last executing test programs:

1m3.196102865s ago: executing program 4 (id=54):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1d}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)

1m2.725038933s ago: executing program 4 (id=59):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x2, 0x0, 0x7d, 0x15, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x8, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb6, 0x11e, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x0, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a], [0x63, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x200009, 0x0, 0x9, 0x2, 0xff, 0x0, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0xfffffffe, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0x9, 0xb]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0xa, 0x0, @SEQ_NOTEON=@note=0x3a, 0x7f, 0x0, 0xfb})

1m2.387504746s ago: executing program 4 (id=62):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}}}, 0xb8}}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x300}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)

1m2.052996934s ago: executing program 4 (id=68):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0)

1m1.196694682s ago: executing program 4 (id=79):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c402, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100001800400"], 0x28}}, 0x0)

59.848624418s ago: executing program 4 (id=85):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24)

59.297065479s ago: executing program 32 (id=85):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24)

53.640544599s ago: executing program 5 (id=112):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
unshare(0x20000400)
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, 0x0})

52.911436828s ago: executing program 5 (id=114):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x1a4, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x154, 0x1, [@m_sample={0x150, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x6, 0xa}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x674, 0x20000000, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}]}, {0xc1, 0x6, "9200fd45cfbfaf345fb3a8a997749fefa053a1e631f289e2733a34bfda3a1983d7027974d46e922209e9f418398e634151458aec78c3e590819e1ab74e5f08ce9f128c78176c6afb718af7f892cc43aa236ae8553e2bcb9475712e849a72c8618a556ea37252caba7ed994f095c56da51cd5d78c3a9aeb9b782ad180c98a44e20973f69e8f22bb71a2cc45b0df0fd876caa6827c38ba0bd9731585a5d2054dde461d79f8ad529bef9fe86f8f1d6b990c101919ac92fb4cd6cd1cd38b8a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x68, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

49.429979323s ago: executing program 5 (id=132):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)

49.075335257s ago: executing program 5 (id=136):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000340), 0x0}, 0x20)

48.396656773s ago: executing program 5 (id=138):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e00000000c001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c8269956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bea01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f085f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c33c1ed1c0d9cae846bcbfa8cce7b8944578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e666e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000100000000000000000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf129e6d19079e64336e7c676505c78ad67548f4b192be18b1fed95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb080000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eaf36e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee40350273418d4b000000000000c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a7467941bc21edcb9cb8d81e24c3090e1cc90d99e76939da87908fe2bedb44211701130d07c860000ba43870c61fcb4e84dbb216e6046fd7965ec52c94c5bf7511f4ed930c2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

45.421703871s ago: executing program 1 (id=148):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="2c00238008"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)

40.208440049s ago: executing program 1 (id=164):
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"})

38.862380715s ago: executing program 1 (id=171):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10)

38.535524679s ago: executing program 1 (id=172):
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
r0 = syz_io_uring_setup(0x10e, &(0x7f00000003c0)={0x0, 0x8380, 0x0, 0x0, 0x805}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0xa8})
io_uring_enter(r0, 0x3516, 0xdbaa, 0x0, 0x0, 0x0)

36.580753683s ago: executing program 1 (id=178):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000c40)="94b1942b892f", 0x6)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0x1}], 0x4)

31.2203529s ago: executing program 0 (id=211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)

30.332687023s ago: executing program 0 (id=217):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae96"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$cdc_ncm(0x6, 0x94, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a4400001020301090282000201042004090400000102dd50b14ad3a19e0d0000052406000105240006000d240f0106000000020006000606241a05ed0d05241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

10.428842539s ago: executing program 5 (id=138):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e00000000c001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c8269956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bea01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f085f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c33c1ed1c0d9cae846bcbfa8cce7b8944578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e666e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000100000000000000000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf129e6d19079e64336e7c676505c78ad67548f4b192be18b1fed95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb080000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eaf36e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee40350273418d4b000000000000c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a7467941bc21edcb9cb8d81e24c3090e1cc90d99e76939da87908fe2bedb44211701130d07c860000ba43870c61fcb4e84dbb216e6046fd7965ec52c94c5bf7511f4ed930c2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000633a77fbac141416e000030a83040211fe8000000e1e0000845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

7.233495893s ago: executing program 1 (id=178):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000c40)="94b1942b892f", 0x6)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0x1}], 0x4)

3.728245457s ago: executing program 0 (id=217):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae96"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$cdc_ncm(0x6, 0x94, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a4400001020301090282000201042004090400000102dd50b14ad3a19e0d0000052406000105240006000d240f0106000000020006000606241a05ed0d05241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

3.669265753s ago: executing program 2 (id=303):
syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0xce1c, 0x10100}, &(0x7f0000000100), 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}})

3.478109165s ago: executing program 3 (id=305):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x1fd}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

3.318850344s ago: executing program 2 (id=307):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

3.197410075s ago: executing program 2 (id=308):
r0 = syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x442}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000500)={0x40, 0x17}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0})

2.659865008s ago: executing program 6 (id=311):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=<r2=>r0, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20)

2.487876034s ago: executing program 6 (id=312):
io_setup(0x6, &(0x7f00000003c0)=<r0=>0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|<Pq\x8c\xc3', 0x2b, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e)

2.403040362s ago: executing program 3 (id=313):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141b42, 0xb)
pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

2.131183863s ago: executing program 6 (id=314):
r0 = syz_io_uring_setup(0xc17, &(0x7f0000000140)={0x0, 0x3ae7, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4)
r3 = socket(0x2a, 0x2, 0x80053c)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0)

1.88769147s ago: executing program 0 (id=315):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

1.732301073s ago: executing program 3 (id=316):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3eee, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.292538411s ago: executing program 6 (id=317):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)

1.24823075s ago: executing program 2 (id=318):
socket$unix(0x1, 0x1, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x3406}, 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0)

1.124806248s ago: executing program 3 (id=319):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
write$binfmt_script(r1, &(0x7f0000000180), 0xb)
copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0)

875.341865ms ago: executing program 0 (id=320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, 0x0, 0x0)

798.984976ms ago: executing program 6 (id=321):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r2 = dup(r1)
read(r2, &(0x7f0000000040), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

691.616427ms ago: executing program 3 (id=322):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000))

456.610127ms ago: executing program 2 (id=323):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file3\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@noinit_itable}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mknod$loop(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200, 0x1)

455.977714ms ago: executing program 0 (id=324):
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000100)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@noblock_validity}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x6995, 0x500000001, 0x8000000000000001, 0x8})

383.398653ms ago: executing program 6 (id=325):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
truncate(&(0x7f00000000c0)='./file1\x00', 0x8008)

79.043734ms ago: executing program 3 (id=326):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
read$char_usb(r1, &(0x7f0000000cc0)=""/144, 0x90)

0s ago: executing program 2 (id=327):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
lseek(r0, 0x100000000, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)

kernel console output (not intermixed with test programs):

