 res=0 errno=0
[  430.755352][T14428] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.762636][T14428] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.771397][T14428] bridge_slave_0: entered allmulticast mode
[  430.827007][T13941] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  430.859371][T14428] bridge_slave_0: entered promiscuous mode
[  430.882226][T14428] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.889341][T14428] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.917576][T14428] bridge_slave_1: entered allmulticast mode
[  430.930701][T14428] bridge_slave_1: entered promiscuous mode
[  430.979392][T11745] bridge_slave_1: left allmulticast mode
[  430.991085][T11745] bridge_slave_1: left promiscuous mode
[  431.003053][T11745] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.044552][T11745] bridge_slave_0: left allmulticast mode
[  431.050234][T11745] bridge_slave_0: left promiscuous mode
[  431.055952][T11745] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.285822][ T5291] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  431.324160][T11745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.340375][ T5247] Bluetooth: hci0: command tx timeout
[  431.353941][T11745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.371754][T11745] bond0 (unregistering): Released all slaves
[  431.420555][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'.
[  431.446059][T14446] netlink: 'syz.0.1370': attribute type 12 has an invalid length.
[  431.461241][ T5291] usb 2-1: Using ep0 maxpacket: 32
[  431.468593][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.482961][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.511639][T14428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.531244][T14428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.577368][ T5291] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  431.723372][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.749545][ T5291] usb 2-1: config 0 descriptor??
[  432.195700][T14483] input: syz0 as /devices/virtual/input/input24
[  432.203174][ T5291] hub 2-1:0.0: USB hub found
[  432.209824][ T5291] hub 2-1:0.0: 1 port detected
[  432.225231][T14428] team0: Port device team_slave_0 added
[  432.280909][T14428] team0: Port device team_slave_1 added
[  432.398417][T11745] hsr_slave_0: left promiscuous mode
[  432.414953][T11745] hsr_slave_1: left promiscuous mode
[  432.428763][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.452870][T11745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.478255][T11745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.493181][T14494] loop4: detected capacity change from 0 to 512
[  432.572438][T11745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  432.716716][T14494] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  432.722573][T11745] veth1_macvtap: left promiscuous mode
[  432.731010][T11745] veth0_macvtap: left promiscuous mode
[  432.737027][T11745] veth1_vlan: left promiscuous mode
[  432.742488][T11745] veth0_vlan: left promiscuous mode
[  433.708947][ T5247] Bluetooth: hci0: command tx timeout
[  433.967885][T11745] team0 (unregistering): Port device team_slave_1 removed
[  433.983041][T11745] team0 (unregistering): Port device team_slave_0 removed
[  434.445687][ T5283] hub 2-1:0.0: activate --> -90
[  434.469985][T14488] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  434.484131][T14488] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  434.524261][T14428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.533889][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.560165][T14428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.673994][T14428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.682904][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.708636][ T5326] usb 2-1: USB disconnect, device number 12
[  434.725365][T14428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.254938][T14428] hsr_slave_0: entered promiscuous mode
[  435.275809][T14428] hsr_slave_1: entered promiscuous mode
[  435.284142][T14525] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  435.292210][T14428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  435.300132][T14428] Cannot create hsr debugfs directory
[  435.491109][ T5283] usb 2-1-port1: config error
[  435.549414][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.580911][T14537] input: syz0 as /devices/virtual/input/input25
[  435.596409][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.890643][   T53] Bluetooth: hci0: command tx timeout
[  436.994104][T14563] loop4: detected capacity change from 0 to 512
[  437.019078][T14428] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  437.120203][T14563] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  437.154604][T14428] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  437.205250][T14428] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  438.224429][T14428] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  438.232283][   T53] Bluetooth: hci0: command tx timeout
[  438.303807][T14428] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.317422][T14428] 8021q: adding VLAN 0 to HW filter on device team0
[  438.382816][T14428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  438.424615][T14428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  438.459037][T11745] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.466159][T11745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.480115][T11745] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.487306][T11745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.533439][T14576] batadv0: entered promiscuous mode
[  438.552811][T14576] batadv_slave_0: entered promiscuous mode
[  438.559503][T14576] batadv_slave_0: left promiscuous mode
[  438.562309][T14556] loop3: detected capacity change from 0 to 40427
[  438.571604][T14576] batadv0: left promiscuous mode
[  438.582051][T14556] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff
[  438.595331][T14556] F2FS-fs (loop3): invalid crc value
[  438.636023][T14556] F2FS-fs (loop3): Found nat_bits in checkpoint
[  438.734515][T14428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.776388][T14428] veth0_vlan: entered promiscuous mode
[  438.785530][T14556] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  438.832873][T14428] veth1_vlan: entered promiscuous mode
[  438.839051][   T29] audit: type=1800 audit(1728405590.567:271): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1390" name="bus" dev="loop3" ino=17 res=0 errno=0
[  438.863483][T14428] veth0_macvtap: entered promiscuous mode
[  438.871827][T14428] veth1_macvtap: entered promiscuous mode
[  439.050279][T14556] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  439.072565][T14556] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  439.364729][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.389113][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.399031][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.409918][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.420965][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.435894][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.446018][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.460087][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.471036][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.485119][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.495718][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.509183][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.520117][T13941] bio_check_eod: 4 callbacks suppressed
