last executing test programs:

4.876763475s ago: executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@s}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000001780)="b93f00076003ed04800008f086dd116f220dc94af96dcce08289fd4bbb9eb731080d18ab0c377a3c7e0abd4aba04ee9da1052ae23060", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r6, r7, 0x0)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fdatasync(r8)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000500)={0x1, &(0x7f0000000380)=[{0x3ff, 0x10, &(0x7f00000002c0)="152c6bce1c2b1e5b0012c35137c2505a", 0x1}]})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
sendmsg$key(r5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

4.764248346s ago: executing program 4:
r0 = syz_mount_image$btrfs(&(0x7f00000006c0), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x5000940f, 0x0)

4.354070301s ago: executing program 3:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)="f1"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r2, 0x851, 0x0)

3.689137836s ago: executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r4, @ANYRESOCT=r5, @ANYBLOB="2b4a383bbbe919028a39a47afef26477563f6b8742b9b5f1e870e0426c3a35f8960b1d276c64bdc16f75cdd8be6acc1e52d0a9e6b5be92df8808b9b810f9678a3f62609f8189a398a9682afb3909f7bf7e07b96d962d56bfc5f0011319b1ebcc962fe4b8f0ff5b4523364f7ab925"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r6}, 0x10)
write$cgroup_subtree(r5, 0x0, 0x32600)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
write$cgroup_subtree(r2, &(0x7f0000000400)={[{0x2b, 'net_prio'}]}, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_int(r0, &(0x7f0000000100)=0xffffffffffffffff, 0x12)
ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})

1.94374224s ago: executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600180f200140600fe8000000000000000000000000000bbfc"], 0x0)

1.88385962s ago: executing program 4:
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0x0, r0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, <r3=>0x0})
r4 = syz_open_procfs(r3, &(0x7f00000008c0)='wchan\x00')
pread64(r4, &(0x7f0000000180)=""/252, 0xfc, 0x0)

1.800219098s ago: executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000000f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x28}], 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d9000200302f00fe8000000000000000000000000000aaff"], 0x0)

1.682688684s ago: executing program 3:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff)
mkdirat$cgroup(r0, &(0x7f0000001e40)='syz0\x00', 0x1ff)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)

1.547803355s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

1.512663547s ago: executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfd})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.399522552s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@s}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000001780)="b93f00076003ed04800008f086dd116f220dc94af96dcce08289fd4bbb9eb731080d18ab0c377a3c7e0abd4aba04ee9da1052ae23060", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r6, r7, 0x0)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fdatasync(r8)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000500)={0x1, &(0x7f0000000380)=[{0x3ff, 0x10, &(0x7f00000002c0)="152c6bce1c2b1e5b0012c35137c2505a", 0x1}]})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
sendmsg$key(r5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

1.381428002s ago: executing program 0:
r0 = socket(0x2b, 0x1, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x2, 0x0, 0x20000000)

1.199738948s ago: executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
close_range(r0, 0xffffffffffffffff, 0x0)

1.192418928s ago: executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48)
r0 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xc, '\x00', @p_u8=0x0}})

1.109654903s ago: executing program 3:
r0 = syz_mount_image$btrfs(&(0x7f00000006c0), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x5000940f, 0x0)

1.073667254s ago: executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=@framed={{}, [@call, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40095505, &(0x7f0000000400))

895.087309ms ago: executing program 1:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0x10, &(0x7f0000001240)={&(0x7f0000001340)={0x8, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0xffffffffffffffc3}}, {0x8}, {0x6}, {0xffffffffffffff16}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x11}}]}, 0xffeb}}, 0x0)

878.666806ms ago: executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet(0x2, 0x80001, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000180)={0x1d, r1}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x88470000, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

702.086383ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x103a42, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009c"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

560.303595ms ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

511.523375ms ago: executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0)

487.501508ms ago: executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x8}}, 0xe8)
keyctl$set_reqkey_keyring(0xe, 0x0)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

384.42758ms ago: executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
ioctl$TUNSETSNDBUF(r0, 0x401054d6, 0x0)

232.539455ms ago: executing program 4:
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0x0, r0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, <r3=>0x0})
r4 = syz_open_procfs(r3, &(0x7f00000008c0)='wchan\x00')
pread64(r4, &(0x7f0000000180)=""/252, 0xfc, 0x0)

226.065187ms ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x7956, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xb8031, 0xffffffffffffffff, 0x8000000)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_op], 0x1)

161.484446ms ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000ba042242252e7a8a1dc108000300", @ANYRES32=r2], 0x28}}, 0x0)

78.997626ms ago: executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)

74.383094ms ago: executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x24000408)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0)

12.133501ms ago: executing program 2:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
write$binfmt_misc(r0, &(0x7f00000034c0)={'syz0', "4b4133ca84c36c07cb1dda6f8e194b9d9bb79991f42483cd1a9f0a"}, 0x1f)

0s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000000009010800000000000000000000000008000540000000000900010073020030000000003c0002002c00018014000300ff01000000000000000000000000000114000500fc010000000000000000"], 0x70}}, 0x0)
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x10000, &(0x7f00000064c0)=ANY=[@ANYRES64], 0x1, 0x5d69, &(0x7f000000c380)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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")
io_uring_setup(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
pwritev2(r5, &(0x7f0000000300)=[{&(0x7f0000000240)="e7", 0x1}], 0x1, 0xffff, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)
pwritev2(r6, &(0x7f00000001c0), 0x0, 0x7fff, 0x0, 0x0)
truncate(&(0x7f0000000200)='./file1\x00', 0x4)

kernel console output (not intermixed with test programs):

