last executing test programs:

1m38.143905601s ago: executing program 4 (id=2209):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000740)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x11e, 0x0, 0x0, &(0x7f0000000100))

1m21.689009897s ago: executing program 4 (id=2209):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000740)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x11e, 0x0, 0x0, &(0x7f0000000100))

57.375259821s ago: executing program 4 (id=2209):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000740)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x11e, 0x0, 0x0, &(0x7f0000000100))

41.290178995s ago: executing program 4 (id=2209):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000740)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x11e, 0x0, 0x0, &(0x7f0000000100))

25.961228697s ago: executing program 4 (id=2209):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000740)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x11e, 0x0, 0x0, &(0x7f0000000100))

10.283539613s ago: executing program 4 (id=2209):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000740)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x11e, 0x0, 0x0, &(0x7f0000000100))

3.384200548s ago: executing program 1 (id=3090):
syz_mount_image$minix(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="7665b56bff7d13a2d819dd99d7b7fb44d89826e61bdd16b72b7b4b28466b2dd5276d640c15e37c725cc51cf9ccb08269fbbcf21642cf3700d39319aedab841312becd7508764407fc111e219d48aff23cec7bff40e31ce41ce552026be34aef66f44ef30690a7b52e1dd15b63c9d5de5b8fd41279c39eaa7c3660cdf0466414f5b966df46c5dd09f5d724a4d956293d161bf6a0aab3287558cfa91db1a051d07", @ANYRES64, @ANYRESOCT=0x0, @ANYRES16, @ANYRES8=0x0], 0x1, 0x1e5, &(0x7f0000000400)="$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")
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
lchown(&(0x7f0000000040)='./file0\x00', r1, r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0)
pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x0, 0x0)

3.024322383s ago: executing program 1 (id=3095):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

2.848949063s ago: executing program 1 (id=3097):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x2)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1})
fcntl$notify(r0, 0x402, 0x180000008)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ftruncate(r2, 0xf2d)

2.61620991s ago: executing program 1 (id=3101):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mknodat$null(r0, &(0x7f0000000180)='./bus\x00', 0x0, 0x103)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

2.615733122s ago: executing program 2 (id=3102):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)

2.404662481s ago: executing program 3 (id=3104):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

2.302190791s ago: executing program 0 (id=3105):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0)

2.192280788s ago: executing program 2 (id=3106):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000280)={0x11, 0x11, r2, 0x1, 0x1}, 0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @dev}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)

2.015496057s ago: executing program 0 (id=3107):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "5800ebffffffffffffff00", '\x00', "006e34e400"}, 0x28)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

1.840263715s ago: executing program 2 (id=3108):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000022c0)=""/21, 0x15}, {&(0x7f0000002300)=""/228, 0xe4}], 0x2}}], 0x1, 0x0, 0x0)

1.643792195s ago: executing program 2 (id=3109):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/30, 0x1e}}], 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.642996246s ago: executing program 3 (id=3110):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000040500000000c40000008500000023000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x4030582a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10)
write$cgroup_int(r0, &(0x7f0000000100), 0x1001)

1.567380401s ago: executing program 0 (id=3111):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x771, 0x0, 0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
close_range(r4, 0xffffffffffffffff, 0x0)

1.505432166s ago: executing program 2 (id=3112):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00')
r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
sendfile(r1, r1, 0x0, 0x800000009)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0389424, &(0x7f00000000c0)={"00d0500000000000e51511194d2e45df"})

1.440265076s ago: executing program 3 (id=3113):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x300)

1.361547474s ago: executing program 1 (id=3114):
r0 = socket$l2tp(0x2, 0x2, 0x73)
close(r0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x4000300)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000021c0)={0x30000019})

1.331547451s ago: executing program 0 (id=3115):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, &(0x7f0000000d00)=ANY=[], 0x218}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

944.29684ms ago: executing program 0 (id=3116):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x208080, &(0x7f0000000600)={[{@orlov}, {@sb={'sb', 0x3d, 0xffffffffffffff64}}, {@sb={'sb', 0x3d, 0x7f}}], [{@uid_gt}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '+%[*)(i-\xcd\xcbY\xc3\xa2m\x1f\x80\xbd4\xef\xeb\x19&\xa0\x06\x87\xdbV\xe4qo\xa5\xa4\xcd\aQ-\x10\xfd\xcaK\x9d\nif\x8d\xbb\xd9j\x04\x93\xe1[\xbd\xf5\xe97\xcc\xe6lS\x88\xe0\xed\xfd\xc9\xfb\x0e\xbfA\x95X\x82Dy\n\xa8KZ\xe3g\x1e\xea\xe2\xb5m\t\xa9\x00'/98}}]}, 0x1, 0x5a9, &(0x7f00000014c0)="$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")
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}})
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

596.690712ms ago: executing program 3 (id=3117):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file1', [], 0xa, "b26c45b0ba9f93e1b884d7ee0fa7c5c76f1c3fb93b37678feb7121427c1f78066c84fa85fce5d562792cbf969492b749b81ec1da8d58"}, 0x41)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r2 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r2, 0x10d, 0x8f, 0x0, &(0x7f0000000040))

402.757394ms ago: executing program 2 (id=3118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@ifindex, 0xffffffffffffffff, 0x1a, 0x0, 0xffffffffffffffff, @link_id, r2}, 0x20)

396.851666ms ago: executing program 1 (id=3128):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f0000000800)=[{&(0x7f0000000000)="8900002cba1800"/17, 0x11}, {&(0x7f00000005c0)="c2", 0x1}], 0x2)

395.587955ms ago: executing program 3 (id=3119):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setresuid(0x0, r0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback, {[@ssrr={0x89, 0x17, 0x0, [@dev, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x17, 0x0, [@multicast2, @local, @broadcast, @multicast1, @local]}, @ssrr={0x89, 0xf, 0x0, [@loopback, @loopback, @dev]}]}}}}})

294.565µs ago: executing program 0 (id=3120):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000003c0)='./file1\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)

0s ago: executing program 3 (id=3121):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0)
read$char_usb(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