[  439.520133][T13941] syz-executor: attempt to access beyond end of device
[  439.520133][T13941] loop3: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  439.520885][T14428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.530233][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  439.544927][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.565357][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.577927][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  439.587428][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  439.600024][T13941] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  439.641749][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.653438][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.673987][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.684513][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.710286][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.720927][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.730777][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.741570][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.754129][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.765444][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.779593][T14428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.832167][T14428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.864167][T14428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.011817][T14428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.020743][T14428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.106576][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.116088][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.129695][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.138325][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.519353][T14627] loop3: detected capacity change from 0 to 32768
[  440.526640][T14627] btrfs: Deprecated parameter 'usebackuproot'
[  440.533035][T14627] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  440.544902][T14627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1400 (14627)
[  440.569192][T14627] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  440.581863][T14627] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  440.666877][ T2896] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[  440.715252][T14627] BTRFS warning (device loop3): couldn't read tree root
[  440.740744][T14627] BTRFS warning (device loop3): try to load backup roots slot 1
[  440.845900][   T51] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0
[  440.902227][T14664] loop1: detected capacity change from 0 to 512
[  440.917711][T14627] BTRFS warning (device loop3): couldn't read tree root
[  440.974390][T14627] BTRFS warning (device loop3): try to load backup roots slot 2
[  441.001634][T11755] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  441.009316][T14664] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  441.023298][T14627] BTRFS warning (device loop3): couldn't read tree root
[  441.033611][T14627] BTRFS warning (device loop3): try to load backup roots slot 3
[  441.065807][T14629] loop2: detected capacity change from 0 to 32768
[  441.127869][T14629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1367 (14629)
[  441.177867][T14627] BTRFS info (device loop3): rebuilding free space tree
[  441.187486][T14629] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  441.208168][T14629] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  441.216831][T14629] BTRFS info (device loop2): using free-space-tree
[  441.447376][T14627] BTRFS info (device loop3): disabling free space tree
[  441.487743][T14627] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  441.624769][T14627] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  441.734192][T14629] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  441.879818][T13941] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  441.923086][T14629] loop2: detected capacity change from 32768 to 0
[  441.953143][T14702] syz.2.1367: attempt to access beyond end of device
[  441.953143][T14702] loop2: rw=6145, sector=10256, nr_sectors = 8 limit=0
[  441.974526][T14662] loop4: detected capacity change from 0 to 32768
[  441.993376][T14702] btrfs_dev_stat_inc_and_print: 2 callbacks suppressed
[  441.993393][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  442.013843][T14702] syz.2.1367: attempt to access beyond end of device
[  442.013843][T14702] loop2: rw=6145, sector=10480, nr_sectors = 8 limit=0
[  442.027826][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  442.040252][T14702] syz.2.1367: attempt to access beyond end of device
[  442.040252][T14702] loop2: rw=6145, sector=10488, nr_sectors = 8 limit=0
[  442.054710][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[  442.065804][T14702] syz.2.1367: attempt to access beyond end of device
[  442.065804][T14702] loop2: rw=6145, sector=10496, nr_sectors = 8 limit=0
[  442.079888][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[  442.090327][T14702] syz.2.1367: attempt to access beyond end of device
[  442.090327][T14702] loop2: rw=6145, sector=10504, nr_sectors = 8 limit=0
[  442.106104][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0
[  442.116487][T14702] syz.2.1367: attempt to access beyond end of device
[  442.116487][T14702] loop2: rw=6145, sector=10512, nr_sectors = 8 limit=0
[  442.119468][T14662] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  442.132070][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0
[  442.150155][T14702] syz.2.1367: attempt to access beyond end of device
[  442.150155][T14702] loop2: rw=6145, sector=10520, nr_sectors = 8 limit=0
[  442.168019][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0
[  442.178377][T14702] syz.2.1367: attempt to access beyond end of device
[  442.178377][T14702] loop2: rw=6145, sector=10528, nr_sectors = 8 limit=0
[  442.192003][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 8, rd 0, flush 0, corrupt 0, gen 0
[  442.242613][T14702] syz.2.1367: attempt to access beyond end of device
[  442.242613][T14702] loop2: rw=6145, sector=10536, nr_sectors = 8 limit=0
[  442.258913][T14705] loop1: detected capacity change from 0 to 32768
[  442.267171][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 9, rd 0, flush 0, corrupt 0, gen 0
[  442.278765][T14705] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1404 (14705)
[  442.291793][T14702] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 10, rd 0, flush 0, corrupt 0, gen 0
[  442.302795][T14702] BTRFS: error (device loop2) in btrfs_commit_transaction:2524: errno=-5 IO failure (Error while writing out transaction)
[  442.315804][T14702] BTRFS info (device loop2 state E): forced readonly
[  442.337217][T14702] BTRFS warning (device loop2 state E): Skipping commit of aborted transaction.