272][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  432.876961][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  432.891005][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  432.902883][   T12] bridge_slave_0: left allmulticast mode
[  432.903557][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  432.943991][   T12] bridge_slave_0: left promiscuous mode
[  432.960136][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  432.964212][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.982127][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  433.151456][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  433.175479][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  433.186427][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  433.204930][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  433.221060][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  433.230703][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  433.310129][T12320] loop0: detected capacity change from 0 to 256
[  433.397201][T12320] FAT-fs (loop0): Directory bread(block 64) failed
[  433.403816][T12320] FAT-fs (loop0): Directory bread(block 65) failed
[  433.410767][T12320] FAT-fs (loop0): Directory bread(block 66) failed
[  433.417424][T12320] FAT-fs (loop0): Directory bread(block 67) failed
[  433.425612][T12320] FAT-fs (loop0): Directory bread(block 68) failed
[  433.432525][T12320] FAT-fs (loop0): Directory bread(block 69) failed
[  433.454639][T12320] FAT-fs (loop0): Directory bread(block 70) failed
[  433.461977][T12320] FAT-fs (loop0): Directory bread(block 71) failed
[  433.469802][T12320] FAT-fs (loop0): Directory bread(block 72) failed
[  433.476460][T12320] FAT-fs (loop0): Directory bread(block 73) failed
[  433.895554][T12336] loop0: detected capacity change from 0 to 1024
[  433.975531][T12336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.134940][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.140196][ T8662] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  434.172957][ T8662] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  434.190820][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.215570][   T12] bond0 (unregistering): Released all slaves
[  434.459685][T12348] loop1: detected capacity change from 0 to 256
[  434.502302][T12348] FAT-fs (loop1): Directory bread(block 64) failed
[  434.509283][T12348] FAT-fs (loop1): Directory bread(block 65) failed
[  434.516374][T12348] FAT-fs (loop1): Directory bread(block 66) failed
[  434.523133][T12348] FAT-fs (loop1): Directory bread(block 67) failed
[  434.534500][T12348] FAT-fs (loop1): Directory bread(block 68) failed
[  434.540602][ T8704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.541160][T12348] FAT-fs (loop1): Directory bread(block 69) failed
[  434.562179][T12348] FAT-fs (loop1): Directory bread(block 70) failed
[  434.581412][T12348] FAT-fs (loop1): Directory bread(block 71) failed
[  434.599438][T12348] FAT-fs (loop1): Directory bread(block 72) failed
[  434.609963][T12348] FAT-fs (loop1): Directory bread(block 73) failed
[  434.655149][ T8662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.967167][   T12] hsr_slave_0: left promiscuous mode
[  434.987774][   T12] hsr_slave_1: left promiscuous mode
[  435.015739][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  435.015760][   T29] audit: type=1804 audit(1717812455.882:1323): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3820026539/syzkaller.4Mp0GO/119/bus" dev="sda1" ino=1941 res=1 errno=0
[  435.084346][   T53] Bluetooth: hci0: command tx timeout
[  435.104096][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.111567][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.132352][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.163512][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.247677][   T12] veth1_macvtap: left promiscuous mode
[  435.253327][   T12] veth0_macvtap: left promiscuous mode
[  435.275851][   T12] veth1_vlan: left promiscuous mode
[  435.281252][   T12] veth0_vlan: left promiscuous mode
[  435.311519][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  435.319656][ T5110] Bluetooth: hci1: command tx timeout
[  435.337681][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  435.350004][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  435.371171][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  435.382632][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  435.393721][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  435.433597][T12360] loop1: detected capacity change from 0 to 1024
[  435.456805][T12360] EXT4-fs: Ignoring removed nobh option
[  435.462480][T12360] EXT4-fs: Ignoring removed nomblk_io_submit option
[  435.575565][T12360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.621365][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  435.654197][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  435.663779][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  435.674775][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  435.684557][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  435.691989][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  435.767882][T10328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.929861][T12366] loop1: detected capacity change from 0 to 1024
[  435.976746][T12366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.066951][T10328] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  436.092206][T10328] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  436.369095][   T12] team0 (unregistering): Port device team_slave_1 removed
[  436.440237][   T12] team0 (unregistering): Port device team_slave_0 removed
[  437.154568][   T53] Bluetooth: hci0: command tx timeout
[  437.402674][T12311] chnl_net:caif_netlink_parms(): no params data found
[  437.409655][   T53] Bluetooth: hci1: command tx timeout
[  437.447317][T10328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.488355][   T53] Bluetooth: hci2: command tx timeout
[  437.561825][T12313] chnl_net:caif_netlink_parms(): no params data found
[  437.714184][   T53] Bluetooth: hci4: command tx timeout
[  437.890211][T12311] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.904768][T12311] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.912070][T12311] bridge_slave_0: entered allmulticast mode
[  437.928470][T12311] bridge_slave_0: entered promiscuous mode
[  437.994783][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  438.012527][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  438.015447][T12311] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.034140][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  438.034341][T12311] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.049308][T12311] bridge_slave_1: entered allmulticast mode
[  438.056564][T12311] bridge_slave_1: entered promiscuous mode
[  438.063206][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  438.077910][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  438.086347][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  438.126541][T12313] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.142416][T12313] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.170526][T12313] bridge_slave_0: entered allmulticast mode
[  438.178377][T12313] bridge_slave_0: entered promiscuous mode
[  438.204743][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.225352][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.265908][T12313] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.274766][T12313] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.283224][T12313] bridge_slave_1: entered allmulticast mode
[  438.290968][T12313] bridge_slave_1: entered promiscuous mode
[  438.338197][T12311] team0: Port device team_slave_0 added
[  438.348597][T12311] team0: Port device team_slave_1 added
[  438.391486][T12311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.398676][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.425206][T12311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.442163][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.451518][T12357] chnl_net:caif_netlink_parms(): no params data found
[  438.487721][T12363] chnl_net:caif_netlink_parms(): no params data found
[  438.504497][T12311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.511468][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.539884][T12311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.555296][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.708818][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.754889][T12313] team0: Port device team_slave_0 added
[  438.814190][T12313] team0: Port device team_slave_1 added
[  438.851463][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.867607][T12357] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.880231][T12357] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.887821][T12357] bridge_slave_0: entered allmulticast mode
[  438.896022][T12357] bridge_slave_0: entered promiscuous mode
[  438.935324][T12357] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.942625][T12357] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.950750][T12357] bridge_slave_1: entered allmulticast mode
[  438.958642][T12357] bridge_slave_1: entered promiscuous mode
[  438.992867][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.013264][T12311] hsr_slave_0: entered promiscuous mode
[  439.019898][T12311] hsr_slave_1: entered promiscuous mode
[  439.102547][T12357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.136514][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.168633][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.176112][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.207706][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.221591][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.228819][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.255480][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.266228][ T5110] Bluetooth: hci0: command tx timeout
[  439.293728][T12357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.317259][T12363] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.324867][T12363] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.332246][T12363] bridge_slave_0: entered allmulticast mode
[  439.339653][T12363] bridge_slave_0: entered promiscuous mode
[  439.351161][T12363] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.363049][T12363] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.372764][T12363] bridge_slave_1: entered allmulticast mode
[  439.380325][T12363] bridge_slave_1: entered promiscuous mode
[  439.443754][T12357] team0: Port device team_slave_0 added
[  439.474241][ T5110] Bluetooth: hci1: command tx timeout
[  439.493516][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.506813][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.537629][T12357] team0: Port device team_slave_1 added
[  439.554151][ T5110] Bluetooth: hci2: command tx timeout
[  439.661063][T12357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.669727][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.696093][T12357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.715661][T12313] hsr_slave_0: entered promiscuous mode
[  439.722110][T12313] hsr_slave_1: entered promiscuous mode
[  439.728844][T12313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  439.737424][T12313] Cannot create hsr debugfs directory
[  439.751211][T12363] team0: Port device team_slave_0 added
[  439.791324][T12357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.798940][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.804132][ T5110] Bluetooth: hci4: command tx timeout
[  439.830938][T12357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.857424][T12363] team0: Port device team_slave_1 added
[  440.077514][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.084963][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.111711][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.124524][ T5110] Bluetooth: hci3: command tx timeout
[  440.171399][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.218685][T12383] chnl_net:caif_netlink_parms(): no params data found
[  440.242430][T12357] hsr_slave_0: entered promiscuous mode
[  440.249077][T12357] hsr_slave_1: entered promiscuous mode
[  440.259550][T12357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.267851][T12357] Cannot create hsr debugfs directory
[  440.284839][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.292243][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.318978][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.392802][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.456550][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  440.462847][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  440.562911][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.601628][T12363] hsr_slave_0: entered promiscuous mode
[  440.608759][T12363] hsr_slave_1: entered promiscuous mode
[  440.619256][T12363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.627029][T12363] Cannot create hsr debugfs directory
[  440.730628][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.817270][T12383] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.825103][T12383] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.832353][T12383] bridge_slave_0: entered allmulticast mode
[  440.842188][T12383] bridge_slave_0: entered promiscuous mode
[  440.892402][T12383] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.900574][T12383] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.908013][T12383] bridge_slave_1: entered allmulticast mode
[  440.915579][T12383] bridge_slave_1: entered promiscuous mode
[  440.992251][T12383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.086908][T12313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.115151][T12383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.210255][T12383] team0: Port device team_slave_0 added
[  441.259166][T12313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.282503][T12383] team0: Port device team_slave_1 added
[  441.315048][ T5110] Bluetooth: hci0: command tx timeout
[  441.346969][T12313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.381705][T12383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.389307][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.417055][T12383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.502341][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.524957][T12383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.531965][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.559591][ T5110] Bluetooth: hci1: command tx timeout
[  441.567348][T12383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.613503][T12313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.634123][ T5110] Bluetooth: hci2: command tx timeout
[  441.681747][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.808002][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.829627][T12383] hsr_slave_0: entered promiscuous mode
[  441.836349][T12383] hsr_slave_1: entered promiscuous mode
[  441.842588][T12383] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  441.850492][T12383] Cannot create hsr debugfs directory
[  441.874095][ T5110] Bluetooth: hci4: command tx timeout