[   99.930776][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.943213][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.960753][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.977109][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.016925][ T5831] veth1_macvtap: entered promiscuous mode
[  100.036511][ T5829] veth0_macvtap: entered promiscuous mode
[  100.075397][ T5829] veth1_macvtap: entered promiscuous mode
[  100.086067][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.099257][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.109768][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.120624][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.131371][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.151524][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.163572][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.173981][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.186501][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.195247][ T5949] lo: entered promiscuous mode
[  100.219926][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.231348][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.244717][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.255346][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.267529][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.278127][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.288061][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.298575][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.312890][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.320528][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.332631][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.342641][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.353182][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.363074][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.373598][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.385590][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.397489][ T5949] lo: entered allmulticast mode
[  100.403136][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.413794][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.423701][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.437747][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.447903][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.458790][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.469063][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.479558][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.489405][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.499970][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.511777][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.530294][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.542829][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.552780][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.564006][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.573970][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.584518][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.594544][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.605112][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.616494][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.629792][ T5948] lo: left allmulticast mode
[  100.637132][ T5948] lo: left promiscuous mode
[  100.643091][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.654227][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.664448][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.675019][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.688784][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.704974][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.715243][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.725890][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.736308][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.747950][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.764894][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.789135][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.805617][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.816823][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.825854][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.849930][ T5831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.860910][ T5831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.878465][ T5831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.887382][ T5831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.888734][ T5953] loop2: detected capacity change from 0 to 24
[  100.912484][ T5953] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  100.939334][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.960231][ T5953] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  100.970156][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.987347][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.001796][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.042588][    T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  101.114146][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.125678][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.211353][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.221679][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  101.233904][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.235849][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.255317][    T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  101.259437][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.268734][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.325220][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  101.349475][    T9] usb 4-1: config 1 has no interface number 1
[  101.369550][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  101.388122][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.400795][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.416705][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.426048][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.434688][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.458581][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.467931][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.481854][ T5895] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  101.490955][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  101.502800][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.503316][    T9] usb 4-1: Product: syz
[  101.514628][ T5895] usb 3-1: SerialNumber: syz
[  101.543843][    T9] usb 4-1: Manufacturer: syz
[  101.548463][    T9] usb 4-1: SerialNumber: syz
[  101.611032][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.621100][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.708144][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.708868][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.716804][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.740098][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.845047][ T5895] usb 3-1: 0:2 : does not exist
[  101.861691][   T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  101.874827][    T9] usb 4-1: USB disconnect, device number 2
[  101.956157][ T5895] usb 3-1: USB disconnect, device number 2
[  102.063143][   T52] usb 5-1: Using ep0 maxpacket: 32
[  102.091245][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.138043][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.166335][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  102.209509][   T52] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  102.253284][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  102.262769][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.355375][   T52] usb 5-1: config 0 descriptor??
[  102.652754][ T5970] input: syz1 as /devices/virtual/input/input5
[  102.901023][   T52] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[  102.983450][ T5979] mmap: syz.0.17 (5979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  103.094903][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'.
[  103.118977][ T5985] loop1: detected capacity change from 0 to 2048
[  103.131298][   T52] ft260 0003:0403:6030.0001: chip code: 0000 0000
[  103.161801][ T5985] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  103.261960][ T5987] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.329889][   T30] audit: type=1800 audit(1746671263.241:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="file1" dev="loop1" ino=15 res=0 errno=0
[  103.332406][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'.
[  103.545726][ T5993] warning: `syz.3.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  103.576534][ T5956] usb 5-1: USB disconnect, device number 2
[  103.622844][ T5962] loop5: detected capacity change from 0 to 32768
[  103.653231][ T5962] =======================================================
[  103.653231][ T5962] WARNING: The mand mount option has been deprecated and
[  103.653231][ T5962]          and is ignored by this kernel. Remove the mand
[  103.653231][ T5962]          option from the mount to silence this warning.
[  103.653231][ T5962] =======================================================
[  103.806647][ T5962] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  103.952626][ T5962] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  104.128637][ T5962] overlayfs: upper fs does not support tmpfile.
[  104.175281][ T5962] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  104.199834][ T5962] overlayfs: failed to set xattr on upper
[  104.255539][ T5962] overlayfs: ...falling back to redirect_dir=nofollow.
[  104.362023][ T5962] overlayfs: ...falling back to index=off.
[  104.378775][ T5962] overlayfs: ...falling back to uuid=null.
[  104.417768][ T5962] overlayfs: upper fs missing required features.
[  104.739275][ T5831] ocfs2: Unmounting device (7,5) on (node local)
[  105.281727][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  105.349057][ T6008] loop0: detected capacity change from 0 to 32768
[  105.368036][ T6008] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.28 (6008)
[  105.421316][ T6008] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.441151][ T6008] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm
[  105.454186][ T6008] BTRFS info (device loop0): using free-space-tree
[  105.489192][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  105.514828][ T5895] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  105.595157][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  105.614522][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.647207][ T6026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  105.715368][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  105.884020][ T6056] loop5: detected capacity change from 0 to 764
[  106.030486][ T6056] Symlink component flag not implemented
[  106.051721][ T5858] usb 2-1: USB disconnect, device number 2
[  106.059350][ T6056] Symlink component flag not implemented (7)
[  106.362213][ T5828] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.809146][ T6053] loop2: detected capacity change from 0 to 32768
[  106.854411][ T6053] (syz.2.42,6053,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  106.917725][ T6053] (syz.2.42,6053,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.044007][ T6053] JBD2: Ignoring recovery information on journal
[  107.256811][ T6053] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  107.455109][ T6053] syz.2.42 (6053) used greatest stack depth: 20224 bytes left
[  107.540431][ T5833] ocfs2: Unmounting device (7,2) on (node local)
[  107.576040][ T6080] loop3: detected capacity change from 0 to 2048
[  107.693508][ T6080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.769420][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.54'.
[  108.160131][ T5194] udevd[5194]: worker [5959] terminated by signal 33 (Unknown signal 33)
[  108.192558][ T5194] udevd[5194]: worker [5959] failed while handling '/devices/virtual/block/loop3'
[  108.546328][ T6107] netlink: 104 bytes leftover after parsing attributes in process `syz.4.62'.
[  108.846561][ T6117] loop4: detected capacity change from 0 to 512
[  108.874624][ T6117] EXT4-fs: Ignoring removed i_version option
[  108.887800][ T6120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  109.016218][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.262447][ T6117] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.68: corrupted in-inode xattr: overlapping e_value 
[  109.412566][ T6139] loop1: detected capacity change from 0 to 8
[  109.789361][ T6143] loop2: detected capacity change from 0 to 32768
[  109.796699][ T5832] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value 
[  109.830711][ T6146] loop0: detected capacity change from 0 to 512
[  109.861976][ T5832] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value 
[  109.996083][ T6143] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  110.153647][ T6143] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  110.153647][ T6143]   allowing incompatible features above 0.0: (unknown version)
[  110.183876][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.192803][ T6143] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  110.201150][ T6143] bcachefs (loop2): Version upgrade required:
[  110.201150][ T6143] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  110.201150][ T6143] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags
[  110.201150][ T6143]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  110.271038][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.282753][ T6143] bcachefs (loop2): dropping and reconstructing all alloc info
[  110.299423][ T6146] EXT4-fs (loop0): Test dummy encryption mode enabled
[  110.306467][ T6143] bcachefs (loop2): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: 
[  110.306494][ T6143]     mode=100755
[  110.306505][ T6143]     flags=(15300000)
[  110.306516][ T6143]     journal_seq=4
[  110.306527][ T6143]     hash_seed=d483206f1ed95abf
[  110.306538][ T6143]     hash_type=siphash
[  110.306550][ T6143]     bi_size=100
[  110.306560][ T6143]     bi_sectors=8
[  110.306571][ T6143]     bi_version=1126999418470400
[  110.306583][ T6143]     bi_atime=0
[  110.306594][ T6143]     bi_ctime=0
[  110.306605][ T6143]     bi_mtime=0
[  110.306616][ T6143]     bi_otime=2780562352
[  110.306628][ T6143]     bi_uid=2780562352
[  110.306639][ T6143]     bi_gid=0
[  110.306650][ T6143]     bi_nlink=2780562352
[  110.306662][ T6143]     bi_generation=0
[  110.306673][ T6143]     bi_dev=0
[  110.306684][ T6143]     bi_data_checksum=0
[  110.306695][ T6143]     bi_compression=56
[  110.306707][ T6143]     bi_project=0
[  110.306718][ T6143]     bi_background_compression=0
[  110.306730][ T6143]     bi_data_replicas=0
[  110.306742][ T6143]     bi_promote_target=0
[  110.306753][ T6143]     bi_foreground_target=0
[  110.306765][ T6143]     bi_background_target=0
[  110.306777][ T6143]     bi_erasure_code=0
[  110.306788][ T6143]     bi_fields_set=0
[  110.306800][ T6143]     bi_dir=0
[  110.306810][ T6143]     bi_dir_offset=0
[  110.306822][ T6143]     bi_subvol=0
[  110.306832][ T6143]     bi_parent_subvol=0
[  110.306844][ T6143]     bi_nocow=0
[  110.306855][ T6143]     bi_depth=0
[  110.306866][ T6143]     bi_inodes_32bit=0
[  110.306877][ T6143]     bi_casefold=0
[  110.306888][ T6143]   invalid compression opt 55, deleting
[  110.476163][ T6146] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.80: corrupted in-inode xattr: invalid ea_ino
[  110.486477][ T6143] bcachefs (loop2): accounting_read... done
[  110.528379][ T6143] bcachefs (loop2): alloc_read... done
[  110.534267][ T6143] bcachefs (loop2): snapshots_read... done
[  110.540447][ T6143] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  110.550403][ T6143] bcachefs (loop2): done starting filesystem
[  110.610205][ T6146] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.80: couldn't read orphan inode 15 (err -117)
[  110.665323][ T6146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.732490][ T5833] bcachefs (loop2): shutting down
[  110.780917][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.841611][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.923996][ T5833] bcachefs (loop2): shutdown complete
[  111.056560][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.081727][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.127801][ T6148] loop3: detected capacity change from 0 to 32768
[  111.203661][ T6148] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  111.252553][ T6148] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  111.275297][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.382415][ T6148] syz.3.81 (6148) used greatest stack depth: 19576 bytes left
[  111.491312][ T6158] loop1: detected capacity change from 0 to 40427
[  111.561533][ T6158] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  111.572927][ T6172] loop0: detected capacity change from 0 to 64
[  111.605095][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.611674][ T6158] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  111.616990][ T5830] ocfs2: Unmounting device (7,3) on (node local)
[  112.223154][ T6158] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  112.241633][ T6158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  112.337415][   T13] bridge_slave_1: left allmulticast mode
[  112.355729][   T13] bridge_slave_1: left promiscuous mode
[  112.395063][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.503528][ T6158] syz.1.82: attempt to access beyond end of device
[  112.503528][ T6158] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  112.551850][   T13] bridge_slave_0: left allmulticast mode