[  442.347285][T14702] BTRFS error (device loop2 state EA): Transaction aborted (error -5)
[  442.360910][T14702] BTRFS: error (device loop2 state EA) in cleanup_transaction:2017: errno=-5 IO failure
[  442.370006][T14705] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  442.381311][T14705] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  442.391260][T14705] BTRFS info (device loop1): using free-space-tree
[  442.407485][T14662] XFS (loop4): Ending clean mount
[  442.417667][T14662] XFS (loop4): Quotacheck needed: Please wait.
[  442.435179][T14428] BTRFS info (device loop2 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  442.509181][T14662] XFS (loop4): Quotacheck: Done.
[  442.875462][   T29] audit: type=1800 audit(1728405594.337:272): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1404" name="file1" dev="loop1" ino=260 res=0 errno=0
[  443.300326][T14088] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  443.331079][T13473] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  443.544131][T11748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.711437][T11748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.766932][T11748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.820047][T14754] loop4: detected capacity change from 0 to 512
[  443.884120][T14754] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  444.016302][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  444.026280][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  444.037743][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  444.047241][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  444.057377][T11748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.082607][ T5326] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  444.499799][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  444.507215][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  444.622472][T14771] loop1: detected capacity change from 0 to 1024
[  444.675128][T14771] hfsplus: extend alloc file! (8192,65536,366)
[  444.713452][ T5326] usb 4-1: Using ep0 maxpacket: 8
[  444.730040][ T5326] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  444.740096][ T5326] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  444.852401][T11748] bridge_slave_1: left allmulticast mode
[  444.893883][T11748] bridge_slave_1: left promiscuous mode
[  444.947666][ T5326] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  444.976521][T11748] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.079360][T11748] bridge_slave_0: left allmulticast mode
[  445.095950][ T5326] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  445.117649][T11748] bridge_slave_0: left promiscuous mode
[  445.139178][ T5326] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  445.143313][T11748] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.162030][ T5326] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  445.184054][ T5326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.404888][T11748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.426836][ T5326] usb 4-1: usb_control_msg returned -32
[  445.432571][ T5326] usbtmc 4-1:16.0: can't read capabilities
[  445.439933][T11748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.461127][T11748] bond0 (unregistering): Released all slaves
[  445.466901][T14779] loop4: detected capacity change from 0 to 32768
[  445.483939][T14779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1416 (14779)
[  445.542589][T14779] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  445.567332][T14779] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  445.584082][T14779] BTRFS info (device loop4): using free-space-tree
[  445.631679][T14762] chnl_net:caif_netlink_parms(): no params data found
[  445.737181][T14779] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  445.807257][T14762] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.823353][T14762] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.835837][T14779] loop4: detected capacity change from 32768 to 0
[  445.855793][T14762] bridge_slave_0: entered allmulticast mode
[  445.864073][T14762] bridge_slave_0: entered promiscuous mode
[  445.880799][T14819] bio_check_eod: 3 callbacks suppressed
[  445.880817][T14819] syz.4.1416: attempt to access beyond end of device
[  445.880817][T14819] loop4: rw=6145, sector=10240, nr_sectors = 8 limit=0
[  445.881719][T11748] hsr_slave_0: left promiscuous mode
[  445.905738][T14819] syz.4.1416: attempt to access beyond end of device
[  445.905738][T14819] loop4: rw=6145, sector=10472, nr_sectors = 8 limit=0
[  445.919911][T14819] syz.4.1416: attempt to access beyond end of device
[  445.919911][T14819] loop4: rw=6145, sector=10480, nr_sectors = 8 limit=0
[  445.933658][T11748] hsr_slave_1: left promiscuous mode
[  445.938499][T14819] syz.4.1416: attempt to access beyond end of device
[  445.938499][T14819] loop4: rw=6145, sector=10488, nr_sectors = 8 limit=0
[  445.952734][T14819] syz.4.1416: attempt to access beyond end of device
[  445.952734][T14819] loop4: rw=6145, sector=10496, nr_sectors = 8 limit=0
[  445.970253][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.970326][T14819] syz.4.1416: attempt to access beyond end of device
[  445.970326][T14819] loop4: rw=6145, sector=10504, nr_sectors = 8 limit=0
[  445.987810][T11748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.999216][T14819] syz.4.1416: attempt to access beyond end of device
[  445.999216][T14819] loop4: rw=6145, sector=10512, nr_sectors = 8 limit=0
[  446.014354][T14819] syz.4.1416: attempt to access beyond end of device
[  446.014354][T14819] loop4: rw=6145, sector=10520, nr_sectors = 8 limit=0
[  446.029823][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.037575][T11748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.038855][T14819] syz.4.1416: attempt to access beyond end of device
[  446.038855][T14819] loop4: rw=6145, sector=10528, nr_sectors = 8 limit=0
[  446.061200][T14819] syz.4.1416: attempt to access beyond end of device
[  446.061200][T14819] loop4: rw=6145, sector=10560, nr_sectors = 8 limit=0
[  446.076913][T14819] BTRFS: error (device loop4) in btrfs_commit_transaction:2524: errno=-5 IO failure (Error while writing out transaction)
[  446.090571][T14819] BTRFS info (device loop4 state E): forced readonly
[  446.090802][T11748] veth1_macvtap: left promiscuous mode
[  446.097285][T14819] BTRFS warning (device loop4 state E): Skipping commit of aborted transaction.
