last executing test programs:

1m7.996735528s ago: executing program 2 (id=331):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x40, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x22}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)

1m7.608165446s ago: executing program 2 (id=332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

1m6.638146591s ago: executing program 2 (id=335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

1m5.972400189s ago: executing program 2 (id=339):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10001100", 0x33fe0}], 0x1}, 0x0)

1m5.821794953s ago: executing program 3 (id=340):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1m5.368167948s ago: executing program 2 (id=343):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0xa73, &(0x7f0000003cc0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "f300e6d6ae9ed30bea2a0040000200", [0xffffffffffffffff]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

1m4.329340262s ago: executing program 3 (id=346):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000e05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

1m3.574029257s ago: executing program 2 (id=348):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000)
read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)

1m3.517083992s ago: executing program 3 (id=349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

1m2.868826389s ago: executing program 3 (id=352):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}}}}}}, 0x0)

1m1.900648555s ago: executing program 3 (id=358):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0xa73, &(0x7f0000003cc0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "f300e6d6ae9ed30bea2a0040000200", [0xffffffffffffffff]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

1m0.673663579s ago: executing program 3 (id=364):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)

47.412935862s ago: executing program 32 (id=348):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000)
read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)

44.356025117s ago: executing program 33 (id=364):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$char_usb(r2, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)

12.39603924s ago: executing program 5 (id=487):
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000940)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c002acc063ce2107b6aa0e80302be9a9beaed0561749c9b3b8e6e2ff9555946aae7060708b7860c431b77967236b8dfa7f6a1b9fb2930666ad57ff8e0f2457726f2fb8e0d2790"], 0x1, 0x4421, &(0x7f0000004500)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x4008, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8b}, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180))
sched_setscheduler(0x0, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4008040)
r3 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x2, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0x7]})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11.653112305s ago: executing program 1 (id=489):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x9}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff17, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10.916368196s ago: executing program 1 (id=491):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)

9.128185903s ago: executing program 6 (id=494):
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2a, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

8.23380494s ago: executing program 4 (id=496):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)

7.763907101s ago: executing program 6 (id=497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x3, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe47}}}, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0)

7.616178624s ago: executing program 1 (id=499):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf25030000001400078008000200000800000800010002000000680006800800060040000000590003006df050e92717cbe14ef1f6a100af5cfc029da0856f973f2ba8a9a238a5f3100c013832d8e59f45a3d1e3866a76335ecc5183e295492d7592b10fab00334e5fdfb3f704d5e2d3404c213aed91ca9a63a0976110c6810000003400"], 0x1d0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000200000004000002041001"], 0x101c}, 0x1, 0xffffffffff600000}, 0x0)

6.98365504s ago: executing program 5 (id=500):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @private2={0xfc, 0x2, '\x00', 0x4}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x40, 0x2}}}}}}, 0x0)

6.844182669s ago: executing program 4 (id=501):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x9}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff17, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.66328246s ago: executing program 6 (id=503):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r1, {}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}]}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.558288178s ago: executing program 1 (id=504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x27bae304562a63e, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

6.203665421s ago: executing program 0 (id=505):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040), 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000a00)='ext4_ext_rm_leaf\x00', r0, 0x0, 0x100000001}, 0x26)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1001f0)
fallocate(r1, 0x3, 0x1000, 0x10000)

6.200311616s ago: executing program 4 (id=506):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000fc0)='./file0\x00', 0xa00010, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d312c006f7374726963742c258cda7569643d666f726765742c6e6f6164696e6963622c756e686964652c6c6f6e67616418756e64656c6574652c756e686964652c756e686986652c005dad975075642ff2c1a8aefdbef4f03418468590e2e0ebc534a80e47661333d3d7b2adf47ff292f41ab6e579448983bc5488b641b5746dc003fd6e4fd3ddd3d81fbcfe6cafad99cf013e6f07d97286bb7f5862bf7dd86f16503cae73c9024aff367f2375169d41c4fbcfb1db097ac376ad9b70014b8dd4e57477d5b675d6081badf3f65915c3e32bf558c0f9d407cb9c776a753a0aa91464"], 0x1, 0xc43, &(0x7f00000010c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x1)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))

5.736180114s ago: executing program 1 (id=507):
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2a, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

5.733252442s ago: executing program 5 (id=508):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

5.402303539s ago: executing program 6 (id=509):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x300, 0x80000300}})

5.272863033s ago: executing program 1 (id=510):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='data_checksum=xxhash,fsck,journal_flush_Sisabled,fsck,journal_flush_disabled,ratelimit_errors,fix_errors=yes,reconstruct_alloc,wide_macs,hash,\x00'], 0x1, 0x5979, &(0x7f000000b580)="$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")

4.903167702s ago: executing program 0 (id=511):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)

4.239972819s ago: executing program 5 (id=512):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001dc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000008000000001fffd000c0099000100"], 0x20}}, 0x0)

3.90403296s ago: executing program 0 (id=513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x3, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe47}}}, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0)

3.898808502s ago: executing program 6 (id=514):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf25030000001400078008000200000800000800010002000000680006800800060040000000590003006df050e92717cbe14ef1f6a100af5cfc029da0856f973f2ba8a9a238a5f3100c013832d8e59f45a3d1e3866a76335ecc5183e295492d7592b10fab00334e5fdfb3f704d5e2d3404c213aed91ca9a63a0976110c6810000003400"], 0x1d0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000200000004000002041001"], 0x101c}, 0x1, 0xffffffffff600000}, 0x0)

3.26952893s ago: executing program 0 (id=515):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x98a, 0x0, 0x10}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)

3.265067597s ago: executing program 6 (id=516):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@discard}, {@nodatacow}, {@commit={'commit', 0x3d, 0x80000001}}, {@usebackuproot}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x67, 0x30, 0x65, 0x25]}}]}, 0x3, 0x510e, &(0x7f000000a240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000080)=""/49, 0x31)

3.216809354s ago: executing program 4 (id=517):
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x2100, 0x0)

2.804297611s ago: executing program 5 (id=518):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000001c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x41}}], 0x20, 0x4048800}, 0x10)

1.927841181s ago: executing program 0 (id=519):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r1, {}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x44}}]}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.448315582s ago: executing program 5 (id=520):
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2a, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

930.585869ms ago: executing program 4 (id=521):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040), 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000a00)='ext4_ext_rm_leaf\x00', r0, 0x0, 0x100000001}, 0x26)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x3, 0x1000, 0x10000)

261.002272ms ago: executing program 0 (id=522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