[  441.905671][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.039681][T12311] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  442.050167][T12311] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  442.081282][T12311] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  442.092451][T12311] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  442.194225][ T5110] Bluetooth: hci3: command tx timeout
[  442.236435][   T12] bridge_slave_1: left allmulticast mode
[  442.242133][   T12] bridge_slave_1: left promiscuous mode
[  442.253644][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.275742][   T12] bridge_slave_0: left allmulticast mode
[  442.281410][   T12] bridge_slave_0: left promiscuous mode
[  442.287269][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.297812][   T12] bridge_slave_1: left allmulticast mode
[  442.303468][   T12] bridge_slave_1: left promiscuous mode
[  442.309784][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.319763][   T12] bridge_slave_0: left allmulticast mode
[  442.325609][   T12] bridge_slave_0: left promiscuous mode
[  442.331828][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.346492][   T12] bridge_slave_0: left allmulticast mode
[  442.352206][   T12] bridge_slave_0: left promiscuous mode
[  442.358732][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.372683][   T12] bridge_slave_1: left allmulticast mode
[  442.379672][   T12] bridge_slave_1: left promiscuous mode
[  442.385741][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.395712][   T12] bridge_slave_0: left allmulticast mode
[  442.401388][   T12] bridge_slave_0: left promiscuous mode
[  442.409817][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.715832][ T5110] Bluetooth: hci2: command tx timeout
[  443.954375][ T5110] Bluetooth: hci4: command tx timeout
[  444.243364][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.258115][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.270182][   T12] bond0 (unregistering): Released all slaves
[  444.274220][ T5110] Bluetooth: hci3: command tx timeout
[  444.500914][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.512087][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.524447][   T12] bond0 (unregistering): Released all slaves
[  444.743256][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.756356][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.771080][   T12] bond0 (unregistering): Released all slaves
[  444.978738][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.989620][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.003496][   T12] bond0 (unregistering): (slave vlan2): Releasing backup interface
[  445.015511][   T12] bond0 (unregistering): Released all slaves
[  445.127264][T12311] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.245906][T12311] 8021q: adding VLAN 0 to HW filter on device team0
[  445.305925][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.313072][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.377330][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.384569][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.778888][T12357] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  445.826195][T12357] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  445.848083][T12357] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  445.924180][T12357] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  446.000032][T12311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.243513][T12311] veth0_vlan: entered promiscuous mode
[  446.303089][T12311] veth1_vlan: entered promiscuous mode
[  446.356027][ T5110] Bluetooth: hci3: command tx timeout
[  446.516240][T12313] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  446.529848][T12313] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  446.579609][T12311] veth0_macvtap: entered promiscuous mode
[  446.589130][T12313] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  446.663123][T12313] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  446.695343][T12311] veth1_macvtap: entered promiscuous mode
[  446.804457][T12357] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.817901][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.829910][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.844834][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.855410][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.865439][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.876182][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.887628][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.898721][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.908689][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.919625][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.931496][T12311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.942692][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.957727][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.967939][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.979252][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.989199][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.000645][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.010782][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.021404][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.032256][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.042919][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.054706][T12311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.101324][T12311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.112639][T12311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.121906][T12311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.131643][T12311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.204651][T12357] 8021q: adding VLAN 0 to HW filter on device team0
[  447.242464][   T12] hsr_slave_0: left promiscuous mode
[  447.254523][   T12] hsr_slave_1: left promiscuous mode
[  447.260437][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.281909][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.290865][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.298551][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.310619][   T12] hsr_slave_0: left promiscuous mode
[  447.317437][   T12] hsr_slave_1: left promiscuous mode
[  447.323415][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.335669][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.345496][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.353034][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.368163][   T12] hsr_slave_0: left promiscuous mode
[  447.376694][   T12] hsr_slave_1: left promiscuous mode
[  447.382710][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.390882][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.399879][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.408241][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.420200][   T12] hsr_slave_0: left promiscuous mode
[  447.426528][   T12] hsr_slave_1: left promiscuous mode
[  447.432772][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.440632][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.449795][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.457577][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.538583][   T12] veth1_macvtap: left promiscuous mode
[  447.544240][   T12] veth0_macvtap: left promiscuous mode
[  447.549905][   T12] veth1_vlan: left promiscuous mode
[  447.561197][   T12] veth0_vlan: left promiscuous mode
[  447.567699][   T12] veth1_macvtap: left promiscuous mode
[  447.573196][   T12] veth0_macvtap: left promiscuous mode
[  447.579094][   T12] veth1_vlan: left promiscuous mode
[  447.584596][   T12] veth0_vlan: left promiscuous mode
[  447.593350][   T12] veth1_macvtap: left promiscuous mode
[  447.599179][   T12] veth0_macvtap: left promiscuous mode
[  447.608572][   T12] veth1_vlan: left promiscuous mode
[  447.614079][   T12] 
: left promiscuous mode
[  447.621721][   T12] veth1_macvtap: left promiscuous mode
[  447.627540][   T12] veth0_macvtap: left promiscuous mode
[  447.633089][   T12] veth1_vlan: left promiscuous mode
[  447.638709][   T12] veth0_vlan: left promiscuous mode
[  448.630416][   T12] team0 (unregistering): Port device team_slave_1 removed
[  448.708168][   T12] team0 (unregistering): Port device team_slave_0 removed
[  450.019021][   T12] team0 (unregistering): Port device team_slave_1 removed
[  450.084662][   T12] team0 (unregistering): Port device team_slave_0 removed
[  451.337323][   T12] team0 (unregistering): Port device team_slave_1 removed
[  451.404402][   T12] team0 (unregistering): Port device team_slave_0 removed
[  452.685251][   T12] team0 (unregistering): Port device team_slave_1 removed
[  452.751997][   T12] team0 (unregistering): Port device team_slave_0 removed
[  453.512462][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.519806][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.537991][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.545262][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.871657][T12363] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  453.879687][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.889415][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.898488][T12363] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  453.913556][T12363] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  453.924946][T12363] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  454.088949][T12313] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.117212][T12313] 8021q: adding VLAN 0 to HW filter on device team0
[  454.184830][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.204923][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.236423][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.243586][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.282068][T12383] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  454.300140][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.307354][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.344086][T12383] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  454.379510][T12383] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  454.422129][T12383] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  454.678652][T12357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.758828][T12415] loop2: detected capacity change from 0 to 256
[  454.828766][T12415] FAT-fs (loop2): Directory bread(block 64) failed
[  454.852155][T12415] FAT-fs (loop2): Directory bread(block 65) failed
[  454.860314][T12415] FAT-fs (loop2): Directory bread(block 66) failed
[  454.867126][T12415] FAT-fs (loop2): Directory bread(block 67) failed
[  454.873762][T12415] FAT-fs (loop2): Directory bread(block 68) failed
[  454.900060][T12383] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.914215][T12415] FAT-fs (loop2): Directory bread(block 69) failed
[  454.922591][T12415] FAT-fs (loop2): Directory bread(block 70) failed
[  454.968618][T12415] FAT-fs (loop2): Directory bread(block 71) failed
[  454.975694][T12415] FAT-fs (loop2): Directory bread(block 72) failed
[  454.978876][T12357] veth0_vlan: entered promiscuous mode
[  455.014088][T12415] FAT-fs (loop2): Directory bread(block 73) failed
[  455.014412][T12383] 8021q: adding VLAN 0 to HW filter on device team0
[  455.092784][T12363] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.161685][T12357] veth1_vlan: entered promiscuous mode
[  455.173203][T12363] 8021q: adding VLAN 0 to HW filter on device team0
[  455.182629][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.189825][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.239839][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.247048][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.341314][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.348532][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.418394][T12313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.453697][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.460974][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.674558][T12357] veth0_macvtap: entered promiscuous mode
[  455.700247][T12363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  455.733127][T12363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  455.798370][T12357] veth1_macvtap: entered promiscuous mode
[  455.872859][T12357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.902757][T12357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.913458][T12357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.938841][T12357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.952109][T12357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.015389][T12357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.034367][T12357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.053523][T12357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.064970][T12357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.077168][T12357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.153275][T12357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.185064][T12357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.201389][T12357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.210357][T12357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.239523][T12383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.262180][T12313] veth0_vlan: entered promiscuous mode
[  456.285340][T12437] loop2: detected capacity change from 0 to 256
[  456.320307][T12437] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  456.347647][T12313] veth1_vlan: entered promiscuous mode
[  456.371041][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.491400][T12313] veth0_macvtap: entered promiscuous mode
[  456.570539][T12383] veth0_vlan: entered promiscuous mode
[  456.617212][T12313] veth1_macvtap: entered promiscuous mode
[  456.743554][T12383] veth1_vlan: entered promiscuous mode
[  456.771791][T12363] veth0_vlan: entered promiscuous mode
[  456.781788][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.796697][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.863568][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.886317][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.899521][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.920370][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.930448][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.944257][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.963063][T12313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.982005][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  457.006542][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  457.020030][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  457.029846][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  457.053261][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  457.061067][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  457.089121][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.106435][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.119626][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.130647][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.141115][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.151676][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.163600][T12313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.183750][T12363] veth1_vlan: entered promiscuous mode