[  446.115108][T14819] BTRFS error (device loop4 state EA): Transaction aborted (error -5)
[  446.123384][T14819] BTRFS: error (device loop4 state EA) in cleanup_transaction:2017: errno=-5 IO failure
[  446.158855][T11748] veth0_macvtap: left promiscuous mode
[  446.164492][T11748] veth1_vlan: left promiscuous mode
[  446.165923][T13473] BTRFS info (device loop4 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  446.169926][T11748] veth0_vlan: left promiscuous mode
[  446.388509][T11748] team0 (unregistering): Port device team_slave_1 removed
[  446.412373][T11748] team0 (unregistering): Port device team_slave_0 removed
[  446.512439][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  446.519986][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  446.529541][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  446.546968][T14762] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.554141][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  446.561209][T14762] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.568467][T14762] bridge_slave_1: entered allmulticast mode
[  446.575149][T14762] bridge_slave_1: entered promiscuous mode
[  446.591713][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  446.599271][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  446.634258][T14762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.652229][T14762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.700785][T14762] team0: Port device team_slave_0 added
[  446.712233][T14762] team0: Port device team_slave_1 added
[  446.723260][ T5247] Bluetooth: hci0: command tx timeout
[  446.779342][T14762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.801515][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.856158][T14762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.903835][T14762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.923994][T14824] loop1: detected capacity change from 0 to 32768
[  446.924163][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.015613][T14762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.033442][T14824] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  447.120369][T14824] XFS (loop1): Ending clean mount
[  447.141553][T14824] XFS (loop1): Quotacheck needed: Please wait.
[  447.157876][T14824] XFS (loop1): Quotacheck: Done.
[  447.163056][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  447.179511][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  447.190079][T14762] hsr_slave_0: entered promiscuous mode
[  447.196098][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  447.203692][T14762] hsr_slave_1: entered promiscuous mode
[  447.210614][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  447.217964][T14762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  447.228747][T14762] Cannot create hsr debugfs directory
[  447.234308][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  447.254129][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  447.331260][T11748] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.396815][T14825] chnl_net:caif_netlink_parms(): no params data found
[  447.414416][T14088] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  447.425633][T11748] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.509043][T11748] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.617152][T11748] bond0: (slave netdevsim0): Releasing backup interface
[  447.628580][T11748] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.682673][T14825] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.689996][T14825] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.698492][T14825] bridge_slave_0: entered allmulticast mode
[  447.704902][T14825] bridge_slave_0: entered promiscuous mode
[  447.729298][T14825] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.737141][T14825] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.746132][T14825] bridge_slave_1: entered allmulticast mode
[  447.756920][T14825] bridge_slave_1: entered promiscuous mode
[  448.203463][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.214846][T14848] chnl_net:caif_netlink_parms(): no params data found
[  448.239760][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.288972][T14825] team0: Port device team_slave_0 added
[  448.305121][T11748] bridge_slave_1: left allmulticast mode
[  448.311122][T11748] bridge_slave_1: left promiscuous mode
[  448.317034][T11748] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.325449][T11748] bridge_slave_0: left allmulticast mode
[  448.331543][T11748] bridge_slave_0: left promiscuous mode
[  448.337318][T11748] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.432137][T11748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.443822][T11748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.458402][T11748] bond0 (unregistering): Released all slaves
[  448.489885][T14762] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  448.500289][T14762] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  448.526902][T14762] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  448.539628][T14825] team0: Port device team_slave_1 added
[  448.546961][T14868] loop1: detected capacity change from 0 to 512
[  448.582543][T14762] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  448.631172][T14868] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  448.643023][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.652949][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.713131][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.726333][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.736230][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.767206][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.780626][   T53] Bluetooth: hci3: command tx timeout
[  448.854265][T14848] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.865118][T14848] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.875243][T14848] bridge_slave_0: entered allmulticast mode
[  448.902885][T14848] bridge_slave_0: entered promiscuous mode
[  448.969230][T14848] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.976613][T14848] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.989703][   T53] Bluetooth: hci0: command tx timeout
[  449.111741][T14848] bridge_slave_1: entered allmulticast mode
[  449.189773][T14848] bridge_slave_1: entered promiscuous mode
[  449.343157][T14825] hsr_slave_0: entered promiscuous mode
[  449.350789][T14825] hsr_slave_1: entered promiscuous mode
[  449.359100][T14825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  449.369521][T14825] Cannot create hsr debugfs directory
[  449.381640][T14848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.403403][T11748] hsr_slave_0: left promiscuous mode
[  449.411790][T11748] hsr_slave_1: left promiscuous mode
[  449.418924][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.426362][T11748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.438902][T11748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.446318][T11748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.456207][T11748] veth1_macvtap: left promiscuous mode
[  449.462001][T11748] veth0_macvtap: left promiscuous mode
[  449.467563][T11748] veth1_vlan: left promiscuous mode
[  449.473009][   T53] Bluetooth: hci4: command tx timeout
[  449.478864][T11748] veth0_vlan: left promiscuous mode
[  449.598043][T11748] team0 (unregistering): Port device team_slave_1 removed
[  449.623462][T11748] team0 (unregistering): Port device team_slave_0 removed
[  449.741515][T14848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.847849][T14848] team0: Port device team_slave_0 added
[  449.876255][T14848] team0: Port device team_slave_1 added
[  449.952936][T14848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.960123][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.990136][T14848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.020101][T14825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.060630][T14762] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.072336][T14848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.079692][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.106291][T14848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.129201][T14762] 8021q: adding VLAN 0 to HW filter on device team0