0s ago: executing program 4 (id=523):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts.
[  170.277036][ T5783] cgroup: Unknown subsys name 'net'
[  170.402130][ T5783] cgroup: Unknown subsys name 'cpuset'
[  170.418839][ T5783] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  215.300228][ T5783] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  219.067819][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  219.074625][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  220.727014][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  220.736546][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  220.745955][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  220.754335][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.771872][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  220.780522][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.790488][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  220.799102][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  220.807365][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.815400][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.826507][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  220.835274][ T5810] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  220.848013][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.858000][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  220.858587][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.873221][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.878974][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.882725][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.892161][ T5817] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  220.903874][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.918145][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.921041][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  220.936758][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.951677][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  220.959664][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.972193][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  220.983542][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  220.992689][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.010533][ T5817] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  221.032695][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  222.029139][ T5800] chnl_net:caif_netlink_parms(): no params data found
[  222.531886][ T5799] chnl_net:caif_netlink_parms(): no params data found
[  222.903839][ T5805] chnl_net:caif_netlink_parms(): no params data found
[  222.955338][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.963552][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.971793][ T5800] bridge_slave_0: entered allmulticast mode
[  222.971865][ T5817] Bluetooth: hci0: command tx timeout
[  222.986713][ T5800] bridge_slave_0: entered promiscuous mode
[  222.998974][ T5809] chnl_net:caif_netlink_parms(): no params data found
[  223.057386][ T5817] Bluetooth: hci3: command tx timeout
[  223.061225][ T5810] Bluetooth: hci1: command tx timeout
[  223.124254][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.132214][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.139941][ T5800] bridge_slave_1: entered allmulticast mode
[  223.150035][ T5800] bridge_slave_1: entered promiscuous mode
[  223.159674][ T5810] Bluetooth: hci2: command tx timeout
[  223.211255][ T5810] Bluetooth: hci4: command tx timeout
[  223.417268][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.451972][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.630368][ T5808] chnl_net:caif_netlink_parms(): no params data found
[  223.651744][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.659452][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.667463][ T5799] bridge_slave_0: entered allmulticast mode
[  223.676431][ T5799] bridge_slave_0: entered promiscuous mode
[  223.705408][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.713353][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.721164][ T5799] bridge_slave_1: entered allmulticast mode
[  223.730249][ T5799] bridge_slave_1: entered promiscuous mode
[  223.817533][ T5800] team0: Port device team_slave_0 added
[  223.927986][ T5800] team0: Port device team_slave_1 added
[  224.044345][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.126191][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.135089][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.143432][ T5805] bridge_slave_0: entered allmulticast mode
[  224.152614][ T5805] bridge_slave_0: entered promiscuous mode
[  224.170639][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.180549][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.188815][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.196819][ T5805] bridge_slave_1: entered allmulticast mode
[  224.205936][ T5805] bridge_slave_1: entered promiscuous mode
[  224.285716][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.293845][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.303396][ T5809] bridge_slave_0: entered allmulticast mode
[  224.312722][ T5809] bridge_slave_0: entered promiscuous mode
[  224.329327][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.338083][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.367064][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.493878][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.502214][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.510104][ T5809] bridge_slave_1: entered allmulticast mode
[  224.519099][ T5809] bridge_slave_1: entered promiscuous mode
[  224.537380][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.544821][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.572237][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.739137][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.874483][ T5799] team0: Port device team_slave_0 added
[  224.904441][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.957017][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.977045][ T5799] team0: Port device team_slave_1 added
[  224.993867][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.052854][ T5810] Bluetooth: hci0: command tx timeout
[  225.131336][ T5810] Bluetooth: hci1: command tx timeout
[  225.137003][ T5810] Bluetooth: hci3: command tx timeout
[  225.196216][ T5805] team0: Port device team_slave_0 added
[  225.206040][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.213842][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.221889][ T5808] bridge_slave_0: entered allmulticast mode
[  225.221979][ T5810] Bluetooth: hci2: command tx timeout
[  225.230521][ T5808] bridge_slave_0: entered promiscuous mode
[  225.291060][ T5810] Bluetooth: hci4: command tx timeout
[  225.308349][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.315810][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.342261][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.398735][ T5805] team0: Port device team_slave_1 added
[  225.411618][ T5809] team0: Port device team_slave_0 added
[  225.453161][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.461526][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.469238][ T5808] bridge_slave_1: entered allmulticast mode
[  225.478766][ T5808] bridge_slave_1: entered promiscuous mode
[  225.498639][ T5800] hsr_slave_0: entered promiscuous mode
[  225.507741][ T5800] hsr_slave_1: entered promiscuous mode
[  225.523291][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.530464][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.556870][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.575228][ T5809] team0: Port device team_slave_1 added
[  225.628680][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.635978][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.662517][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.806797][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.814082][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.840536][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.859632][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.866883][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.893340][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.942611][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.986659][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.995052][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.022642][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.122043][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.209313][ T5799] hsr_slave_0: entered promiscuous mode
[  226.219111][ T5799] hsr_slave_1: entered promiscuous mode
[  226.228217][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.236252][ T5799] Cannot create hsr debugfs directory
[  226.439891][ T5809] hsr_slave_0: entered promiscuous mode
[  226.448987][ T5809] hsr_slave_1: entered promiscuous mode
[  226.457390][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.465230][ T5809] Cannot create hsr debugfs directory
[  226.503408][ T5808] team0: Port device team_slave_0 added
[  226.522176][ T5805] hsr_slave_0: entered promiscuous mode
[  226.533431][ T5805] hsr_slave_1: entered promiscuous mode
[  226.541986][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.549735][ T5805] Cannot create hsr debugfs directory
[  226.622674][ T5808] team0: Port device team_slave_1 added
[  226.983699][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.991169][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.017445][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.126318][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.133674][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.160002][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.180736][ T5810] Bluetooth: hci0: command tx timeout
[  227.216829][ T5810] Bluetooth: hci3: command tx timeout
[  227.222679][ T5817] Bluetooth: hci1: command tx timeout
[  227.293225][ T5810] Bluetooth: hci2: command tx timeout
[  227.381006][ T5810] Bluetooth: hci4: command tx timeout
[  227.559996][ T5808] hsr_slave_0: entered promiscuous mode
[  227.568940][ T5808] hsr_slave_1: entered promiscuous mode
[  227.577611][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.587531][ T5808] Cannot create hsr debugfs directory
[  227.986893][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.015171][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.106732][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.164815][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  228.225743][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  228.286450][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  228.325662][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  228.346438][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  228.467754][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  228.593571][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  228.617070][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  228.640505][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  228.659483][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  228.773047][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  228.869357][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  228.892167][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  229.048169][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  229.092358][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  229.114337][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  229.141409][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  229.225409][ T5810] Bluetooth: hci0: command tx timeout
[  229.293123][ T5810] Bluetooth: hci3: command tx timeout
[  229.298811][ T5810] Bluetooth: hci1: command tx timeout
[  229.374171][ T5810] Bluetooth: hci2: command tx timeout
[  229.452003][ T5810] Bluetooth: hci4: command tx timeout
[  229.551880][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.780282][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[  229.858577][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.925935][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.933698][ T1765] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.991615][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.012973][ T1765] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.020633][ T1765] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.071677][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.156061][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[  230.200324][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[  230.253902][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[  230.278166][ T1881] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.286108][ T1881] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.385876][ T1881] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.393698][ T1881] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.409464][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.417240][ T1881] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.449939][ T1881] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.457660][ T1881] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.554521][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.562256][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.657735][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.765926][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.773733][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.894662][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.106261][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.395392][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[  231.513104][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.520937][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.623285][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.631144][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.623239][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.906025][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.046762][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.239507][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.426732][ T5809] veth0_vlan: entered promiscuous mode
[  233.618030][ T5809] veth1_vlan: entered promiscuous mode
[  233.631978][ T5805] veth0_vlan: entered promiscuous mode
[  233.759306][ T5805] veth1_vlan: entered promiscuous mode
[  233.839247][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.895718][ T5799] veth0_vlan: entered promiscuous mode
[  234.029696][ T5799] veth1_vlan: entered promiscuous mode