[  457.200327][T12313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.209563][T12313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.218970][T12313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.230162][T12313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.242852][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.264660][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.327469][T12383] veth0_macvtap: entered promiscuous mode
[  457.430080][ T2895] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.471589][T12383] veth1_macvtap: entered promiscuous mode
[  457.529622][T12445] loop3: detected capacity change from 0 to 1024
[  457.546014][T12445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  457.574687][ T2895] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.577880][T12445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.638421][T12357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.669694][T12363] veth0_macvtap: entered promiscuous mode
[  457.709103][ T2895] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.747278][T12363] veth1_macvtap: entered promiscuous mode
[  457.792858][ T6961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.815931][ T6961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.849825][ T2895] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.931666][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  457.951704][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.969780][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  457.980513][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.994181][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.006006][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.017345][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.028130][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.041373][T12383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.116956][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.133931][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.143815][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.173937][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.183779][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.194816][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.205790][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.222813][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.234961][T12383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.289660][T12449] loop3: detected capacity change from 0 to 40427
[  458.299324][T12383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.311331][T12383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.320227][T12449] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  458.327309][T12383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.336128][T12449] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  458.344665][T12383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.359279][T12449] F2FS-fs (loop3): invalid crc value
[  458.373037][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.385477][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.395798][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.408621][T12449] F2FS-fs (loop3): Found nat_bits in checkpoint
[  458.414099][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.425500][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.437856][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.449635][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.464071][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.474224][T12449] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  458.475118][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.487558][T12449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  458.491686][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.522479][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.564512][ T2802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.583698][ T2802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.591738][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.604866][T12357] syz-executor.3: attempt to access beyond end of device
[  458.604866][T12357] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  458.622980][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.636053][T12357] syz-executor.3: attempt to access beyond end of device
[  458.636053][T12357] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  458.644108][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.661158][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.672296][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.683285][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.693527][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.704281][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.716212][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.727340][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.741374][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.753405][T12363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.764048][T12363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.772782][T12363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.772928][T12357] syz-executor.3: attempt to access beyond end of device
[  458.772928][T12357] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  458.781702][T12363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.804859][T12357] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  459.142485][ T2895] bridge_slave_1: left allmulticast mode
[  459.155473][   T53] Bluetooth: hci0: command tx timeout
[  459.168083][ T2895] bridge_slave_1: left promiscuous mode
[  459.180563][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.191397][ T2895] bridge_slave_0: left allmulticast mode
[  459.204164][ T2895] bridge_slave_0: left promiscuous mode
[  459.209988][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.563674][   T29] audit: type=1326 audit(1717812480.432:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f047cf69 code=0x7ffc0000
[  459.601793][   T29] audit: type=1326 audit(1717812480.432:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f047cf69 code=0x7ffc0000
[  459.625968][   T29] audit: type=1326 audit(1717812480.442:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f047cf69 code=0x7ffc0000
[  459.673020][   T29] audit: type=1326 audit(1717812480.442:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f047cf69 code=0x7ffc0000
[  459.695830][   T29] audit: type=1326 audit(1717812480.452:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f047cf69 code=0x7ffc0000
[  459.720161][   T29] audit: type=1326 audit(1717812480.472:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f047cf69 code=0x7ffc0000
[  459.747334][   T29] audit: type=1326 audit(1717812480.472:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8f047a6e7 code=0x7ffc0000
[  459.771562][   T29] audit: type=1326 audit(1717812480.472:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8f04403b9 code=0x7ffc0000
[  459.800811][   T29] audit: type=1326 audit(1717812480.472:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8f047a6e7 code=0x7ffc0000
[  459.829183][   T29] audit: type=1326 audit(1717812480.472:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8f04403b9 code=0x7ffc0000
[  460.119602][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.132865][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.143773][ T2895] bond0 (unregistering): Released all slaves
[  460.190251][T12440] chnl_net:caif_netlink_parms(): no params data found
[  460.509206][ T2802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.535469][ T2802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.661969][ T2851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.694033][ T2851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.756823][T12440] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.778245][T12440] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.789580][T12440] bridge_slave_0: entered allmulticast mode
[  460.809499][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  460.811149][T12440] bridge_slave_0: entered promiscuous mode
[  460.821821][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  460.834369][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  460.844917][T12440] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.852072][T12440] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.855303][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  460.871905][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  460.874444][T12440] bridge_slave_1: entered allmulticast mode
[  460.879513][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  460.901998][T12440] bridge_slave_1: entered promiscuous mode
[  460.942352][ T2895] hsr_slave_0: left promiscuous mode
[  460.949113][ T2895] hsr_slave_1: left promiscuous mode
[  460.959202][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.968843][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.979435][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.987523][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.014005][ T2895] veth1_macvtap: left promiscuous mode
[  461.019655][ T2895] veth0_macvtap: left promiscuous mode
[  461.026823][ T2895] veth1_vlan: left promiscuous mode
[  461.032159][ T2895] veth0_vlan: left promiscuous mode
[  461.244161][ T5110] Bluetooth: hci0: command tx timeout
[  461.760514][ T2895] team0 (unregistering): Port device team_slave_1 removed
[  461.837878][ T2895] team0 (unregistering): Port device team_slave_0 removed
[  462.657821][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.658032][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.679021][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.693550][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.715730][T12478] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  462.770342][T12440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.843434][T12440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.914760][ T5110] Bluetooth: hci2: command tx timeout
[  463.092382][T12440] team0: Port device team_slave_0 added
[  463.181162][T12440] team0: Port device team_slave_1 added
[  463.238009][T12497] loop4: detected capacity change from 0 to 512
[  463.271456][T12497] EXT4-fs (loop4): unsupported inode size: 264
[  463.278628][T12497] EXT4-fs (loop4): blocksize: 1024
[  463.318816][ T5110] Bluetooth: hci0: command tx timeout
[  463.342726][T12440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.375207][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.413699][T12440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.519542][T12497] loop4: detected capacity change from 0 to 1024
[  463.530428][T12440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.547195][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.595288][T12440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.731444][T12440] hsr_slave_0: entered promiscuous mode
[  463.742889][T12440] hsr_slave_1: entered promiscuous mode
[  463.758233][T12497] syz-executor.4: attempt to access beyond end of device
[  463.758233][T12497] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  463.781363][T12497] Buffer I/O error on dev loop4, logical block 2889, async page read
[  463.803487][T12504] vhost-12497: attempt to access beyond end of device
[  463.803487][T12504] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  463.842744][T12504] Buffer I/O error on dev loop4, logical block 2889, async page read
[  463.858382][T12493] syz-executor.4: attempt to access beyond end of device
[  463.858382][T12493] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  463.885251][T12493] Buffer I/O error on dev loop4, logical block 2889, async page read
[  463.911884][T12497] syz-executor.4: attempt to access beyond end of device
[  463.911884][T12497] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  463.926477][T12497] Buffer I/O error on dev loop4, logical block 2889, async page read
[  463.941568][T12493] syz-executor.4: attempt to access beyond end of device
[  463.941568][T12493] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  463.962202][T12493] Buffer I/O error on dev loop4, logical block 2889, async page read
[  463.970729][T12504] vhost-12497: attempt to access beyond end of device
[  463.970729][T12504] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  463.990319][T12504] Buffer I/O error on dev loop4, logical block 2889, async page read
[  464.004529][T12497] syz-executor.4: attempt to access beyond end of device
[  464.004529][T12497] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  464.018391][T12497] Buffer I/O error on dev loop4, logical block 2889, async page read
[  464.026857][T12497] syz-executor.4: attempt to access beyond end of device
[  464.026857][T12497] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  464.042220][T12497] Buffer I/O error on dev loop4, logical block 2889, async page read
[  464.053377][T12497] syz-executor.4: attempt to access beyond end of device
[  464.053377][T12497] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  464.069023][T12497] Buffer I/O error on dev loop4, logical block 2889, async page read
[  464.078457][T12497] syz-executor.4: attempt to access beyond end of device
[  464.078457][T12497] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  464.093208][T12497] Buffer I/O error on dev loop4, logical block 2889, async page read
[  464.321268][ T2895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.352816][ T6961] hfsplus: b-tree write err: -5, ino 8
[  464.400986][T12475] chnl_net:caif_netlink_parms(): no params data found
[  464.578533][ T2895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.615347][T12527] loop1: detected capacity change from 0 to 2048
[  464.730225][T12533] loop4: detected capacity change from 0 to 1024
[  464.839614][T12533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.872380][ T2895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.936437][T12533] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  464.994526][ T5110] Bluetooth: hci2: command tx timeout
[  465.018904][T12313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.100804][ T2895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.205768][T12475] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.219231][T12475] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.227769][T12475] bridge_slave_0: entered allmulticast mode
[  465.245379][T12475] bridge_slave_0: entered promiscuous mode
[  465.254548][T12475] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.261716][T12475] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.270960][T12475] bridge_slave_1: entered allmulticast mode
[  465.278940][T12475] bridge_slave_1: entered promiscuous mode
[  465.356303][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.370762][T12551] evm: overlay not supported
[  465.374694][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.402617][ T5110] Bluetooth: hci0: command tx timeout
[  465.487247][T12475] team0: Port device team_slave_0 added
[  465.538273][T12475] team0: Port device team_slave_1 added
[  465.639776][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.658630][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.712873][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.727282][ T2895] bridge_slave_1: left allmulticast mode
[  465.734865][ T2895] bridge_slave_1: left promiscuous mode