[  450.154516][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.161594][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.202842][T14825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.224421][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.231552][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.281028][T14825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.307536][T14848] hsr_slave_0: entered promiscuous mode
[  450.321306][T14848] hsr_slave_1: entered promiscuous mode
[  450.347647][T14825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.579264][T14825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  450.607419][T14825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  450.646153][T14825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  450.685947][T14825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  450.808953][T14762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.939715][T14762] veth0_vlan: entered promiscuous mode
[  450.982748][T14825] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.990289][T14848] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  451.001472][T14762] veth1_vlan: entered promiscuous mode
[  451.008031][T14848] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  451.010281][   T53] Bluetooth: hci3: command tx timeout
[  451.066799][T14848] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  451.089822][T14848] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  451.105475][T14825] 8021q: adding VLAN 0 to HW filter on device team0
[  451.133536][T11760] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.140685][T11760] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.157347][T14762] veth0_macvtap: entered promiscuous mode
[  451.170939][   T53] Bluetooth: hci0: command tx timeout
[  451.183891][T11760] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.191006][T11760] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.214604][T14762] veth1_macvtap: entered promiscuous mode
[  451.234407][T14825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  451.251317][T14825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.287820][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.303622][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.316005][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.329902][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.340304][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.341514][ T5286] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  451.361748][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.373055][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.385876][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.395805][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.406330][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.417410][T14762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.442773][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.454849][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.464693][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.475422][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.485628][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.496403][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.507049][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.518462][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.523337][ T5286] usb 2-1: device descriptor read/64, error -71
[  451.528346][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.545886][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.556553][T14762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.587035][T14762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.600828][T14762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.610402][T14762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.619105][T14762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.684543][   T53] Bluetooth: hci4: command tx timeout
[  451.692413][T14848] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.720717][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.732762][T14825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.740345][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.754715][T14848] 8021q: adding VLAN 0 to HW filter on device team0
[  451.776594][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.785833][T11760] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.790960][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.792922][T11760] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.809691][ T5286] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  451.813946][T11760] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.824344][T11760] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.870968][T14825] veth0_vlan: entered promiscuous mode
[  451.905940][T14825] veth1_vlan: entered promiscuous mode
[  451.933788][T14825] veth0_macvtap: entered promiscuous mode
[  451.942053][T14825] veth1_macvtap: entered promiscuous mode
[  451.955348][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.965822][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.975689][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.986245][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.996210][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.006915][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.016807][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.027556][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.037679][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.048177][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.058074][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.068563][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.079435][T14825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.087109][ T5286] usb 2-1: device descriptor read/64, error -71
[  452.103282][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.114551][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.124550][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.140553][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.164565][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.175014][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.187315][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.197865][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.207810][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.218331][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.228162][T14825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.238863][T14825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.250657][T14825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.260291][T14825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.269075][T14825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.277824][T14825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.286637][T14825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.299047][ T5286] usb usb2-port1: attempt power cycle
[  452.339534][T14848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.379239][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.397812][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.449992][T11760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.458247][T11760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.461649][T14949] loop2: detected capacity change from 0 to 32768
[  452.477260][T14949] btrfs: Deprecated parameter 'usebackuproot'
[  452.483401][T14949] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  452.496489][T14949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1413 (14949)
[  452.519462][T14949] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  452.535148][T14949] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  452.678057][ T5286] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  452.700915][ T5286] usb 2-1: device descriptor read/8, error -71
[  452.880166][T14848] veth0_vlan: entered promiscuous mode
[  452.989862][ T5286] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  453.048040][ T5286] usb 2-1: device descriptor read/8, error -71
[  453.184047][ T5286] usb usb2-port1: unable to enumerate USB device
[  453.206662][ T3015] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[  453.233778][   T53] Bluetooth: hci3: command tx timeout
[  453.265253][T14949] BTRFS warning (device loop2): couldn't read tree root