atman_adv: batadv0: Removing interface: batadv_slave_0
[  481.993268][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.000897][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.015595][T13576] loop3: detected capacity change from 0 to 2048
[  482.022647][T13576] udf: Bad value for 'lastblock'
[  482.071115][ T3000] veth1_macvtap: left promiscuous mode
[  482.088874][T13582] loop0: detected capacity change from 0 to 1024
[  482.091942][ T3000] veth0_macvtap: left promiscuous mode
[  482.105488][ T3000] veth1_vlan: left promiscuous mode
[  482.110987][ T3000] veth0_vlan: left promiscuous mode
[  482.262935][T13114] hfsplus: b-tree write err: -5, ino 3
[  482.919751][T13586] loop2: detected capacity change from 0 to 32768
[  483.096029][ T5232] Bluetooth: hci0: command tx timeout
[  483.400646][ T3000] team0 (unregistering): Port device team_slave_1 removed
[  483.533104][ T3000] team0 (unregistering): Port device team_slave_0 removed
[  483.801531][T13605] loop2: detected capacity change from 0 to 32768
[  483.886758][T13605] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  483.944231][T13605] XFS (loop2): Ending clean mount
[  483.975491][ T5232] Bluetooth: hci2: command tx timeout
[  484.110855][T12845] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  484.708499][T13522] chnl_net:caif_netlink_parms(): no params data found
[  484.769203][T13628] input: syz0 as /devices/virtual/input/input23
[  484.858978][T13508] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.866681][T13508] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.874029][T13508] bridge_slave_0: entered allmulticast mode
[  484.881416][T13508] bridge_slave_0: entered promiscuous mode
[  484.889821][T13508] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.897256][T13508] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.904491][T13508] bridge_slave_1: entered allmulticast mode
[  484.911477][T13508] bridge_slave_1: entered promiscuous mode
[  485.042101][T13508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.108116][T13508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.195150][ T5232] Bluetooth: hci0: command tx timeout
[  485.197717][T13642] loop3: detected capacity change from 0 to 64
[  485.241279][T13522] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.248974][T13522] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.262345][T13522] bridge_slave_0: entered allmulticast mode
[  485.271301][T13522] bridge_slave_0: entered promiscuous mode
[  485.291652][T13508] team0: Port device team_slave_0 added
[  485.301377][T13644] loop0: detected capacity change from 0 to 1024
[  485.326941][T13522] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.335567][T13522] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.343276][T13522] bridge_slave_1: entered allmulticast mode
[  485.350658][T13522] bridge_slave_1: entered promiscuous mode
[  485.381586][T13508] team0: Port device team_slave_1 added
[  485.444126][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.456879][T13508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.474533][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.501456][T13508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.525706][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.555809][T13508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.562804][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.608932][ T3026] hfsplus: b-tree write err: -5, ino 4
[  485.620963][T13508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.726217][T13522] team0: Port device team_slave_0 added
[  485.792475][T13522] team0: Port device team_slave_1 added
[  486.003745][ T3000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.064395][ T5232] Bluetooth: hci2: command tx timeout
[  486.100295][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.121532][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.147928][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.180249][T13508] hsr_slave_0: entered promiscuous mode
[  486.187872][T13508] hsr_slave_1: entered promiscuous mode
[  486.214450][T13508] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  486.222333][T13508] Cannot create hsr debugfs directory
[  486.236088][T13660] misc userio: The device must be registered before sending interrupts
[  486.254980][  T940] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  486.311088][ T3000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.346895][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.353892][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.382271][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.436564][  T940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  486.472703][  T940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  486.472969][T13668] loop3: detected capacity change from 0 to 128
[  486.482865][  T940] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  486.508363][T13670] loop0: detected capacity change from 0 to 512
[  486.518927][  T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  486.529305][  T940] usb 3-1: SerialNumber: syz
[  486.557192][ T3000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.587128][T13670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  486.618934][T13670] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  486.634289][T13522] hsr_slave_0: entered promiscuous mode
[  486.645921][T13522] hsr_slave_1: entered promiscuous mode
[  486.671555][   T29] audit: type=1800 audit(1858531806.060:97): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2685" name="bus" dev="loop0" ino=18 res=0 errno=0
[  486.705835][T13522] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  486.713445][T13522] Cannot create hsr debugfs directory
[  486.719611][   T29] audit: type=1800 audit(1858531806.060:98): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2685" name="bus" dev="loop0" ino=18 res=0 errno=0
[  486.759651][  T940] usb 3-1: 0:2 : does not exist
[  486.815168][  T940] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  486.846851][ T3000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.889958][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  486.904415][  T940] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  486.925172][  T940] usb 3-1: USB disconnect, device number 23
[  487.255437][ T5232] Bluetooth: hci0: command tx timeout
[  487.464754][ T3000] bridge_slave_1: left allmulticast mode
[  487.471105][ T3000] bridge_slave_1: left promiscuous mode
[  487.477447][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.487848][ T3000] bridge_slave_0: left allmulticast mode
[  487.493517][ T3000] bridge_slave_0: left promiscuous mode
[  487.500120][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.594717][   T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  487.655363][    T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  487.788671][   T25] usb 1-1: Using ep0 maxpacket: 8
[  487.798142][   T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  487.825919][   T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  487.841911][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  487.856812][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.871624][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  487.877971][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.883151][   T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  487.907955][    T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.00
[  487.924739][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.926096][   T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  487.947244][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.959623][    T8] usb 3-1: config 0 descriptor??
[  488.136495][ T5232] Bluetooth: hci2: command tx timeout
[  488.184245][   T25] usb 1-1: GET_CAPABILITIES returned 0
[  488.190496][   T25] usbtmc 1-1:16.0: can't read capabilities
[  488.209686][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  488.220941][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  488.231856][ T3000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.234246][    T8] usb 3-1: USB disconnect, device number 24
[  488.256425][ T3000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.270024][ T3000] bond0 (unregistering): Released all slaves
[  488.281986][T13691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.291612][T13691] batadv_slave_0: entered allmulticast mode
[  488.879730][ T3000] hsr_slave_0: left promiscuous mode
[  488.893866][ T3000] hsr_slave_1: left promiscuous mode
[  488.920274][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.937421][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.956555][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.964012][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.030093][ T3000] veth1_macvtap: left promiscuous mode
[  489.043924][ T3000] veth0_macvtap: left promiscuous mode
[  489.053168][ T3000] veth1_vlan: left promiscuous mode
[  489.067600][ T3000] veth0_vlan: left promiscuous mode
[  489.186647][   T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  489.292681][T13713] loop3: detected capacity change from 0 to 256
[  489.405143][   T25] usb 3-1: Using ep0 maxpacket: 16
[  489.412197][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.428531][   T25] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  489.438042][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.446133][   T25] usb 3-1: Product: syz
[  489.450319][   T25] usb 3-1: Manufacturer: syz
[  489.456467][   T25] usb 3-1: SerialNumber: syz
[  489.463267][   T25] usb 3-1: config 0 descriptor??
[  489.692105][   T25] usb 3-1: Not enough endpoints found in device, aborting!
[  489.892007][   T25] usb 3-1: USB disconnect, device number 25
[  490.022035][T13715] loop3: detected capacity change from 0 to 32768
[  490.236471][T13717] loop3: detected capacity change from 0 to 2048
[  490.330296][    T8] usb 1-1: USB disconnect, device number 13
[  490.406378][ T3000] team0 (unregistering): Port device team_slave_1 removed
[  490.562733][ T3000] team0 (unregistering): Port device team_slave_0 removed
[  491.701814][T13522] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  491.731200][T13522] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  491.763309][T13522] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  491.802136][T13522] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  491.951552][ T3000] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.119334][ T3000] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.222132][T12844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  492.235204][T12844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  492.265195][T12844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  492.281982][T12844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  492.302971][T12844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  492.313551][T12844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  492.379081][T13508] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  492.417803][T13741] loop2: detected capacity change from 0 to 512
[  492.471134][ T3000] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.517343][T13508] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  492.546207][T13741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.556308][T13508] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  492.565952][T13741] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.605136][T13508] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  492.727675][T12845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.793815][ T3000] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.959364][T13755] loop3: detected capacity change from 0 to 256
[  493.017485][T13522] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.097024][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'.
[  493.135729][T13508] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.162542][T13522] 8021q: adding VLAN 0 to HW filter on device team0
[  493.181240][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.192610][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.288596][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.295785][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.335565][T13737] chnl_net:caif_netlink_parms(): no params data found
[  493.354505][T13508] 8021q: adding VLAN 0 to HW filter on device team0
[  493.420310][T13769] loop3: detected capacity change from 0 to 128
[  493.428793][T13769] vfat: Unknown parameter '#! 
[  493.428793][T13769] '
[  493.445557][ T3000] bridge_slave_1: left allmulticast mode
[  493.451251][ T3000] bridge_slave_1: left promiscuous mode
[  493.464394][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.483523][ T3000] bridge_slave_0: left allmulticast mode
[  493.490749][ T3000] bridge_slave_0: left promiscuous mode
[  493.497801][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.786289][   T29] audit: type=1326 audit(1858531813.180:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  493.820994][   T29] audit: type=1326 audit(1858531813.180:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  493.863506][   T29] audit: type=1326 audit(1858531813.210:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  493.889333][   T29] audit: type=1326 audit(1858531813.210:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  493.926715][   T29] audit: type=1326 audit(1858531813.210:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  493.951190][   T29] audit: type=1326 audit(1858531813.210:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  493.984950][   T29] audit: type=1326 audit(1858531813.210:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  494.021452][   T29] audit: type=1326 audit(1858531813.210:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  494.074399][   T29] audit: type=1326 audit(1858531813.210:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  494.102342][   T29] audit: type=1326 audit(1858531813.450:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df5f79e79 code=0x7ffc0000
[  494.295409][T13779] loop3: detected capacity change from 0 to 128
[  494.386557][ T5232] Bluetooth: hci3: command tx timeout
[  494.674594][ T3000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.683357][   T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  494.710599][ T3000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.727955][ T3000] bond0 (unregistering): Released all slaves
[  494.800601][T13116] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.807930][T13116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  494.833601][T13783] loop3: detected capacity change from 0 to 32768
[  494.904609][   T25] usb 3-1: Using ep0 maxpacket: 32
[  494.920962][T13116] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.928216][T13116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.940030][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.952694][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  494.961937][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.972156][   T25] usb 3-1: config 0 descriptor??
[  494.979479][   T25] hub 3-1:0.0: USB hub found
[  495.104100][T13737] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.115368][T13737] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.124428][T13737] bridge_slave_0: entered allmulticast mode
[  495.132319][T13737] bridge_slave_0: entered promiscuous mode
[  495.142585][T13737] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.150370][T13737] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.159372][T13737] bridge_slave_1: entered allmulticast mode
[  495.166894][T13737] bridge_slave_1: entered promiscuous mode
[  495.189496][   T25] hub 3-1:0.0: config failed, hub has too many ports! (err -19)
[  495.247871][T13737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.307833][T13737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.370697][T13737] team0: Port device team_slave_0 added
[  495.417463][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  495.449620][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  495.476205][T13737] team0: Port device team_slave_1 added
[  495.519860][   T25] usb 3-1: USB disconnect, device number 26
[  495.630485][ T3000] hsr_slave_0: left promiscuous mode
[  495.645841][ T3000] hsr_slave_1: left promiscuous mode
[  495.652094][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.660628][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.669519][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.677343][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  495.701465][ T3000] veth1_macvtap: left promiscuous mode