[  465.740743][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.750912][ T2895] bridge_slave_0: left allmulticast mode
[  465.757189][ T2895] bridge_slave_0: left promiscuous mode
[  465.763711][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.793098][ T2895] bridge_slave_1: left allmulticast mode
[  465.805907][ T2895] bridge_slave_1: left promiscuous mode
[  465.819591][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.833194][ T2895] bridge_slave_0: left allmulticast mode
[  465.845177][ T2895] bridge_slave_0: left promiscuous mode
[  465.852943][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.910753][T12567] loop0: detected capacity change from 0 to 2048
[  465.940162][T12567] EXT4-fs (loop0): stripe (239) is not aligned with cluster size (16), stripe is disabled
[  465.991397][T12567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.069960][T12363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.266200][T12576] loop0: detected capacity change from 0 to 1024
[  466.360245][T12576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.549533][T12576] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  466.587757][T12587] xt_bpf: check failed: parse error
[  466.643682][T12363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.076563][ T5110] Bluetooth: hci2: command tx timeout
[  467.610047][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  467.631640][ T2895] bond_slave_0: left promiscuous mode
[  467.647386][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.657105][ T2895] bond_slave_1: left promiscuous mode
[  467.665330][ T2895] bond0 (unregistering): Released all slaves
[  468.048283][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.072637][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.093437][ T2895] bond0 (unregistering): Released all slaves
[  468.118169][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.132162][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  468.196350][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.392876][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  468.413994][T12577] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  468.422110][T12577] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  468.868829][T12475] hsr_slave_0: entered promiscuous mode
[  468.885329][T12475] hsr_slave_1: entered promiscuous mode
[  468.965821][T12601] hub 9-0:1.0: USB hub found
[  468.976383][T12601] hub 9-0:1.0: 8 ports detected
[  469.181495][ T5110] Bluetooth: hci2: command tx timeout
[  469.247602][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  469.343110][T12475] Cannot create hsr debugfs directory
[  469.944660][T12440] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  469.971105][T12440] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  470.003189][T12440] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  470.141955][T12440] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  470.615428][T12622] loop0: detected capacity change from 0 to 256
[  470.650604][ T2895] hsr_slave_0: left promiscuous mode
[  470.658706][ T2895] hsr_slave_1: left promiscuous mode
[  470.675328][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.694785][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.696841][T12622] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  470.728199][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.744243][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.798292][ T2895] hsr_slave_0: left promiscuous mode
[  470.814259][ T2895] hsr_slave_1: left promiscuous mode
[  470.824886][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.832355][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.847424][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.866709][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.975902][ T2895] veth1_macvtap: left promiscuous mode
[  470.981503][ T2895] veth0_macvtap: left promiscuous mode
[  470.995021][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  471.008894][ T2895] veth1_vlan: left promiscuous mode
[  471.018255][ T2895] veth0_vlan: left promiscuous mode
[  471.023693][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  471.037521][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  471.056521][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  471.056633][ T2895] veth1_macvtap: left promiscuous mode
[  471.084243][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  471.094336][ T2895] veth0_macvtap: left promiscuous mode
[  471.095453][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  471.100075][ T2895] veth1_vlan: left promiscuous mode
[  471.149993][ T2895] veth0_vlan: left promiscuous mode
[  472.466111][ T2895] team_slave_1 (unregistering): left promiscuous mode
[  472.505670][ T2895] team0 (unregistering): Port device team_slave_1 removed
[  472.633488][ T2895] team_slave_0 (unregistering): left promiscuous mode
[  472.651932][ T2895] team0 (unregistering): Port device team_slave_0 removed
[  472.839958][T12628] loop1: detected capacity change from 0 to 40427
[  472.851870][T12628] F2FS-fs (loop1): invalid crc value
[  472.869607][T12628] F2FS-fs (loop1): Found nat_bits in checkpoint
[  472.950529][T12628] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  473.239584][   T53] Bluetooth: hci1: command tx timeout
[  474.948036][ T2895] team0 (unregistering): Port device team_slave_1 removed
[  475.025944][ T2895] team0 (unregistering): Port device team_slave_0 removed
[  475.314165][   T53] Bluetooth: hci1: command tx timeout
[  475.948843][T12639] loop1: detected capacity change from 0 to 64
[  476.268019][T12440] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.422208][T12440] 8021q: adding VLAN 0 to HW filter on device team0
[  476.500347][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.507540][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.608731][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.615988][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.947054][T12623] chnl_net:caif_netlink_parms(): no params data found
[  476.971739][T12475] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  476.988321][T12475] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  477.032014][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  477.050858][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  477.062175][T12475] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  477.072232][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  477.087554][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  477.104599][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  477.110736][T12475] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  477.124340][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  477.188871][T12642] loop1: detected capacity change from 0 to 40427
[  477.199679][T12642] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  477.207305][T12642] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  477.230477][T12642] F2FS-fs (loop1): invalid crc value
[  477.240755][T12642] F2FS-fs (loop1): Found nat_bits in checkpoint
[  477.315530][T12642] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  477.322690][T12642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  477.392417][T12623] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.402117][   T53] Bluetooth: hci1: command tx timeout
[  477.411341][T12623] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.418719][T12623] bridge_slave_0: entered allmulticast mode
[  477.426587][T12623] bridge_slave_0: entered promiscuous mode
[  477.437483][T12623] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.445329][T12623] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.453574][T12623] bridge_slave_1: entered allmulticast mode
[  477.457763][T12383] bio_check_eod: 1447 callbacks suppressed
[  477.457780][T12383] syz-executor.1: attempt to access beyond end of device
[  477.457780][T12383] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  477.460970][T12623] bridge_slave_1: entered promiscuous mode
[  477.488659][T12383] syz-executor.1: attempt to access beyond end of device
[  477.488659][T12383] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  477.523612][T12383] syz-executor.1: attempt to access beyond end of device
[  477.523612][T12383] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  477.538897][T12383] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  477.568737][ T2895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.681602][T12623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.715950][ T2895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.770332][T12623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.886297][ T2895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.923505][T12623] team0: Port device team_slave_0 added
[  477.971488][T12623] team0: Port device team_slave_1 added
[  477.992801][T12440] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.111668][ T2895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.140948][T12623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.153967][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.190373][T12623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.270960][T12623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.280103][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.315810][T12623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.511920][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  478.529757][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  478.540025][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  478.554550][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  478.562297][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  478.569060][T12475] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.574573][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  478.589463][T12623] hsr_slave_0: entered promiscuous mode
[  478.602350][T12623] hsr_slave_1: entered promiscuous mode
[  478.610142][T12623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  478.618058][T12623] Cannot create hsr debugfs directory
[  478.679137][ T2895] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.785682][ T2895] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.802406][T12646] chnl_net:caif_netlink_parms(): no params data found
[  478.871893][T12440] veth0_vlan: entered promiscuous mode
[  478.916248][ T2895] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.964788][T12475] 8021q: adding VLAN 0 to HW filter on device team0
[  479.062502][ T2895] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.081788][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.088918][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.156685][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.163855][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.208236][T12646] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.215744][T12646] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.222932][T12646] bridge_slave_0: entered allmulticast mode
[  479.229756][T12646] bridge_slave_0: entered promiscuous mode
[  479.240005][T12646] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.247933][   T53] Bluetooth: hci4: command tx timeout
[  479.255157][T12646] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.262628][T12646] bridge_slave_1: entered allmulticast mode
[  479.269679][T12646] bridge_slave_1: entered promiscuous mode
[  479.285590][T12440] veth1_vlan: entered promiscuous mode
[  479.327966][T12646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.341519][T12646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.410058][T12646] team0: Port device team_slave_0 added
[  479.419523][T12646] team0: Port device team_slave_1 added
[  479.472452][ T2895] bridge_slave_1: left allmulticast mode
[  479.478370][   T53] Bluetooth: hci1: command tx timeout
[  479.485877][ T2895] bridge_slave_1: left promiscuous mode
[  479.491543][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.502750][ T2895] bridge_slave_0: left allmulticast mode
[  479.511103][ T2895] bridge_slave_0: left promiscuous mode
[  479.516990][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.528042][ T2895] bridge_slave_1: left allmulticast mode
[  479.533820][ T2895] bridge_slave_1: left promiscuous mode
[  479.539825][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.549589][ T2895] bridge_slave_0: left allmulticast mode
[  479.555747][ T2895] bridge_slave_0: left promiscuous mode
[  479.561502][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.488239][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.500962][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.511543][ T2895] bond0 (unregistering): Released all slaves
[  480.675478][   T53] Bluetooth: hci3: command tx timeout
[  480.712867][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.725135][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.738286][ T2895] bond0 (unregistering): Released all slaves
[  480.969835][T12646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.977915][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.014013][T12646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.030223][T12440] veth0_macvtap: entered promiscuous mode
[  481.119067][T12646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.128379][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.155242][T12646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.223202][T12440] veth1_macvtap: entered promiscuous mode
[  481.318000][   T53] Bluetooth: hci4: command tx timeout
[  481.358418][T12646] hsr_slave_0: entered promiscuous mode
[  481.365203][T12646] hsr_slave_1: entered promiscuous mode
[  481.371480][T12646] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  481.379274][T12646] Cannot create hsr debugfs directory
[  481.502839][T12440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.513418][T12440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.523373][T12440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.535782][T12440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.545708][T12440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.556827][T12440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.568621][T12440] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.630163][T12440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.641519][T12440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.653841][T12440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.664540][T12440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.674687][T12440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.685371][T12440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.697172][T12440] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.729556][T12662] chnl_net:caif_netlink_parms(): no params data found
[  481.750778][T12440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.762832][T12440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.772370][T12440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.781227][T12440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.901589][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.982573][ T2895] hsr_slave_0: left promiscuous mode
[  481.988880][ T2895] hsr_slave_1: left promiscuous mode
[  481.999207][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.007010][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.019305][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.026961][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.050799][ T2895] hsr_slave_0: left promiscuous mode