[  453.295190][T14949] BTRFS warning (device loop2): try to load backup roots slot 1
[  453.312036][T11755] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0
[  453.333824][T14949] BTRFS warning (device loop2): couldn't read tree root
[  453.341066][T14949] BTRFS warning (device loop2): try to load backup roots slot 2
[  453.356838][T11760] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  453.414965][T14848] veth1_vlan: entered promiscuous mode
[  453.421344][T14949] BTRFS warning (device loop2): couldn't read tree root
[  453.431772][   T53] Bluetooth: hci0: command tx timeout
[  453.437386][T14949] BTRFS warning (device loop2): try to load backup roots slot 3
[  453.469241][T14848] veth0_macvtap: entered promiscuous mode
[  453.478587][T14848] veth1_macvtap: entered promiscuous mode
[  453.482091][T14949] BTRFS info (device loop2): rebuilding free space tree
[  453.496537][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.507702][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.519217][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.530046][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.540395][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.551216][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.562622][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.574212][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.591922][T14949] BTRFS info (device loop2): disabling free space tree
[  453.599255][T14949] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  453.611998][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.618719][T14949] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  453.623946][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.646282][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.657147][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.668235][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.678921][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.692028][T14848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.724525][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.742942][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.755588][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.773026][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.785279][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.798771][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.809370][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.823566][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.833656][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.844367][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.854335][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.864920][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.874790][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.888125][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.898984][T14848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.908572][   T53] Bluetooth: hci4: command tx timeout
[  453.916683][T14848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.925471][T14848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.934677][T14848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.943716][T14848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.994094][T11755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.010066][T11755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.027898][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.029206][T14762] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  454.035885][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.196140][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  454.329572][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  454.337264][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  454.344527][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  454.353840][ T5247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  454.362277][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  454.369613][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  454.447086][T14991] loop2: detected capacity change from 0 to 512
[  454.526715][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'.
[  454.629128][T14991] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  455.292214][T14984] chnl_net:caif_netlink_parms(): no params data found
[  455.446918][   T53] Bluetooth: hci3: command tx timeout
[  455.530851][T14984] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.562119][T14984] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.603782][T14984] bridge_slave_0: entered allmulticast mode
[  455.633174][T14984] bridge_slave_0: entered promiscuous mode
[  455.640979][T14984] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.643647][   T29] audit: type=1326 audit(1728405606.291:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.648105][T14984] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.692620][T14984] bridge_slave_1: entered allmulticast mode
[  455.712862][T14984] bridge_slave_1: entered promiscuous mode
[  455.737501][   T29] audit: type=1326 audit(1728405606.291:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.767357][   T29] audit: type=1326 audit(1728405606.291:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.793909][   T29] audit: type=1326 audit(1728405606.291:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.826674][   T29] audit: type=1326 audit(1728405606.291:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.855615][   T29] audit: type=1326 audit(1728405606.291:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.886349][T14984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.903925][T14984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.913207][   T29] audit: type=1326 audit(1728405606.291:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.945247][   T29] audit: type=1326 audit(1728405606.291:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.975407][   T29] audit: type=1326 audit(1728405606.291:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  455.998517][ T5286] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  456.020785][   T29] audit: type=1326 audit(1728405606.291:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5bf7dff9 code=0x7fc00000
[  456.049745][T14984] team0: Port device team_slave_0 added
[  456.063005][T14984] team0: Port device team_slave_1 added
[  456.083387][T14984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.092165][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.096888][T15020] loop2: detected capacity change from 0 to 40427
[  456.130851][T14984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.131821][   T53] Bluetooth: hci4: command tx timeout
[  456.149573][T14984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.157071][ T5286] usb 2-1: device descriptor read/64, error -71
[  456.165755][T15020] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff
[  456.180070][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.200547][T15020] F2FS-fs (loop2): invalid crc value
[  456.207248][T14984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.219970][T15020] F2FS-fs (loop2): Found nat_bits in checkpoint
[  456.263802][T14984] hsr_slave_0: entered promiscuous mode
[  456.277954][T15020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  456.286255][T14984] hsr_slave_1: entered promiscuous mode
[  456.293623][T14984] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  456.301227][T14984] Cannot create hsr debugfs directory
[  456.326297][T15020] overlayfs: missing 'workdir'
[  456.396415][T14762] bio_check_eod: 2 callbacks suppressed
[  456.396430][T14762] syz-executor: attempt to access beyond end of device
[  456.396430][T14762] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  456.427329][T14762] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  456.434317][ T5286] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  456.445773][T14762] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  456.453457][T14762] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  456.460382][T14762] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  456.579936][   T53] Bluetooth: hci6: command tx timeout
[  456.625498][ T5286] usb 2-1: device descriptor read/64, error -71
[  456.679048][T15045] netlink: 'syz.4.1444': attribute type 16 has an invalid length.