[  495.707112][ T3000] veth0_macvtap: left promiscuous mode
[  495.713419][ T3000] veth1_vlan: left promiscuous mode
[  495.718841][ T3000] veth0_vlan: left promiscuous mode
[  496.143848][T13800] loop3: detected capacity change from 0 to 128
[  496.459313][ T5232] Bluetooth: hci3: command tx timeout
[  496.481452][ T3000] team0 (unregistering): Port device team_slave_1 removed
[  496.505007][   T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  496.566654][ T3000] team0 (unregistering): Port device team_slave_0 removed
[  496.721600][   T25] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[  496.730443][   T25] usb 4-1: config 0 has no interface number 1
[  496.745007][   T25] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  496.755153][   T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  496.769582][   T25] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  496.778885][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  496.792445][   T25] usb 4-1: SerialNumber: syz
[  496.799374][   T25] usb 4-1: config 0 descriptor??
[  496.808395][   T25] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  496.815898][   T25] usb 4-1: No valid video chain found.
[  497.021899][  T940] usb 4-1: USB disconnect, device number 23
[  497.405836][T13737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.414268][T13737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.443484][T13737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.483484][T13737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.492208][T13737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.524377][T13737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.653316][T13737] hsr_slave_0: entered promiscuous mode
[  497.683175][T13737] hsr_slave_1: entered promiscuous mode
[  497.709903][T13737] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  497.728912][T13737] Cannot create hsr debugfs directory
[  497.743722][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.028469][T13508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.076596][ T3000] IPVS: stop unused estimator thread 0...
[  498.235682][T13508] veth0_vlan: entered promiscuous mode
[  498.346779][T13508] veth1_vlan: entered promiscuous mode
[  498.462942][T13825] loop2: detected capacity change from 0 to 4096
[  498.493649][T13508] veth0_macvtap: entered promiscuous mode
[  498.533370][T13522] veth0_vlan: entered promiscuous mode
[  498.540881][ T5232] Bluetooth: hci3: command tx timeout
[  498.620245][T13508] veth1_macvtap: entered promiscuous mode
[  498.647204][T13522] veth1_vlan: entered promiscuous mode
[  498.672026][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.696899][T13825] ntfs3: loop2: failed to convert "0000" to iso8859-1
[  498.714705][T13821] loop3: detected capacity change from 0 to 32768
[  498.719187][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.735044][T13825] ntfs3: loop2: failed to convert name for inode 1e.
[  498.750716][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.763034][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.773610][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.788677][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.798862][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.809541][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.823791][T12845] ntfs3: loop2: failed to convert "0000" to iso8859-1
[  498.835707][T12845] ntfs3: loop2: failed to convert name for inode 1e.
[  498.844589][T13508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.946929][T13522] veth0_macvtap: entered promiscuous mode
[  498.953801][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.976420][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.994722][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.005596][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.023934][T13827] loop3: detected capacity change from 0 to 128
[  499.028236][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.050459][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.063663][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.079692][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.104018][T13508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.116949][T13508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.157471][T13508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.246710][T13508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.275624][T13508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.297405][T13508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.316584][T13508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.342313][T13522] veth1_macvtap: entered promiscuous mode
[  499.624421][T13116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.813529][T13116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.865788][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.885230][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.905717][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.917712][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.927800][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.939745][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.940750][T12844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  499.949972][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.971286][T12844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  499.974380][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.988789][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.990071][T12844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  499.999301][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.000983][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.026234][T12844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  500.036291][T12844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  500.037676][T13830] netlink: 'syz.3.2744': attribute type 5 has an invalid length.
[  500.056069][T12844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  500.127810][T13116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.149090][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.159647][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.169788][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.181015][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.190982][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.201451][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.211421][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.231324][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.243458][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.264058][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.273970][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.285482][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.306148][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.316280][T13737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  500.402033][T13116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.437423][T13522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.446867][T13522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.455942][T13522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.472382][T13522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.495319][T13737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  500.523246][T13737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  500.596440][T13737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  500.617637][T12844] Bluetooth: hci3: command tx timeout
[  500.631499][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.644945][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.797645][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.821980][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.947787][ T2551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.983672][ T2551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.136597][ T1828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.167551][ T1828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.266849][T13839] loop3: detected capacity change from 0 to 32768
[  501.328385][T13116] bridge_slave_1: left allmulticast mode
[  501.338749][T13116] bridge_slave_1: left promiscuous mode
[  501.377482][T13116] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.406115][T13116] bridge_slave_0: left allmulticast mode
[  501.411837][T13116] bridge_slave_0: left promiscuous mode
[  501.430568][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.526654][T13839] loop3: detected capacity change from 0 to 4096
[  501.699001][T13855] loop3: detected capacity change from 0 to 512
[  502.056614][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  502.063810][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  502.115157][T13116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.130907][T13116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.140189][T12844] Bluetooth: hci4: command tx timeout
[  502.176987][T13116] bond0 (unregistering): Released all slaves
[  502.512552][T13737] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.567309][T13737] 8021q: adding VLAN 0 to HW filter on device team0
[  502.602583][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.609775][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.630940][T13858] loop3: detected capacity change from 0 to 128
[  502.657085][T13832] chnl_net:caif_netlink_parms(): no params data found
[  502.680784][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.687951][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.124609][T13832] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.132469][T13832] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.139796][T13832] bridge_slave_0: entered allmulticast mode
[  503.147609][T13832] bridge_slave_0: entered promiscuous mode
[  503.158947][T13116] hsr_slave_0: left promiscuous mode
[  503.164727][T13116] hsr_slave_1: left promiscuous mode
[  503.183114][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.191593][T13116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.199662][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.207165][T13116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.228239][T13116] veth1_macvtap: left promiscuous mode
[  503.233786][T13116] veth0_macvtap: left promiscuous mode
[  503.243931][T13116] veth1_vlan: left promiscuous mode
[  503.249342][T13116] veth0_vlan: left promiscuous mode
[  503.728745][T13870] loop1: detected capacity change from 0 to 512
[  503.737155][T13870] EXT4-fs: Ignoring removed orlov option
[  503.761277][T13870] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  503.838855][T13870] EXT4-fs (loop1): 1 truncate cleaned up
[  503.854659][T13870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.914142][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  503.942008][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  503.977202][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  504.015454][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  504.050374][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  504.067179][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  504.110665][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.226121][ T5232] Bluetooth: hci4: command tx timeout
[  504.290748][T13116] team0 (unregistering): Port device team_slave_1 removed
[  504.361307][T13116] team0 (unregistering): Port device team_slave_0 removed
[  504.575117][   T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  504.795537][   T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=b7.1e
[  504.805059][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.815472][   T25] usb 2-1: config 0 descriptor??
[  504.822503][   T25] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected
[  504.831223][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  504.839084][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  504.860997][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  504.880734][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  504.889595][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  504.899761][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82
[  504.907550][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  504.916398][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  504.925319][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  504.934318][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3
[  504.948685][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  504.961220][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84
[  504.969283][   T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  504.978726][   T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  505.131450][T13832] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.146300][T13832] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.153539][T13832] bridge_slave_1: entered allmulticast mode
[  505.162434][T13832] bridge_slave_1: entered promiscuous mode
[  505.200688][T13872] hsr0: entered promiscuous mode
[  505.241684][ T5311] usb 2-1: USB disconnect, device number 21
[  505.270151][ T5311] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  505.298079][ T5311] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  505.298849][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.349678][ T5311] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  505.366986][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.394083][ T5311] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  505.409305][ T5311] keyspan 2-1:0.0: device disconnected
[  505.545021][T13832] team0: Port device team_slave_0 added
[  505.576394][T13832] team0: Port device team_slave_1 added
[  505.689040][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.696251][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.722634][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.740963][T13737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.755153][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.762945][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.805143][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.950374][T13832] hsr_slave_0: entered promiscuous mode
[  505.991246][T13832] hsr_slave_1: entered promiscuous mode
[  506.004250][T13832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  506.017215][T13832] Cannot create hsr debugfs directory
[  506.199911][T13116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.201867][T13898] loop1: detected capacity change from 0 to 256
[  506.217505][ T5232] Bluetooth: hci2: command tx timeout
[  506.235870][T13898] exfat: Deprecated parameter 'utf8'
[  506.241257][T13898] exfat: Deprecated parameter 'namecase'
[  506.256216][T13898] exfat: Deprecated parameter 'namecase'
[  506.263878][T13898] exfat: Deprecated parameter 'namecase'
[  506.295530][ T5232] Bluetooth: hci4: command tx timeout
[  506.327524][T13898] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  506.386634][T13116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.439470][T13900] loop3: detected capacity change from 0 to 4096
[  506.467930][T13876] chnl_net:caif_netlink_parms(): no params data found
[  506.476895][T13900] EXT4-fs: Ignoring removed oldalloc option
[  506.510635][T13737] veth0_vlan: entered promiscuous mode
[  506.524317][T13737] veth1_vlan: entered promiscuous mode
[  506.592062][T13116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.798317][T13116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.868010][T13737] veth0_macvtap: entered promiscuous mode
[  506.923041][T13737] veth1_macvtap: entered promiscuous mode
[  506.943220][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.972630][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.987248][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.009890][T13918] loop1: detected capacity change from 0 to 128
[  507.013168][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.027161][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.044920][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.072870][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.085215][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.095318][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.105978][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.126704][T13737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.180339][T13876] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.199968][T13876] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.215152][T13876] bridge_slave_0: entered allmulticast mode