[  482.057859][ T2895] hsr_slave_1: left promiscuous mode
[  482.066414][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.075416][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.083715][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.091660][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.130713][ T2895] veth1_macvtap: left promiscuous mode
[  482.136435][ T2895] veth0_macvtap: left promiscuous mode
[  482.141996][ T2895] veth1_vlan: left promiscuous mode
[  482.147348][ T2895] veth0_vlan: left promiscuous mode
[  482.153542][ T2895] veth1_macvtap: left promiscuous mode
[  482.159179][ T2895] veth0_macvtap: left promiscuous mode
[  482.165235][ T2895] veth1_vlan: left promiscuous mode
[  482.170589][ T2895] veth0_vlan: left promiscuous mode
[  482.765834][   T53] Bluetooth: hci3: command tx timeout
[  482.954810][ T2895] team0 (unregistering): Port device team_slave_1 removed
[  483.026833][ T2895] team0 (unregistering): Port device team_slave_0 removed
[  483.404082][   T53] Bluetooth: hci4: command tx timeout
[  484.283243][ T2895] team0 (unregistering): Port device team_slave_1 removed
[  484.348376][ T2895] team0 (unregistering): Port device team_slave_0 removed
[  484.839315][   T53] Bluetooth: hci3: command tx timeout
[  485.073854][T12623] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  485.129818][T12662] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.137526][T12662] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.145022][T12662] bridge_slave_0: entered allmulticast mode
[  485.152288][T12662] bridge_slave_0: entered promiscuous mode
[  485.229848][T12623] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  485.245048][T12623] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  485.273173][T12662] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.282337][T12662] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.292504][T12662] bridge_slave_1: entered allmulticast mode
[  485.301174][T12662] bridge_slave_1: entered promiscuous mode
[  485.323280][T12623] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  485.427923][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.442936][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.475776][   T53] Bluetooth: hci4: command tx timeout
[  485.557600][T12662] team0: Port device team_slave_0 added
[  485.569554][T12662] team0: Port device team_slave_1 added
[  485.577194][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.596290][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.691012][T12475] veth0_vlan: entered promiscuous mode
[  485.711694][T12475] veth1_vlan: entered promiscuous mode
[  485.763512][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.771452][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.799265][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.817232][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.826664][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.833628][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.860078][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.869683][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.083497][T12662] hsr_slave_0: entered promiscuous mode
[  486.091124][T12662] hsr_slave_1: entered promiscuous mode
[  486.098361][T12662] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  486.106146][T12662] Cannot create hsr debugfs directory
[  486.159070][T12475] veth0_macvtap: entered promiscuous mode
[  486.184715][T12646] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  486.204997][T12646] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  486.235839][T12475] veth1_macvtap: entered promiscuous mode
[  486.245625][T12646] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  486.258971][T12646] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  486.324149][   T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  486.383783][T12623] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.396092][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.411425][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.421940][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.436458][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.448791][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.460106][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.471028][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.481750][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.492413][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.504591][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.540698][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.553613][T12475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.563043][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.573223][T12475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.582113][   T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  486.591234][T12475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.600219][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.609591][T12475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.619948][   T45] usb 3-1: config 0 descriptor??
[  486.776340][T12662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.869683][T12623] 8021q: adding VLAN 0 to HW filter on device team0
[  486.896541][T12662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.917988][   T53] Bluetooth: hci3: command tx timeout
[  486.932213][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.939376][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.990211][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.001859][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.026158][T12662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.056811][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.064009][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.073395][   T45] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0
[  487.082069][   T45] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0
[  487.089808][   T45] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0
[  487.101235][   T45] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0
[  487.131652][T12646] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.132987][   T45] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0
[  487.152426][   T45] konepure 0003:1E7D:2DB4.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0
[  487.180472][T12662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.222926][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.243416][T12646] 8021q: adding VLAN 0 to HW filter on device team0
[  487.244038][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.263143][   T45] usb 3-1: USB disconnect, device number 29
[  487.306449][  T785] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.313705][  T785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.355555][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.362752][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.394570][ T2895] bridge_slave_1: left allmulticast mode
[  487.400280][ T2895] bridge_slave_1: left promiscuous mode
[  487.407079][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.421925][ T2895] bridge_slave_0: left allmulticast mode
[  487.428174][ T2895] bridge_slave_0: left promiscuous mode
[  487.440254][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.174956][T12686] loop3: detected capacity change from 0 to 40427
[  488.213430][T12686] F2FS-fs (loop3): invalid crc value
[  488.242272][T12686] F2FS-fs (loop3): Found nat_bits in checkpoint
[  488.252692][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.267689][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.289025][ T2895] bond0 (unregistering): Released all slaves
[  488.367986][T12686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  488.693034][T12699] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  489.641888][T12662] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  489.726074][ T2895] hsr_slave_0: left promiscuous mode
[  489.748160][ T2895] hsr_slave_1: left promiscuous mode
[  489.761626][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.769499][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.778050][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.786111][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.819143][ T2895] veth1_macvtap: left promiscuous mode
[  489.825077][ T2895] veth0_macvtap: left promiscuous mode
[  489.830833][ T2895] veth1_vlan: left promiscuous mode
[  489.836549][ T2895] veth0_vlan: left promiscuous mode
[  489.870413][   T29] kauditd_printk_skb: 144 callbacks suppressed
[  489.870431][   T29] audit: type=1800 audit(1717812510.742:1478): pid=12714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1949 res=0 errno=0
[  490.121475][T12721] loop2: detected capacity change from 0 to 164
[  490.901548][ T2895] team0 (unregistering): Port device team_slave_1 removed
[  490.987209][ T2895] team0 (unregistering): Port device team_slave_0 removed
[  491.075994][T12735] loop2: detected capacity change from 0 to 512
[  491.132598][T12735] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  491.170898][T12735] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  491.191204][T12735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.272109][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.911530][T12662] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  491.935380][T12662] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  491.982523][T12662] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  492.041064][T12739] loop2: detected capacity change from 0 to 40427
[  492.062388][T12623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.093356][T12739] F2FS-fs (loop2): invalid crc value
[  492.161856][T12739] F2FS-fs (loop2): Found nat_bits in checkpoint
[  492.388393][T12739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  492.642906][T12662] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.732674][T12646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.947933][T12662] 8021q: adding VLAN 0 to HW filter on device team0
[  493.058450][  T785] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.065696][  T785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.150876][T12646] veth0_vlan: entered promiscuous mode
[  493.179186][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.186501][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.211922][T12646] veth1_vlan: entered promiscuous mode
[  493.332243][T12662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  493.440919][T12623] veth0_vlan: entered promiscuous mode
[  493.467163][T12646] veth0_macvtap: entered promiscuous mode
[  493.492998][T12623] veth1_vlan: entered promiscuous mode
[  493.539277][T12646] veth1_macvtap: entered promiscuous mode
[  493.624391][T12746] loop3: detected capacity change from 0 to 40427
[  493.632026][T12623] veth0_macvtap: entered promiscuous mode
[  493.646218][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.660230][T12746] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  493.668035][T12746] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  493.676838][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.687673][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.698712][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.719033][T12646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.732009][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.743639][T12746] F2FS-fs (loop3): Found nat_bits in checkpoint
[  493.770714][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.795267][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.809292][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.827708][T12646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  493.850397][T12623] veth1_macvtap: entered promiscuous mode
[  493.878526][T12746] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  493.881955][T12646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.895058][T12746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  493.897902][T12646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.922555][T12646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.943547][T12646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.972715][T12475] syz-executor.3: attempt to access beyond end of device
[  493.972715][T12475] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  493.987675][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.994123][T12475] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  494.008996][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.034177][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.063954][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.073814][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.084419][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.096202][T12623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.107529][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.121491][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.144044][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.163947][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.173820][T12623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.194649][T12623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.215653][T12623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.237905][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.292675][T12623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.314040][T12623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.322807][T12623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.331751][T12623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.511719][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.538421][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.618948][T12662] veth0_vlan: entered promiscuous mode
[  494.673125][T12662] veth1_vlan: entered promiscuous mode
[  494.683601][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.707590][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.740790][T12770] loop2: detected capacity change from 0 to 32768
[  494.790869][T12770] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  494.819137][T12662] veth0_macvtap: entered promiscuous mode
[  494.845929][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.853226][T12662] veth1_macvtap: entered promiscuous mode
[  494.853765][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.899695][ T6961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.911917][ T6961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.988254][T12787] random: crng reseeded on system resumption
[  495.465800][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.852606][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.862537][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.873065][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.902769][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.928196][T12770] XFS (loop2): Ending clean mount