[  112.557534][   T13] bridge_slave_0: left promiscuous mode
[  112.610411][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.854207][ T5829] syz-executor: attempt to access beyond end of device
[  112.854207][ T5829] loop1: rw=2051, sector=45096, nr_sectors = 16 limit=40427
[  112.928472][ T5829] F2FS-fs (loop1): Issue discard(5637, 5637, 2) failed, ret: -5
[  112.984753][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.993356][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.006433][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.026936][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.042587][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.139134][ T6186] loop0: detected capacity change from 0 to 40427
[  114.345700][ T6186] F2FS-fs (loop0): invalid crc value
[  114.413062][ T6213] loop1: detected capacity change from 0 to 4096
[  114.486877][ T6213] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  114.663696][ T6213] ntfs3(loop1): ino=1a, mi_enum_attr
[  114.686538][ T6213] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  114.715523][ T6213] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  114.717726][ T6186] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  114.973231][ T5828] syz-executor: attempt to access beyond end of device
[  114.973231][ T5828] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  115.036371][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  115.036402][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  115.036417][ T5828] Call Trace:
[  115.036426][ T5828]  <TASK>
[  115.036435][ T5828]  dump_stack_lvl+0x189/0x250
[  115.036479][ T5828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.036515][ T5828]  ? __pfx_queue_work_on+0x10/0x10
[  115.036536][ T5828]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  115.036562][ T5828]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.036589][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.036627][ T5828]  f2fs_handle_critical_error+0x37c/0x540
[  115.036662][ T5828]  f2fs_write_end_io+0x4e2/0x6d0
[  115.036710][ T5828]  __submit_merged_bio+0x27a/0x6a0
[  115.036743][ T5828]  __submit_merged_write_cond+0x255/0x530
[  115.036792][ T5828]  f2fs_write_data_pages+0x2854/0x31f0
[  115.036820][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.036888][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.037033][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.037064][ T5828]  ? __lock_acquire+0xaac/0xd20
[  115.037108][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.037149][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.037175][ T5828]  ? do_raw_spin_unlock+0x122/0x240
[  115.037205][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.037234][ T5828]  do_writepages+0x3b1/0x7b0
[  115.037286][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.037312][ T5828]  ? do_raw_spin_lock+0x121/0x290
[  115.037339][ T5828]  ? __pfx_do_writepages+0x10/0x10
[  115.037374][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.037406][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.037433][ T5828]  ? do_raw_spin_unlock+0x122/0x240
[  115.037466][ T5828]  filemap_fdatawrite+0x191/0x230
[  115.037499][ T5828]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  115.037582][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.037615][ T5828]  ? do_raw_spin_unlock+0x122/0x240
[  115.037648][ T5828]  f2fs_sync_dirty_inodes+0x31f/0x830
[  115.037697][ T5828]  f2fs_write_checkpoint+0x94a/0x1de0
[  115.037756][ T5828]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  115.037843][ T5828]  ? kill_f2fs_super+0x298/0x6c0
[  115.037880][ T5828]  kill_f2fs_super+0x2c3/0x6c0
[  115.037919][ T5828]  ? __pfx_kill_f2fs_super+0x10/0x10
[  115.037946][ T5828]  ? radix_tree_delete_item+0x2b6/0x400
[  115.037988][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.038015][ T5828]  ? shrinker_free+0x2ce/0x3e0
[  115.038043][ T5828]  deactivate_locked_super+0xbc/0x130
[  115.038069][ T5828]  cleanup_mnt+0x425/0x4c0
[  115.038105][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.038132][ T5828]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.038163][ T5828]  task_work_run+0x1d4/0x260
[  115.038199][ T5828]  ? __pfx_task_work_run+0x10/0x10
[  115.038230][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.038270][ T5828]  resume_user_mode_work+0x5e/0x80
[  115.038304][ T5828]  syscall_exit_to_user_mode+0x9a/0x120
[  115.038334][ T5828]  do_syscall_64+0x103/0x210
[  115.038364][ T5828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.038408][ T5828]  ? exc_page_fault+0x91/0x110
[  115.038437][ T5828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.038460][ T5828] RIP: 0033:0x7f113a38fc97
[  115.038480][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  115.038499][ T5828] RSP: 002b:00007ffc00aaed28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  115.038524][ T5828] RAX: 0000000000000000 RBX: 00007f113a41089d RCX: 00007f113a38fc97
[  115.038540][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc00aaede0
[  115.038555][ T5828] RBP: 00007ffc00aaede0 R08: 0000000000000000 R09: 0000000000000000
[  115.038570][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc00aafe70
[  115.038585][ T5828] R13: 00007f113a41089d R14: 000000000001c094 R15: 00007ffc00aafeb0
[  115.038623][ T5828]  </TASK>
[  115.038632][ T5828] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  115.107238][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.129089][ T5943] kernel write not supported for file /40/attr/sockcreate (pid: 5943 comm: kworker/1:7)
[  115.136620][ T5846] Bluetooth: hci4: command tx timeout
[  115.179067][ T6225] loop3: detected capacity change from 0 to 128
[  115.498677][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.520579][ T6234] loop2: detected capacity change from 0 to 1024
[  115.562366][ T6234] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  115.573368][ T6225] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  115.656451][   T13] bond0 (unregistering): Released all slaves
[  115.699594][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.728637][ T6225] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  115.903892][ T6225] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups)
[  116.072282][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.114067][ T6245] loop1: detected capacity change from 0 to 32768
[  116.165483][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  116.209579][ T6245] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  116.348512][ T6245] XFS (loop1): Ending clean mount
[  116.388066][ T6245] XFS (loop1): Quotacheck needed: Please wait.
[  116.498248][ T6245] XFS (loop1): Quotacheck: Done.
[  116.504054][ T6245] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  117.194068][ T5846] Bluetooth: hci4: command tx timeout
[  117.498250][ T6267] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.028878][   T13] hsr_slave_0: left promiscuous mode
[  118.066025][   T13] hsr_slave_1: left promiscuous mode
[  118.088881][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.121235][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.166994][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.199949][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.330401][   T13] veth1_macvtap: left promiscuous mode
[  118.357878][   T13] veth0_macvtap: left promiscuous mode
[  118.369657][   T13] veth1_vlan: left promiscuous mode
[  118.393279][   T13] veth0_vlan: left promiscuous mode
[  118.569490][ T6262] loop2: detected capacity change from 0 to 40427
[  118.598888][ T6262] F2FS-fs (loop2): invalid crc value
[  118.618173][ T6285] loop0: detected capacity change from 0 to 1024
[  118.658153][ T6285] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  118.691515][ T6285] EXT4-fs (loop0): group descriptors corrupted!
[  119.012013][ T6262] F2FS-fs (loop2): Start checkpoint disabled!
[  119.029805][ T6262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  119.262343][ T5846] Bluetooth: hci4: command tx timeout
[  119.995797][ T6311] loop2: detected capacity change from 0 to 512
[  120.038501][ T6311] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.118: casefold flag without casefold feature
[  120.041823][   T13] team0 (unregistering): Port device team_slave_1 removed
[  120.084272][ T6311] EXT4-fs (loop2): Remounting filesystem read-only
[  120.128618][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.177391][ T6311] EXT4-fs (loop2): shut down requested (1)
[  120.218397][   T13] team0 (unregistering): Port device team_slave_0 removed
[  120.218617][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.253814][ T6318] loop0: detected capacity change from 0 to 512
[  120.278330][ T6318] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.327173][ T6318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.379750][   T30] audit: type=1800 audit(1746671280.301:3): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="bus" dev="loop0" ino=18 res=0 errno=0
[  120.503519][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.762451][ T5956] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  120.931131][ T5956] usb 3-1: Using ep0 maxpacket: 32
[  120.951094][ T5956] usb 3-1: config 0 has an invalid interface number: 154 but max is 0
[  120.984249][ T5956] usb 3-1: config 0 has no interface number 0
[  121.003619][ T5956] usb 3-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04
[  121.021781][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.029855][ T5956] usb 3-1: Product: syz
[  121.034132][ T5956] usb 3-1: Manufacturer: syz
[  121.039576][ T5956] usb 3-1: SerialNumber: syz
[  121.047251][ T5956] usb 3-1: config 0 descriptor??
[  121.341720][ T5846] Bluetooth: hci4: command tx timeout
[  121.355877][ T6340] sctp: [Deprecated]: syz.0.131 (pid 6340) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.355877][ T6340] Use struct sctp_sack_info instead
[  121.566426][ T6197] chnl_net:caif_netlink_parms(): no params data found
[  121.689176][ T5956] asix 3-1:0.154 (unnamed net_device) (uninitialized): invalid hw address, using random
[  121.701870][ T6349] loop0: detected capacity change from 0 to 512
[  121.720848][ T6349] EXT4-fs (loop0): Test dummy encryption mode enabled
[  121.762849][ T6349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  121.796679][ T6349] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  121.866715][ T6349] EXT4-fs (loop0): 1 truncate cleaned up
[  121.890776][ T5956] asix 3-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  121.935876][ T6349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.987591][ T5956] asix 3-1:0.154 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  122.033279][ T5956] asix 3-1:0.154: probe with driver asix failed with error -71
[  122.118282][ T5956] usb 3-1: USB disconnect, device number 3
[  122.201138][ T6336] loop3: detected capacity change from 0 to 32768
[  122.257613][ T6336] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  122.461173][ T6336] XFS (loop3): Ending clean mount
[  122.552448][ T6336] XFS (loop3): Quotacheck needed: Please wait.
[  122.713595][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.720772][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.727924][ T6336] XFS (loop3): Quotacheck: Done.
[  122.761963][ T6349] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  122.771889][ T6197] bridge_slave_0: entered allmulticast mode
[  122.779818][ T6197] bridge_slave_0: entered promiscuous mode
[  122.808173][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.851660][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.860612][ T6197] bridge_slave_1: entered allmulticast mode
[  122.903503][ T6197] bridge_slave_1: entered promiscuous mode
[  122.975829][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.016341][ T5830] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  123.449070][ T6358] loop1: detected capacity change from 0 to 32768
[  123.453808][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.650598][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.811346][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.924798][ T6358] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  123.938350][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.948493][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.957014][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.974062][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.990197][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.037658][ T6398] loop2: detected capacity change from 0 to 1024
[  124.098031][ T6398] EXT4-fs: Ignoring removed bh option
[  124.153985][ T6358] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  124.153985][ T6358]   allowing incompatible features above 0.0: (unknown version)
[  124.154082][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.231604][ T6398] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.280773][ T6197] team0: Port device team_slave_0 added
[  124.287001][ T6358] bcachefs (loop1): initializing new filesystem
[  124.330836][ T6358] bcachefs (loop1): going read-write
[  124.374989][ T6387] loop0: detected capacity change from 0 to 32768
[  124.379654][ T6197] team0: Port device team_slave_1 added
[  124.428630][ T6358] bcachefs (loop1): marking superblocks
[  124.436884][ T6387] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.446522][ T6398] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.142: corrupted xattr block 145: invalid header
[  124.470763][ T6398] EXT4-fs (loop2): Remounting filesystem read-only
[  124.489348][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.588018][ T6358] bcachefs (loop1): initializing freespace
[  124.620058][ T5833] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000.
[  124.662492][ T6358] bcachefs (loop1): done initializing freespace
[  124.684023][ T6419] loop2: detected capacity change from 0 to 128
[  124.704888][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.719206][ T6358] bcachefs (loop1): reading snapshots table
[  124.745548][ T6358] bcachefs (loop1): reading snapshots done
[  124.784025][ T6419] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  124.828048][ T6387] XFS (loop0): Ending clean mount
[  124.849813][ T6419] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.865958][ T6358] bcachefs (loop1): done starting filesystem
[  124.872936][ T6387] XFS (loop0): Quotacheck needed: Please wait.
[  124.993642][ T6387] XFS (loop0): Quotacheck: Done.
[  125.043030][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.050082][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.126056][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.139112][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.147713][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.173808][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.186855][ T6358] syz.1.137 (6358) used greatest stack depth: 14408 bytes left
[  125.224016][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.347061][ T5829] bcachefs (loop1): shutting down
[  125.363348][ T5829] bcachefs (loop1): going read-only
[  125.408715][ T5828] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.421185][ T5829] bcachefs (loop1): finished waiting for writes to stop
[  125.529298][ T6197] hsr_slave_0: entered promiscuous mode
[  125.530691][ T5829] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  125.571809][ T6197] hsr_slave_1: entered promiscuous mode
[  125.588358][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.627028][ T6197] Cannot create hsr debugfs directory
[  125.837711][ T5829] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  125.907089][ T5829] bcachefs (loop1): clean shutdown complete, journal seq 4
[  126.040992][ T5829] bcachefs (loop1): marking filesystem clean
[  126.071622][ T5134] Bluetooth: hci3: command tx timeout
[  126.395049][ T5829] bcachefs (loop1): shutdown complete
[  126.562422][ T6447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.775878][   T13] bridge_slave_1: left allmulticast mode
[  126.804561][   T13] bridge_slave_1: left promiscuous mode
[  126.830137][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.922191][   T13] bridge_slave_0: left allmulticast mode
[  126.927983][   T13] bridge_slave_0: left promiscuous mode
[  126.989239][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.045397][ T6458] loop0: detected capacity change from 0 to 40427
[  128.102987][ T6458] F2FS-fs (loop0): invalid crc value
[  128.141860][ T5134] Bluetooth: hci3: command tx timeout
[  128.214374][ T6474] Illegal XDP return value 4292558848 on prog  (id 28) dev N/A, expect packet loss!
[  128.262135][ T6458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  128.329659][ T6458] syz.0.154: attempt to access beyond end of device
[  128.329659][ T6458] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.356976][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.154 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  128.357012][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  128.357026][ T6458] Call Trace:
[  128.357044][ T6458]  <TASK>
[  128.357055][ T6458]  dump_stack_lvl+0x189/0x250
[  128.357103][ T6458]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.357140][ T6458]  ? __pfx_queue_work_on+0x10/0x10
[  128.357163][ T6458]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.357191][ T6458]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.357223][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.357262][ T6458]  f2fs_handle_critical_error+0x37c/0x540
[  128.357298][ T6458]  f2fs_write_end_io+0x4e2/0x6d0
[  128.357348][ T6458]  __submit_merged_bio+0x27a/0x6a0
[  128.357381][ T6458]  __submit_merged_write_cond+0x255/0x530
[  128.357433][ T6458]  f2fs_write_data_pages+0x2854/0x31f0
[  128.357505][ T6458]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.357590][ T6458]  ? __pfx_release_pages+0x10/0x10