[  507.222272][T13876] bridge_slave_0: entered promiscuous mode
[  507.252242][T13876] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.275069][T13876] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.282391][T13876] bridge_slave_1: entered allmulticast mode
[  507.295607][T13876] bridge_slave_1: entered promiscuous mode
[  507.307964][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.336093][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.346471][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.367615][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.394978][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.435069][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.455026][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.466786][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.484883][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.504862][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.524981][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.539507][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.561697][T13737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.662932][T13737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.685079][T13737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.694694][T13737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.715095][T13737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.777746][T13876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.790142][T13876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.997592][T13876] team0: Port device team_slave_0 added
[  508.034197][T13929] loop1: detected capacity change from 0 to 32768
[  508.049565][T13929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2775 (13929)
[  508.064251][T13116] bridge_slave_1: left allmulticast mode
[  508.073750][T13116] bridge_slave_1: left promiscuous mode
[  508.077056][T13929] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  508.082769][T13116] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.090055][T13929] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  508.109232][T13116] bridge_slave_0: left allmulticast mode
[  508.109540][T13929] BTRFS info (device loop1): using free-space-tree
[  508.115264][T13116] bridge_slave_0: left promiscuous mode
[  508.127927][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.317726][ T5232] Bluetooth: hci2: command tx timeout
[  508.375270][ T5232] Bluetooth: hci4: command tx timeout
[  508.469467][T13508] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  508.875264][T13116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.889717][T13116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.912027][T13116] bond0 (unregistering): Released all slaves
[  508.940682][T13876] team0: Port device team_slave_1 added
[  508.972086][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2776'.
[  509.109897][T13876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.118611][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.146723][T13876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.165789][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'.
[  509.336662][T13876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.354905][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.404995][T13876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.667441][T13832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  509.704586][T13832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  509.762326][T13876] hsr_slave_0: entered promiscuous mode
[  509.777680][T13876] hsr_slave_1: entered promiscuous mode
[  509.794963][T13876] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  509.802590][T13876] Cannot create hsr debugfs directory
[  509.820197][T13832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  509.838756][T13832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  509.891803][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.908121][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.027046][T13966] Bluetooth: MGMT ver 1.23
[  510.069543][T13968] loop1: detected capacity change from 0 to 256
[  510.098970][T13968] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  510.118004][T13116] hsr_slave_0: left promiscuous mode
[  510.125214][T13116] hsr_slave_1: left promiscuous mode
[  510.134547][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.144290][T13116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.154578][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.162231][T13116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.199207][T13116] veth1_macvtap: left promiscuous mode
[  510.204845][T13116] veth0_macvtap: left promiscuous mode
[  510.210552][T13116] veth1_vlan: left promiscuous mode
[  510.218835][T13116] veth0_vlan: left promiscuous mode
[  510.376670][ T5232] Bluetooth: hci2: command tx timeout
[  511.184997][   T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  511.398201][   T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  511.417613][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  511.436130][T13116] team0 (unregistering): Port device team_slave_1 removed
[  511.446321][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  511.473593][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  511.486826][   T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  511.496536][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.522089][   T25] usb 4-1: config 0 descriptor??
[  511.572245][T13116] team0 (unregistering): Port device team_slave_0 removed
[  511.947075][   T25] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  511.954513][   T25] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  511.963277][   T25] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  511.985083][   T25] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  512.229549][ T5280] usb 4-1: USB disconnect, device number 24
[  512.396101][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.406376][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.473988][ T5232] Bluetooth: hci2: command tx timeout
[  512.634699][T13832] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.744386][T13832] 8021q: adding VLAN 0 to HW filter on device team0
[  512.773581][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.780769][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.874848][T13116] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.881975][T13116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.196895][T14004] loop3: detected capacity change from 0 to 64
[  513.301117][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.420606][T13832] veth0_vlan: entered promiscuous mode
[  513.442717][T14016] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  513.458178][T13832] veth1_vlan: entered promiscuous mode
[  513.560186][T13832] veth0_macvtap: entered promiscuous mode
[  513.586638][T13832] veth1_macvtap: entered promiscuous mode
[  513.597296][T13876] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  513.625232][T13876] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  513.644564][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.657509][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.667459][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.683012][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.693239][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.703885][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.713845][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.714925][   T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  513.738273][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.748657][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.759274][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.772205][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.780550][T13876] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  513.792209][T13876] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  513.805467][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.816234][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.826226][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.838208][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.848918][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.859458][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.870588][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.881957][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.891818][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.902704][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.912593][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.923326][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.934509][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.935287][   T25] usb 2-1: Using ep0 maxpacket: 8
[  513.951433][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  513.963047][   T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 37, using maximum allowed: 30
[  513.977111][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  513.991913][   T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  513.995005][T13832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.001780][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.020728][T13832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.020977][   T25] usb 2-1: config 0 descriptor??
[  514.031616][T13832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.052333][T13832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.192616][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.203302][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.250097][T14015] loop0: detected capacity change from 0 to 7
[  514.258382][T14015] Dev loop0: unable to read RDB block 7
[  514.265436][T14015]  loop0: AHDI p3 p4
[  514.269555][T14015] loop0: partition table partially beyond EOD, truncated
[  514.278044][T14015] loop0: p3 start 6514546 is beyond EOD, truncated
[  514.299095][ T1828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.308914][ T1828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.323482][   T25] usb 2-1: string descriptor 0 read error: -71
[  514.331058][T13876] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.347138][   T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  514.385440][   T25] usb 2-1: USB disconnect, device number 22
[  514.394853][T13876] 8021q: adding VLAN 0 to HW filter on device team0
[  514.413959][ T1828] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.421253][ T1828] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.471992][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.479190][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.643872][T14030] loop0: detected capacity change from 0 to 2048
[  514.692893][T14030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.755675][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  514.755696][   T29] audit: type=1800 audit(1858531834.150:115): pid=14030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2806" name="bus" dev="loop0" ino=18 res=0 errno=0
[  514.795812][T14039] loop3: detected capacity change from 0 to 512
[  514.830983][   T29] audit: type=1800 audit(1858531834.150:116): pid=14030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2806" name="bus" dev="loop0" ino=18 res=0 errno=0
[  514.845966][T13876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.008246][T14045] loop3: detected capacity change from 0 to 256
[  515.039491][T14045] exfat: Deprecated parameter 'namecase'
[  515.045621][T14045] exfat: Deprecated parameter 'utf8'
[  515.081094][T13737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.229945][T14054] loop1: detected capacity change from 0 to 512
[  515.260619][T14054] EXT4-fs: Ignoring removed bh option
[  515.313358][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2814'.
[  515.322730][T14054] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  515.418474][T14054] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2812: iget: bad extended attribute block 851968
[  515.434751][T13876] veth0_vlan: entered promiscuous mode
[  515.466979][T13876] veth1_vlan: entered promiscuous mode
[  515.480269][T14054] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2812: couldn't read orphan inode 15 (err -117)
[  515.499885][T14054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.551198][T13876] veth0_macvtap: entered promiscuous mode
[  515.594709][T13876] veth1_macvtap: entered promiscuous mode
[  515.633984][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.660891][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.681508][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.697249][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.706906][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.727522][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.752732][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.784111][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.805100][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.824652][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.852048][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.874947][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.893615][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.906586][T13876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.930289][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.942389][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.952596][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.963398][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.975402][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.988626][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.003866][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.024616][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.039090][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.050251][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.060914][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.071529][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.084929][T13876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.096538][T13876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.110608][T13876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.147297][T13876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.159193][T13876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.174554][T13876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.184822][T13876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.318380][T14087] loop3: detected capacity change from 0 to 512
[  516.365622][ T5280] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  516.431615][T13114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.465462][T13114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.517214][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2827'.
[  516.524159][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.547581][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.556461][ T5280] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  516.588735][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  516.614569][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  516.672557][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  516.708523][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  516.721082][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  516.750303][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  516.790292][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  516.835058][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  516.854023][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  516.863791][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  516.882681][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  516.903777][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  516.924755][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  516.934334][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  516.955888][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  516.963763][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  516.983257][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  516.995743][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  517.003698][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  517.026901][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  517.044682][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  517.063544][ T5280] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  517.082681][ T5280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  517.105746][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0