[  495.936420][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.962995][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.990819][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.043143][T12662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.044111][T12440] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  496.120982][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.140924][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.162046][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.173001][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.202727][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.236976][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.260409][T12798] loop0: detected capacity change from 0 to 512
[  496.275988][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.319215][T12798] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  496.358033][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.372450][T12798] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117)
[  496.378682][T12662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.456902][T12798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.641693][T12804] hub 9-0:1.0: USB hub found
[  496.647669][T12804] hub 9-0:1.0: 8 ports detected
[  496.841136][T12662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.046887][T12662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.055941][T12662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.064782][T12662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.182923][T12646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.441677][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.465439][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.547341][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.568087][T12817] vivid-000: disconnect
[  497.568200][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.589782][T12817] vivid-000: reconnect
[  497.969107][T12831] loop2: detected capacity change from 0 to 128
[  499.024558][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  499.072768][T12844] tipc: Started in network mode
[  499.100126][T12844] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  499.101674][T12844] tipc: Enabled bearer <eth:macvlan0>, priority 0
[  499.634510][T12868] loop4: detected capacity change from 0 to 2048
[  499.758073][T12868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  499.927106][   T29] audit: type=1800 audit(1717812520.752:1479): pid=12868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1367 res=0 errno=0
[  500.044256][T12821] loop3: detected capacity change from 0 to 32768
[  500.232993][ T5151] tipc: Node number set to 10398378
[  500.265804][T12821] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  500.373773][T12884] loop4: detected capacity change from 0 to 64
[  500.450466][T12821] XFS (loop3): Ending clean mount
[  500.560222][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  500.623202][T12894] tipc: Enabling of bearer <eth:macvlan0> rejected, already enabled
[  500.764268][T12475] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  500.926480][T12908] loop4: detected capacity change from 0 to 1024
[  500.963969][T12908] hfsplus: invalid btree flag
[  500.969455][T12908] hfsplus: failed to load attributes file
[  501.353062][T12920] loop3: detected capacity change from 0 to 256
[  501.425747][T12920] exfat: Deprecated parameter 'utf8'
[  501.429181][T12924] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  501.453576][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  501.482547][T12920] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  501.506314][T12923] tipc: Started in network mode
[  501.511237][T12923] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  501.564153][T12923] tipc: Enabled bearer <eth:macvlan0>, priority 0
[  501.639626][T12893] loop1: detected capacity change from 0 to 32768
[  501.707055][T12893] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  501.754446][T12893] XFS (loop1): Ending clean mount
[  501.772535][T12893] XFS (loop1): Quotacheck needed: Please wait.
[  501.878491][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  501.886058][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  501.983738][T12946] random: crng reseeded on system resumption
[  502.470447][T12893] XFS (loop1): Quotacheck: Done.
[  502.680144][ T5151] tipc: Node number set to 10398378
[  503.036918][T12662] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  503.192497][T12926] loop2: detected capacity change from 0 to 32768
[  503.519115][T12928] loop0: detected capacity change from 0 to 32768
[  503.587377][T12928] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  503.660852][T12973] loop1: detected capacity change from 0 to 256
[  503.670180][T12973] exfat: Deprecated parameter 'utf8'
[  503.701364][T12973] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  503.749443][T12928] XFS (loop0): Ending clean mount
[  503.881249][T12646] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  504.040489][T12951] loop4: detected capacity change from 0 to 32768
[  504.241850][T12994] random: crng reseeded on system resumption
[  505.152742][T12951] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  505.244333][T12951] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  505.345972][T12951] bcachefs (loop4): alloc_read... done
[  505.351553][T12951] bcachefs (loop4): stripes_read... done
[  505.366074][T12951] bcachefs (loop4): snapshots_read... done
[  505.399010][T12951] bcachefs (loop4): journal_replay... done
[  505.450866][T12951] bcachefs (loop4): resume_logged_ops... done
[  505.510985][T12951] bcachefs (loop4): going read-write
[  505.533816][T12951] bcachefs (loop4): done starting filesystem
[  505.769597][T12623] bcachefs (loop4): shutting down
[  505.792711][T12623] bcachefs (loop4): going read-only
[  505.827612][T13003] loop2: detected capacity change from 0 to 8192
[  505.834768][T12623] bcachefs (loop4): finished waiting for writes to stop
[  505.849993][T12623] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12
[  505.885356][T12623] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13
[  505.898510][T12623] bcachefs (loop4): shutdown complete, journal seq 14
[  505.906656][T12623] bcachefs (loop4): marking filesystem clean
[  505.973005][T12623] bcachefs (loop4): shutdown complete
[  506.188762][   T29] audit: type=1800 audit(1717812527.062:1480): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0
[  506.410153][T12997] loop1: detected capacity change from 0 to 40427
[  506.449557][T12997] F2FS-fs (loop1): invalid crc value
[  506.524105][T12997] F2FS-fs (loop1): Found nat_bits in checkpoint
[  506.572195][T13009] loop3: detected capacity change from 0 to 32768
[  506.709366][T12997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  506.789561][T12997] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=4f270224, run fsck to fix.
[  507.120932][T13023] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  507.427550][T13028] loop4: detected capacity change from 0 to 1024
[  507.458462][T13028] EXT4-fs: Ignoring removed orlov option
[  507.476141][T13028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  507.493395][T13028] EXT4-fs (loop4): Test dummy encryption mode enabled
[  507.524213][T13028] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  507.542549][T13028] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  507.584241][T13028] EXT4-fs (loop4): invalid journal inode
[  507.590294][T13028] EXT4-fs (loop4): can't get journal size
[  507.607644][T13028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  507.856898][T12623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.003426][T13050] Bluetooth: MGMT ver 1.22
[  508.018308][T13050] Bluetooth: hci3: invalid length 0, exp 2 for type 10
[  508.194097][   T53] Bluetooth: hci0: command tx timeout
[  508.826724][T13040] loop1: detected capacity change from 0 to 32768
[  508.828683][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  508.843726][T13066] netlink: 'syz-executor.2': attribute type 19 has an invalid length.
[  508.884529][T13040] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  508.928254][T13047] loop3: detected capacity change from 0 to 32768
[  509.015626][T13040] XFS (loop1): Ending clean mount
[  509.028743][T13040] XFS (loop1): Quotacheck needed: Please wait.
[  509.117516][T13040] XFS (loop1): Quotacheck: Done.
[  509.228688][T12662] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  509.851045][T13097] Bluetooth: hci3: invalid length 0, exp 2 for type 10
[  509.949010][T13083] loop0: detected capacity change from 0 to 32768
[  510.005830][T13083] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  510.140276][T13083] XFS (loop0): Ending clean mount
[  510.262430][T13119] loop3: detected capacity change from 0 to 1024
[  510.325178][T13119] EXT4-fs: Ignoring removed nobh option
[  510.335841][   T45] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  510.381368][   T45] XFS (loop0): Unmount and run xfs_repair
[  510.390763][   T45] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  510.419532][   T45] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  510.453086][   T45] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  510.470361][   T45] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  510.499951][T13119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  510.502039][   T45] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  510.745811][   T45] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  510.755263][   T45] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  510.765096][   T45] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  510.774043][   T45] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  510.783406][T13083] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  510.822378][T13083] XFS (loop0): page discard on page ffffea0001750c00, inode 0x429, pos 0.
[  511.232980][T12475] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.286918][   T45] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  511.554727][   T45] XFS (loop0): Unmount and run xfs_repair
[  511.560511][   T45] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  511.568030][   T45] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  511.576983][   T45] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  511.586709][   T45] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  511.595737][   T45] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  511.604679][   T45] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  511.613553][   T45] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  511.628097][   T45] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  511.637212][   T45] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  511.646214][T13136] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  511.680620][T13136] XFS (loop0): page discard on page ffffea0001750c00, inode 0x429, pos 0.
[  511.708496][T13136] syz-executor.0 (13136) used greatest stack depth: 17712 bytes left
[  511.794759][ T5153] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  511.822206][ T5153] XFS (loop0): Unmount and run xfs_repair
[  511.842203][ T5153] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  511.863818][ T5153] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  511.894089][ T5153] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  511.924189][ T5153] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  511.951172][ T5153] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  511.979730][ T5153] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  512.012934][ T5153] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  512.034222][ T5153] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  512.043254][ T5153] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  512.082404][ T2895] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  512.101134][T13144] loop4: detected capacity change from 0 to 512
[  512.138931][T13144] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  512.147156][ T2895] XFS (loop0): page discard on page ffffea0001750c00, inode 0x429, pos 0.
[  512.201079][T12646] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  512.219857][T12646] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  512.363404][T13125] loop1: detected capacity change from 0 to 40427
[  512.415417][T13125] F2FS-fs (loop1): invalid crc value
[  512.484831][T13125] F2FS-fs (loop1): Found nat_bits in checkpoint
[  512.757541][T13125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  512.827499][T13125] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=4f270224, run fsck to fix.
[  513.063153][T13150] loop2: detected capacity change from 0 to 32768
[  513.145000][T13150] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  513.357083][T13150] XFS (loop2): Ending clean mount
[  513.406057][T13150] XFS (loop2): Quotacheck needed: Please wait.
[  513.556513][T13150] XFS (loop2): Quotacheck: Done.
[  513.610243][T12440] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  513.779775][T13199] loop1: detected capacity change from 0 to 512
[  513.819073][T13199] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  513.968242][T13203] 9pnet_fd: p9_fd_create_tcp (13203): problem binding to privport
[  514.102678][T13171] loop3: detected capacity change from 0 to 32768
[  514.121871][T13171] btrfs: Deprecated parameter 'usebackuproot'
[  514.130451][T13171] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  514.139399][T13173] loop0: detected capacity change from 0 to 32768
[  514.153132][T13171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13171)
[  514.193835][T13171] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.220150][T13171] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  514.238990][T13173] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  514.249445][T13171] BTRFS info (device loop3): using free-space-tree
[  514.300079][T13173] XFS (loop0): Ending clean mount
[  514.346317][T13173] XFS (loop0): Quotacheck needed: Please wait.
[  514.359324][   T29] audit: type=1326 audit(1717812535.232:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.434997][   T29] audit: type=1326 audit(1717812535.232:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.457177][    C0] vkms_vblank_simulate: vblank timer overrun
[  514.486610][   T29] audit: type=1326 audit(1717812535.262:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.509057][    C0] vkms_vblank_simulate: vblank timer overrun
[  514.535815][T13173] XFS (loop0): Quotacheck: Done.
[  514.537700][   T35] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  514.543039][   T29] audit: type=1326 audit(1717812535.262:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.626207][   T29] audit: type=1326 audit(1717812535.262:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.664140][T13171] BTRFS error (device loop3): failed to load root extent
[  514.672385][T13171] BTRFS warning (device loop3): try to load backup roots slot 1
[  514.694540][   T35] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  514.750897][   T29] audit: type=1326 audit(1717812535.262:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.779252][T13171] BTRFS warning (device loop3): couldn't read tree root
[  514.779254][   T29] audit: type=1326 audit(1717812535.262:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.779304][   T29] audit: type=1326 audit(1717812535.262:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd985a7a6e7 code=0x7ffc0000
[  514.787183][T13171] BTRFS warning (device loop3): try to load backup roots slot 2