[  128.357617][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.357645][ T6458]  ? blk_mq_flush_plug_list+0x10e/0x1760
[  128.357695][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.357723][ T6458]  ? check_path+0x21/0x40
[  128.357744][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.357771][ T6458]  ? check_noncircular+0xe0/0x160
[  128.357801][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.357829][ T6458]  ? lockdep_unlock+0x89/0x120
[  128.357859][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.357886][ T6458]  ? validate_chain+0x897/0x2140
[  128.357937][ T6458]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.357968][ T6458]  do_writepages+0x3b1/0x7b0
[  128.358020][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.358047][ T6458]  ? do_raw_spin_lock+0x121/0x290
[  128.358075][ T6458]  ? __pfx_do_writepages+0x10/0x10
[  128.358111][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.358143][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.358170][ T6458]  ? do_raw_spin_unlock+0x122/0x240
[  128.358205][ T6458]  filemap_fdatawrite+0x191/0x230
[  128.358239][ T6458]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  128.358325][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.358358][ T6458]  ? do_raw_spin_unlock+0x122/0x240
[  128.358392][ T6458]  f2fs_sync_dirty_inodes+0x31f/0x830
[  128.358443][ T6458]  f2fs_write_checkpoint+0x94a/0x1de0
[  128.358505][ T6458]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  128.358587][ T6458]  ? __pfx_down_write+0x10/0x10
[  128.358635][ T6458]  f2fs_issue_checkpoint+0x328/0x490
[  128.358671][ T6458]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  128.358705][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.358732][ T6458]  ? __lock_acquire+0xaac/0xd20
[  128.358781][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.358809][ T6458]  ? __up_read+0x280/0x680
[  128.358845][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.358872][ T6458]  ? f2fs_sync_fs+0x200/0x3d0
[  128.358916][ T6458]  f2fs_do_sync_file+0x86a/0x1860
[  128.358966][ T6458]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  128.358994][ T6458]  ? __lock_acquire+0xaac/0xd20
[  128.359078][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359105][ T6458]  ? __mark_inode_dirty+0x3ab/0xdf0
[  128.359150][ T6458]  ? vfs_fsync_range+0x149/0x1c0
[  128.359181][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359209][ T6458]  ? f2fs_sync_file+0xe9/0x160
[  128.359243][ T6458]  f2fs_file_write_iter+0x78e/0x2340
[  128.359282][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359316][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359351][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359387][ T6458]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  128.359419][ T6458]  ? rcu_read_lock_any_held+0xb3/0x120
[  128.359466][ T6458]  vfs_write+0x54b/0xa90
[  128.359500][ T6458]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  128.359536][ T6458]  ? __pfx_vfs_write+0x10/0x10
[  128.359578][ T6458]  ? __fget_files+0x2a/0x420
[  128.359615][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359647][ T6458]  ksys_write+0x145/0x250
[  128.359672][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359699][ T6458]  ? rcu_is_watching+0x15/0xb0
[  128.359738][ T6458]  ? __pfx_ksys_write+0x10/0x10
[  128.359771][ T6458]  ? do_syscall_64+0xba/0x210
[  128.359807][ T6458]  do_syscall_64+0xf6/0x210
[  128.359837][ T6458]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.359864][ T6458]  ? exc_page_fault+0x91/0x110
[  128.359894][ T6458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.359917][ T6458] RIP: 0033:0x7f113a38e969
[  128.359944][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.359963][ T6458] RSP: 002b:00007f113b1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  128.359996][ T6458] RAX: ffffffffffffffda RBX: 00007f113a5b5fa0 RCX: 00007f113a38e969
[  128.360014][ T6458] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000004
[  128.360033][ T6458] RBP: 00007f113a410ab1 R08: 0000000000000000 R09: 0000000000000000
[  128.360048][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.360062][ T6458] R13: 0000000000000000 R14: 00007f113a5b5fa0 R15: 00007ffc00aafa98
[  128.360102][ T6458]  </TASK>
[  128.864680][ T6458] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  129.158620][ T6467] loop2: detected capacity change from 0 to 32768
[  129.289529][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.308595][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.319995][   T13] bond0 (unregistering): Released all slaves
[  129.335194][   T30] audit: type=1800 audit(1746671289.261:4): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.158" name="file1" dev="loop2" ino=4 res=0 errno=0
[  129.511586][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  129.713051][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  129.759531][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  129.813738][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.842021][   T10] usb 4-1: Product: syz
[  129.868599][   T10] usb 4-1: Manufacturer: syz
[  129.891908][   T10] usb 4-1: SerialNumber: syz
[  129.924131][ T6478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  130.224750][ T5846] Bluetooth: hci3: command tx timeout
[  130.237389][   T10] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8
[  130.276180][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'.
[  130.395664][ T6486] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[  130.434193][ T5956] usb 4-1: USB disconnect, device number 3
[  130.458953][   T13] hsr_slave_0: left promiscuous mode
[  130.467964][ T5956] usblp0: removed
[  130.495014][   T13] hsr_slave_1: left promiscuous mode
[  130.511435][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.519648][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.551130][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.579030][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.644092][   T13] veth1_macvtap: left promiscuous mode
[  130.668812][   T13] veth0_macvtap: left promiscuous mode
[  130.696162][   T13] veth1_vlan: left promiscuous mode
[  130.716267][   T13] veth0_vlan: left promiscuous mode
[  131.142970][ T6481] loop0: detected capacity change from 0 to 32768
[  131.242724][ T6481] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  131.370259][ T6481] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  131.456942][ T6481] XFS (loop0): Starting recovery (logdev: internal)
[  131.541442][ T6481] XFS (loop0): Ending recovery (logdev: internal)
[  131.645731][ T6481] XFS (loop0): User initiated shutdown received.
[  131.663623][ T6481] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  131.688228][ T6481] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  131.854869][ T5828] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  131.908039][ T6493] loop2: detected capacity change from 0 to 32768
[  131.999034][ T6493] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.148078][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  132.160463][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  132.183280][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  132.311674][ T5134] Bluetooth: hci3: command tx timeout
[  132.365073][ T6493] XFS (loop2): Ending clean mount
[  132.365212][ T5895] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  132.392526][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.410458][ T5895] usb 4-1: config 0 descriptor??
[  132.412271][ T6493] XFS (loop2): Quotacheck needed: Please wait.
[  132.459700][ T5895] cp210x 4-1:0.0: cp210x converter detected
[  132.495274][ T6493] XFS (loop2): Quotacheck: Done.
[  132.583887][   T30] audit: type=1800 audit(1746671292.511:5): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.165" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  132.680576][ T5833] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.804634][   T13] team0 (unregistering): Port device team_slave_1 removed
[  132.848422][ T5895] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  132.883528][ T5895] usb 4-1: cp210x converter now attached to ttyUSB0
[  132.943227][   T13] team0 (unregistering): Port device team_slave_0 removed
[  133.086554][ T5968] usb 4-1: USB disconnect, device number 4
[  133.110505][ T5968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  133.138216][ T5968] cp210x 4-1:0.0: device disconnected
[  133.328103][ T6526] loop2: detected capacity change from 0 to 1024
[  133.472891][ T6526] loop2: detected capacity change from 0 to 1024
[  133.603331][ T1113] hfsplus: b-tree write err: -5, ino 4
[  133.870155][ T6397] chnl_net:caif_netlink_parms(): no params data found
[  134.237852][ T6197] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  134.365803][ T6528] loop2: detected capacity change from 0 to 32768
[  134.422930][ T6197] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  134.443969][ T6530] loop3: detected capacity change from 0 to 32768
[  134.452380][ T6530] XFS: ikeep mount option is deprecated.
[  134.458142][ T6530] XFS: ikeep mount option is deprecated.
[  134.485736][ T6530] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.522884][ T6528] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  134.626228][ T6197] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  134.665192][ T6197] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  134.731920][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.793886][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.801179][ T6397] bridge_slave_0: entered allmulticast mode
[  134.913328][ T6397] bridge_slave_0: entered promiscuous mode
[  134.925870][ T6530] XFS (loop3): Ending clean mount
[  134.976342][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.012829][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.020090][ T6397] bridge_slave_1: entered allmulticast mode
[  135.087267][ T6397] bridge_slave_1: entered promiscuous mode
[  135.129648][ T5833] ocfs2: Unmounting device (7,2) on (node local)
[  135.410148][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.471248][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.489709][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.837330][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  135.863292][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  135.880551][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  135.900459][ T6397] team0: Port device team_slave_0 added
[  135.914364][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  135.937796][ T6397] team0: Port device team_slave_1 added
[  135.945295][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  136.198900][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.221972][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.266124][ T6580] loop3: detected capacity change from 0 to 512
[  136.291531][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.324577][ T6580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  136.373599][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.380592][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.413186][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.462411][ T6580] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  136.491690][ T6580] EXT4-fs (loop3): 1 truncate cleaned up
[  136.501182][ T6580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.564044][ T6397] hsr_slave_0: entered promiscuous mode
[  136.570827][ T6397] hsr_slave_1: entered promiscuous mode
[  136.579648][ T6397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.587300][ T6397] Cannot create hsr debugfs directory
[  136.668036][ T6571] loop2: detected capacity change from 0 to 32768
[  136.686900][ T5918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.698434][ T6571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.184 (6571)
[  136.739290][ T6571] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.767217][ T6571] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  136.787892][ T6571] BTRFS info (device loop2): using free-space-tree
[  136.892237][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.131234][ T6571] BTRFS error (device loop2): balance: invalid convert metadata profile raid6
[  137.188962][ T5918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.290588][ T5833] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.659455][ T5918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.812417][ T5918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.015294][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[  138.066009][ T5134] Bluetooth: hci0: command tx timeout
[  138.099546][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.622280][ T6197] 8021q: adding VLAN 0 to HW filter on device team0
[  138.966526][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.973723][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.166461][ T6661] sctp: [Deprecated]: syz.0.206 (pid 6661) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.166461][ T6661] Use struct sctp_sack_info instead
[  139.207938][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.210967][ T6662] binder: 6660:6662 ioctl c0306201 200000000540 returned -22
[  139.215103][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.232886][ T5918] bridge_slave_1: left allmulticast mode
[  139.239542][ T5918] bridge_slave_1: left promiscuous mode
[  139.272994][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.332141][ T5918] bridge_slave_0: left allmulticast mode
[  139.337816][ T5918] bridge_slave_0: left promiscuous mode
[  139.371771][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.698101][   T30] audit: type=1800 audit(1746671299.621:6): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.212" name="file0" dev="tmpfs" ino=245 res=0 errno=0
[  140.129382][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.141878][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  140.141915][ T5134] Bluetooth: hci0: command tx timeout
[  140.158287][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.169548][ T5918] bond0 (unregistering): Released all slaves
[  140.267672][ T6574] chnl_net:caif_netlink_parms(): no params data found
[  140.304261][ T5838] usb 4-1: Using ep0 maxpacket: 32
[  140.312587][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  140.341846][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  140.378158][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  140.401521][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  140.426662][ T6681] loop2: detected capacity change from 0 to 1024
[  140.433366][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  140.448037][ T5838] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  140.457480][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.470152][ T5838] usb 4-1: Product: syz
[  140.475594][ T6681] EXT4-fs: Ignoring removed orlov option
[  140.481335][ T5838] usb 4-1: Manufacturer: syz
[  140.487375][ T5838] usb 4-1: SerialNumber: syz
[  140.496391][ T6681] EXT4-fs: Ignoring removed nomblk_io_submit option
[  140.506068][ T5838] usb 4-1: config 0 descriptor??
[  140.589204][ T6681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.706632][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.933093][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -32
[  140.939165][ T5838] input input7: Device does not respond to id packet M
[  140.952448][ T5838] input input7: Device does not respond to id packet P
[  141.057774][ T5918] hsr_slave_0: left promiscuous mode
[  141.071552][ T5918] hsr_slave_1: left promiscuous mode
[  141.083712][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.091140][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.152353][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.154254][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71
[  141.159782][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.193530][ T5838] input input7: Device does not respond to id packet B
[  141.204949][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71
[  141.231888][ T5838] input input7: Device does not respond to id packet N
[  141.254394][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71
[  141.269803][ T5918] veth1_macvtap: left promiscuous mode
[  141.271649][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71
[  141.302059][ T5918] veth0_macvtap: left promiscuous mode
[  141.309878][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71
[  141.330205][ T5918] veth1_vlan: left promiscuous mode
[  141.336888][ T5838] iforce 4-1:0.0: usb_submit_urb failed: -71
[  141.351636][ T5918] veth0_vlan: left promiscuous mode
[  141.368575][ T5838] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  141.464695][ T5838] usb 4-1: USB disconnect, device number 5
[  141.582218][ T6701] loop2: detected capacity change from 0 to 512
[  141.623970][ T6701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  141.690101][ T6701] EXT4-fs (loop2): 1 truncate cleaned up
[  141.730484][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.768295][ T6701] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 13: comm syz.2.220: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  141.832705][ T6701] EXT4-fs (loop2): Remounting filesystem read-only
[  141.890041][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  141.908709][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  141.917391][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  141.942759][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  141.950792][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  141.987606][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.222620][ T5846] Bluetooth: hci0: command tx timeout
[  142.253199][ T6716] netlink: 176 bytes leftover after parsing attributes in process `syz.3.223'.