[  517.130078][ T5280] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  517.144921][ T5280] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  517.153389][ T5280] usb 3-1: Product: syz
[  517.166050][ T5280] usb 3-1: Manufacturer: syz
[  517.171010][ T5280] usb 3-1: SerialNumber: syz
[  517.182499][ T5280] usb 3-1: config 0 descriptor??
[  517.196437][ T5280] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  517.239083][   T29] audit: type=1326 audit(1858531836.630:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.1.2830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4779e79 code=0x0
[  517.628545][  T940] usb 3-1: USB disconnect, device number 27
[  517.645053][  T940] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  517.783150][T14109] loop0: detected capacity change from 0 to 2048
[  517.877369][T14110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  517.938298][T14101] loop3: detected capacity change from 0 to 32768
[  517.943171][   T29] audit: type=1800 audit(1858531837.330:118): pid=14109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2832" name="bus" dev="loop0" ino=18 res=0 errno=0
[  518.005252][T14109] loop0: detected capacity change from 2048 to 2025
[  518.043823][T14109] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=3): entry number 7168 already freed
[  518.094108][T13737] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  518.115287][T13737] syz-executor: attempt to access beyond end of device
[  518.115287][T13737] loop0: rw=395265, sector=2040, nr_sectors = 2 limit=2025
[  518.132232][T13737] Buffer I/O error on dev loop0, logical block 1020, lost sync page write
[  518.149193][T13737] NILFS (loop0): unable to write superblock: err=-5
[  518.170850][T13737] Remounting filesystem read-only
[  518.180708][T13737] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  518.195029][T13737] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  518.222584][T13737] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  518.823891][T14130] loop0: detected capacity change from 0 to 32768
[  518.831689][T14130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2841 (14130)
[  518.864984][T14130] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  518.900127][T14130] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  518.914780][T14130] BTRFS info (device loop0): using free-space-tree
[  518.970340][T13114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.128029][T13737] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  519.864631][T13114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.942483][T14158] loop2: detected capacity change from 0 to 64
[  520.168189][T12844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  520.184380][T12844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  520.194479][T13114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.220183][T12844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  520.244486][T12844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  520.252629][T12844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  520.260973][T12844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  520.491037][T13114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.772973][T14162] loop3: detected capacity change from 0 to 32768
[  520.920718][T14181] loop0: detected capacity change from 0 to 4096
[  520.934344][T14181] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  521.130421][   T29] audit: type=1800 audit(1858531840.490:119): pid=14181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2853" name="file1" dev="loop0" ino=29 res=0 errno=0
[  521.150878][T14192] loop2: detected capacity change from 0 to 1024
[  521.187936][T14165] chnl_net:caif_netlink_parms(): no params data found
[  521.201906][T14181] ntfs3: loop0: ino=1d, "file0" attr_set_size
[  521.241189][T13114] bridge_slave_1: left allmulticast mode
[  521.247264][T13114] bridge_slave_1: left promiscuous mode
[  521.253214][T13114] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.355950][T13114] bridge_slave_0: left allmulticast mode
[  521.365085][T13114] bridge_slave_0: left promiscuous mode
[  521.375375][T13114] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.397558][T14198] loop3: detected capacity change from 0 to 64
[  521.503779][T14198] loop3: detected capacity change from 0 to 256
[  521.510782][ T1828] hfsplus: b-tree write err: -5, ino 4
[  521.648304][T14203] loop2: detected capacity change from 0 to 128
[  522.145361][T14189] loop1: detected capacity change from 0 to 40427
[  522.163605][T14189] F2FS-fs (loop1): invalid crc value
[  522.184107][T14189] F2FS-fs (loop1): Found nat_bits in checkpoint
[  522.296929][ T5232] Bluetooth: hci2: command tx timeout
[  522.299753][T14189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  522.408000][T14189] syz.1.2856: attempt to access beyond end of device
[  522.408000][T14189] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  522.440923][   T29] audit: type=1804 audit(1858531841.830:120): pid=14189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2856" name="/newroot/48/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  522.495595][T13508] syz-executor: attempt to access beyond end of device
[  522.495595][T13508] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  522.531365][T13508] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  522.920726][T13114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.952550][T13114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.974636][T13114] bond0 (unregistering): Released all slaves
[  523.367955][T14165] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.387244][T14239] loop1: detected capacity change from 0 to 64
[  523.394454][T14165] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.405367][T14165] bridge_slave_0: entered allmulticast mode
[  523.436913][T14165] bridge_slave_0: entered promiscuous mode
[  523.446664][T14239] syz.1.2869: attempt to access beyond end of device
[  523.446664][T14239] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  523.463713][T14165] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.474896][T14165] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.491871][T14165] bridge_slave_1: entered allmulticast mode
[  523.508275][T14165] bridge_slave_1: entered promiscuous mode
[  523.785510][T14251] loop1: detected capacity change from 0 to 128
[  523.845878][T14165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.892308][T14165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.018480][T13114] hsr_slave_0: left promiscuous mode
[  524.062455][T13114] hsr_slave_1: left promiscuous mode
[  524.086039][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.105105][T13114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.113441][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.121601][T13114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.130685][T14260] loop1: detected capacity change from 0 to 1024
[  524.135638][T14261] input: syz0 as /devices/virtual/input/input24
[  524.153531][T14253] loop2: detected capacity change from 0 to 4096
[  524.163242][T14253] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  524.196953][T13114] veth1_macvtap: left promiscuous mode
[  524.202622][T13114] veth0_macvtap: left promiscuous mode
[  524.207573][ T5282] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  524.219020][ T5282] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  524.264107][T13114] veth1_vlan: left promiscuous mode
[  524.285571][T13114] veth0_vlan: left promiscuous mode
[  524.293093][T14260] hfsplus: xattr searching failed
[  524.303896][   T29] audit: type=1800 audit(1858531843.700:121): pid=14260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2878" name="file0" dev="loop1" ino=5 res=0 errno=0
[  524.376008][ T5232] Bluetooth: hci2: command tx timeout
[  524.390334][T14259] hfsplus: xattr search failed
[  524.453769][T13116] hfsplus: b-tree write err: -5, ino 3
[  524.840881][T14277] loop1: detected capacity change from 0 to 1024
[  524.948501][   T29] audit: type=1800 audit(1858531844.340:122): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2887" name="file0" dev="loop1" ino=28 res=0 errno=0
[  525.055189][T13116] hfsplus: b-tree write err: -5, ino 4
[  525.335887][T14270] loop0: detected capacity change from 0 to 32768
[  525.362471][T14270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2885 (14270)
[  525.412433][T14270] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  525.428836][T14270] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  525.438144][T14270] BTRFS info (device loop0): using free-space-tree
[  525.681762][T14311] loop1: detected capacity change from 0 to 512
[  525.690048][T14311] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  525.704215][T14311] EXT4-fs (loop1): 1 truncate cleaned up
[  525.711344][T14311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.768601][T14311] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  525.804235][T14311] overlayfs: failed to verify upper root origin
[  525.996072][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.067538][T13737] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  526.068048][T14318] loop1: detected capacity change from 0 to 64
[  526.209625][T13114] team0 (unregistering): Port device team_slave_1 removed
[  526.355049][ T5311] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  526.455371][ T5232] Bluetooth: hci2: command tx timeout
[  526.487628][T13114] team0 (unregistering): Port device team_slave_0 removed
[  526.604947][ T5311] usb 3-1: Using ep0 maxpacket: 8
[  526.613861][ T5311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.639254][ T5311] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  526.654963][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.664315][ T5311] usb 3-1: Product: syz
[  526.678251][ T5311] usb 3-1: Manufacturer: syz
[  526.682875][ T5311] usb 3-1: SerialNumber: syz
[  527.402065][T14165] team0: Port device team_slave_0 added
[  527.442501][T14165] team0: Port device team_slave_1 added
[  527.529753][T14165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.548536][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.624749][T14165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.658359][T14165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.685406][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.721920][T14165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.742091][ T5311] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  527.753729][ T5311] cdc_ncm 3-1:1.0: setting tx_max = 184
[  527.939438][T14165] hsr_slave_0: entered promiscuous mode
[  527.967385][T14165] hsr_slave_1: entered promiscuous mode
[  527.975098][T14165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  527.983381][T14165] Cannot create hsr debugfs directory
[  528.170016][ T5311] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  528.187499][T14332] loop1: detected capacity change from 0 to 32768
[  528.213233][ T5311] usb 3-1: USB disconnect, device number 28
[  528.245485][ T5311] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  528.313843][T14332] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  528.433507][T14332] XFS (loop1): Ending clean mount
[  528.549823][T14351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2909'.
[  528.559637][T13508] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  528.565059][ T5232] Bluetooth: hci2: command tx timeout
[  528.575041][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2909'.
[  528.604236][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2909'.
[  528.622925][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2909'.
[  528.711218][T14339] loop3: detected capacity change from 0 to 40427
[  529.086903][T14165] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  529.124554][T14165] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  529.146232][T14165] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  529.181098][T14165] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  529.388917][T14165] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.447114][T14165] 8021q: adding VLAN 0 to HW filter on device team0
[  529.476067][T13114] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.483285][T13114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  529.521974][T13114] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.529148][T13114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.081802][T14165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.343358][T14395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.503790][T14404] loop2: detected capacity change from 0 to 1024
[  530.546899][T14165] veth0_vlan: entered promiscuous mode
[  530.570086][T14165] veth1_vlan: entered promiscuous mode
[  530.629418][T14404] syz.2.2925: attempt to access beyond end of device
[  530.629418][T14404] loop2: rw=0, sector=1090, nr_sectors = 2 limit=1024
[  530.636200][T14165] veth0_macvtap: entered promiscuous mode
[  530.715198][T14165] veth1_macvtap: entered promiscuous mode
[  530.734113][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.745001][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.754911][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.765496][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.775603][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.786162][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.796056][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.806553][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.816527][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.827050][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.837610][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.848745][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.860875][T14165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  530.870988][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.881594][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.891716][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.902507][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.912590][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.923742][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.933794][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.945176][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.955144][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.965734][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.975661][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  530.986231][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.996150][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.006670][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.018264][T14165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.057054][T14165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.074884][T14165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.083664][T14165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.135079][T14165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.394857][ T1828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.424440][ T1828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.526622][ T1828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.550175][T14423] loop1: detected capacity change from 0 to 1024
[  531.562443][ T1828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.593541][T14423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.719736][T14395] loop3: detected capacity change from 0 to 40427
[  531.827504][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.943717][T14431] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  532.065777][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'.
[  532.695636][ T5282] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  532.906365][ T5282] usb 3-1: Using ep0 maxpacket: 16
[  532.927311][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.946434][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  532.963097][ T5282] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  532.973106][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.983346][ T5282] usb 3-1: config 0 descriptor??