[  234.144132][ T5809] veth0_macvtap: entered promiscuous mode
[  234.204959][ T5805] veth0_macvtap: entered promiscuous mode
[  234.239831][ T5809] veth1_macvtap: entered promiscuous mode
[  234.268201][ T5805] veth1_macvtap: entered promiscuous mode
[  234.497622][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.506910][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.519372][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.533811][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.593405][ T5808] veth0_vlan: entered promiscuous mode
[  234.607384][ T5799] veth0_macvtap: entered promiscuous mode
[  234.666013][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.708180][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.720298][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.734446][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.750280][ T5808] veth1_vlan: entered promiscuous mode
[  234.765283][ T5799] veth1_macvtap: entered promiscuous mode
[  234.861705][ T5805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.871665][ T5805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.881120][ T5805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.890275][ T5805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.931103][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.940182][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.949858][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.959613][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.012535][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.023605][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.033919][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.044797][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.059091][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.242899][ T5808] veth0_macvtap: entered promiscuous mode
[  235.300511][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.313253][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.326819][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.337789][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.352237][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.388292][ T5808] veth1_macvtap: entered promiscuous mode
[  235.641064][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.652953][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.663138][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.673892][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.684064][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.695941][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.710123][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.735148][ T5799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.744368][ T5799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.753626][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.762781][ T5799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.892942][ T5800] veth0_vlan: entered promiscuous mode
[  235.999390][ T5800] veth1_vlan: entered promiscuous mode
[  236.065685][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.078677][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.089619][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.103136][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.113355][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.124130][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.138439][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.318713][ T5800] veth0_macvtap: entered promiscuous mode
[  236.384761][ T5800] veth1_macvtap: entered promiscuous mode
[  236.455836][ T5808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.465154][ T5808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.475260][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.485024][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.600658][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.613442][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.623644][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.634410][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.644560][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.655455][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.665646][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.676394][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.690523][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.955734][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.966536][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.977587][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.990717][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.001194][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.012096][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.022241][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.033053][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.047342][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.234902][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.245101][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.256702][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.267529][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.541714][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.549707][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.683268][ T3915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.692562][ T3915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.838513][ T3777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.848021][ T3777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.976063][ T1881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.984569][ T1881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.223954][ T5805] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  242.254082][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.262806][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.462125][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.470304][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.836388][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  243.108982][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.117272][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.354158][ T1765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.366254][ T1765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.614841][ T3813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.623133][ T3813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.910217][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.918462][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.986261][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[  244.796203][ T6001] loop1: detected capacity change from 0 to 128
[  244.980966][ T6001] ufs: You didn't specify the type of your ufs filesystem
[  244.980966][ T6001] 
[  244.980966][ T6001] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  244.980966][ T6001] 
[  244.980966][ T6001] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  245.079838][ T6003] loop4: detected capacity change from 0 to 512
[  245.157952][ T6003] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  245.158243][ T6001] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  245.171507][ T6003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  245.392286][ T6003] EXT4-fs (loop4): 1 orphan inode deleted
[  245.398402][ T6003] EXT4-fs (loop4): 1 truncate cleaned up
[  245.412357][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.988710][ T6003] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  246.037200][ T6003] EXT4-fs (loop4): Remounting filesystem read-only
[  246.057510][ T6003] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -5)
[  246.366581][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.006033][ T6016] loop2: detected capacity change from 0 to 4096
[  247.048548][ T6016] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  247.105856][ T6014] tipc: Started in network mode
[  247.111973][ T6014] tipc: Node identity ffffffff, cluster identity 4711
[  247.119093][ T6014] tipc: Node number set to 4294967295
[  247.603116][ T6018] loop4: detected capacity change from 0 to 4096
[  247.604610][ T6020] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  247.633762][ T6018] =======================================================
[  247.633762][ T6018] WARNING: The mand mount option has been deprecated and
[  247.633762][ T6018]          and is ignored by this kernel. Remove the mand
[  247.633762][ T6018]          option from the mount to silence this warning.
[  247.633762][ T6018] =======================================================
[  247.826496][ T6018] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  248.091160][ T6018] ntfs3(loop4): Failed to load $Extend (-22).
[  248.097658][ T6018] ntfs3(loop4): Failed to initialize $Extend.
[  248.597325][ T6018] overlayfs: upper fs does not support tmpfile.
[  248.643084][ T6018] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  248.937496][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[  249.316236][ T6036] loop3: detected capacity change from 0 to 512
[  249.388311][ T6036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  249.501354][ T6036] EXT4-fs (loop3): 1 orphan inode deleted
[  249.510295][ T6036] EXT4-fs (loop3): 1 truncate cleaned up
[  249.518829][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.843258][ T6036] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  250.019860][ T6036] EXT4-fs (loop3): Remounting filesystem read-only
[  250.032293][ T6036] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -5)
[  251.167290][ T5808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.863096][ T5856] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  252.028872][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.040651][ T5856] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  252.050140][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.145885][ T5856] usb 2-1: config 0 descriptor??
[  252.536475][ T6056] loop2: detected capacity change from 0 to 4096
[  252.567767][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  252.633628][ T6056] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  252.750397][ T5856] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  252.795106][ T5856] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5
[  252.804729][    T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  252.818807][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  252.830377][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  252.840654][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  252.854225][    T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  252.863772][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.195905][    T8] usb 4-1: config 0 descriptor??
[  253.737126][    T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  253.869787][ T5856] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  253.890379][ T5856] usb 2-1: USB disconnect, device number 2
[  253.965294][    T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  254.162646][    T8] usb 4-1: USB disconnect, device number 2
[  255.000408][ T6080] loop1: detected capacity change from 0 to 512
[  255.021739][ T6083] netlink: 'syz.0.38': attribute type 10 has an invalid length.
[  255.318568][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.328717][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.355727][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.363647][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.372464][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.380196][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.398504][ T6083] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  255.581169][ T6080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  255.854768][ T6080] EXT4-fs (loop1): 1 orphan inode deleted
[  255.862267][ T6080] EXT4-fs (loop1): 1 truncate cleaned up
[  255.984991][ T6080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.070406][ T6093] netlink: zone id is out of range
[  256.076042][ T6093] netlink: zone id is out of range
[  256.081554][ T6093] netlink: zone id is out of range
[  256.086866][ T6093] netlink: zone id is out of range
[  256.093832][ T6093] netlink: zone id is out of range
[  256.099149][ T6093] netlink: zone id is out of range
[  256.105100][ T6093] netlink: zone id is out of range
[  256.110427][ T6093] netlink: zone id is out of range
[  256.115937][ T6093] netlink: zone id is out of range
[  256.121373][ T6093] netlink: zone id is out of range
[  256.816368][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.591030][ T6107] loop3: detected capacity change from 0 to 4096
[  258.681352][ T6107] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  259.546318][ T6132] loop1: detected capacity change from 0 to 512
[  259.647133][ T6132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  259.869537][ T6132] EXT4-fs (loop1): 1 orphan inode deleted
[  259.876018][ T6132] EXT4-fs (loop1): 1 truncate cleaned up
[  259.883873][ T6132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.078727][ T6132] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  260.259150][ T6132] EXT4-fs (loop1): Remounting filesystem read-only
[  260.266961][ T6142] netlink: 68 bytes leftover after parsing attributes in process `syz.3.57'.
[  260.360509][ T6132] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -5)
[  260.775004][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  260.833617][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'.
[  260.843211][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'.
[  261.001220][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.415488][ T6153] loop1: detected capacity change from 0 to 128
[  261.454266][ T6153] ufs: You didn't specify the type of your ufs filesystem
[  261.454266][ T6153] 
[  261.454266][ T6153] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  261.454266][ T6153] 
[  261.454266][ T6153] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  261.605542][ T6153] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  262.945155][ T6161] loop2: detected capacity change from 0 to 4096
[  263.051411][ T6161] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  263.566845][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'.
[  263.924890][ T6174] loop3: detected capacity change from 0 to 16
[  264.009962][ T6174] erofs (device loop3): unidentified algorithms fff0, please upgrade kernel
[  264.318347][ T6177] netlink: 68 bytes leftover after parsing attributes in process `syz.2.73'.
[  264.489283][ T6178] loop1: detected capacity change from 0 to 512