[  142.676825][ T6713] loop2: detected capacity change from 0 to 40427
[  142.690682][ T6713] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  142.699044][ T6713] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  142.737467][ T6713] F2FS-fs (loop2): invalid crc value
[  142.749478][ T5918] team0 (unregistering): Port device team_slave_1 removed
[  142.838489][ T5918] team0 (unregistering): Port device team_slave_0 removed
[  142.889133][ T6713] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  142.903254][ T6713] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  143.755141][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.787267][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.813050][ T6574] bridge_slave_0: entered allmulticast mode
[  143.833505][ T6574] bridge_slave_0: entered promiscuous mode
[  143.863062][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.880517][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.899042][ T6574] bridge_slave_1: entered allmulticast mode
[  143.924497][ T6574] bridge_slave_1: entered promiscuous mode
[  144.062403][ T5846] Bluetooth: hci2: command tx timeout
[  144.162621][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.226077][ T6727] loop3: detected capacity change from 0 to 40427
[  144.232870][ T6397] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  144.263301][ T6397] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  144.281674][ T6727] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  144.289333][ T6727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  144.304107][ T5846] Bluetooth: hci0: command tx timeout
[  144.319981][ T6727] F2FS-fs (loop3): invalid crc value
[  144.330167][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.375327][ T6737] loop2: detected capacity change from 0 to 32768
[  144.391685][ T6737] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.227 (6737)
[  144.436077][ T6737] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  144.476145][ T6737] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  144.548257][ T6397] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  144.584856][ T6397] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  144.626254][ T6727] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  144.646376][ T6727] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  144.663056][ T6737] BTRFS info (device loop2): rebuilding free space tree
[  144.668879][ T6574] team0: Port device team_slave_0 added
[  144.726003][ T6737] BTRFS info (device loop2): disabling free space tree
[  144.731040][ T6738] f2fs_ckpt-7:3: attempt to access beyond end of device
[  144.731040][ T6738] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  144.758037][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: f2fs_ckpt-7:3 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  144.758068][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  144.758082][ T6738] Call Trace:
[  144.758091][ T6738]  <TASK>
[  144.758101][ T6738]  dump_stack_lvl+0x189/0x250
[  144.758147][ T6738]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.758184][ T6738]  ? __pfx_queue_work_on+0x10/0x10
[  144.758206][ T6738]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.758233][ T6738]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.758261][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.758301][ T6738]  f2fs_handle_critical_error+0x37c/0x540
[  144.758337][ T6738]  f2fs_write_end_io+0x4e2/0x6d0
[  144.758384][ T6738]  __submit_merged_bio+0x27a/0x6a0
[  144.758416][ T6738]  __submit_merged_write_cond+0x255/0x530
[  144.758461][ T6738]  f2fs_write_data_pages+0x2854/0x31f0
[  144.758531][ T6738]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.758686][ T6738]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.758712][ T6738]  do_writepages+0x3b1/0x7b0
[  144.758770][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.758793][ T6738]  ? do_raw_spin_lock+0x121/0x290
[  144.758818][ T6738]  ? __pfx_do_writepages+0x10/0x10
[  144.758851][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.758880][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.758903][ T6738]  ? do_raw_spin_unlock+0x122/0x240
[  144.758934][ T6738]  filemap_fdatawrite+0x191/0x230
[  144.758966][ T6738]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.759052][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.759082][ T6738]  ? do_raw_spin_unlock+0x122/0x240
[  144.759113][ T6738]  f2fs_sync_dirty_inodes+0x31f/0x830
[  144.759160][ T6738]  f2fs_write_checkpoint+0x94a/0x1de0
[  144.759223][ T6738]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.759248][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.759326][ T6738]  ? __pfx_down_write+0x10/0x10
[  144.759356][ T6738]  ? __pfx___schedule+0x10/0x10
[  144.759388][ T6738]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  144.759423][ T6738]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  144.759474][ T6738]  issue_checkpoint_thread+0xd9/0x260
[  144.759507][ T6738]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  144.759536][ T6738]  ? __pfx_autoremove_wake_function+0x10/0x10
[  144.759565][ T6738]  ? __kthread_parkme+0x7b/0x200
[  144.759586][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.759610][ T6738]  ? __kthread_parkme+0x1a1/0x200
[  144.759640][ T6738]  kthread+0x711/0x8a0
[  144.759671][ T6738]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  144.759699][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.759723][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.759756][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.759780][ T6738]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.759800][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.759823][ T6738]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.759848][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.759873][ T6738]  ret_from_fork+0x4e/0x80
[  144.759894][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.759919][ T6738]  ret_from_fork_asm+0x1a/0x30
[  144.759961][ T6738]  </TASK>
[  144.761007][ T6738] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  144.770897][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.780263][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: f2fs_ckpt-7:3 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  144.780293][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  144.780307][ T6738] Call Trace:
[  144.780317][ T6738]  <TASK>
[  144.780327][ T6738]  dump_stack_lvl+0x189/0x250
[  144.780372][ T6738]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.780407][ T6738]  ? __pfx_queue_work_on+0x10/0x10
[  144.780429][ T6738]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.780455][ T6738]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.780484][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.780524][ T6738]  f2fs_handle_critical_error+0x37c/0x540
[  144.780561][ T6738]  f2fs_write_end_io+0x4e2/0x6d0
[  144.780614][ T6738]  __submit_merged_bio+0x27a/0x6a0
[  144.780650][ T6738]  __submit_merged_write_cond+0x255/0x530
[  144.780701][ T6738]  f2fs_write_data_pages+0x2854/0x31f0
[  144.780789][ T6738]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.780968][ T6738]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.780997][ T6738]  do_writepages+0x3b1/0x7b0
[  144.781054][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.781080][ T6738]  ? do_raw_spin_lock+0x121/0x290
[  144.781108][ T6738]  ? __pfx_do_writepages+0x10/0x10
[  144.781145][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.781178][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.781204][ T6738]  ? do_raw_spin_unlock+0x122/0x240
[  144.781243][ T6738]  filemap_fdatawrite+0x191/0x230
[  144.781276][ T6738]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.781371][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.781405][ T6738]  ? do_raw_spin_unlock+0x122/0x240
[  144.781440][ T6738]  f2fs_sync_dirty_inodes+0x31f/0x830
[  144.781495][ T6738]  f2fs_write_checkpoint+0x94a/0x1de0
[  144.781562][ T6738]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.781590][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.781680][ T6738]  ? __pfx_down_write+0x10/0x10
[  144.781713][ T6738]  ? __pfx___schedule+0x10/0x10
[  144.781754][ T6738]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  144.781794][ T6738]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  144.781851][ T6738]  issue_checkpoint_thread+0xd9/0x260
[  144.781888][ T6738]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  144.781922][ T6738]  ? __pfx_autoremove_wake_function+0x10/0x10
[  144.781954][ T6738]  ? __kthread_parkme+0x7b/0x200
[  144.781979][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.782005][ T6738]  ? __kthread_parkme+0x1a1/0x200
[  144.782041][ T6738]  kthread+0x711/0x8a0
[  144.782076][ T6738]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  144.782107][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.782135][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.782163][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.782191][ T6738]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.782214][ T6738]  ? srso_alias_return_thunk+0x5/0xfbef5
[  144.782240][ T6738]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.782269][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.782296][ T6738]  ret_from_fork+0x4e/0x80
[  144.782320][ T6738]  ? __pfx_kthread+0x10/0x10
[  144.782348][ T6738]  ret_from_fork_asm+0x1a/0x30
[  144.782396][ T6738]  </TASK>
[  144.790542][ T6738] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  144.795321][ T6737] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  144.973483][ T6574] team0: Port device team_slave_1 added
[  145.464146][ T6737] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  145.624899][ T5918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.690531][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.713701][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.779814][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.845470][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  145.920577][ T5918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.977858][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.010974][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.086217][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.151583][ T5846] Bluetooth: hci2: command tx timeout
[  146.196712][ T5918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.434017][ T5918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.553310][ T6574] hsr_slave_0: entered promiscuous mode
[  146.560014][ T6574] hsr_slave_1: entered promiscuous mode
[  146.582947][ T6574] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.591808][ T6574] Cannot create hsr debugfs directory
[  147.060135][ T6197] veth0_vlan: entered promiscuous mode
[  147.145587][ T6770] loop3: detected capacity change from 0 to 40427
[  147.175135][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.192951][ T6770] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff
[  147.222499][ T6707] chnl_net:caif_netlink_parms(): no params data found
[  147.243835][ T6770] F2FS-fs (loop3): heap/no_heap options were deprecated
[  147.277269][ T6770] F2FS-fs (loop3): invalid crc value
[  147.413193][ T6197] veth1_vlan: entered promiscuous mode
[  147.538546][ T6770] F2FS-fs (loop3): Start checkpoint disabled!
[  147.583296][ T6770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  147.763149][   T13] kworker/u8:1: attempt to access beyond end of device
[  147.763149][   T13] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.831998][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  147.832037][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  147.832053][   T13] Workqueue: writeback wb_workfn (flush-7:3)
[  147.832097][   T13] Call Trace:
[  147.832107][   T13]  <TASK>
[  147.832117][   T13]  dump_stack_lvl+0x189/0x250
[  147.832158][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.832194][   T13]  ? __pfx_queue_work_on+0x10/0x10
[  147.832216][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.832242][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.832269][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.832307][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  147.832341][   T13]  f2fs_write_end_io+0x4e2/0x6d0
[  147.832388][   T13]  __submit_merged_bio+0x27a/0x6a0
[  147.832421][   T13]  __submit_merged_write_cond+0x255/0x530
[  147.832470][   T13]  f2fs_write_data_pages+0x2854/0x31f0
[  147.832534][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.832557][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.832595][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.832618][   T13]  ? __lock_acquire+0xaac/0xd20
[  147.832675][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.832702][   T13]  ? unwind_next_frame+0xa5/0x2390
[  147.832732][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.832755][   T13]  ? unwind_next_frame+0x19ae/0x2390
[  147.832798][   T13]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  147.832822][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.832845][   T13]  ? arch_stack_walk+0x11c/0x150
[  147.832894][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.832919][   T13]  do_writepages+0x3b1/0x7b0
[  147.832945][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.832978][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833016][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833041][   T13]  ? __pfx_do_writepages+0x10/0x10
[  147.833071][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833094][   T13]  ? reacquire_held_locks+0x127/0x1d0
[  147.833113][   T13]  ? writeback_sb_inodes+0x372/0x1000
[  147.833144][   T13]  __writeback_single_inode+0x145/0xff0
[  147.833166][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833189][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  147.833218][   T13]  writeback_sb_inodes+0x6b5/0x1000
[  147.833239][   T13]  ? unwind_next_frame+0xa5/0x2390
[  147.833291][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  147.833357][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833380][   T13]  ? rcu_is_watching+0x15/0xb0
[  147.833412][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833445][   T13]  wb_writeback+0x43b/0xaf0
[  147.833475][   T13]  ? queue_io+0x331/0x590
[  147.833500][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  147.833531][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.833558][   T13]  wb_workfn+0x409/0xef0
[  147.833606][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  147.833632][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833655][   T13]  ? register_lock_class+0x51/0x320
[  147.833690][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833713][   T13]  ? __lock_acquire+0xaac/0xd20
[  147.833752][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833779][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.833807][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.833827][   T13]  ? process_scheduled_works+0x9ec/0x17a0
[  147.833859][   T13]  ? process_scheduled_works+0x9ec/0x17a0
[  147.833895][   T13]  process_scheduled_works+0xade/0x17a0
[  147.833959][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.834007][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.834041][   T13]  worker_thread+0x8a0/0xda0
[  147.834089][   T13]  kthread+0x711/0x8a0
[  147.834118][   T13]  ? __pfx_worker_thread+0x10/0x10
[  147.834137][   T13]  ? __pfx_kthread+0x10/0x10
[  147.834161][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.834186][   T13]  ? __pfx_kthread+0x10/0x10
[  147.834210][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.834229][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.834252][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.834277][   T13]  ? __pfx_kthread+0x10/0x10
[  147.834301][   T13]  ret_from_fork+0x4e/0x80
[  147.834322][   T13]  ? __pfx_kthread+0x10/0x10
[  147.834346][   T13]  ret_from_fork_asm+0x1a/0x30
[  147.834384][   T13]  </TASK>
[  147.834400][   T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  148.271985][ T5846] Bluetooth: hci2: command tx timeout
[  148.346751][ T6397] 8021q: adding VLAN 0 to HW filter on device team0
[  148.448800][ T6197] veth0_macvtap: entered promiscuous mode
[  148.474478][ T5918] bridge_slave_1: left allmulticast mode
[  148.480158][ T5918] bridge_slave_1: left promiscuous mode
[  148.486496][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.505345][ T5918] bridge_slave_0: left allmulticast mode
[  148.511013][ T5918] bridge_slave_0: left promiscuous mode
[  148.521305][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.767362][ T6793] loop2: detected capacity change from 0 to 32768
[  148.817489][ T6793] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.890868][ T6793] XFS (loop2): Ending clean mount
[  149.115856][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.147536][ T5833] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.158878][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.177062][ T5918] bond0 (unregistering): Released all slaves
[  149.358547][ T6197] veth1_macvtap: entered promiscuous mode
[  149.489276][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.496476][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.634647][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.646278][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.662022][ T6707] bridge_slave_0: entered allmulticast mode
[  149.691858][ T6707] bridge_slave_0: entered promiscuous mode
[  149.706080][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.743020][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.750401][ T6707] bridge_slave_1: entered allmulticast mode