[  456.687006][T15045] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1444'.
[  456.759556][ T5286] usb usb2-port1: attempt power cycle
[  456.806477][T14984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.488705][ T5286] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  457.571920][T14984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.585667][ T5286] usb 2-1: device descriptor read/8, error -71
[  457.676494][T14984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.743498][T14984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.853238][ T5286] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  457.901157][T14984] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  457.916509][ T5286] usb 2-1: device descriptor read/8, error -71
[  457.930228][T14984] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  457.953285][T14984] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  457.964372][T14984] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  458.034295][ T5286] usb usb2-port1: unable to enumerate USB device
[  458.053252][T14984] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.095939][T14984] 8021q: adding VLAN 0 to HW filter on device team0
[  458.108347][T11745] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.115522][T11745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.141691][T11745] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.148832][T11745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.320499][T14984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.364931][T14984] veth0_vlan: entered promiscuous mode
[  458.382802][T14984] veth1_vlan: entered promiscuous mode
[  458.413829][T14984] veth0_macvtap: entered promiscuous mode
[  458.427093][T14984] veth1_macvtap: entered promiscuous mode
[  458.442734][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.453745][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.463661][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.475512][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.643316][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.717732][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.778632][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.791767][   T53] Bluetooth: hci6: command tx timeout
[  458.884995][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.895047][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.905650][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.915551][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.928552][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.947871][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.050111][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.061915][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.074895][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.106086][T14984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.148772][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.159953][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.173063][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.198639][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.213816][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.225608][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.246949][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.257588][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.267506][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.279585][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.289734][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.300995][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.311015][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.323638][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.341004][T14984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.355305][T14984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.379481][T14984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.395068][T14984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.403991][T14984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.412917][T14984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.421878][T14984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.577724][T11755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.607396][T11755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.825388][T15111] netlink: 'syz.0.1463': attribute type 16 has an invalid length.
[  459.833392][T15111] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1463'.
[  459.997187][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.005885][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.030984][T15105] loop1: detected capacity change from 0 to 32768
[  460.039202][T15105] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1464 (15105)
[  460.187187][T15105] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  460.276717][T15105] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  460.338507][T15114] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.383861][T15105] BTRFS info (device loop1): using free-space-tree
[  460.704027][T15130] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  460.900660][T15134] loop2: detected capacity change from 0 to 32768
[  460.916107][T15134] btrfs: Deprecated parameter 'usebackuproot'
[  460.922792][T15134] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  460.950579][T15134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1468 (15134)
[  460.971309][T15134] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  460.982170][T15134] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  461.002599][T14088] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  461.007197][ T5283] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  461.021003][   T53] Bluetooth: hci6: command tx timeout
[  461.143668][ T3015] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[  461.174411][T15134] BTRFS warning (device loop2): couldn't read tree root
[  461.184375][T15134] BTRFS warning (device loop2): try to load backup roots slot 1
[  461.188554][ T5283] usb 5-1: Using ep0 maxpacket: 8
[  461.203018][ T3015] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0
[  461.210589][ T5283] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  461.230122][T15134] BTRFS warning (device loop2): couldn't read tree root
[  461.240961][ T5283] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  461.247949][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.281547][T15134] BTRFS warning (device loop2): try to load backup roots slot 2
[  461.290058][ T2896] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  461.314152][T15134] BTRFS warning (device loop2): couldn't read tree root
[  461.330553][T15134] BTRFS warning (device loop2): try to load backup roots slot 3
[  461.373171][T15134] BTRFS info (device loop2): rebuilding free space tree
[  461.396364][T15134] BTRFS info (device loop2): disabling free space tree
[  461.406648][T15134] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  461.419029][T15134] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  461.497777][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  461.497796][   T29] audit: type=1326 audit(1728405611.782:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236b17dff9 code=0x7fc00000
[  461.811556][   T29] audit: type=1326 audit(1728405612.072:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f236b119959 code=0x7fc00000
[  461.903834][   T29] audit: type=1326 audit(1728405612.072:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f236b119a1f code=0x7fc00000
[  462.010687][   T29] audit: type=1326 audit(1728405612.072:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f236b17dff9 code=0x7fc00000
[  463.261404][   T53] Bluetooth: hci6: command tx timeout
[  503.337272][T10641] udevd[10641]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [15196] terminated by signal 1 (Hangup)
[  525.972837][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  561.163682][   T53] Bluetooth: hci1: command tx timeout
[  561.172364][ T5247] Bluetooth: hci2: command 0x0406 tx timeout
[  561.178451][   T53] Bluetooth: hci5: command 0x0406 tx timeout
[  580.313013][ T5247] Bluetooth: hci0: command 0x0406 tx timeout
[  585.091597][ T4628] Bluetooth: hci4: command 0x0406 tx timeout
[  585.097742][ T4628] Bluetooth: hci3: command 0x0406 tx timeout
[  585.220020][   T30] INFO: task syz.0.1222:13496 blocked for more than 163 seconds.