[  264.566039][ T6178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  264.750058][ T6178] EXT4-fs (loop1): 1 orphan inode deleted
[  264.756822][ T6178] EXT4-fs (loop1): 1 truncate cleaned up
[  264.766935][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.783374][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'.
[  264.792655][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'.
[  265.749145][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.171652][ T6196] loop3: detected capacity change from 0 to 128
[  266.181255][ T6196] ufs: You didn't specify the type of your ufs filesystem
[  266.181255][ T6196] 
[  266.181255][ T6196] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  266.181255][ T6196] 
[  266.181255][ T6196] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  266.269799][ T6196] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  266.754627][ T6207] lo speed is unknown, defaulting to 1000
[  266.764239][ T6207] lo speed is unknown, defaulting to 1000
[  266.771428][ T6207] lo speed is unknown, defaulting to 1000
[  266.786844][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'.
[  267.297780][ T6213] netlink: 68 bytes leftover after parsing attributes in process `syz.4.87'.
[  267.306138][ T6207] infiniband s
z1: set active
[  267.312544][ T6207] infiniband s
z1: added lo
[  267.318526][    T8] lo speed is unknown, defaulting to 1000
[  267.372081][ T5856] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  267.631360][ T5856] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  267.640393][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  267.649991][ T5856] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  267.716504][ T6207] RDS/IB: s
z1: added
[  267.721064][ T6207] smc: adding ib device s
z1 with port count 1
[  267.727469][ T6207] smc:    ib device s
z1 port 1 has pnetid 
[  267.738636][ T6207] lo speed is unknown, defaulting to 1000
[  267.922503][ T5887] lo speed is unknown, defaulting to 1000
[  267.992890][ T5856] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  268.002477][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  268.011033][ T5856] usb 3-1: Product: syz
[  268.015469][ T5856] usb 3-1: Manufacturer: syz
[  268.134772][ T5856] cdc_wdm 3-1:1.0: skipping garbage
[  268.142252][ T5856] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  268.316698][ T5887] usb 3-1: USB disconnect, device number 2
[  268.340179][ T6220] Zero length message leads to an empty skb
[  268.482364][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.90'.
[  268.491824][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.90'.
[  268.931236][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  269.047288][ T6207] lo speed is unknown, defaulting to 1000
[  269.307455][ T5887] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  269.316695][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  269.326413][ T5887] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  269.376031][ T5887] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  269.386174][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  269.394979][ T5887] usb 3-1: Product: syz
[  269.399394][ T5887] usb 3-1: Manufacturer: syz
[  269.446269][ T5887] cdc_wdm 3-1:1.0: skipping garbage
[  269.452106][ T5887] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  269.859621][ T6207] lo speed is unknown, defaulting to 1000
[  270.264152][ T6207] lo speed is unknown, defaulting to 1000
[  270.680211][ T6207] lo speed is unknown, defaulting to 1000
[  271.395001][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'.
[  271.594375][ T5887] usb 3-1: USB disconnect, device number 3
[  271.902403][ T6245] netlink: 68 bytes leftover after parsing attributes in process `syz.1.100'.
[  273.009601][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.104'.
[  273.019103][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.104'.
[  273.345221][ T6253] erspan0: entered promiscuous mode
[  273.537564][ T6260] io-wq is not configured for unbound workers
[  273.732133][ T6253] gretap0: entered promiscuous mode
[  274.639234][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'.
[  274.984989][ T6251] loop2: detected capacity change from 0 to 32768
[  275.035470][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  275.073153][ T6251] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.161872][ T6251] XFS (loop2): AIL initialisation failed: error -12
[  275.207942][ T6251] XFS (loop2): log mount failed
[  275.244335][ T6289] netlink: 68 bytes leftover after parsing attributes in process `syz.3.115'.
[  275.293593][    T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  275.302858][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  275.314219][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  275.341599][    T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  275.351111][    T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  275.359452][    T8] usb 2-1: Product: syz
[  275.364501][    T8] usb 2-1: Manufacturer: syz
[  275.567490][    T8] cdc_wdm 2-1:1.0: skipping garbage
[  275.573226][    T8] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  275.722427][ T1987] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  275.882084][ T1987] usb 5-1: Using ep0 maxpacket: 16
[  275.963638][ T1987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  276.013954][ T1987] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  276.023640][ T1987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.033352][ T1987] usb 5-1: Product: syz
[  276.037765][ T1987] usb 5-1: Manufacturer: syz
[  276.043227][ T1987] usb 5-1: SerialNumber: syz
[  276.138346][    T8] usb 2-1: USB disconnect, device number 3
[  276.173165][ T1987] usb 5-1: config 0 descriptor??
[  276.238464][ T1987] hub 5-1:0.0: bad descriptor, ignoring hub
[  276.245633][ T1987] hub 5-1:0.0: probe with driver hub failed with error -5
[  276.261946][ T1987] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6
[  276.621357][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  277.964018][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'.
[  277.975084][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'.
[  278.426405][    T8] usb 2-1: device descriptor read/all, error -71
[  278.527704][ T6297] loop3: detected capacity change from 0 to 32768
[  278.645341][ T6297] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  278.882905][ T5887] usb 5-1: USB disconnect, device number 2
[  279.091474][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'.
[  279.772751][ T6297] XFS (loop3): Ending clean mount
[  279.980022][ T6336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.130'.
[  280.007342][ T5808] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  280.151900][ T5887] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  280.391597][ T5887] usb 5-1: Using ep0 maxpacket: 8
[  280.417851][ T5887] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  280.426627][ T5887] usb 5-1: config 0 has no interface number 0
[  280.434591][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  280.446092][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  280.458087][ T5887] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  280.469496][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  280.482977][ T5887] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  280.492570][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.510031][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  280.516968][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  280.773889][ T5887] usb 5-1: config 0 descriptor??
[  280.844375][ T5887] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  280.968140][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'.
[  280.978035][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'.
[  281.062203][ T5887] usb 5-1: USB disconnect, device number 3
[  281.226323][ T5887] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  281.402255][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  281.584363][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[  281.662581][    T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  281.671851][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  281.682038][    T8] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  281.735140][    T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  281.746527][    T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  281.754999][    T8] usb 4-1: Product: syz
[  281.760624][    T8] usb 4-1: Manufacturer: syz
[  281.781251][ T6349] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  281.785865][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  281.787808][ T6349] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  281.792996][    T8] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  281.825615][ T6349] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  281.838423][ T6349] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  281.845137][ T6349] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  281.855384][ T6349] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  281.867538][ T6349] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  281.874079][ T6349] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  281.884799][ T6349] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  281.894397][ T6349] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  281.900856][ T6349] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  281.977012][ T6349] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  282.186126][    T8] usb 4-1: USB disconnect, device number 3
[  282.621698][ T6363] net_ratelimit: 30 callbacks suppressed
[  282.621780][ T6363] netlink: zone id is out of range
[  282.633261][ T6363] netlink: zone id is out of range
[  282.638587][ T6363] netlink: zone id is out of range
[  282.644078][ T6363] netlink: zone id is out of range
[  282.649399][ T6363] netlink: zone id is out of range
[  282.654973][ T6363] netlink: zone id is out of range
[  282.660276][ T6363] netlink: zone id is out of range
[  282.665804][ T6363] netlink: zone id is out of range
[  282.671278][ T6363] netlink: zone id is out of range
[  282.676577][ T6363] netlink: zone id is out of range
[  282.861359][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  283.336049][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout
[  283.531985][    T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  283.541040][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  283.550295][    T8] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  283.582284][ T6369] loop1: detected capacity change from 0 to 512
[  283.711052][ T6369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  283.825394][    T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  283.834921][    T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  283.840052][ T6369] EXT4-fs (loop1): 1 orphan inode deleted
[  283.843306][    T8] usb 4-1: Product: syz
[  283.843419][    T8] usb 4-1: Manufacturer: syz
[  283.859065][ T6369] EXT4-fs (loop1): 1 truncate cleaned up
[  283.866725][ T6369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.892521][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  283.898049][    T8] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  283.931609][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout
[  283.937903][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  283.937923][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout
[  283.976280][ T6369] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  284.031980][ T6369] EXT4-fs (loop1): Remounting filesystem read-only
[  284.041733][ T6369] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -5)
[  284.309246][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.331922][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[  284.995526][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'.
[  285.005319][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'.
[  285.371389][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  285.881789][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[  286.014006][ T6389] loop4: detected capacity change from 0 to 64
[  286.050969][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  286.057382][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  286.064734][   T51] Bluetooth: hci4: command 0x0c1a tx timeout
[  286.132693][ T5887] usb 4-1: USB disconnect, device number 4
[  286.140384][ T6389] hfs: unable to locate alternate MDB
[  286.146329][ T6389] hfs: continuing without an alternate MDB
[  286.581480][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.591384][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.192371][ T6405] loop0: detected capacity change from 0 to 512
[  287.226689][ T6405] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  287.392548][ T6405] EXT4-fs (loop0): 1 orphan inode deleted
[  287.398569][ T6405] EXT4-fs (loop0): 1 truncate cleaned up
[  287.406476][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.457588][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  287.677725][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.830767][    C0] hrtimer: interrupt took 255259 ns
[  288.100418][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  288.107260][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  288.118267][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  288.721150][ T1987] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  288.898059][ T1987] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  288.907239][ T1987] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  288.916716][ T1987] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  289.050600][ T1987] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  289.061435][ T1987] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  289.069719][ T1987] usb 2-1: Product: syz
[  289.074480][ T1987] usb 2-1: Manufacturer: syz
[  289.165064][ T1987] cdc_wdm 2-1:1.0: skipping garbage
[  289.170934][ T1987] cdc_wdm 2-1:1.0: skipping garbage
[  289.176419][ T1987] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  289.181737][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.194069][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.368722][ T6441] loop0: detected capacity change from 0 to 512
[  289.386607][ T6441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  289.397251][ T1987] usb 2-1: USB disconnect, device number 6
[  289.489046][ T6441] EXT4-fs (loop0): 1 orphan inode deleted
[  289.496023][ T6441] EXT4-fs (loop0): 1 truncate cleaned up
[  289.503960][ T6441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.735027][ T6446] loop2: detected capacity change from 0 to 512