[  149.775871][ T6707] bridge_slave_1: entered promiscuous mode
[  149.798770][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.805938][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.912580][ T6819] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.002654][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  150.048051][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.068993][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.164620][ T5838] usb 4-1: Using ep0 maxpacket: 32
[  150.177169][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  150.197120][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  150.209542][ T5838] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  150.235902][ T5838] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  150.250284][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  150.252619][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.258930][ T5838] usb 4-1: Product: syz
[  150.274017][ T5838] usb 4-1: Manufacturer: syz
[  150.278623][ T5838] usb 4-1: SerialNumber: syz
[  150.298935][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.309121][ T5846] Bluetooth: hci2: command tx timeout
[  150.315902][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.327524][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.332436][ T5838] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8
[  150.356185][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.401374][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.443342][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.470645][ T5918] hsr_slave_0: left promiscuous mode
[  150.496010][ T5918] hsr_slave_1: left promiscuous mode
[  150.512273][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.519708][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.547765][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.558628][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.559441][ T5838] usb 4-1: USB disconnect, device number 6
[  150.608289][ T5918] veth1_macvtap: left promiscuous mode
[  150.617377][ T5918] veth0_macvtap: left promiscuous mode
[  150.625347][ T5918] veth1_vlan: left promiscuous mode
[  150.625674][ T5838] appletouch 4-1:1.0: input: appletouch disconnected
[  150.631028][ T5918] veth0_vlan: left promiscuous mode
[  150.859476][ T6823] loop2: detected capacity change from 0 to 32768
[  150.923578][ T6823] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  150.923578][ T6823] 
[  151.514619][ T5918] team0 (unregistering): Port device team_slave_1 removed
[  151.586345][ T6827] loop2: detected capacity change from 0 to 4096
[  151.596619][ T5918] team0 (unregistering): Port device team_slave_0 removed
[  151.711000][ T6825] loop3: detected capacity change from 0 to 32768
[  151.783510][ T6825] JBD2: Ignoring recovery information on journal
[  151.899736][ T6825] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  152.183889][ T5830] ocfs2: Unmounting device (7,3) on (node local)
[  152.461078][ T6836] loop2: detected capacity change from 0 to 1024
[  152.527447][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.547091][ T6838] loop3: detected capacity change from 0 to 1024
[  152.560182][ T6707] team0: Port device team_slave_0 added
[  152.578651][ T6838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.656693][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.681572][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.691401][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.702496][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.715508][ T6836] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.245: Abort forced by user
[  152.727490][ T6836] EXT4-fs (loop2): Remounting filesystem read-only
[  152.731291][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.758571][ T6707] team0: Port device team_slave_1 added
[  152.801343][ T6836] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  152.839316][ T6197] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.854869][ T6197] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.876089][ T6197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.884958][ T6197] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.963651][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.970645][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.996847][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.016994][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.089805][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.121536][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.199232][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.381391][ T6851] binder: 6850:6851 ioctl c0306201 200000000540 returned -14
[  153.545342][ T6707] hsr_slave_0: entered promiscuous mode
[  153.568368][ T6707] hsr_slave_1: entered promiscuous mode
[  153.582341][ T6707] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.604207][ T6707] Cannot create hsr debugfs directory
[  153.615975][ T6574] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  153.765101][ T6574] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  153.812233][ T6574] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  153.862968][ T6574] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  154.023434][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.031293][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.316066][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.339640][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.367879][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.647535][ T6856] loop3: detected capacity change from 0 to 40427
[  154.698564][ T6856] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff
[  154.736960][ T6856] F2FS-fs (loop3): Image doesn't support compression
[  154.749788][ T6856] F2FS-fs (loop3): Image doesn't support compression
[  154.805336][ T6856] F2FS-fs (loop3): invalid crc value
[  154.834925][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.920426][ T6574] 8021q: adding VLAN 0 to HW filter on device team0
[  154.977720][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.984915][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.067637][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.074862][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.169565][ T6856] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  155.267939][ T6856] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0xfe/0x1050
[  155.406644][ T5830] syz-executor: attempt to access beyond end of device
[  155.406644][ T5830] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  155.443058][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  155.443091][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  155.443105][ T5830] Call Trace:
[  155.443114][ T5830]  <TASK>
[  155.443123][ T5830]  dump_stack_lvl+0x189/0x250
[  155.443167][ T5830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.443203][ T5830]  ? __pfx_queue_work_on+0x10/0x10
[  155.443225][ T5830]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  155.443251][ T5830]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.443278][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.443315][ T5830]  f2fs_handle_critical_error+0x37c/0x540
[  155.443349][ T5830]  f2fs_write_end_io+0x4e2/0x6d0
[  155.443397][ T5830]  __submit_merged_bio+0x27a/0x6a0
[  155.443429][ T5830]  __submit_merged_write_cond+0x255/0x530
[  155.443477][ T5830]  f2fs_write_data_pages+0x2854/0x31f0
[  155.443506][ T5830]  ? unwind_next_frame+0x19ae/0x2390
[  155.443573][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.443618][ T5830]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  155.443676][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.443708][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.443734][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.443788][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.443815][ T5830]  ? __lock_acquire+0xaac/0xd20
[  155.443858][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.443898][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.443924][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.443954][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.443982][ T5830]  do_writepages+0x3b1/0x7b0
[  155.444038][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.444065][ T5830]  ? do_raw_spin_lock+0x121/0x290
[  155.444091][ T5830]  ? __pfx_do_writepages+0x10/0x10
[  155.444126][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.444157][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.444183][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.444216][ T5830]  filemap_fdatawrite+0x191/0x230
[  155.444249][ T5830]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  155.444329][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.444362][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.444394][ T5830]  f2fs_sync_dirty_inodes+0x31f/0x830
[  155.444443][ T5830]  f2fs_write_checkpoint+0x94a/0x1de0
[  155.444502][ T5830]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  155.444589][ T5830]  ? kill_f2fs_super+0x298/0x6c0
[  155.444626][ T5830]  kill_f2fs_super+0x2c3/0x6c0
[  155.444664][ T5830]  ? __pfx_kill_f2fs_super+0x10/0x10
[  155.444692][ T5830]  ? radix_tree_delete_item+0x2b6/0x400
[  155.444727][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.444756][ T5830]  ? shrinker_free+0x2ce/0x3e0
[  155.444785][ T5830]  deactivate_locked_super+0xbc/0x130
[  155.444811][ T5830]  cleanup_mnt+0x425/0x4c0
[  155.444847][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.444873][ T5830]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.444905][ T5830]  task_work_run+0x1d4/0x260
[  155.444939][ T5830]  ? __pfx_task_work_run+0x10/0x10
[  155.444970][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.445010][ T5830]  resume_user_mode_work+0x5e/0x80
[  155.445044][ T5830]  syscall_exit_to_user_mode+0x9a/0x120
[  155.445074][ T5830]  do_syscall_64+0x103/0x210
[  155.445105][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.445135][ T5830]  ? exc_page_fault+0x91/0x110
[  155.445164][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.445187][ T5830] RIP: 0033:0x7f3756b8fc97
[  155.445208][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  155.445227][ T5830] RSP: 002b:00007fff0f728078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  155.445252][ T5830] RAX: 0000000000000000 RBX: 00007f3756c1089d RCX: 00007f3756b8fc97
[  155.445268][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0f728130
[  155.445283][ T5830] RBP: 00007fff0f728130 R08: 0000000000000000 R09: 0000000000000000
[  155.445298][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0f7291c0
[  155.445313][ T5830] R13: 00007f3756c1089d R14: 0000000000025eaf R15: 00007fff0f729200
[  155.445351][ T5830]  </TASK>
[  155.445924][ T5830] F2FS-fs (loop3): Remounting filesystem read-only
[  155.782859][ T6707] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  155.885793][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  155.885826][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  155.885840][ T5830] Call Trace:
[  155.885850][ T5830]  <TASK>
[  155.885859][ T5830]  dump_stack_lvl+0x189/0x250
[  155.885903][ T5830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.885945][ T5830]  ? __pfx_queue_work_on+0x10/0x10
[  155.885970][ T5830]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  155.886003][ T5830]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.886030][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886068][ T5830]  f2fs_handle_critical_error+0x37c/0x540
[  155.886110][ T5830]  f2fs_write_end_io+0x4e2/0x6d0
[  155.886157][ T5830]  __submit_merged_bio+0x27a/0x6a0
[  155.886191][ T5830]  __submit_merged_write_cond+0x255/0x530
[  155.886239][ T5830]  f2fs_write_data_pages+0x2854/0x31f0
[  155.886269][ T5830]  ? unwind_next_frame+0x19ae/0x2390
[  155.886337][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.886384][ T5830]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  155.886443][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886476][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886502][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.886560][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886587][ T5830]  ? __lock_acquire+0xaac/0xd20
[  155.886631][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886672][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886699][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.886729][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.886758][ T5830]  do_writepages+0x3b1/0x7b0
[  155.886810][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886836][ T5830]  ? do_raw_spin_lock+0x121/0x290
[  155.886863][ T5830]  ? __pfx_do_writepages+0x10/0x10
[  155.886898][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886930][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.886957][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.886996][ T5830]  filemap_fdatawrite+0x191/0x230
[  155.887030][ T5830]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  155.887113][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.887146][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[  155.887180][ T5830]  f2fs_sync_dirty_inodes+0x31f/0x830
[  155.887229][ T5830]  f2fs_write_checkpoint+0x94a/0x1de0
[  155.887289][ T5830]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  155.887377][ T5830]  ? kill_f2fs_super+0x298/0x6c0
[  155.887414][ T5830]  kill_f2fs_super+0x2c3/0x6c0
[  155.887453][ T5830]  ? __pfx_kill_f2fs_super+0x10/0x10
[  155.887482][ T5830]  ? radix_tree_delete_item+0x2b6/0x400
[  155.887517][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.887544][ T5830]  ? shrinker_free+0x2ce/0x3e0
[  155.887572][ T5830]  deactivate_locked_super+0xbc/0x130
[  155.887599][ T5830]  cleanup_mnt+0x425/0x4c0
[  155.887637][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.887663][ T5830]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.887695][ T5830]  task_work_run+0x1d4/0x260
[  155.887731][ T5830]  ? __pfx_task_work_run+0x10/0x10
[  155.887763][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.887803][ T5830]  resume_user_mode_work+0x5e/0x80
[  155.887839][ T5830]  syscall_exit_to_user_mode+0x9a/0x120
[  155.887869][ T5830]  do_syscall_64+0x103/0x210
[  155.887900][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  155.887928][ T5830]  ? exc_page_fault+0x91/0x110
[  155.887958][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.887981][ T5830] RIP: 0033:0x7f3756b8fc97
[  155.888009][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  155.888029][ T5830] RSP: 002b:00007fff0f728078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  155.888054][ T5830] RAX: 0000000000000000 RBX: 00007f3756c1089d RCX: 00007f3756b8fc97
[  155.888071][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0f728130
[  155.888086][ T5830] RBP: 00007fff0f728130 R08: 0000000000000000 R09: 0000000000000000
[  155.888102][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0f7291c0
[  155.888124][ T5830] R13: 00007f3756c1089d R14: 0000000000025eaf R15: 00007fff0f729200
[  155.888165][ T5830]  </TASK>
[  155.888175][ T5830] F2FS-fs (loop3): Remounting filesystem read-only
[  156.333791][ T6707] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  156.404937][ T6707] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  156.487668][ T6707] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  156.528541][ T6397] veth0_vlan: entered promiscuous mode
[  156.654698][ T6397] veth1_vlan: entered promiscuous mode
[  156.786263][ T6912] loop6: detected capacity change from 0 to 256
[  156.997224][ T6397] veth0_macvtap: entered promiscuous mode
[  157.110728][ T6397] veth1_macvtap: entered promiscuous mode
[  157.289048][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.346554][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.372548][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.392043][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.407777][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.422106][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.434738][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.463248][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.587957][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.632120][ T5956] kernel write not supported for file /157/attr/exec (pid: 5956 comm: kworker/0:8)
[  157.638023][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.690243][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.713784][ T6928] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  157.722358][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.761579][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.805272][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.844980][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.919520][ T6397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.985292][ T6397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.013484][ T6397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.031550][ T6397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.067317][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.264736][ T6707] 8021q: adding VLAN 0 to HW filter on device team0
[  158.306981][ T6918] loop6: detected capacity change from 0 to 32768
[  158.334589][ T6574] veth0_vlan: entered promiscuous mode
[  158.369103][ T6918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.265 (6918)
[  158.377190][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.388997][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.473652][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.480816][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.518834][ T6918] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.546702][ T6918] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm
[  158.577771][ T6918] BTRFS info (device loop6): disk space caching is enabled
[  158.598190][ T6918] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  158.626365][ T6574] veth1_vlan: entered promiscuous mode
[  158.708454][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.721754][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  158.766031][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.831313][ T6574] veth0_macvtap: entered promiscuous mode
[  158.864181][ T6918] BTRFS info (device loop6): rebuilding free space tree
[  158.921664][    T9] usb 4-1: Using ep0 maxpacket: 16
[  158.939551][ T6574] veth1_macvtap: entered promiscuous mode
[  158.956458][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  158.975266][    T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9
[  158.996990][ T6918] BTRFS info (device loop6): disabling free space tree
[  159.011063][    T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  159.024478][ T6918] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  159.051670][ T6918] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  159.064482][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  159.084489][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  159.102025][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.118657][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.128299][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.160702][    T9] usb 4-1: Product: syz
[  159.177418][    T9] usb 4-1: Manufacturer: syz
[  159.194871][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.198103][    T9] usb 4-1: SerialNumber: syz
[  159.252230][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.263473][ T6944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  159.285787][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.328133][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.361716][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.395682][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.432734][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.458395][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.477381][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.528702][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9
[  159.570393][ T6197] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.573446][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.644542][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.675143][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.698289][ T6942] loop2: detected capacity change from 0 to 32768
[  159.709335][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.722455][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.733822][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.751255][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.762076][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.781356][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.861893][ T6942] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.069811][ T6942] XFS (loop2): Ending clean mount
[  160.123543][ T6574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.179270][ T6942] XFS (loop2): Quotacheck needed: Please wait.
[  160.187347][ T6574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.197197][ T5179] bcm5974 4-1:1.0: could not read from device
[  160.197868][    T9] usb 4-1: USB disconnect, device number 7
[  160.225762][ T6574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.261625][ T6942] XFS (loop2): Quotacheck: Done.
[  160.271717][ T6574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.320142][ T5179] bcm5974 4-1:1.0: could not read from device
[  160.360157][ T6060] bcm5974 4-1:1.0: could not read from device
[  160.521127][   T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.791080][ T5833] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.809251][   T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.992657][   T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.122323][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.146162][ T6987] loop3: detected capacity change from 0 to 2048
[  161.208027][   T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.254796][ T6987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.479044][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.506775][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.532575][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  161.538818][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.704539][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  161.739729][   T10] usb 3-1: config 1 has no interface number 0
[  161.778153][   T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.820693][   T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  161.845314][ T6707] veth0_vlan: entered promiscuous mode
[  161.851884][   T53] bridge_slave_1: left allmulticast mode
[  161.851879][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64
[  161.854819][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  161.857514][   T53] bridge_slave_1: left promiscuous mode
[  161.857716][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.898889][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.908360][   T53] bridge_slave_0: left allmulticast mode
[  161.909860][ T6988] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  161.922373][   T53] bridge_slave_0: left promiscuous mode
[  161.922576][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.947713][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  161.957022][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  161.965161][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  161.965431][ T6988] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  161.979530][   T10] usb 3-1: Product: syz
[  161.986165][   T10] usb 3-1: Manufacturer: syz
[  161.990843][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  162.006967][   T10] usb 3-1: SerialNumber: syz
[  162.007053][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  162.252251][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.279'.
[  162.628652][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.640418][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.673524][   T53] bond0 (unregistering): Released all slaves
[  162.728816][ T6707] veth1_vlan: entered promiscuous mode
[  162.808782][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.832885][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.874165][   T10] cdc_ncm 3-1:1.1: bind() failure
[  162.954277][ T7019] block nbd3: shutting down sockets
[  163.003284][ T6707] veth0_macvtap: entered promiscuous mode
[  163.076424][   T10] usb 3-1: USB disconnect, device number 4
[  163.278163][ T6707] veth1_macvtap: entered promiscuous mode
[  163.385026][ T7028] sctp: [Deprecated]: syz.3.283 (pid 7028) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.385026][ T7028] Use struct sctp_sack_info instead
[  163.467574][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.478572][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.488911][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.504428][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.515452][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.526024][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.535870][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.546412][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.556294][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.566876][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.579889][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.672122][   T53] hsr_slave_0: left promiscuous mode
[  163.692298][   T53] hsr_slave_1: left promiscuous mode
[  163.710529][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.726346][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.739604][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.757134][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.789294][   T53] veth1_macvtap: left promiscuous mode
[  163.799732][   T53] veth0_macvtap: left promiscuous mode
[  163.807868][   T53] veth1_vlan: left promiscuous mode
[  163.819053][   T53] veth0_vlan: left promiscuous mode
[  164.071983][ T5134] Bluetooth: hci3: command tx timeout
[  164.522099][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  164.539506][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  164.549668][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  164.562912][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  164.570662][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  164.852934][   T53] team0 (unregistering): Port device team_slave_1 removed
[  164.910048][   T53] team0 (unregistering): Port device team_slave_0 removed
[  165.284824][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.299188][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.309136][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.320952][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.330887][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.344271][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.355751][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.366342][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.377794][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.411350][ T6707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.441938][ T6707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.450662][ T6707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.470062][ T6707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.141923][ T5846] Bluetooth: hci3: command tx timeout
[  166.210723][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.226990][ T7004] chnl_net:caif_netlink_parms(): no params data found
[  166.253205][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.623351][ T5846] Bluetooth: hci0: command tx timeout
[  166.663724][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.746558][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.879455][ T7088] loop6: detected capacity change from 0 to 2048
[  166.915359][ T5838] IPVS: starting estimator thread 0...
[  166.918361][ T7088] EXT4-fs: Ignoring removed mblk_io_submit option
[  166.951568][ T7092] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  167.023667][ T7095] IPVS: using max 24 ests per chain, 57600 per kthread
[  167.091582][ T7088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.116991][   T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.378682][   T30] audit: type=1326 audit(1746671327.301:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.3.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3756b8e969 code=0x0
[  167.413531][ T6197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.431655][   T52] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  167.612309][   T52] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  167.626223][   T52] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  167.637737][   T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.671579][   T52] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  167.698490][   T52] usb 1-1: config 220 has no interface number 2
[  167.721108][   T52] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  167.771557][   T52] usb 1-1: config 220 interface 0 has no altsetting 0
[  167.781510][   T52] usb 1-1: config 220 interface 76 has no altsetting 0
[  167.791040][   T52] usb 1-1: config 220 interface 1 has no altsetting 0
[  167.807392][   T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.826133][   T52] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  167.835427][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.853970][   T52] usb 1-1: Product: syz
[  167.858996][   T52] usb 1-1: Manufacturer: syz
[  167.863718][   T52] usb 1-1: SerialNumber: syz
[  167.883761][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  168.017177][ T7126] ALSA: mixer_oss: invalid OSS volume '��'
[  168.054982][   T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.093343][   T52] usb 1-1: selecting invalid altsetting 0
[  168.111591][ T5895] usb 3-1: Using ep0 maxpacket: 16
[  168.129867][ T5895] usb 3-1: config 8 has an invalid interface number: 206 but max is 0
[  168.140416][   T52] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  168.140707][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.154160][   T52] usb 1-1: No valid video chain found.
[  168.169614][ T5895] usb 3-1: config 8 has no interface number 0
[  168.174364][   T52] usb 1-1: selecting invalid altsetting 0
[  168.176894][ T5895] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  168.191725][   T52] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  168.195035][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.209136][ T7004] bridge_slave_0: entered allmulticast mode
[  168.229689][ T5846] Bluetooth: hci3: command tx timeout
[  168.232604][   T52] usb 1-1: USB disconnect, device number 2
[  168.247037][ T5895] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  168.271593][ T5895] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  168.285310][ T5895] usb 3-1: config 8 interface 206 has no altsetting 0
[  168.296090][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  168.296125][ T7004] bridge_slave_0: entered promiscuous mode
[  168.305597][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.319289][ T5895] usb 3-1: Product: syz
[  168.325627][ T5895] usb 3-1: Manufacturer: syz
[  168.330353][ T5895] usb 3-1: SerialNumber: syz
[  168.362745][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.369950][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.387345][ T7004] bridge_slave_1: entered allmulticast mode
[  168.415815][ T7004] bridge_slave_1: entered promiscuous mode
[  168.427344][ T7041] chnl_net:caif_netlink_parms(): no params data found
[  168.472455][ T7133] loop3: detected capacity change from 0 to 512
[  168.530864][ T7133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.574445][ T5895] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected
[  168.590656][ T7133] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.606124][ T5895] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  168.701690][ T5846] Bluetooth: hci0: command tx timeout
[  168.764833][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.848706][ T5895] usb 3-1: USB disconnect, device number 5
[  168.872975][ T5895] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  168.932389][ T5895] garmin_gps 3-1:8.206: device disconnected
[  169.024301][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.074015][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.622128][ T5858] kernel write not supported for file /53/attr/sockcreate (pid: 5858 comm: kworker/0:4)
[  169.847597][ T7004] team0: Port device team_slave_0 added
[  169.889362][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.951570][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.961359][ T7041] bridge_slave_0: entered allmulticast mode
[  170.043700][ T7041] bridge_slave_0: entered promiscuous mode
[  170.090080][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.125314][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.155495][ T7041] bridge_slave_1: entered allmulticast mode
[  170.202182][ T7041] bridge_slave_1: entered promiscuous mode
[  170.309488][ T5846] Bluetooth: hci3: command tx timeout
[  170.334509][ T7179] loop2: detected capacity change from 0 to 512
[  170.396267][ T7183] loop6: detected capacity change from 0 to 512
[  170.407150][ T7004] team0: Port device team_slave_1 added
[  170.435731][ T7179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.464371][ T7183] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  170.528812][ T7179] ext4 filesystem being mounted at /91/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.609076][ T7187] loop0: detected capacity change from 0 to 512
[  170.616562][ T7183] EXT4-fs (loop6): 1 truncate cleaned up
[  170.654387][ T7183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.708749][ T7179] EXT4-fs (loop2): shut down requested (2)
[  170.725749][ T7187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.781762][ T5846] Bluetooth: hci0: command tx timeout
[  170.793797][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.801615][ T7187] EXT4-fs (loop0): 1 truncate cleaned up
[  170.810715][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.896159][ T7041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.975856][ T7187] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.324: invalid indirect mapped block 3489660928 (level 0)
[  170.976540][ T7193] 
[  170.992256][ T7193] ======================================================
[  170.995309][   T30] audit: type=1800 audit(1746671330.901:8): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.324" name="file1" dev="loop0" ino=16 res=0 errno=0
[  170.999257][ T7193] WARNING: possible circular locking dependency detected
[  170.999272][ T7193] 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 Not tainted
[  171.025310][   T52] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  171.025480][ T7193] ------------------------------------------------------
[  171.047016][ T7193] syz.6.325/7193 is trying to acquire lock:
[  171.052982][ T7193] ffff888058389808 (&sb->s_type->i_mutex_key#9/1){+.+.}-{4:4}, at: ext4_xattr_inode_lookup_create+0x17d4/0x1c20
[  171.064846][ T7193] 
[  171.064846][ T7193] but task is already holding lock:
[  171.072195][ T7193] ffff888059e25208 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x1522/0x1bd0
[  171.081535][ T7193] 
[  171.081535][ T7193] which lock already depends on the new lock.
[  171.081535][ T7193] 
[  171.091934][ T7193] 
[  171.091934][ T7193] the existing dependency chain (in reverse order) is:
[  171.100941][ T7193] 
[  171.100941][ T7193] -> #1 (&ei->i_data_sem/3){++++}-{4:4}:
[  171.108816][ T7193]        lock_acquire+0x120/0x360
[  171.113852][ T7193]        down_write+0x96/0x1f0
[  171.118617][ T7193]        ext4_xattr_inode_lookup_create+0x14d1/0x1c20
[  171.125376][ T7193]        ext4_xattr_ibody_set+0x202/0x6a0
[  171.131086][ T7193]        ext4_xattr_set_handle+0xc9a/0x1590
[  171.136971][ T7193]        ext4_xattr_set+0x230/0x320
[  171.142160][ T7193]        __vfs_setxattr+0x43c/0x480
[  171.147356][ T7193]        __vfs_setxattr_noperm+0x12d/0x660
[  171.153181][ T7193]        vfs_setxattr+0x16b/0x2f0
[  171.158201][ T7193]        filename_setxattr+0x274/0x600
[  171.163656][ T7193]        path_setxattrat+0x364/0x3a0
[  171.168930][ T7193]        __x64_sys_lsetxattr+0xbf/0xe0
[  171.174385][ T7193]        do_syscall_64+0xf6/0x210
[  171.179409][ T7193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.185820][ T7193] 
[  171.185820][ T7193] -> #0 (&sb->s_type->i_mutex_key#9/1){+.+.}-{4:4}:
[  171.194711][ T7193]        validate_chain+0xb9b/0x2140
[  171.200026][ T7193]        __lock_acquire+0xaac/0xd20
[  171.205226][ T7193]        lock_acquire+0x120/0x360
[  171.210252][ T7193]        down_write+0x96/0x1f0
[  171.215014][ T7193]        ext4_xattr_inode_lookup_create+0x17d4/0x1c20
[  171.221767][ T7193]        ext4_xattr_block_set+0x223/0x2ac0
[  171.227562][ T7193]        ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  171.233966][ T7193]        __ext4_expand_extra_isize+0x30d/0x400
[  171.240115][ T7193]        __ext4_mark_inode_dirty+0x46c/0x700
[  171.246093][ T7193]        ext4_setattr+0x1597/0x1bd0
[  171.251283][ T7193]        notify_change+0xb36/0xe40
[  171.256404][ T7193]        do_truncate+0x19a/0x220
[  171.261336][ T7193]        vfs_truncate+0x493/0x520
[  171.266355][ T7193]        do_sys_truncate+0xdb/0x190
[  171.271550][ T7193]        __x64_sys_truncate+0x5b/0x70
[  171.276921][ T7193]        do_syscall_64+0xf6/0x210
[  171.281947][ T7193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.288356][ T7193] 
[  171.288356][ T7193] other info that might help us debug this:
[  171.288356][ T7193] 
[  171.298573][ T7193]  Possible unsafe locking scenario:
[  171.298573][ T7193] 
[  171.306008][ T7193]        CPU0                    CPU1
[  171.311356][ T7193]        ----                    ----
[  171.316705][ T7193]   lock(&ei->i_data_sem/3);
[  171.321307][ T7193]                                lock(&sb->s_type->i_mutex_key#9/1);
[  171.329401][ T7193]                                lock(&ei->i_data_sem/3);
[  171.336517][ T7193]   lock(&sb->s_type->i_mutex_key#9/1);
[  171.342080][ T7193] 
[  171.342080][ T7193]  *** DEADLOCK ***
[  171.342080][ T7193] 
[  171.350209][ T7193] 5 locks held by syz.6.325/7193:
[  171.355219][ T7193]  #0: ffff888029988420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  171.364396][ T7193]  #1: ffff888059e25378 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: do_truncate+0x186/0x220
[  171.374691][ T7193]  #2: ffff888059e25518 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_setattr+0xe9d/0x1bd0
[  171.385080][ T7193]  #3: ffff888059e25208 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x1522/0x1bd0
[  171.394856][ T7193]  #4: ffff888059e25008 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[  171.405154][ T7193] 
[  171.405154][ T7193] stack backtrace:
[  171.411032][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: syz.6.325 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
[  171.411058][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  171.411071][ T7193] Call Trace:
[  171.411079][ T7193]  <TASK>
[  171.411088][ T7193]  dump_stack_lvl+0x189/0x250
[  171.411123][ T7193]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.411153][ T7193]  ? __pfx__printk+0x10/0x10
[  171.411176][ T7193]  ? print_lock_name+0xde/0x100
[  171.411212][ T7193]  print_circular_bug+0x2ee/0x310
[  171.411236][ T7193]  check_noncircular+0x134/0x160
[  171.411260][ T7193]  validate_chain+0xb9b/0x2140
[  171.411293][ T7193]  __lock_acquire+0xaac/0xd20
[  171.411324][ T7193]  ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20
[  171.411345][ T7193]  lock_acquire+0x120/0x360
[  171.411373][ T7193]  ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20
[  171.411397][ T7193]  ? dquot_free_inode+0x879/0xa10
[  171.411425][ T7193]  ? ext4_reserve_inode_write+0x2cf/0x330
[  171.411455][ T7193]  down_write+0x96/0x1f0
[  171.411484][ T7193]  ? ext4_xattr_inode_lookup_create+0x17d4/0x1c20
[  171.411505][ T7193]  ? __pfx_down_write+0x10/0x10
[  171.411534][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.411558][ T7193]  ? ext4_get_dquots+0xd/0x20
[  171.411584][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.411607][ T7193]  ? dquot_drop+0x144/0x170
[  171.411635][ T7193]  ext4_xattr_inode_lookup_create+0x17d4/0x1c20
[  171.411665][ T7193]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  171.411690][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.411716][ T7193]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  171.411760][ T7193]  ext4_xattr_block_set+0x223/0x2ac0
[  171.411788][ T7193]  ? fs_reclaim_acquire+0x7d/0x100
[  171.411827][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.411855][ T7193]  ? __pfx_check_xattrs+0x10/0x10
[  171.411889][ T7193]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  171.411912][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.411935][ T7193]  ? ext4_xattr_block_find+0x2d4/0x350
[  171.411958][ T7193]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  171.412001][ T7193]  __ext4_expand_extra_isize+0x30d/0x400
[  171.412030][ T7193]  __ext4_mark_inode_dirty+0x46c/0x700
[  171.412067][ T7193]  ext4_setattr+0x1597/0x1bd0
[  171.412097][ T7193]  ? __pfx_ext4_setattr+0x10/0x10
[  171.412119][ T7193]  notify_change+0xb36/0xe40
[  171.412147][ T7193]  do_truncate+0x19a/0x220
[  171.412172][ T7193]  ? __pfx_do_truncate+0x10/0x10
[  171.412194][ T7193]  ? apparmor_path_truncate+0x238/0x2d0
[  171.412228][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.412252][ T7193]  ? mnt_get_write_access+0x223/0x2a0
[  171.412286][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.412313][ T7193]  vfs_truncate+0x493/0x520
[  171.412335][ T7193]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.412361][ T7193]  ? __pfx_vfs_truncate+0x10/0x10
[  171.412383][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.412412][ T7193]  do_sys_truncate+0xdb/0x190
[  171.412436][ T7193]  ? __pfx_do_sys_truncate+0x10/0x10
[  171.412459][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.412489][ T7193]  __x64_sys_truncate+0x5b/0x70
[  171.412513][ T7193]  do_syscall_64+0xf6/0x210
[  171.412539][ T7193]  ? srso_alias_return_thunk+0x5/0xfbef5
[  171.412562][ T7193]  ? exc_page_fault+0x91/0x110
[  171.412585][ T7193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.412606][ T7193] RIP: 0033:0x7fa05b18e969
[  171.412624][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.412642][ T7193] RSP: 002b:00007fa05c07e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  171.412663][ T7193] RAX: ffffffffffffffda RBX: 00007fa05b3b6080 RCX: 00007fa05b18e969
[  171.412679][ T7193] RDX: 0000000000000000 RSI: 0000000000008008 RDI: 00002000000000c0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  171.412692][ T7193] RBP: 00007fa05b210ab1 R08: 0000000000000000 R09: 0000000000000000
[  171.412706][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.412718][ T7193] R13: 0000000000000001 R14: 00007fa05b3b6080 R15: 00007fffcbaa5258
[  171.412748][ T7193]  </TASK>
[  171.803249][    C0] vkms_vblank_simulate: vblank timer overrun
[  171.866221][ T7187] EXT4-fs (loop0): Remounting filesystem read-only
[  171.997071][ T7194] loop2: detected capacity change from 0 to 32768
[  172.003307][ T6197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.016776][ T7194] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.327 (7194)
[  172.051612][   T52] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  172.093023][   T52] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  172.155213][   T53] bridge_slave_1: left allmulticast mode
[  172.160898][   T53] bridge_slave_1: left promiscuous mode
[  172.175331][   T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  172.205945][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.208236][ T7194] BTRFS error (device loop2): open_ctree failed: -4
[  172.251756][   T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  172.296479][ T7187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.305498][   T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  172.332123][   T52] usb 4-1: string descriptor 0 read error: -71
[  172.338337][   T52] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  172.362649][   T53] bridge_slave_0: left allmulticast mode
[  172.368302][   T53] bridge_slave_0: left promiscuous mode
[  172.395355][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.414001][   T52] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  172.467976][   T52] usb 4-1: can't set config #1, error -71
[  172.487040][   T52] usb 4-1: USB disconnect, device number 8
[  172.861788][ T5846] Bluetooth: hci0: command tx timeout
[  172.950454][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.964500][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.974636][   T53] bond0 (unregistering): Released all slaves
[  173.020345][ T7041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.354289][   T53] hsr_slave_0: left promiscuous mode
[  173.362143][   T53] hsr_slave_1: left promiscuous mode
[  173.367897][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.377248][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.385343][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.398038][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.417769][   T53] veth1_macvtap: left promiscuous mode
[  173.434836][   T53] veth0_macvtap: left promiscuous mode
[  173.440641][   T53] veth1_vlan: left promiscuous mode
[  173.452532][   T53] veth0_vlan: left promiscuous mode
[  173.650493][   T53] team0 (unregistering): Port device team_slave_1 removed
[  173.664174][   T53] team0 (unregistering): Port device team_slave_0 removed
[  174.039376][   T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.086010][   T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.149797][   T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.196360][   T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.304537][   T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.379125][   T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.438782][   T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.496798][   T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.588917][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.647432][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.715626][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.760276][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.870738][   T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.917715][   T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.989291][   T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.064738][   T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.197035][   T53] bridge_slave_1: left allmulticast mode
[  175.204906][   T53] bridge_slave_1: left promiscuous mode
[  175.210593][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.221255][   T53] bridge_slave_0: left allmulticast mode
[  175.226959][   T53] bridge_slave_0: left promiscuous mode
[  175.234922][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.244878][   T53] bridge_slave_1: left allmulticast mode
[  175.250532][   T53] bridge_slave_1: left promiscuous mode
[  175.256438][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.265247][   T53] bridge_slave_0: left allmulticast mode
[  175.270892][   T53] bridge_slave_0: left promiscuous mode
[  175.278992][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.291292][   T53] bridge_slave_1: left allmulticast mode
[  175.299853][   T53] bridge_slave_1: left promiscuous mode
[  175.306879][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.315509][   T53] bridge_slave_0: left allmulticast mode
[  175.321154][   T53] bridge_slave_0: left promiscuous mode
[  175.327282][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.338794][   T53] bridge_slave_1: left allmulticast mode
[  175.344537][   T53] bridge_slave_1: left promiscuous mode
[  175.350195][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.362895][   T53] bridge_slave_0: left allmulticast mode
[  175.368550][   T53] bridge_slave_0: left promiscuous mode
[  175.376563][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.386857][   T53] bridge_slave_1: left allmulticast mode
[  175.393658][   T53] bridge_slave_1: left promiscuous mode
[  175.399302][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.409780][   T53] bridge_slave_0: left allmulticast mode
[  175.416050][   T53] bridge_slave_0: left promiscuous mode
[  175.422081][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.431178][   T53] bridge_slave_1: left allmulticast mode
[  175.436968][   T53] bridge_slave_1: left promiscuous mode
[  175.442775][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.451264][   T53] bridge_slave_0: left allmulticast mode
[  175.457101][   T53] bridge_slave_0: left promiscuous mode
[  175.462897][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.035296][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.045178][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.054956][   T53] bond0 (unregistering): Released all slaves
[  176.068480][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.078528][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.088455][   T53] bond0 (unregistering): Released all slaves
[  176.101802][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.115360][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.126871][   T53] bond0 (unregistering): Released all slaves
[  176.139685][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.150065][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.159510][   T53] bond0 (unregistering): Released all slaves
[  176.174842][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.185020][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.195404][   T53] bond0 (unregistering): Released all slaves
[  176.208658][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.219511][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.230778][   T53] bond0 (unregistering): Released all slaves
[  176.875472][   T53] hsr_slave_0: left promiscuous mode
[  176.881186][   T53] hsr_slave_1: left promiscuous mode
[  176.887058][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.894656][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.903540][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.910927][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.921790][   T53] hsr_slave_0: left promiscuous mode
[  176.927752][   T53] hsr_slave_1: left promiscuous mode
[  176.933471][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.940856][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.949231][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.957385][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.967399][   T53] hsr_slave_0: left promiscuous mode
[  176.973550][   T53] hsr_slave_1: left promiscuous mode
[  176.979215][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.986743][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.994559][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.002442][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.013734][   T53] hsr_slave_0: left promiscuous mode
[  177.019417][   T53] hsr_slave_1: left promiscuous mode
[  177.025540][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.033068][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.040768][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.048461][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.066755][   T53] veth1_macvtap: left promiscuous mode
[  177.072408][   T53] veth0_macvtap: left promiscuous mode
[  177.078060][   T53] veth1_vlan: left promiscuous mode
[  177.084065][   T53] veth0_vlan: left promiscuous mode
[  177.090028][   T53] veth1_macvtap: left promiscuous mode
[  177.099570][   T53] veth0_macvtap: left promiscuous mode
[  177.105270][   T53] veth1_vlan: left promiscuous mode
[  177.110510][   T53] veth0_vlan: left promiscuous mode
[  177.117942][   T53] veth1_macvtap: left promiscuous mode
[  177.123456][   T53] veth0_macvtap: left promiscuous mode
[  177.128982][   T53] veth1_vlan: left promiscuous mode
[  177.134418][   T53] veth0_vlan: left promiscuous mode
[  177.140378][   T53] veth1_macvtap: left promiscuous mode
[  177.145975][   T53] veth0_macvtap: left promiscuous mode
[  177.151598][   T53] veth1_vlan: left promiscuous mode
[  177.156895][   T53] veth0_vlan: left promiscuous mode
[  177.490438][   T53] team0 (unregistering): Port device team_slave_1 removed
[  177.518343][   T53] team0 (unregistering): Port device team_slave_0 removed
[  177.697778][   T53] team0 (unregistering): Port device team_slave_1 removed
[  177.718195][   T53] team0 (unregistering): Port device team_slave_0 removed
[  177.891068][   T53] team0 (unregistering): Port device team_slave_1 removed
[  177.915717][   T53] team0 (unregistering): Port device team_slave_0 removed
[  178.129073][   T53] team0 (unregistering): Port device team_slave_1 removed
[  178.153503][   T53] team0 (unregistering): Port device team_slave_0 removed
[  178.258321][   T53] team0 (unregistering): Port device team_slave_1 removed
[  178.283919][   T53] team0 (unregistering): Port device team_slave_0 removed
[  179.641887][   T53] IPVS: stop unused estimator thread 0...