[  533.412241][ T5282] microsoft 0003:045E:07DA.0019: No inputs registered, leaving
[  533.422749][ T5282] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  533.434878][ T5282] microsoft 0003:045E:07DA.0019: no inputs found
[  533.441479][ T5282] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway
[  533.918153][ T5283] usb 3-1: USB disconnect, device number 29
[  534.188041][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2956'.
[  534.199036][T14481] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.206495][T14481] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.217402][T14481] bridge0: entered promiscuous mode
[  534.355970][T13116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.508250][T14487] loop1: detected capacity change from 0 to 1024
[  535.684134][T13116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.789454][ T2551] hfsplus: b-tree write err: -5, ino 3
[  535.883962][T12844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  535.896279][T12844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  535.934563][T12844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  535.985898][T12844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  535.993650][T12844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  536.001145][T12844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  536.050701][T13116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.383402][T14488] loop3: detected capacity change from 0 to 32768
[  536.387042][T13116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.677088][T14492] loop2: detected capacity change from 0 to 40427
[  536.720569][T14492] F2FS-fs (loop2): Found nat_bits in checkpoint
[  536.787222][T14492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  536.872467][T13116] bridge_slave_1: left allmulticast mode
[  536.899504][T13116] bridge_slave_1: left promiscuous mode
[  536.905666][   T29] audit: type=1326 audit(1858531856.290:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.2.2961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cab779e79 code=0x0
[  536.936877][T13116] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.965606][T13116] bridge_slave_0: left allmulticast mode
[  536.975441][T13116] bridge_slave_0: left promiscuous mode
[  536.984693][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.140194][T13832] syz-executor: attempt to access beyond end of device
[  537.140194][T13832] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  537.144151][T14518] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  537.225114][T13832] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  537.260591][T13832] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  537.745195][T14533] input: syz0 as /devices/virtual/input/input26
[  538.097523][T14537] loop2: detected capacity change from 0 to 1024
[  538.114110][T14531] loop3: detected capacity change from 0 to 40427
[  538.145494][ T5232] Bluetooth: hci2: command tx timeout
[  538.395824][ T2551] hfsplus: b-tree write err: -5, ino 4
[  538.579896][T13116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.604768][T13116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.628548][T13116] bond0 (unregistering): Released all slaves
[  538.706310][T14550] loop3: detected capacity change from 0 to 1024
[  538.874759][T14552] binder: 14551:14552 ioctl c0306201 200003c0 returned -22
[  538.882908][T14493] chnl_net:caif_netlink_parms(): no params data found
[  539.108367][T14561] loop2: detected capacity change from 0 to 64
[  539.325071][ T5241] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  539.469372][T14539] loop0: detected capacity change from 0 to 32768
[  539.478471][T13116] hsr_slave_0: left promiscuous mode
[  539.516113][T14539] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2986 (14539)
[  539.525439][ T5241] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  539.541157][T13116] hsr_slave_1: left promiscuous mode
[  539.553786][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.561396][T13116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.561824][T14572] loop2: detected capacity change from 0 to 256
[  539.575503][T14539] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  539.586023][T14539] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  539.586132][ T5241] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  539.595330][T14539] BTRFS info (device loop0): using free-space-tree
[  539.596423][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.614443][ T5241] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  539.618477][T13116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.638348][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  539.647414][ T5241] usb 4-1: SerialNumber: syz
[  539.676152][T13116] veth1_macvtap: left promiscuous mode
[  539.681729][T13116] veth0_macvtap: left promiscuous mode
[  539.687477][T13116] veth1_vlan: left promiscuous mode
[  539.692795][T13116] veth0_vlan: left promiscuous mode
[  539.693547][T14572] FAT-fs (loop2): Directory bread(block 64) failed
[  539.707483][T14572] FAT-fs (loop2): Directory bread(block 65) failed
[  539.721997][T14572] FAT-fs (loop2): Directory bread(block 66) failed
[  539.795038][T14572] FAT-fs (loop2): Directory bread(block 67) failed
[  539.807385][T14572] FAT-fs (loop2): Directory bread(block 68) failed
[  539.835915][T14572] FAT-fs (loop2): Directory bread(block 69) failed
[  539.842570][T14572] FAT-fs (loop2): Directory bread(block 70) failed
[  539.857361][T14572] FAT-fs (loop2): Directory bread(block 71) failed
[  539.864084][T14572] FAT-fs (loop2): Directory bread(block 72) failed
[  539.906760][ T5241] usb 4-1: 0:2 : does not exist
[  539.925259][T14572] FAT-fs (loop2): Directory bread(block 73) failed
[  539.985737][ T5241] usb 4-1: USB disconnect, device number 25
[  540.072378][   T29] audit: type=1800 audit(1858531859.460:124): pid=14572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2990" name="bus" dev="loop2" ino=1048806 res=0 errno=0
[  540.147993][T13737] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  540.222138][ T5232] Bluetooth: hci2: command tx timeout
[  540.413618][T14596] loop2: detected capacity change from 0 to 512
[  540.420864][T14596] EXT4-fs: Ignoring removed i_version option
[  540.438493][T14596] EXT4-fs: Ignoring removed nobh option
[  540.490676][T14596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  540.519219][T14596] EXT4-fs (loop2): 1 truncate cleaned up
[  540.555558][T14596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  540.685241][T14596] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  540.730435][T14596] EXT4-fs (loop2): Remounting filesystem read-only
[  540.857666][T13832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.072546][ T1857] kernel read not supported for file /sync/info (pid: 1857 comm: kworker/1:2)
[  541.130595][T14605] loop0: detected capacity change from 0 to 4096
[  541.170631][T14605] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  541.289163][T14605] ntfs3: loop0: ino=1d, "file0" attr_set_size
[  541.745373][T13116] team0 (unregistering): Port device team_slave_1 removed
[  541.822310][T13116] team0 (unregistering): Port device team_slave_0 removed
[  542.310989][ T5232] Bluetooth: hci2: command tx timeout
[  542.559852][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3005'.
[  542.574202][T14628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.594272][T14628] batadv_slave_0: entered allmulticast mode
[  542.609366][T14493] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.630115][T14493] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.642546][T14493] bridge_slave_0: entered allmulticast mode
[  542.657886][T14493] bridge_slave_0: entered promiscuous mode
[  542.679502][T14493] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.700700][T14493] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.717764][T14493] bridge_slave_1: entered allmulticast mode
[  542.726109][T14493] bridge_slave_1: entered promiscuous mode
[  542.832687][T14493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.839934][ T1828] Bluetooth: hci5: Frame reassembly failed (-84)
[  542.846426][T14493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.141108][T14493] team0: Port device team_slave_0 added
[  543.178516][T14493] team0: Port device team_slave_1 added
[  543.248850][T14493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.264910][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  543.265101][ T5241] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  543.290878][    C0] vkms_vblank_simulate: vblank timer overrun
[  543.292629][T14493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.326550][T14493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.343327][T14493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  543.369323][    C0] vkms_vblank_simulate: vblank timer overrun
[  543.386788][T14493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.468919][T14493] hsr_slave_0: entered promiscuous mode
[  543.482618][T14493] hsr_slave_1: entered promiscuous mode
[  543.498871][T14493] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  543.515080][T14493] Cannot create hsr debugfs directory
[  543.564975][ T5241] usb 4-1: Using ep0 maxpacket: 8
[  543.571789][ T5241] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  543.580660][ T5241] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  543.590938][ T5241] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  543.622897][ T5241] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  543.634179][ T5241] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  543.649379][ T5241] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  543.672997][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.905097][ T5241] usb 4-1: GET_CAPABILITIES returned 0
[  543.934570][ T5241] usbtmc 4-1:16.0: can't read capabilities
[  544.274138][T14493] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  544.290944][T14493] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  544.311987][T14493] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  544.335332][T14493] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  544.385693][T12844] Bluetooth: hci2: command tx timeout
[  544.428414][T14493] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.448579][T14493] 8021q: adding VLAN 0 to HW filter on device team0
[  544.460737][T13114] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.467849][T13114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.497405][T13114] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.504569][T13114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.724542][T14493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.857163][T12844] Bluetooth: hci5: command 0x1003 tx timeout
[  544.867378][ T5232] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  544.998494][T14650] loop2: detected capacity change from 0 to 65536
[  545.052474][T14650] XFS (loop2): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  545.191477][T14493] veth0_vlan: entered promiscuous mode
[  545.217263][T14650] XFS (loop2): Ending clean mount
[  545.229709][T14493] veth1_vlan: entered promiscuous mode
[  545.293354][T14493] veth0_macvtap: entered promiscuous mode
[  545.328054][T14493] veth1_macvtap: entered promiscuous mode
[  545.368618][T13832] XFS (loop2): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  545.397586][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.425040][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.436079][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.446802][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.456917][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.469090][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.479938][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.490626][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.501024][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.511728][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.541814][T14493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.585215][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.608055][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.627245][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.647023][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.670930][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.686451][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.704671][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.722717][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.737460][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.758465][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.794201][T14675] loop1: detected capacity change from 0 to 32768
[  545.794961][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.847207][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.851004][T14675] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  545.872037][T14493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.885465][T14493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.914413][T14493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.926849][T14493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.939521][T14691] loop0: detected capacity change from 0 to 1024
[  545.965004][T14493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.973759][T14493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.974069][T13840] usb 4-1: USB disconnect, device number 26
[  546.016167][T14675] XFS (loop1): Ending clean mount
[  546.023881][T14493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.223109][T13114] hfsplus: b-tree write err: -5, ino 4
[  546.236428][ T1857] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 
[  546.276498][ T1857] XFS (loop1): Unmount and run xfs_repair
[  546.282285][ T1857] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  546.299487][ T1857] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  546.334219][T14700] loop3: detected capacity change from 0 to 2048
[  546.336653][ T1857] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  546.354929][ T1857] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  546.421083][ T1857] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  546.443207][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.444863][ T1857] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  546.451324][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.475959][ T5232] Bluetooth: hci2: command tx timeout
[  546.479447][T14703] loop2: detected capacity change from 0 to 2048
[  546.488949][ T1857] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  546.497492][T14704] loop0: detected capacity change from 0 to 512
[  546.503343][ T1857] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  546.524450][T14703] NILFS (loop2): invalid segment: Checksum error in segment payload
[  546.543736][ T1857] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  546.556198][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.556600][T14703] NILFS (loop2): trying rollback from an earlier position
[  546.572938][T14675] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74
[  546.573735][T14704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  546.608426][T14675] XFS (loop1): page discard on page ffffea00015db400, inode 0x1809, pos 0.
[  546.620443][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.643678][T14675] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 
[  546.655259][T14703] NILFS (loop2): recovery complete
[  546.675297][T14709] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  546.675352][T14704] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.705238][T14675] XFS (loop1): Unmount and run xfs_repair
[  546.735004][T14675] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  546.787996][T14675] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  546.803506][T14675] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  546.841849][T14675] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  546.851263][   T29] audit: type=1804 audit(1858531866.250:125): pid=14710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3026" name="/newroot/51/file0/file1" dev="loop2" ino=12 res=1 errno=0