[  289.892009][ T1987] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  289.908199][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.949035][ T6446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.962899][ T6446] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  290.398039][ T1987] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  290.407249][ T1987] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  290.416792][ T1987] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  290.540093][ T1987] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  290.549977][ T1987] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  290.558529][ T1987] usb 2-1: Product: syz
[  290.563090][ T1987] usb 2-1: Manufacturer: syz
[  290.596139][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.707188][ T1987] cdc_wdm 2-1:1.0: skipping garbage
[  290.713308][ T1987] cdc_wdm 2-1:1.0: skipping garbage
[  290.718789][ T1987] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  290.773648][ T6452] loop3: detected capacity change from 0 to 4096
[  290.829178][ T6452] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  291.038077][ T6458] team0: entered promiscuous mode
[  291.043498][ T6458] team_slave_0: entered promiscuous mode
[  291.050281][ T6458] team_slave_1: entered promiscuous mode
[  291.135485][ T6458] team0: left promiscuous mode
[  291.141349][ T6458] team_slave_0: left promiscuous mode
[  291.147999][ T6458] team_slave_1: left promiscuous mode
[  292.079435][ T6477] loop2: detected capacity change from 0 to 128
[  292.096353][ T6477] ufs: You didn't specify the type of your ufs filesystem
[  292.096353][ T6477] 
[  292.096353][ T6477] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  292.096353][ T6477] 
[  292.096353][ T6477] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  292.127604][    C1] vkms_vblank_simulate: vblank timer overrun
[  292.196542][ T6477] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  292.559505][ T1987] usb 2-1: USB disconnect, device number 7
[  293.031818][ T6484] loop4: detected capacity change from 0 to 4096
[  293.127829][ T6484] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  294.874255][ T1987] IPVS: starting estimator thread 0...
[  294.961641][ T6502] IPVS: using max 240 ests per chain, 12000 per kthread
[  297.217037][ T6517] loop1: detected capacity change from 0 to 128
[  297.228116][ T6517] ufs: You didn't specify the type of your ufs filesystem
[  297.228116][ T6517] 
[  297.228116][ T6517] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  297.228116][ T6517] 
[  297.228116][ T6517] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  297.363156][ T6517] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  297.941986][ T6521] loop0: detected capacity change from 0 to 4096
[  297.964391][ T6521] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  298.031179][   T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  298.248669][   T44] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  298.257773][   T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  298.267214][   T44] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  298.331764][   T44] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  298.341451][   T44] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  298.350651][   T44] usb 4-1: Product: syz
[  298.355292][   T44] usb 4-1: Manufacturer: syz
[  298.393196][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  298.398787][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  298.404438][   T44] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  298.728175][ T5861] usb 4-1: USB disconnect, device number 5
[  299.133450][ T5861] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  299.324503][ T5861] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  299.333702][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  299.343326][ T5861] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  299.637340][ T5861] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  299.647102][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  299.655738][ T5861] usb 4-1: Product: syz
[  299.660211][ T5861] usb 4-1: Manufacturer: syz
[  299.687550][   T44] IPVS: starting estimator thread 0...
[  299.841451][ T6542] IPVS: using max 240 ests per chain, 12000 per kthread
[  299.865125][ T5861] cdc_wdm 4-1:1.0: skipping garbage
[  299.870631][ T5861] cdc_wdm 4-1:1.0: skipping garbage
[  299.876445][ T5861] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  300.275610][   T44] usb 4-1: USB disconnect, device number 6
[  301.064697][ T6555] loop3: detected capacity change from 0 to 128
[  301.104388][ T6555] ufs: You didn't specify the type of your ufs filesystem
[  301.104388][ T6555] 
[  301.104388][ T6555] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  301.104388][ T6555] 
[  301.104388][ T6555] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  301.135253][    C0] vkms_vblank_simulate: vblank timer overrun
[  301.286331][ T6555] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  302.476962][ T6553] loop0: detected capacity change from 0 to 4096
[  302.768659][ T6565] loop2: detected capacity change from 0 to 2048
[  302.781633][ T6553] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  302.843258][ T6565]  loop2: p1 < > p2 p3 p4 < p5 >
[  302.932299][ T6565] loop2: p2 size 4194304000 extends beyond EOD, truncated
[  302.958146][ T6565] loop2: p3 start 483201 is beyond EOD, truncated
[  303.005372][ T6565] loop2: p5 size 4194304000 extends beyond EOD, truncated
[  305.260045][ T6589] loop3: detected capacity change from 0 to 128
[  305.324033][ T6589] ufs: You didn't specify the type of your ufs filesystem
[  305.324033][ T6589] 
[  305.324033][ T6589] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  305.324033][ T6589] 
[  305.324033][ T6589] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  305.396327][ T6589] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  306.136965][ T6600] net_ratelimit: 10 callbacks suppressed
[  306.137045][ T6600] netlink: zone id is out of range
[  306.149436][ T6600] netlink: zone id is out of range
[  306.154941][ T6600] netlink: zone id is out of range
[  306.160338][ T6600] netlink: zone id is out of range
[  306.166086][ T6600] netlink: zone id is out of range
[  306.173280][ T6600] netlink: zone id is out of range
[  306.178606][ T6600] netlink: zone id is out of range
[  306.184461][ T6600] netlink: zone id is out of range
[  306.189914][ T6600] netlink: zone id is out of range
[  306.195394][ T6600] netlink: zone id is out of range
[  306.246920][ T6602] bridge0: port 3(syz_tun) entered blocking state
[  306.255596][ T6602] bridge0: port 3(syz_tun) entered disabled state
[  306.263056][ T6602] syz_tun: entered allmulticast mode
[  306.270264][ T6602] syz_tun: left allmulticast mode
[  307.605825][ T6622] vimc link validate: Sensor B:src:256x16 (0x33424752, 0, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  308.022816][ T6626] loop4: detected capacity change from 0 to 128
[  308.032015][ T6626] ufs: You didn't specify the type of your ufs filesystem
[  308.032015][ T6626] 
[  308.032015][ T6626] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  308.032015][ T6626] 
[  308.032015][ T6626] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  308.131291][ T6626] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  308.822064][ T6640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.922374][ T6637] loop2: detected capacity change from 0 to 2048
[  308.982689][ T6642] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  309.086903][ T6644] loop4: detected capacity change from 0 to 64
[  309.221480][ T6637] loop2: detected capacity change from 2048 to 0
[  309.252088][ T6637] syz.2.253: attempt to access beyond end of device
[  309.252088][ T6637] loop2: rw=3, sector=34, nr_sectors = 6 limit=0
[  309.265974][ T6637] syz.2.253: attempt to access beyond end of device
[  309.265974][ T6637] loop2: rw=2051, sector=40, nr_sectors = 24 limit=0
[  309.553871][ T5809] syz-executor: attempt to access beyond end of device
[  309.553871][ T5809] loop2: rw=0, sector=92, nr_sectors = 2 limit=0
[  309.569381][ T5809] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130)
[  309.579295][ T5809] syz-executor: attempt to access beyond end of device
[  309.579295][ T5809] loop2: rw=0, sector=92, nr_sectors = 2 limit=0
[  309.593092][ T5809] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=130)
[  309.603791][ T5809] NILFS error (device loop2): nilfs_readdir: bad page in #12
[  309.612697][ T5809] syz-executor: attempt to access beyond end of device
[  309.612697][ T5809] loop2: rw=395265, sector=2040, nr_sectors = 2 limit=0
[  309.626844][ T5809] Buffer I/O error on dev loop2, logical block 1020, lost sync page write
[  309.635820][ T5809] NILFS (loop2): unable to write superblock: err=-5
[  309.643013][ T5809] syz-executor: attempt to access beyond end of device
[  309.643013][ T5809] loop2: rw=395265, sector=2, nr_sectors = 2 limit=0
[  309.656895][ T5809] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  309.665804][ T5809] NILFS (loop2): unable to write superblock: err=-5
[  309.672892][ T5809] Remounting filesystem read-only
[  309.678282][   T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  309.702099][ T5809] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  309.980995][   T44] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  309.989939][   T44] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  310.002777][   T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  310.012356][   T44] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.044953][   T44] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  310.054913][   T44] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  310.063381][   T44] usb 4-1: Product: syz
[  310.067806][   T44] usb 4-1: Manufacturer: syz
[  310.118141][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  310.125150][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  310.130641][   T44] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  310.155161][ T6654] loop4: detected capacity change from 0 to 512
[  310.192538][ T6654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  310.294979][ T6654] EXT4-fs (loop4): 1 orphan inode deleted
[  310.301704][ T6654] EXT4-fs (loop4): 1 truncate cleaned up
[  310.309333][ T6654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.386128][   T44] usb 4-1: USB disconnect, device number 7
[  310.425328][ T6654] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.261: iget: bad extra_isize 46 (inode size 256)
[  310.498072][ T6654] EXT4-fs (loop4): Remounting filesystem read-only
[  310.723698][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.842548][ T6661] vimc link validate: Sensor B:src:256x16 (0x33424752, 0, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  310.902074][ T5861] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  311.134808][ T5861] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  311.144435][ T5861] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  311.155623][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  311.165181][ T5861] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  311.168998][ T6665] net_ratelimit: 30 callbacks suppressed
[  311.169074][ T6665] netlink: zone id is out of range
[  311.191241][ T6665] netlink: zone id is out of range
[  311.196534][ T6665] netlink: zone id is out of range
[  311.202051][ T6665] netlink: zone id is out of range
[  311.207441][ T6665] netlink: zone id is out of range
[  311.214115][ T6665] netlink: zone id is out of range
[  311.219425][ T6665] netlink: zone id is out of range
[  311.224875][ T6665] netlink: zone id is out of range
[  311.230168][ T6665] netlink: zone id is out of range
[  311.235775][ T6665] netlink: zone id is out of range
[  311.241841][ T5861] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  311.252048][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  311.260397][ T5861] usb 4-1: Product: syz
[  311.265013][ T5861] usb 4-1: Manufacturer: syz
[  311.354151][ T5861] cdc_wdm 4-1:1.0: skipping garbage
[  311.359711][ T5861] cdc_wdm 4-1:1.0: skipping garbage
[  311.365416][ T5861] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  311.805815][ T6670] loop0: detected capacity change from 0 to 128
[  311.826210][ T6670] ufs: You didn't specify the type of your ufs filesystem
[  311.826210][ T6670] 
[  311.826210][ T6670] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  311.826210][ T6670] 
[  311.826210][ T6670] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  311.941375][ T6670] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  312.080022][ T6668] loop2: detected capacity change from 0 to 2048
[  312.152128][ T6668] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.616547][ T6678] bridge0: port 3(syz_tun) entered blocking state
[  312.624669][ T6678] bridge0: port 3(syz_tun) entered disabled state
[  312.632151][ T6678] syz_tun: entered allmulticast mode
[  312.640571][ T6678] syz_tun: entered promiscuous mode
[  313.156237][ T5861] usb 4-1: USB disconnect, device number 8
[  313.477670][ T3777] bond0: (slave bond_slave_0): interface is now down
[  313.484970][ T3777] bond0: (slave bond_slave_1): interface is now down
[  313.493948][ T3777] bond0: now running without any active interface!
[  313.815975][ T6683] netlink: 'syz.4.270': attribute type 10 has an invalid length.
[  313.892770][ T6688] loop0: detected capacity change from 0 to 512
[  313.904112][ T6683] syz_tun: left allmulticast mode
[  313.910376][ T6683] bridge0: port 3(syz_tun) entered disabled state
[  313.962013][ T6688] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  314.093596][ T6683] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  314.104685][ T6688] EXT4-fs (loop0): 1 orphan inode deleted
[  314.110703][ T6688] EXT4-fs (loop0): 1 truncate cleaned up
[  314.119875][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.140575][ T3915] bond0: (slave syz_tun): interface is now down
[  314.180311][ T3915] bond0: (slave syz_tun): interface is now down
[  314.211956][ T3915] bond0: (slave syz_tun): interface is now down
[  314.232936][ T3711] bond0: (slave syz_tun): interface is now down
[  314.257211][ T3777] bond0: (slave syz_tun): interface is now down
[  314.283696][ T6688] EXT4-fs error (device loop0): ext4_lookup:1813: inode #15: comm syz.0.272: iget: bad extra_isize 46 (inode size 256)
[  314.305059][ T6684] bond0: (slave syz_tun): Releasing backup interface
[  314.423030][ T6688] EXT4-fs (loop0): Remounting filesystem read-only