[  585.227796][   T30]       Not tainted 6.12.0-rc2-next-20241008-syzkaller #0
[  585.235079][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  585.243823][   T30] task:syz.0.1222      state:D stack:26392 pid:13496 tgid:13495 ppid:13206  flags:0x00004006
[  585.254440][   T30] Call Trace:
[  585.257735][   T30]  <TASK>
[  585.260691][   T30]  __schedule+0x1895/0x4b30
[  585.265642][   T30]  ? schedule+0x90/0x320
[  585.269910][   T30]  ? schedule+0x90/0x320
[  585.274218][   T30]  ? lock_release+0xbf/0xa30
[  585.278841][   T30]  ? __pfx___schedule+0x10/0x10
[  585.283863][   T30]  ? __pfx_lock_release+0x10/0x10
[  585.288956][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  585.294442][   T30]  ? mutex_spin_on_owner+0x26c/0x330
[  585.299810][   T30]  ? schedule+0x90/0x320
[  585.304070][   T30]  schedule+0x14b/0x320
[  585.308274][   T30]  schedule_preempt_disabled+0x13/0x30
[  585.313773][   T30]  __mutex_lock+0x6a7/0xd70
[  585.320204][   T30]  ? __mutex_lock+0x52a/0xd70
[  585.324918][   T30]  ? chaoskey_release+0x169/0x2f0
[  585.330152][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  585.335202][   T30]  ? __pfx___fsnotify_parent+0x10/0x10
[  585.340713][   T30]  ? lock_release+0xbf/0xa30
[  585.345329][   T30]  chaoskey_release+0x169/0x2f0
[  585.350239][   T30]  ? __pfx_chaoskey_release+0x10/0x10
[  585.356266][   T30]  __fput+0x23f/0x880
[  585.360322][   T30]  task_work_run+0x24f/0x310
[  585.364931][   T30]  ? rcu_is_watching+0x15/0xb0
[  585.369734][   T30]  ? __pfx_task_work_run+0x10/0x10
[  585.374867][   T30]  ? do_exit+0xa2a/0x28e0
[  585.379208][   T30]  ? kmem_cache_free+0x1a2/0x420
[  585.384196][   T30]  ? do_exit+0xa2a/0x28e0
[  585.388559][   T30]  do_exit+0xa2f/0x28e0
[  585.392779][   T30]  ? rcu_is_watching+0x15/0xb0
[  585.397574][   T30]  ? __pfx_do_exit+0x10/0x10
[  585.402229][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  585.407636][   T30]  ? __pfx_lock_release+0x10/0x10
[  585.412698][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  585.419050][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  585.424204][   T30]  do_group_exit+0x207/0x2c0
[  585.428811][   T30]  get_signal+0x16a3/0x1740
[  585.433343][   T30]  ? __pfx_get_signal+0x10/0x10
[  585.440012][   T30]  ? snd_seq_ioctl+0x29d/0x400
[  585.444852][   T30]  arch_do_signal_or_restart+0x96/0x860
[  585.450419][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  585.786916][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  586.481367][   T30]  ? rcu_is_watching+0x15/0xb0
[  586.486196][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  586.491770][   T30]  do_syscall_64+0x100/0x230
[  586.502753][   T30]  ? clear_bhb_loop+0x35/0x90
[  586.507466][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.839075][   T30] RIP: 0033:0x7f28de57dff9
[  587.843538][   T30] RSP: 002b:00007f28df2ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010