[  546.883179][T14675] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  546.914558][T14675] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  546.955688][T14675] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  546.975025][T14675] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  546.983946][T14675] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  547.010750][T14675] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74
[  547.035966][T14675] XFS (loop1): page discard on page ffffea0000499d00, inode 0x1809, pos 32768.
[  547.048976][T13840] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 
[  547.060689][T13840] XFS (loop1): Unmount and run xfs_repair
[  547.075032][T13840] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  547.082742][T13840] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  547.098840][T13737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.109822][T13840] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  547.149340][T13840] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  547.184915][T13840] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  547.193932][T13840] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  547.205969][T13840] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  547.222553][T14718] loop0: detected capacity change from 0 to 128
[  547.230806][T13840] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  547.240321][T13840] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  547.249623][T14675] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74
[  547.262875][T14675] XFS (loop1): page discard on page ffffea00004b3a40, inode 0x1809, pos 49152.
[  547.281629][T14718] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  547.307858][ T5311] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 
[  547.331359][T14718] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  547.364971][ T5311] XFS (loop1): Unmount and run xfs_repair
[  547.375402][ T5311] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  547.382846][ T5311] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  547.441132][ T5311] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  547.475647][ T5311] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  547.513721][ T5311] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  547.554019][   T29] audit: type=1800 audit(1858531866.930:126): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3030" name="bus" dev="loop0" ino=12 res=0 errno=0
[  547.574655][ T5311] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  547.588508][ T5311] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  547.597778][ T5311] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  547.610186][T13737] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  547.619423][   T29] audit: type=1800 audit(1858531866.930:127): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3030" name="bus" dev="loop0" ino=12 res=0 errno=0
[  547.650735][ T5311] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  547.660778][T13114] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74
[  547.692177][T13114] XFS (loop1): page discard on page ffffea00015db400, inode 0x1809, pos 0.
[  547.723209][T13508] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  547.750253][T13508] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  548.099746][T14729] loop2: detected capacity change from 0 to 32768
[  548.358015][T14725] loop3: detected capacity change from 0 to 32768
[  549.097118][T14762] loop2: detected capacity change from 0 to 512
[  549.410890][T14760] loop1: detected capacity change from 0 to 32768
[  549.420660][T14760] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3046 (14760)
[  549.442779][T14760] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  549.453271][T14760] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  549.462739][T14760] BTRFS info (device loop1): using free-space-tree
[  549.536518][T14783] loop2: detected capacity change from 0 to 128
[  549.559183][   T29] audit: type=1800 audit(1858531868.960:128): pid=14760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3046" name="bus" dev="loop1" ino=263 res=0 errno=0
[  549.585833][T14783] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  549.605365][T14783] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  549.672721][T13508] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  549.761484][T14792] loop3: detected capacity change from 0 to 4096
[  549.811765][T13832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  549.812554][T14792] overlayfs: overlapping lowerdir path
[  550.148300][T14802] loop1: detected capacity change from 0 to 1024
[  550.156444][T14802] EXT4-fs: Ignoring removed orlov option
[  550.172512][T13116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.176649][T14802] EXT4-fs (loop1): Test dummy encryption mode enabled
[  550.230181][T14802] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  550.287854][T14802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.432930][T14802] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  550.464687][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.041830][T13116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.181686][T14811] loop3: detected capacity change from 0 to 512
[  551.307930][T12844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  551.318234][T13116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.320146][T12844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  551.346334][T12844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  551.361427][T12844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  551.371440][T12844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  551.379083][T12844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  551.484927][T13840] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  551.577631][T13116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.662372][T14828] loop1: detected capacity change from 0 to 8192
[  551.695298][  T940] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  551.706181][T13840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.718097][T14828] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  551.743819][T13840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  551.768474][T13840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.799694][T13840] usb 3-1: Product: syz
[  551.823817][T13840] usb 3-1: Manufacturer: syz
[  551.835407][T13840] usb 3-1: SerialNumber: syz
[  551.904974][  T940] usb 4-1: Using ep0 maxpacket: 16
[  551.920970][  T940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  551.938933][  T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  551.955964][T13116] bridge_slave_1: left allmulticast mode
[  551.961749][T13116] bridge_slave_1: left promiscuous mode
[  551.971469][T13116] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.011841][  T940] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  552.021297][  T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.035717][T13116] bridge_slave_0: left allmulticast mode
[  552.041751][T13116] bridge_slave_0: left promiscuous mode
[  552.063216][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.091368][  T940] usb 4-1: Product: syz
[  552.101487][  T940] usb 4-1: Manufacturer: syz
[  552.111388][  T940] usb 4-1: SerialNumber: syz
[  552.123797][  T940] usb 4-1: config 0 descriptor??
[  552.158349][  T940] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  552.177506][  T940] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  552.358921][T14830] loop0: detected capacity change from 0 to 40427
[  552.390390][T14830] F2FS-fs (loop0): invalid crc value
[  552.399381][T14830] F2FS-fs (loop0): Found nat_bits in checkpoint
[  552.466914][T14830] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  552.528349][T14830] syz.0.3065: attempt to access beyond end of device
[  552.528349][T14830] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  552.578266][T13737] syz-executor: attempt to access beyond end of device
[  552.578266][T13737] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  552.593996][T13737] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  552.601820][T13737] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  552.795990][  T940] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  552.812732][  T940] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  552.869794][T13840] cdc_ncm 3-1:1.0: failed to get mac address
[  553.071916][T13840] cdc_ncm 3-1:1.0: bind() failure
[  553.096853][T13116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.098120][T13840] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  553.117797][T13116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  553.123436][T13840] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  553.142551][T13116] bond0 (unregistering): Released all slaves
[  553.149951][T13840] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  553.195118][T13840] usb 3-1: USB disconnect, device number 30
[  553.247821][  T940] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  553.257222][  T940] em28xx 4-1:0.0: No AC97 audio processor
[  553.273006][  T940] usb 4-1: USB disconnect, device number 27
[  553.279782][  T940] em28xx 4-1:0.0: Disconnecting em28xx
[  553.322845][  T940] em28xx 4-1:0.0: Freeing device
[  553.425490][T12844] Bluetooth: hci2: command tx timeout
[  553.606171][T14818] chnl_net:caif_netlink_parms(): no params data found
[  553.918870][    C1] sd 0:0:1:0: [sda] tag#7119 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  553.929400][    C1] sd 0:0:1:0: [sda] tag#7119 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 00 00 00
[  553.931777][T14840] loop0: detected capacity change from 0 to 32768
[  553.958293][T14840] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3068 (14840)
[  553.999827][T14840] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  554.052593][T13116] hsr_slave_0: left promiscuous mode
[  554.062473][T13116] hsr_slave_1: left promiscuous mode
[  554.070922][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.091274][T14840] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  554.104999][T13116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.119680][T14840] BTRFS info (device loop0): using free-space-tree
[  554.138807][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.150086][T13116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.194664][T13116] veth1_macvtap: left promiscuous mode
[  554.200577][T13116] veth0_macvtap: left promiscuous mode
[  554.206802][T13116] veth1_vlan: left promiscuous mode
[  554.213796][T13116] veth0_vlan: left promiscuous mode
[  554.375481][T13737] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  554.889654][T14880] loop0: detected capacity change from 0 to 1024
[  554.960541][T14880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  555.050343][T13737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.132901][T14887] loop0: detected capacity change from 0 to 512
[  555.161053][T14887] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  555.189240][T14887] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3077: invalid indirect mapped block 2683928664 (level 1)
[  555.218903][T14887] EXT4-fs (loop0): Remounting filesystem read-only
[  555.247137][T14887] EXT4-fs (loop0): 1 truncate cleaned up
[  555.253722][T14887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  555.424055][T13116] team0 (unregistering): Port device team_slave_1 removed
[  555.500045][T13116] team0 (unregistering): Port device team_slave_0 removed
[  555.507734][T12844] Bluetooth: hci2: command tx timeout
[  555.996378][T13737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.498590][T14903] macvtap1: entered allmulticast mode
[  556.504219][T14903] veth1_vlan: entered allmulticast mode
[  556.517274][T14903] veth1_vlan: left allmulticast mode
[  556.586726][T14818] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.614470][T14818] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.622449][T14818] bridge_slave_0: entered allmulticast mode
[  556.636116][T14818] bridge_slave_0: entered promiscuous mode
[  556.657312][T14818] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.664447][T14818] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.682147][T14818] bridge_slave_1: entered allmulticast mode
[  556.691913][T14818] bridge_slave_1: entered promiscuous mode
[  556.791231][T14918] loop1: detected capacity change from 0 to 64
[  556.828025][T14818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.878430][T14818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.908243][T14920] netlink: 'syz.3.3091': attribute type 1 has an invalid length.
[  556.929867][T14920] netlink: 'syz.3.3091': attribute type 4 has an invalid length.
[  556.944403][T14920] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.3091'.
[  557.081739][T14925] netlink: 'syz.0.3093': attribute type 3 has an invalid length.
[  557.102113][T14818] team0: Port device team_slave_0 added
[  557.133539][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'.
[  557.153888][T14818] team0: Port device team_slave_1 added
[  557.259511][T14927] loop3: detected capacity change from 0 to 4096
[  557.295272][T14818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.302587][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.343393][T14818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.385240][T14818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.410093][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.485901][T14818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.597153][T14818] hsr_slave_0: entered promiscuous mode
[  557.612605][T12844] Bluetooth: hci2: command tx timeout
[  557.652106][T14818] hsr_slave_1: entered promiscuous mode
[  557.715748][T14818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.723349][T14818] Cannot create hsr debugfs directory
[  558.042534][T14954] hsr0: entered promiscuous mode
[  558.339736][T14943] loop1: detected capacity change from 0 to 32768
[  558.365004][T14943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3101 (14943)
[  558.408303][T14943] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  558.445059][T14943] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  558.465117][T14943] BTRFS info (device loop1): using free-space-tree
[  558.562080][T14966] loop3: detected capacity change from 0 to 2048
[  558.983385][T13508] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  559.034093][T14818] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  559.092250][T14986] loop2: detected capacity change from 0 to 32768
[  559.094420][T14818] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  559.112132][T14818] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  559.125350][T14986] BTRFS: device /dev/loop2 (7:2) using temp-fsid c851a056-70ad-4ae0-8d61-852ae83021de
[  559.135138][T14986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3112 (14986)
[  559.151906][T14986] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  559.189302][T14818] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  559.205270][T14993] loop0: detected capacity change from 0 to 512
[  559.212415][T14993] EXT4-fs: Ignoring removed orlov option
[  559.218179][T14993] ext4: Bad value for 'sb'
[  559.225078][T14986] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  559.233789][T14986] BTRFS info (device loop2): using free-space-tree
[  559.459019][T14818] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.469326][   T29] audit: type=1800 audit(1858531878.860:129): pid=14986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3112" name="bus" dev="loop2" ino=261 res=0 errno=0
[  559.530927][T14818] 8021q: adding VLAN 0 to HW filter on device team0
[  559.579295][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.586526][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.632918][T15014] loop3: detected capacity change from 0 to 128
[  559.640387][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.647593][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.660734][ T5232] Bluetooth: hci2: command tx timeout
[  559.792671][T13832] BTRFS info (device loop2): last unmount of filesystem c851a056-70ad-4ae0-8d61-852ae83021de
[  560.466834][ T5232] Bluetooth: hci8: command 0x0406 tx timeout
[  563.515380][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  563.521715][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  601.426309][ T5232] Bluetooth: hci0: command 0x0406 tx timeout
[  618.554897][ T5232] Bluetooth: hci3: command 0x0406 tx timeout
[  627.012341][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  627.018967][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  629.996192][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  679.975425][T12844] Bluetooth: hci2: command 0x0406 tx timeout