[  314.481624][ T6699] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.276'.
[  314.724744][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.036641][ T6706] loop0: detected capacity change from 0 to 128
[  315.058965][ T6706] ufs: You didn't specify the type of your ufs filesystem
[  315.058965][ T6706] 
[  315.058965][ T6706] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  315.058965][ T6706] 
[  315.058965][ T6706] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  315.198457][ T6706] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  315.501250][   T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  315.832190][ T1987] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  315.976559][ T6720] netlink: 'syz.4.284': attribute type 1 has an invalid length.
[  316.002694][   T44] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  316.012208][   T44] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  316.023278][   T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  316.032631][   T44] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  316.103183][ T1987] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  316.113025][ T1987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.122096][ T1987] usb 3-1: Product: syz
[  316.126537][ T1987] usb 3-1: Manufacturer: syz
[  316.131512][ T1987] usb 3-1: SerialNumber: syz
[  316.161071][ T1987] usb 3-1: config 0 descriptor??
[  316.184737][   T44] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  316.195770][   T44] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  316.198557][ T1987] hub 3-1:0.0: bad descriptor, ignoring hub
[  316.204194][   T44] usb 4-1: Product: syz
[  316.210391][ T1987] hub 3-1:0.0: probe with driver hub failed with error -5
[  316.214481][   T44] usb 4-1: Manufacturer: syz
[  316.229565][ T1987] f81232 3-1:0.0: f81534a converter detected
[  316.302569][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  316.308277][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  316.314336][   T44] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  316.457061][ T1987] usb 3-1: f81534a converter now attached to ttyUSB0
[  316.525043][   T44] usb 4-1: USB disconnect, device number 9
[  316.588651][ T6725] loop4: detected capacity change from 0 to 512
[  316.626050][ T6725] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  316.688430][ T6725] EXT4-fs (loop4): 1 orphan inode deleted
[  316.694921][ T6725] EXT4-fs (loop4): 1 truncate cleaned up
[  316.732745][ T6725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.812820][    T8] usb 3-1: USB disconnect, device number 4
[  316.855670][ T1987] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  316.895304][    T8] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  316.906429][    T8] f81232 3-1:0.0: device disconnected
[  316.954087][ T6725] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.289: iget: bad extra_isize 46 (inode size 256)
[  317.027228][ T6725] EXT4-fs (loop4): Remounting filesystem read-only
[  317.081074][   T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  317.146694][ T1987] usb 2-1: Using ep0 maxpacket: 16
[  317.183396][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.201599][ T1987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  317.269942][   T44] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  317.279071][   T44] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  317.289954][   T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  317.300359][   T44] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  317.503833][ T1987] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  317.513573][ T1987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.522067][ T1987] usb 2-1: Product: syz
[  317.526494][ T1987] usb 2-1: Manufacturer: syz
[  317.531453][ T1987] usb 2-1: SerialNumber: syz
[  317.556698][   T44] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  317.566997][   T44] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  317.580257][   T44] usb 4-1: Product: syz
[  317.584861][   T44] usb 4-1: Manufacturer: syz
[  317.633427][ T1987] usb 2-1: config 0 descriptor??
[  317.676845][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  317.677521][ T1987] hub 2-1:0.0: bad descriptor, ignoring hub
[  317.682394][   T44] cdc_wdm 4-1:1.0: skipping garbage
[  317.682513][   T44] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  317.703381][ T1987] hub 2-1:0.0: probe with driver hub failed with error -5
[  317.719544][ T1987] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[  317.885637][ T6739] loop0: detected capacity change from 0 to 128
[  317.935565][ T6739] ufs: You didn't specify the type of your ufs filesystem
[  317.935565][ T6739] 
[  317.935565][ T6739] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  317.935565][ T6739] 
[  317.935565][ T6739] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  318.113424][ T6739] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  318.241253][ T6727] usb 2-1: reset high-speed USB device number 8 using dummy_hcd
[  318.606677][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.297'.
[  318.616011][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.297'.
[  318.626304][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.297'.
[  318.635603][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.297'.
[  318.986706][    T8] usb 2-1: USB disconnect, device number 8
[  319.043105][ T6757] net_ratelimit: 12 callbacks suppressed
[  319.043183][ T6757] netlink: del zone limit has 4 unknown bytes
[  319.399409][ T6761] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  319.436708][ T6761] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  319.480235][    T8] usb 4-1: USB disconnect, device number 10
[  319.521736][ T6752] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  319.528587][ T6752] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  319.536916][ T6752] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  319.545012][ T6752] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  319.549017][ T6762] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  320.341628][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  320.432711][ T5856] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  320.693268][ T6780] lo speed is unknown, defaulting to 1000
[  320.740641][    T8] usb 2-1: Using ep0 maxpacket: 16
[  320.782688][ T5856] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  320.791885][ T5856] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  320.795906][    T8] usb 2-1: config 0 has no interfaces?
[  320.803196][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  320.818098][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  320.830064][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  320.864879][    T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[  320.875238][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  320.884882][    T8] usb 2-1: Product: syz
[  320.889291][    T8] usb 2-1: Manufacturer: syz
[  320.894406][    T8] usb 2-1: SerialNumber: syz
[  320.911659][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  320.913813][    T8] r8152-cfgselector 2-1: Unknown version 0x0000
[  320.925984][    T8] r8152-cfgselector 2-1: config 0 descriptor??
[  321.013936][ T6784] loop0: detected capacity change from 0 to 128
[  321.032411][ T6784] ufs: You didn't specify the type of your ufs filesystem
[  321.032411][ T6784] 
[  321.032411][ T6784] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  321.032411][ T6784] 
[  321.032411][ T6784] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  321.093469][ T5856] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  321.103143][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  321.103698][ T6784] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  321.111405][ T5856] usb 3-1: Product: syz
[  321.111518][ T5856] usb 3-1: Manufacturer: syz
[  321.305845][ T5856] cdc_wdm 3-1:1.0: skipping garbage
[  321.311853][ T5856] cdc_wdm 3-1:1.0: skipping garbage
[  321.348468][ T5856] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  321.354826][ T5856] cdc_wdm 3-1:1.0: Unknown control protocol
[  321.668390][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  321.674964][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  321.681787][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  321.697113][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'.
[  321.706774][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'.
[  321.746219][ T6788] erspan0: entered promiscuous mode
[  321.780622][ T6788] gretap0: entered promiscuous mode
[  321.810633][ T6788] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  321.819056][ T6788] Cannot create hsr debugfs directory
[  321.826413][    T8] usb 3-1: USB disconnect, device number 5
[  322.532166][ T5856] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  322.744954][ T5856] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  322.756178][ T5856] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  322.769158][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  322.780443][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  322.794037][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  322.878963][ T5856] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  322.889571][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  322.899400][ T5856] usb 3-1: Product: syz
[  322.905173][ T5856] usb 3-1: Manufacturer: syz
[  322.965969][ T5856] cdc_wdm 3-1:1.0: skipping garbage
[  322.974421][ T5856] cdc_wdm 3-1:1.0: skipping garbage
[  323.002624][ T5856] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  323.008833][ T5856] cdc_wdm 3-1:1.0: Unknown control protocol
[  323.248949][    T8] r8152-cfgselector 2-1: USB disconnect, device number 9
[  323.267042][ T6797] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  323.274315][ T6797] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  323.281697][ T6797] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  323.288372][ T6797] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  323.821181][ T1987] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  323.988387][ T1987] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  323.997685][ T1987] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  324.008351][ T1987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  324.017937][ T1987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  324.164068][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  324.168900][ T5861] usb 3-1: USB disconnect, device number 6
[  324.170926][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  324.171047][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  324.257120][ T1987] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  324.267569][ T1987] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  324.276115][ T1987] usb 5-1: Product: syz
[  324.280520][ T1987] usb 5-1: Manufacturer: syz
[  324.404955][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  324.411028][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  324.416505][ T1987] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  324.492157][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  324.607006][ T1987] usb 5-1: USB disconnect, device number 4
[  324.804159][ T6822] loop1: detected capacity change from 0 to 128
[  324.828580][ T6822] ufs: You didn't specify the type of your ufs filesystem
[  324.828580][ T6822] 
[  324.828580][ T6822] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  324.828580][ T6822] 
[  324.828580][ T6822] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  324.894151][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'.
[  324.932557][ T6822] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  325.101149][ T1987] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  325.268048][ T1987] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  325.277315][ T1987] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  325.289556][ T1987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  325.299094][ T1987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  325.359995][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  325.366441][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  325.373476][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  325.398670][ T6828] loop2: detected capacity change from 0 to 256
[  325.436095][ T1987] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  325.446018][ T1987] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  325.454509][ T1987] usb 5-1: Product: syz
[  325.458927][ T1987] usb 5-1: Manufacturer: syz
[  325.488163][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  325.493815][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  325.499270][ T1987] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  325.562897][ T6828] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  325.951739][   T29] audit: type=1800 audit(1732314361.170:2): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.326" name="file1" dev="loop2" ino=1048602 res=0 errno=0
[  326.357247][ T6836] syz.2.326 (6836) used greatest stack depth: 5008 bytes left
[  326.785476][ T6844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.895695][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.007709][ T6844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.194075][ T6841] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  327.201516][ T6841] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  327.208412][ T6841] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  327.215908][ T6841] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  327.451866][ T1987] usb 5-1: USB disconnect, device number 5
[  327.977985][ T6854] loop1: detected capacity change from 0 to 256
[  328.047650][ T6854] exfat: Deprecated parameter 'utf8'
[  328.053718][ T6854] exfat: Deprecated parameter 'namecase'
[  328.060056][ T6854] exfat: Deprecated parameter 'namecase'
[  328.066263][ T6854] exfat: Deprecated parameter 'utf8'
[  328.204081][ T6854] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  328.383096][ T6830] loop0: detected capacity change from 0 to 32768
[  328.452476][ T6830] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.328 (6830)
[  328.584203][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  328.749702][   T29] audit: type=1804 audit(1732314363.970:3): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.333" name=2F6E6577726F6F742F37312FE91F7189591E9233614B2F627573 dev="loop1" ino=1048604 res=1 errno=0
[  328.971274][ T1987] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  329.102740][ T6869] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.339'.