[  514.832299][   T29] audit: type=1326 audit(1717812535.262:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd985a403b9 code=0x7ffc0000
[  514.832351][   T29] audit: type=1326 audit(1717812535.272:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd985a7cf69 code=0x7ffc0000
[  514.906767][   T51] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  514.920896][T13171] BTRFS warning (device loop3): couldn't read tree root
[  514.932239][T13171] BTRFS warning (device loop3): try to load backup roots slot 3
[  514.953019][T12646] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  515.059865][T13171] BTRFS info (device loop3): rebuilding free space tree
[  515.193693][T13171] BTRFS info (device loop3): checking UUID tree
[  515.220565][T13258] loop4: detected capacity change from 0 to 764
[  515.298006][T13258] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  515.634961][T12475] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  516.208914][T13292] loop3: detected capacity change from 0 to 2048
[  516.963117][T13293] loop1: detected capacity change from 0 to 1024
[  517.744084][T13292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  518.471548][T13293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.827688][T12662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.133076][T13307] loop0: detected capacity change from 0 to 512
[  519.569284][T13307] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  519.584497][T13307] EXT4-fs (loop0): mount failed
[  519.807882][T13320] loop3: detected capacity change from 0 to 512
[  519.892891][T13320] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  519.963941][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  520.287757][T13335] loop0: detected capacity change from 0 to 2048
[  520.382806][T13335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  520.484129][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  520.484150][   T29] audit: type=1800 audit(1717812541.322:1500): pid=13335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1367 res=0 errno=0
[  521.153732][T13336] loop3: detected capacity change from 0 to 1157
[  521.191237][T13336] ntfs3: Unknown parameter ':net'
[  521.359304][T13336] loop3: detected capacity change from 0 to 512
[  521.391036][T13336] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  521.485062][T13360] loop2: detected capacity change from 0 to 512
[  521.516585][T13360] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  521.717964][T13367] loop0: detected capacity change from 0 to 2048
[  523.057024][T13367] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  523.107726][   T29] audit: type=1800 audit(1717812543.952:1501): pid=13367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1367 res=0 errno=0
[  523.246157][T13368] syz-executor.4[13368] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  523.246306][T13368] syz-executor.4[13368] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  523.473400][ T5153] kernel write not supported for file bpf-prog (pid: 5153 comm: kworker/1:5)
[  523.804512][ T5153] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  524.141886][T13403] loop0: detected capacity change from 0 to 2048
[  524.268412][T13403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  524.474351][   T29] audit: type=1800 audit(1717812545.242:1502): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1367 res=0 errno=0
[  524.706010][ T5153] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  524.720669][ T5153] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  524.737351][ T5153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  524.764014][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  524.786513][ T5153] usb 2-1: SerialNumber: syz
[  524.814946][ T5153] usb 2-1: bad CDC descriptors
[  524.871098][T13407] loop4: detected capacity change from 0 to 1024
[  524.924568][T13411] binder: 13410:13411 ioctl c0306201 200003c0 returned -22
[  524.938558][T13407] hfsplus: catalog name length corrupted
[  525.386387][T13418] syz-executor.3[13418] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  525.386557][T13418] syz-executor.3[13418] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  525.434758][T13424] loop1: detected capacity change from 0 to 2048
[  525.572645][T13424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.729249][T13439] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929
[  525.764138][T13439] binder: 13438:13439 ioctl 40046207 0 returned -1
[  525.786983][T13420] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  525.791970][T13437] loop2: detected capacity change from 0 to 4096
[  525.836619][T13437] NILFS (loop2): invalid segment: Checksum error in segment payload
[  525.851006][T13437] NILFS (loop2): trying rollback from an earlier position
[  525.888646][T13437] NILFS (loop2): recovery complete
[  525.905297][T13441] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  526.130669][T13426] loop4: detected capacity change from 0 to 32768
[  526.140388][T13426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13426)
[  526.171473][T13426] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  526.210158][T13426] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  526.239457][T13426] BTRFS info (device loop4): using free-space-tree
[  526.431272][T13461] loop2: detected capacity change from 0 to 2048
[  527.898811][T13461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  527.931949][   T29] audit: type=1800 audit(1717812548.802:1503): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  527.980151][    T8] usb 2-1: USB disconnect, device number 18
[  528.069684][T12623] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  528.134918][T12662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.820634][   T29] audit: type=1326 audit(1717812549.692:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13488 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d69c7cf69 code=0x0
[  528.885168][T13492] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  528.924516][T13482] syz-executor.2[13482] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  528.924812][T13482] syz-executor.2[13482] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  529.230219][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  529.325863][T13509] 9pnet: p9_errstr2errno: server reported unknown error œ
[  529.564158][T13497] loop3: detected capacity change from 0 to 32768
[  529.598055][T13497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13497)
[  529.658954][T13497] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  529.718405][T13518] tun0: tun_chr_ioctl cmd 1074812118
[  529.737205][T13497] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  529.758614][T13497] BTRFS info (device loop3): using free-space-tree
[  529.842299][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  529.926839][    C1] 
[  529.929199][    C1] ================================
[  529.934291][    C1] WARNING: inconsistent lock state
[  529.939378][    C1] 6.10.0-rc2-syzkaller-00269-g96e09b8f8166 #0 Not tainted
[  529.946501][    C1] --------------------------------
[  529.951591][    C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[  529.958416][    C1] syz-executor.0/13541 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  529.965165][    C1] ffff8880b9538828 (lock#11){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630
[  529.975602][    C1] {HARDIRQ-ON-W} state was registered at:
[  529.981300][    C1]   lock_acquire+0x1ed/0x550
[  529.985886][    C1]   __mmap_lock_do_trace_acquire_returned+0xa8/0x630
[  529.992552][    C1]   lock_mm_and_find_vma+0x213/0x2f0
[  529.997838][    C1]   exc_page_fault+0x1bf/0x8c0
[  530.002589][    C1]   asm_exc_page_fault+0x26/0x30
[  530.007512][    C1]   __put_user_8+0x11/0x20
[  530.011918][    C1]   __rseq_handle_notify_resume+0x666/0x14e0
[  530.017884][    C1]   syscall_exit_to_user_mode+0x114/0x370
[  530.023636][    C1]   do_syscall_64+0x100/0x230
[  530.028309][    C1]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.034278][    C1] irq event stamp: 30
[  530.038237][    C1] hardirqs last  enabled at (29): [<ffffffff8b889e6f>] _raw_spin_unlock_irqrestore+0x8f/0x140
[  530.048461][    C1] hardirqs last disabled at (30): [<ffffffff8b7db26e>] sysvec_call_function_single+0xe/0xc0
[  530.058533][    C1] softirqs last  enabled at (0): [<ffffffff81577d83>] copy_process+0xa03/0x3dc0
[  530.067676][    C1] softirqs last disabled at (0): [<0000000000000000>] 0x0
[  530.074777][    C1] 
[  530.074777][    C1] other info that might help us debug this:
[  530.082987][    C1]  Possible unsafe locking scenario:
[  530.082987][    C1] 
[  530.090421][    C1]        CPU0
[  530.093683][    C1]        ----
[  530.096943][    C1]   lock(lock#11);
[  530.100661][    C1]   <Interrupt>
[  530.104094][    C1]     lock(lock#11);
[  530.107975][    C1] 
[  530.107975][    C1]  *** DEADLOCK ***
[  530.107975][    C1] 
[  530.116101][    C1] 3 locks held by syz-executor.0/13541:
[  530.121627][    C1]  #0: ffffffff8e9c2210 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x208/0x880
[  530.131453][    C1]  #1: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540
[  530.140839][    C1]  #2: ffff88807c71ea18 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x237/0x9d0
[  530.151642][    C1] 
[  530.151642][    C1] stack backtrace:
[  530.157515][    C1] CPU: 1 PID: 13541 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00269-g96e09b8f8166 #0
[  530.167993][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  530.178064][    C1] Call Trace:
[  530.181335][    C1]  <IRQ>
[  530.184170][    C1]  dump_stack_lvl+0x241/0x360
[  530.188851][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.194044][    C1]  ? print_usage_bug+0x61a/0x8a0
[  530.198978][    C1]  ? is_bpf_text_address+0x285/0x2a0
[  530.204310][    C1]  ? is_bpf_text_address+0x26/0x2a0
[  530.209515][    C1]  valid_state+0x13a/0x1c0
[  530.213932][    C1]  mark_lock_irq+0xbb/0xc20
[  530.218435][    C1]  ? arch_stack_walk+0x16d/0x1b0
[  530.223553][    C1]  ? __pfx_mark_lock_irq+0x10/0x10
[  530.228667][    C1]  ? stack_trace_save+0x118/0x1d0
[  530.233690][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  530.239051][    C1]  ? validate_chain+0x11e/0x5900
[  530.243979][    C1]  ? unwind_next_frame+0x1b90/0x2a00
[  530.249256][    C1]  ? lockdep_lock+0x123/0x2b0
[  530.254006][    C1]  ? save_trace+0x5a/0xb40
[  530.258438][    C1]  mark_lock+0x223/0x350
[  530.262671][    C1]  __lock_acquire+0xb8e/0x1fd0
[  530.267428][    C1]  lock_acquire+0x1ed/0x550
[  530.271925][    C1]  ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630
[  530.278867][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  530.283990][    C1]  ? mark_lock+0x9a/0x350
[  530.288365][    C1]  ? down_read_trylock+0x24f/0x3c0
[  530.293473][    C1]  ? stack_map_get_build_id_offset+0x237/0x9d0
[  530.299622][    C1]  ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630
[  530.306487][    C1]  __mmap_lock_do_trace_acquire_returned+0xa8/0x630
[  530.313174][    C1]  ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630
[  530.319931][    C1]  stack_map_get_build_id_offset+0x9af/0x9d0
[  530.325988][    C1]  ? __pfx_stack_map_get_build_id_offset+0x10/0x10
[  530.332592][    C1]  __bpf_get_stack+0x4ad/0x5a0
[  530.337347][    C1]  ? __pfx___bpf_get_stack+0x10/0x10
[  530.342621][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  530.347807][    C1]  bpf_get_stack_raw_tp+0x1a3/0x240
[  530.352997][    C1]  ? bpf_trace_run2+0x1fc/0x540
[  530.358101][    C1]  bpf_prog_e6cf5f9c69743609+0x42/0x46
[  530.363550][    C1]  bpf_trace_run2+0x47d/0x540
[  530.368219][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[  530.373409][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  530.379111][    C1]  ? __pfx_native_flush_tlb_one_user+0x10/0x10
[  530.385252][    C1]  ? irqtime_account_irq+0x18e/0x1e0
[  530.390534][    C1]  trace_tlb_flush+0x118/0x140
[  530.395290][    C1]  flush_tlb_func+0x4e7/0x630
[  530.399961][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  530.405146][    C1]  ? sched_clock_cpu+0x76/0x490
[  530.409993][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  530.415178][    C1]  __flush_smp_call_function_queue+0x3fc/0x1690
[  530.421408][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  530.426636][    C1]  __sysvec_call_function_single+0xb8/0x430
[  530.432515][    C1]  sysvec_call_function_single+0x9e/0xc0
[  530.438140][    C1]  </IRQ>
[  530.441055][    C1]  <TASK>
[  530.443980][    C1]  asm_sysvec_call_function_single+0x1a/0x20
[  530.449966][    C1] RIP: 0010:arch_stack_walk+0x1b/0x1b0
[  530.455424][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 68 49 89 cf 49 89 d4 <49> 89 f6 49 89 fd 65 48 8b 04 25 28 00 00 00 48 89 45 d0 e8 6d b6
[  530.475021][    C1] RSP: 0018:ffffc9000fbef700 EFLAGS: 00000286
[  530.481081][    C1] RAX: 0000000000000000 RBX: ffffc9000fbef7f0 RCX: 0000000000000000
[  530.489049][    C1] RDX: ffff88802bbe0000 RSI: ffffc9000fbef7e0 RDI: ffffffff8181dee0
[  530.497010][    C1] RBP: ffffc9000fbef790 R08: dffffc0000000000 R09: 0000000000000000
[  530.504968][    C1] R10: ffffc9000fbef880 R11: fffffbfff25ee4b8 R12: ffff88802bbe0000
[  530.512935][    C1] R13: dffffc0000000000 R14: ffffc9000fbef7e0 R15: 0000000000000000
[  530.520898][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  530.527051][    C1]  stack_trace_save+0x118/0x1d0
[  530.531889][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  530.537254][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  530.543218][    C1]  kasan_save_track+0x3f/0x80
[  530.547907][    C1]  ? tomoyo_realpath_from_path+0x5a9/0x5e0
[  530.553790][    C1]  kasan_save_free_info+0x40/0x50
[  530.558889][    C1]  poison_slab_object+0xe0/0x150
[  530.563820][    C1]  __kasan_slab_free+0x37/0x60
[  530.568578][    C1]  ? tomoyo_realpath_from_path+0x5a9/0x5e0
[  530.574378][    C1]  kfree+0x149/0x360
[  530.578283][    C1]  tomoyo_realpath_from_path+0x5a9/0x5e0
[  530.583974][    C1]  tomoyo_path_number_perm+0x23a/0x880
[  530.589458][    C1]  ? tomoyo_path_number_perm+0x208/0x880
[  530.595090][    C1]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  530.601071][    C1]  ? __fget_files+0x29/0x470
[  530.605754][    C1]  ? __fget_files+0x3f6/0x470
[  530.610446][    C1]  ? __fget_files+0x29/0x470
[  530.615232][    C1]  security_file_ioctl+0x75/0xb0
[  530.620181][    C1]  __se_sys_ioctl+0x47/0x170
[  530.624783][    C1]  do_syscall_64+0xf3/0x230
[  530.629307][    C1]  ? clear_bhb_loop+0x35/0x90
[  530.634065][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.640053][    C1] RIP: 0033:0x7f4d69c7cccb
[  530.644470][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  530.664078][    C1] RSP: 002b:00007f4d697ff0f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  530.672482][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d69c7cccb
[  530.680439][    C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d8
[  530.688504][    C1] RBP: 00007f4d69db3f80 R08: 0000000000000000 R09: 00007ffdac195ba7
[  530.696559][    C1] R10: 0000000000000008 R11: 0000000000000246 R12: ffffffffffffffb0
[  530.704543][    C1] R13: 000000000000000b R14: 00007ffdac195ac0 R15: 00007ffdac195ba8
[  530.712547][    C1]  </TASK>
[  530.752850][T13541] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
2024/06/08 02:09:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  530.926689][T13497] BTRFS error (device loop3): open_ctree failed