[  686.439232][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  686.455040][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  706.315211][   T30] INFO: task kworker/u8:5:13114 blocked for more than 145 seconds.
[  706.323179][   T30]       Not tainted 6.11.0-rc4-next-20240822-syzkaller #0
[  706.404830][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  706.413568][   T30] task:kworker/u8:5    state:D stack:18672 pid:13114 tgid:13114 ppid:2      flags:0x00004000
[  706.557009][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  706.563090][   T30] Call Trace:
[  706.644871][   T30]  <TASK>
[  706.647868][   T30]  __schedule+0x184a/0x4b30
[  706.652412][   T30]  ? __pfx___schedule+0x10/0x10
[  706.744845][   T30]  ? __pfx_lock_release+0x10/0x10
[  706.749953][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  706.824916][   T30]  ? kthread_data+0x52/0xd0
[  706.829499][   T30]  ? schedule+0x90/0x320
[  706.833792][   T30]  ? wq_worker_sleeping+0x66/0x240
[  706.954269][   T30]  ? schedule+0x90/0x320
[  706.994843][   T30]  schedule+0x14b/0x320
[  706.999086][   T30]  schedule_preempt_disabled+0x13/0x30
[  707.004565][   T30]  __mutex_lock+0x6a7/0xd70
[  707.114880][   T30]  ? mark_lock+0x9a/0x360
[  707.119287][   T30]  ? __mutex_lock+0x52a/0xd70
[  707.123997][   T30]  ? addrconf_dad_work+0xd0/0x16f0
[  707.254777][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  707.259893][   T30]  addrconf_dad_work+0xd0/0x16f0
[  707.324769][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  707.330307][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  707.457775][   T30]  ? process_scheduled_works+0x976/0x1850
[  707.463577][   T30]  process_scheduled_works+0xa63/0x1850
[  707.534806][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  707.540869][   T30]  ? assign_work+0x364/0x3d0
[  707.634798][   T30]  worker_thread+0x86d/0xd10
[  707.639481][   T30]  ? __kthread_parkme+0x169/0x1d0
[  707.644532][   T30]  ? __pfx_worker_thread+0x10/0x10
[  707.764801][   T30]  kthread+0x2f0/0x390
[  707.768944][   T30]  ? __pfx_worker_thread+0x10/0x10
[  707.774080][   T30]  ? __pfx_kthread+0x10/0x10
[  707.864815][   T30]  ret_from_fork+0x4b/0x80
[  707.869320][   T30]  ? __pfx_kthread+0x10/0x10
[  707.873939][   T30]  ret_from_fork_asm+0x1a/0x30
[  708.024971][   T30]  </TASK>
[  708.028092][   T30] INFO: task syz-executor:14818 blocked for more than 147 seconds.
[  708.091851][   T30]       Not tainted 6.11.0-rc4-next-20240822-syzkaller #0
[  708.174885][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  708.183623][   T30] task:syz-executor    state:D stack:20080 pid:14818 tgid:14818 ppid:14808  flags:0x00000000
[  708.334778][   T30] Call Trace:
[  708.338118][   T30]  <TASK>
[  708.341073][   T30]  __schedule+0x184a/0x4b30
[  708.414801][   T30]  ? __pfx___schedule+0x10/0x10
[  708.419736][   T30]  ? __pfx_lock_release+0x10/0x10
[  708.500617][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  708.544783][   T30]  ? schedule+0x90/0x320
[  708.549112][   T30]  schedule+0x14b/0x320
[  708.553328][   T30]  schedule_preempt_disabled+0x13/0x30
[  708.654912][   T30]  __mutex_lock+0x6a7/0xd70
[  708.659498][   T30]  ? __mutex_lock+0x52a/0xd70
[  708.664197][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  708.784803][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  708.789924][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  708.874806][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  708.880007][   T30]  ? __lock_acquire+0x1384/0x2050
[  708.954976][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  708.960616][   T30]  netlink_rcv_skb+0x1e3/0x430
[  709.044802][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  709.050356][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  709.124838][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  709.130115][   T30]  netlink_unicast+0x7f6/0x990
[  709.204956][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  709.210336][   T30]  ? __virt_addr_valid+0x183/0x530
[  709.284809][   T30]  ? __check_object_size+0x49c/0x900
[  709.290174][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  709.364816][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.370275][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  709.454778][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.460135][   T30]  __sock_sendmsg+0x221/0x270
[  709.534807][   T30]  __sys_sendto+0x3a8/0x500
[  709.539402][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  709.544473][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  709.634974][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  709.641405][   T30]  __x64_sys_sendto+0xde/0x100
[  709.724802][   T30]  do_syscall_64+0xf3/0x230
[  709.729922][   T30]  ? clear_bhb_loop+0x35/0x90
[  709.734639][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.826302][   T30] RIP: 0033:0x7fb329b7bd0c
[  709.874851][   T30] RSP: 002b:00007ffeb0ec4fa0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  709.883348][   T30] RAX: ffffffffffffffda RBX: 00007fb32a844620 RCX: 00007fb329b7bd0c
[  709.984800][   T30] RDX: 0000000000000028 RSI: 00007fb32a844670 RDI: 0000000000000003
[  709.992850][   T30] RBP: 0000000000000000 R08: 00007ffeb0ec4ff4 R09: 000000000000000c
[  710.114855][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  710.122894][   T30] R13: 0000000000000000 R14: 00007fb32a844670 R15: 0000000000000000
[  710.244903][   T30]  </TASK>
[  710.264794][   T30] 
[  710.264794][   T30] Showing all locks held in the system:
[  710.272576][   T30] 3 locks held by kworker/u8:0/11:
[  710.375019][   T30]  #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  710.454911][   T30]  #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  710.544914][   T30]  #2: ffffffff8fcc5008 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  710.554571][   T30] 1 lock held by khungtaskd/30:
[  710.666981][   T30]  #0: ffffffff8e939ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  710.744347][   T30] 4 locks held by kworker/u8:7/2551:
[  710.784804][   T30]  #0: ffff8880166ed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  710.864771][   T30]  #1: ffffc90009bd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  710.945018][   T30]  #2: ffffffff8fcb8550 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  710.954533][   T30]  #3: ffffffff8fcc5008 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0
[  711.084821][   T30] 2 locks held by getty/4986:
[  711.089568][   T30]  #0: ffff88802fbaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  711.172790][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  711.243983][   T30] 2 locks held by syz-executor/5214:
[  711.312163][   T30] 3 locks held by kworker/1:6/5311:
[  711.354940][   T30]  #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  711.495217][   T30]  #1: ffffc900043b7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  711.544822][   T30]  #2: ffffffff8fcc5008 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  711.554516][   T30] 3 locks held by kworker/u8:5/13114:
[  711.614800][   T30]  #0: ffff88802a2cb948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  711.654815][   T30]  #1: ffffc9000322fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  711.734772][   T30]  #2: ffffffff8fcc5008 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  711.744277][   T30] 1 lock held by syz-executor/14818:
[  711.844820][   T30]  #0: ffffffff8fcc5008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  711.854337][   T30] 2 locks held by syz.1.3128/15015:
[  712.034816][   T30]  #0: ffffffff8fcc5008 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0
[  712.043886][   T30]  #1: ffffffff8e93f078 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  712.104814][   T30] 1 lock held by syz.2.3118/15020:
[  712.109984][   T30] 1 lock held by syz.2.3118/15021:
[  712.174844][   T30]  #0: ffffffff8fcc5008 (rtnl_mutex){+.+.}-{3:3}, at: tcx_prog_query+0x8a/0x140
[  712.224861][   T30] 
[  712.227247][   T30] =============================================
[  712.227247][   T30] 
[  712.314852][   T30] NMI backtrace for cpu 0
[  712.319260][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-next-20240822-syzkaller #0
[  712.329271][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  712.339349][   T30] Call Trace:
[  712.342644][   T30]  <TASK>
[  712.345589][   T30]  dump_stack_lvl+0x241/0x360
[  712.350289][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  712.355596][   T30]  ? __pfx__printk+0x10/0x10
[  712.360210][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  712.365263][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  712.370327][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  712.375810][   T30]  ? _printk+0xd5/0x120
[  712.379990][   T30]  ? __pfx__printk+0x10/0x10
[  712.384591][   T30]  ? __wake_up_klogd+0xcc/0x110
[  712.389466][   T30]  ? __pfx__printk+0x10/0x10
[  712.394076][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  712.399128][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  712.405134][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  712.411134][   T30]  watchdog+0xff4/0x1040
[  712.415394][   T30]  ? watchdog+0x1ea/0x1040
[  712.419881][   T30]  ? __pfx_watchdog+0x10/0x10
[  712.424574][   T30]  kthread+0x2f0/0x390
[  712.428656][   T30]  ? __pfx_watchdog+0x10/0x10
[  712.433340][   T30]  ? __pfx_kthread+0x10/0x10
[  712.437941][   T30]  ret_from_fork+0x4b/0x80
[  712.442374][   T30]  ? __pfx_kthread+0x10/0x10
[  712.446970][   T30]  ret_from_fork_asm+0x1a/0x30
[  712.451763][   T30]  </TASK>
[  712.455888][   T30] Sending NMI from CPU 0 to CPUs 1:
[  712.461129][    C1] NMI backtrace for cpu 1
[  712.461143][    C1] CPU: 1 UID: 0 PID: 12840 Comm: syz-executor Not tainted 6.11.0-rc4-next-20240822-syzkaller #0
[  712.461163][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  712.461174][    C1] RIP: 0010:validate_chain+0x126/0x5920
[  712.461198][    C1] Code: 04 00 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 18 7b 93 be 08 00 00 00 e8 c2 c4 8b 00 48 0f a3 1d ea 52 0a 12 <72> 66 48 c7 c0 40 59 f9 94 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85
[  712.461214][    C1] RSP: 0018:ffffc9000aa275e0 EFLAGS: 00000057
[  712.461230][    C1] RAX: 0000000000000001 RBX: 00000000000000b5 RCX: ffffffff8170c50e
[  712.461242][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff937b1810
[  712.461254][    C1] RBP: ffffc9000aa278e0 R08: ffffffff937b1817 R09: 1ffffffff26f6302
[  712.461267][    C1] R10: dffffc0000000000 R11: fffffbfff26f6303 R12: dffffc0000000000
[  712.461280][    C1] R13: ffff88807a4e8b50 R14: b18438755a7c585f R15: ffff88807a4e8b50
[  712.461293][    C1] FS:  00005555696aa500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  712.461307][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  712.461320][    C1] CR2: 00007fff3cf65a40 CR3: 000000004deb6000 CR4: 00000000003506f0
[  712.461334][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  712.461345][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  712.461355][    C1] Call Trace:
[  712.461362][    C1]  <NMI>
[  712.461368][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  712.461394][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  712.461420][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  712.461449][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  712.461471][    C1]  ? nmi_handle+0x14f/0x5a0
[  712.461487][    C1]  ? nmi_handle+0x2a/0x5a0
[  712.461503][    C1]  ? validate_chain+0x126/0x5920
[  712.461525][    C1]  ? default_do_nmi+0x63/0x160
[  712.461549][    C1]  ? exc_nmi+0x123/0x1f0
[  712.461570][    C1]  ? end_repeat_nmi+0xf/0x53
[  712.461593][    C1]  ? validate_chain+0x11e/0x5920
[  712.461610][    C1]  ? validate_chain+0x126/0x5920
[  712.461627][    C1]  ? validate_chain+0x126/0x5920
[  712.461644][    C1]  ? validate_chain+0x126/0x5920
[  712.461661][    C1]  </NMI>
[  712.461667][    C1]  <TASK>
[  712.461675][    C1]  ? 0xffffffffa0001ad0
[  712.461691][    C1]  ? __lock_acquire+0x1384/0x2050
[  712.461715][    C1]  ? __pfx_validate_chain+0x10/0x10
[  712.461735][    C1]  ? __pfx_validate_chain+0x10/0x10
[  712.461754][    C1]  ? __pfx_validate_chain+0x10/0x10
[  712.461773][    C1]  ? mark_lock+0x9a/0x360
[  712.461788][    C1]  ? __might_fault+0xaa/0x120
[  712.461808][    C1]  ? mark_lock+0x9a/0x360
[  712.461824][    C1]  __lock_acquire+0x1384/0x2050
[  712.461852][    C1]  lock_acquire+0x1ed/0x550
[  712.461873][    C1]  ? __lock_task_sighand+0x149/0x2d0
[  712.461894][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  712.461919][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  712.461944][    C1]  _raw_spin_lock_irqsave+0xd5/0x120
[  712.461962][    C1]  ? __lock_task_sighand+0x149/0x2d0
[  712.461978][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  712.461999][    C1]  __lock_task_sighand+0x149/0x2d0
[  712.462014][    C1]  ? __lock_task_sighand+0x29/0x2d0
[  712.462031][    C1]  group_send_sig_info+0x274/0x310
[  712.462049][    C1]  ? __pfx_group_send_sig_info+0x10/0x10
[  712.462067][    C1]  ? __pfx_signal_setup_done+0x10/0x10
[  712.462088][    C1]  bpf_send_signal_common+0x2dd/0x430
[  712.462114][    C1]  ? __pfx_bpf_send_signal_common+0x10/0x10
[  712.462138][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  712.462163][    C1]  ? bpf_trace_run2+0x1fc/0x540
[  712.462184][    C1]  bpf_send_signal+0x19/0x30
[  712.462201][    C1]  bpf_prog_7ba5217f62dcd359+0x41/0x45
[  712.462215][    C1]  bpf_trace_run2+0x2ec/0x540
[  712.462238][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[  712.462258][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  712.462282][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  712.462306][    C1]  ? do_syscall_64+0x100/0x230
[  712.462325][    C1]  trace_sys_enter+0x93/0xd0
[  712.462344][    C1]  syscall_trace_enter+0xf8/0x150
[  712.462363][    C1]  do_syscall_64+0xcc/0x230
[  712.462381][    C1]  ? clear_bhb_loop+0x35/0x90
[  712.462400][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.462417][    C1] RIP: 0033:0x7f8df5f157e9
[  712.462429][    C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  712.462442][    C1] RSP: 002b:00007ffed3917e00 EFLAGS: 00000293 ORIG_RAX: 000000000000000f
[  712.462458][    C1] RAX: ffffffffffffffda RBX: 00000000000001bd RCX: 00007f8df5f157e9
[  712.462469][    C1] RDX: 00007ffed3917e00 RSI: 00007ffed3917f30 RDI: 0000000000000011
[  712.462481][    C1] RBP: 00007ffed391845c R08: 0000000000000000 R09: 7fffffffffffffff
[  712.462492][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  712.462503][    C1] R13: 0000000000088c0c R14: 0000000000088c0c R15: 00007ffed39184b0
[  712.462524][    C1]  </TASK>
[  713.504808][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  713.511736][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-next-20240822-syzkaller #0
[  713.521794][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  713.531962][   T30] Call Trace:
[  713.535254][   T30]  <TASK>
[  713.538195][   T30]  dump_stack_lvl+0x241/0x360
[  713.542908][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  713.548125][   T30]  ? __pfx__printk+0x10/0x10
[  713.552757][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  713.558764][   T30]  ? vscnprintf+0x5d/0x90
[  713.563224][   T30]  panic+0x349/0x880
[  713.567154][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  713.573350][   T30]  ? __pfx_panic+0x10/0x10
[  713.577790][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  713.583183][   T30]  ? __irq_work_queue_local+0x137/0x410
[  713.588756][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  713.594145][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  713.600318][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  713.606492][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  713.612661][   T30]  watchdog+0x1033/0x1040
[  713.617008][   T30]  ? watchdog+0x1ea/0x1040
[  713.621536][   T30]  ? __pfx_watchdog+0x10/0x10
[  713.626226][   T30]  kthread+0x2f0/0x390
[  713.630305][   T30]  ? __pfx_watchdog+0x10/0x10
[  713.634989][   T30]  ? __pfx_kthread+0x10/0x10
[  713.639588][   T30]  ret_from_fork+0x4b/0x80
[  713.644017][   T30]  ? __pfx_kthread+0x10/0x10
[  713.648616][   T30]  ret_from_fork_asm+0x1a/0x30
[  713.653412][   T30]  </TASK>
[  713.656652][   T30] Kernel Offset: disabled
[  713.660966][   T30] Rebooting in 86400 seconds..