[  329.112607][ T6869] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8
[  329.185996][ T1987] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  329.195865][ T1987] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  329.206578][ T1987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  329.216001][ T1987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  329.227565][ T1987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  329.311359][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  329.317656][ T5810] Bluetooth: hci3: command 0x0c1a tx timeout
[  329.324145][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  329.432040][ T1987] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  329.441674][ T1987] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  329.449943][ T1987] usb 5-1: Product: syz
[  329.454596][ T1987] usb 5-1: Manufacturer: syz
[  329.824468][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  329.829961][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  330.040550][ T1987] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  330.046956][ T1987] cdc_wdm 5-1:1.0: Unknown control protocol
[  330.455531][ T6880] loop0: detected capacity change from 0 to 2048
[  330.547566][ T1987] usb 5-1: USB disconnect, device number 6
[  330.592677][ T6877] loop2: detected capacity change from 0 to 2048
[  330.676803][ T6880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.778473][ T6882] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.983396][ T6877] loop2: detected capacity change from 2048 to 63
[  331.026634][ T6886] syz.2.343: attempt to access beyond end of device
[  331.026634][ T6886] loop2: rw=0, sector=86, nr_sectors = 2 limit=63
[  331.040508][ T6886] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=1)
[  331.241067][ T1987] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  331.426105][ T1987] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  331.435278][ T1987] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  331.446107][ T1987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  331.455577][ T1987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  331.467169][ T1987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  331.600355][ T1987] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  331.609969][ T1987] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  331.618560][ T1987] usb 5-1: Product: syz
[  331.623230][ T1987] usb 5-1: Manufacturer: syz
[  331.810633][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  331.816263][ T1987] cdc_wdm 5-1:1.0: skipping garbage
[  331.830979][ T1987] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  331.839882][ T1987] cdc_wdm 5-1:1.0: Unknown control protocol
[  332.108662][ T5856] usb 5-1: USB disconnect, device number 7
[  332.370158][ T3813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.421644][ T6899] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.353'.
[  332.905737][ T3813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.183210][ T3813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.265196][ T3813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.457610][ T6913] loop3: detected capacity change from 0 to 2048
[  333.517823][ T6915] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  333.775469][ T6913] loop3: detected capacity change from 2048 to 63
[  333.850516][ T3813] bridge_slave_1: left allmulticast mode
[  333.856713][ T3813] bridge_slave_1: left promiscuous mode
[  333.863791][ T3813] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.977531][ T3813] bridge_slave_0: left allmulticast mode
[  333.985554][ T3813] bridge_slave_0: left promiscuous mode
[  333.992703][ T3813] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.288464][ T6923] loop1: detected capacity change from 0 to 2048
[  334.610178][ T6923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  335.129025][ T3813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.239746][ T3813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.326968][ T3813] bond0 (unregistering): Released all slaves
[  335.728732][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'.
[  336.014585][ T6935] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.366'.
[  337.263775][ T3813] hsr_slave_0: left promiscuous mode
[  337.281072][ T3813] hsr_slave_1: left promiscuous mode
[  337.322234][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.329975][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.405253][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.413131][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.492769][ T3813] veth1_macvtap: left promiscuous mode
[  337.498569][ T3813] veth0_macvtap: left promiscuous mode
[  337.505433][ T3813] veth1_vlan: left promiscuous mode
[  337.511090][ T3813] veth0_vlan: left promiscuous mode
[  338.551559][ T3813] team0 (unregistering): Port device team_slave_1 removed
[  338.593355][ T3813] team0 (unregistering): Port device team_slave_0 removed
[  339.098890][ T6958] loop0: detected capacity change from 0 to 64
[  339.295942][ T6958] loop0: detected capacity change from 64 to 0
[  339.430238][ T6960] syz.0.372: attempt to access beyond end of device
[  339.430238][ T6960] loop0: rw=0, sector=8, nr_sectors = 1 limit=0
[  340.067892][ T3813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.562035][ T3813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.864069][ T3813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.086316][ T6979] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.378'.
[  341.109407][ T6974] loop4: detected capacity change from 0 to 2048
[  341.142166][ T3813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.342934][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'.
[  341.394723][ T6974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  341.865089][ T3813] bridge_slave_1: left allmulticast mode
[  341.872790][ T3813] bridge_slave_1: left promiscuous mode
[  341.879397][ T3813] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.959149][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  341.966082][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  342.016741][ T3813] bridge_slave_0: left allmulticast mode
[  342.023126][ T3813] bridge_slave_0: left promiscuous mode
[  342.029742][ T3813] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.582171][ T6989] loop4: detected capacity change from 0 to 2048
[  343.677126][ T6989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  343.773471][ T3813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.809435][ T3813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.833116][ T3813] bond0 (unregistering): Released all slaves
[  344.598043][ T6994] Cannot find del_set index 286 as target
[  345.055754][ T3813] hsr_slave_0: left promiscuous mode
[  345.076857][ T3813] hsr_slave_1: left promiscuous mode
[  345.106108][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.114731][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.197994][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.206119][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.296069][ T3813] veth1_macvtap: left promiscuous mode
[  345.302554][ T3813] veth0_macvtap: left promiscuous mode
[  345.308556][ T3813] veth1_vlan: left promiscuous mode
[  345.314385][ T3813] veth0_vlan: left promiscuous mode
[  346.544736][ T3813] team0 (unregistering): Port device team_slave_1 removed
[  346.592702][ T3813] team0 (unregistering): Port device team_slave_0 removed
[  348.068690][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'.
[  348.336073][ T3813] IPVS: stop unused estimator thread 0...
[  348.401754][ T7024] lo speed is unknown, defaulting to 1000
[  348.559066][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  348.578663][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  348.592243][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  348.672702][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  348.695007][ T5810] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  348.706119][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  349.321919][ T7028] lo speed is unknown, defaulting to 1000
[  350.958777][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  350.982309][   T51] Bluetooth: hci2: command tx timeout
[  351.426645][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  351.443895][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  351.457545][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  351.659756][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  351.679225][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  351.802745][ T7028] chnl_net:caif_netlink_parms(): no params data found
[  352.209606][ T7047] lo speed is unknown, defaulting to 1000
[  353.071910][   T51] Bluetooth: hci2: command tx timeout
[  354.090987][   T51] Bluetooth: hci3: command tx timeout
[  354.300587][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.309096][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.410882][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.418799][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.426800][ T7028] bridge_slave_0: entered allmulticast mode
[  354.436104][ T7028] bridge_slave_0: entered promiscuous mode
[  354.616919][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.624799][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.633001][ T7028] bridge_slave_1: entered allmulticast mode
[  354.642432][ T7028] bridge_slave_1: entered promiscuous mode
[  354.747786][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'.
[  354.813895][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.949571][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.147701][   T51] Bluetooth: hci2: command tx timeout
[  355.813456][ T7100] netlink: 'syz.4.408': attribute type 10 has an invalid length.
[  355.856634][ T7028] team0: Port device team_slave_0 added
[  355.915892][ T7100] bond0: (slave netdevsim3): Enslaving as an active interface with a down link
[  355.938498][ T7028] team0: Port device team_slave_1 added
[  355.949493][ T7047] chnl_net:caif_netlink_parms(): no params data found
[  356.172196][   T51] Bluetooth: hci3: command tx timeout
[  356.238361][ T7101] bridge_slave_0: left allmulticast mode
[  356.244450][ T7101] bridge_slave_0: left promiscuous mode
[  356.251266][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.304710][ T7101] bridge_slave_1: left allmulticast mode
[  356.311995][ T7101] bridge_slave_1: left promiscuous mode
[  356.318693][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.398513][ T7101] bond0: (slave bond_slave_0): Releasing backup interface
[  356.477778][ T7101] bond0: (slave bond_slave_1): Releasing backup interface
[  356.524013][ T7101] team0: Port device team_slave_0 removed
[  356.588565][ T7101] team0: Port device team_slave_1 removed
[  356.599444][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.607342][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.640448][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.649267][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.794967][ T7101] bond0: (slave netdevsim3): Releasing backup interface
[  357.054651][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.062111][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.088756][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.217654][   T51] Bluetooth: hci2: command tx timeout
[  357.438379][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.446394][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.473161][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.598017][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'.
[  358.168688][ T7028] hsr_slave_0: entered promiscuous mode
[  358.251325][   T51] Bluetooth: hci3: command tx timeout
[  358.278968][ T7028] hsr_slave_1: entered promiscuous mode
[  358.351237][ T7028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  358.361250][ T7028] Cannot create hsr debugfs directory
[  359.316110][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.326052][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.334105][ T7047] bridge_slave_0: entered allmulticast mode
[  359.343101][ T7047] bridge_slave_0: entered promiscuous mode
[  359.554270][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.562041][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.570466][ T7047] bridge_slave_1: entered allmulticast mode
[  359.579839][ T7047] bridge_slave_1: entered promiscuous mode
[  360.055193][ T7047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.266618][ T7047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.342600][   T51] Bluetooth: hci3: command tx timeout
[  360.594335][ T7028] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  360.635025][ T7028] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  360.766369][ T7047] team0: Port device team_slave_0 added
[  360.775087][ T7028] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  360.840480][ T7047] team0: Port device team_slave_1 added
[  360.849966][ T7028] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  361.044400][ T7150] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.421'.
[  361.160138][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.168763][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.195493][ T7047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.453589][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.497511][ T7028] 8021q: adding VLAN 0 to HW filter on device team0
[  361.583288][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.592946][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.626687][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.634524][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.663319][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.670510][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.697207][ T7047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.858339][ T7028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  361.869071][ T7028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  361.952258][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.959979][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.093325][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[  362.598007][ T7164] loop4: detected capacity change from 0 to 1024
[  362.703384][ T7047] hsr_slave_0: entered promiscuous mode
[  362.752454][ T7047] hsr_slave_1: entered promiscuous mode
[  362.794567][ T7047] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.802523][ T7047] Cannot create hsr debugfs directory
[  363.004097][ T7164] hfsplus: extend alloc file! (8192,512,16777719)
[  363.103486][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.113002][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.122000][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.130348][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.139848][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.149145][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.162195][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.174613][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.184422][ T7164] hfsplus: extend alloc file! (8192,512,16777721)
[  363.231595][ T7172] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  363.772045][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.131266][ T7184] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.431'.
[  364.516801][ T7047] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  364.648606][ T7047] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  364.796845][ T7047] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  364.942547][ T7047] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  365.440353][ T7047] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.485628][ T7047] 8021q: adding VLAN 0 to HW filter on device team0
[  365.595493][ T7047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  365.606298][ T7047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.635028][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.642775][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.658207][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.665988][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.042496][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'.
[  366.563490][ T7028] veth0_vlan: entered promiscuous mode
[  366.613493][ T7028] veth1_vlan: entered promiscuous mode
[  366.771126][ T7028] veth0_macvtap: entered promiscuous mode
[  366.815634][ T7028] veth1_macvtap: entered promiscuous mode
[  366.866442][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.882147][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.896968][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.915939][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.966289][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.041529][ T7211] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  367.239084][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.250187][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.260510][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.272425][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.287420][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.426118][ T7028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.436218][ T7028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.445485][ T7028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.458311][ T7028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.906537][ T7047] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.385259][ T7235] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.441'.
[  370.727987][ T7047] veth0_vlan: entered promiscuous mode
[  370.782279][ T7047] veth1_vlan: entered promiscuous mode
[  370.890286][ T7047] veth0_macvtap: entered promiscuous mode
[  370.916380][ T7047] veth1_macvtap: entered promiscuous mode
[  370.966323][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.977204][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.987442][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.998207][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.008443][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.019342][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.034122][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.075126][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.086911][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.097957][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.109659][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.119884][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.130829][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.145237][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.295590][ T7047] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.304912][ T7047] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.314278][ T7047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.323492][ T7047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.151607][ T7282] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.454'.
[  372.161312][ T7282] openvswitch: netlink: VXLAN extension 1 has unexpected len 1 expected 4
[  373.789291][ T7296] loop0: detected capacity change from 0 to 2048
[  373.988665][ T7296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.488965][ T7324] overlayfs: failed to decode file handle (len=11, type=248, flags=0, err=-22)
[  376.424555][ T7337] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.465'.
[  376.434894][ T7337] openvswitch: netlink: VXLAN extension 1 has unexpected len 1 expected 4
[  376.870163][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.878366][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.186097][ T3964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.194327][ T3964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.982632][ T7360] loop4: detected capacity change from 0 to 2048
[  379.181175][ T7360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  379.215127][ T7368] syz.0.473 uses obsolete (PF_INET,SOCK_PACKET)
[  379.241945][ T7368] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  379.251739][ T7368] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  379.259612][ T7368] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  379.266213][ T7368] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  379.407315][ T7368] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  379.454483][ T7368] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  379.462513][ T7368] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  379.476515][ T7368] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  379.894718][ T7379] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.476'.
[  379.904475][ T7379] openvswitch: netlink: VXLAN extension 1 has unexpected len 1 expected 4
[  380.153786][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.162966][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.578909][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.478'.
[  380.588441][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.478'.
[  380.913072][ T3915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.921378][ T3915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.362148][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout
[  381.368439][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout
[  381.374930][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  381.542471][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  381.787657][ T3915] bond0: (slave bond_slave_0): interface is now down
[  381.794746][ T3915] bond0: (slave bond_slave_1): interface is now down
[  381.809272][ T3915] bond0: now running without any active interface!
[  381.877959][ T7400] netlink: 'syz.6.395': attribute type 10 has an invalid length.
[  381.983589][ T7400] syz_tun: entered promiscuous mode
[  382.075095][ T7400] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  382.176391][ T3964] bond0: (slave syz_tun): interface is now down
[  382.184215][ T3964] bond0: now running without any active interface!
[  382.367981][ T7406] loop6: detected capacity change from 0 to 512
[  383.014358][ T7406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.028091][ T7406] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  383.076281][ T7419] netlink: zone id is out of range
[  383.082448][ T7419] netlink: zone id is out of range
[  383.087843][ T7419] netlink: zone id is out of range
[  383.093372][ T7419] netlink: zone id is out of range
[  383.098753][ T7419] netlink: zone id is out of range
[  383.104333][ T7419] netlink: zone id is out of range
[  383.109726][ T7419] netlink: zone id is out of range
[  383.115171][ T7419] netlink: zone id is out of range
[  383.120470][ T7419] netlink: zone id is out of range
[  383.297406][ T7404] loop0: detected capacity change from 0 to 4096
[  383.451978][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  383.611261][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  383.686802][ T7404] syz.0.483: attempt to access beyond end of device
[  383.686802][ T7404] loop0: rw=0, sector=26388279066840, nr_sectors = 8 limit=4096
[  383.701844][ T7404] NILFS (loop0): I/O error reading meta-data file (ino=5, block-offset=0)
[  384.084155][ T7404] NILFS (loop0): error -5 while loading super root
[  384.094286][ T7400] bond0: (slave syz_tun): Releasing backup interface
[  384.617984][ T7427] loop4: detected capacity change from 0 to 2048
[  384.701078][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  384.800608][ T7427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  384.929386][    T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  384.938509][    T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  384.949293][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  384.958890][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  384.970333][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  385.238055][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'.
[  385.247538][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'.
[  385.324033][    T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  385.333607][    T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  385.342170][    T8] usb 2-1: Product: syz
[  385.346580][    T8] usb 2-1: Manufacturer: syz
[  385.493635][    T8] cdc_wdm 2-1:1.0: skipping garbage
[  385.501068][    T8] cdc_wdm 2-1:1.0: skipping garbage
[  385.611889][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  385.625945][    T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  385.632293][    T8] cdc_wdm 2-1:1.0: Unknown control protocol
[  385.691108][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  385.759952][    T8] usb 2-1: USB disconnect, device number 10
[  385.904597][ T7047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.603996][ T7456] net_ratelimit: 3 callbacks suppressed
[  387.604075][ T7456] netlink: zone id is out of range
[  387.617696][ T7456] netlink: zone id is out of range
[  387.623677][ T7456] netlink: zone id is out of range
[  387.628992][ T7456] netlink: zone id is out of range
[  387.634416][ T7456] netlink: zone id is out of range
[  387.639711][ T7456] netlink: zone id is out of range
[  387.649224][ T7456] netlink: zone id is out of range
[  387.656143][ T7456] netlink: zone id is out of range
[  387.661650][ T7456] netlink: zone id is out of range
[  387.667033][ T7456] netlink: zone id is out of range
[  389.118634][ T7473] loop0: detected capacity change from 0 to 512
[  389.276861][ T7471] loop4: detected capacity change from 0 to 2048
[  389.551738][ T7471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  389.629715][ T7473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.643613][ T7473] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  390.063629][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.592666][ T7479] loop1: detected capacity change from 0 to 32768
[  392.580157][ T7479] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,wide_macs,journal_flush_disabled,fsck,fix_errors=yes,nojournal_transaction_names,reconstruct_alloc
[  392.602878][ T7479] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  392.612777][ T7479] bcachefs (loop1): Version upgrade required:
[  392.612777][ T7479] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  392.612777][ T7479] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  392.612777][ T7479]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  392.944020][ T7479] bcachefs (loop1): dropping and reconstructing all alloc info
[  392.983939][ T7509] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  392.991067][ T7509] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  392.991665][ T7509] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  392.992239][ T7509] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  393.017483][ T7479] bcachefs (loop1): error validating btree node on loop1 at btree inodes level 0/0
[  393.017587][ T7479]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0  
[  393.017688][ T7479]   node offset 8/24 bset u64s 29: bset at wrong sector offset, fixing
[  393.473792][ T7479] bcachefs (loop1): btree_node_read_work: rewriting btree node at btree=inodes level=0 SPOS_MAX due to error
[  393.750006][ T7479] bcachefs (loop1): check_topology... done
[  393.756605][ T7479] bcachefs (loop1): accounting_read... done
[  393.802608][ T7479] bcachefs (loop1): alloc_read... done
[  393.844512][ T7479] bcachefs (loop1): stripes_read... done
[  393.943340][ T7479] bcachefs (loop1): snapshots_read...
[  394.020606][ T7531] loop4: detected capacity change from 0 to 512
[  394.115226][ T7479]  done
[  394.118323][ T7479] bcachefs (loop1): check_allocations...
[  394.251176][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout
[  394.254821][ T7531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.277434][ T7531] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  394.664960][ T7479]  done
[  394.861840][ T7479] bcachefs (loop1): going read-write
[  394.889021][ T7479] bcachefs (loop1): journal_replay...
[  394.925257][ T3964] =====================================================
[  394.938212][ T3964] BUG: KMSAN: uninit-value in bch2_bucket_alloc_early+0x11c0/0x2520
[  394.946667][ T3964]  bch2_bucket_alloc_early+0x11c0/0x2520
[  394.952580][ T3964]  bch2_bucket_alloc_trans+0x8e6/0x3fb0
[  394.958349][ T3964]  bch2_bucket_alloc_set_trans+0x959/0x1650
[  394.964628][ T3964]  __open_bucket_add_buckets+0x1dec/0x3070
[  394.970617][ T3964]  open_bucket_add_buckets+0x328/0x530
[  394.976353][ T3964]  bch2_alloc_sectors_start_trans+0x1833/0x32b0
[  394.982947][ T3964]  bch2_btree_reserve_get+0x9d6/0x2290
[  394.988632][ T3964]  bch2_btree_update_start+0x1af9/0x2d60
[  394.994774][ T3964]  bch2_btree_node_rewrite+0x1da/0x1930
[  395.000538][ T3964]  async_btree_node_rewrite_work+0x485/0x1710
[  395.006969][ T3964]  process_scheduled_works+0xae0/0x1c40
[  395.012872][ T3964]  worker_thread+0xea7/0x14f0
[  395.020404][ T3964]  kthread+0x3e2/0x540
[  395.025128][ T3964]  ret_from_fork+0x6d/0x90
[  395.029723][ T3964]  ret_from_fork_asm+0x1a/0x30
[  395.034795][ T3964] 
[  395.037213][ T3964] Uninit was created at:
[  395.041803][ T3964]  ___kmalloc_large_node+0x22c/0x370
[  395.047287][ T3964]  __kmalloc_large_node_noprof+0x3f/0x1e0
[  395.061043][ T3964]  __kmalloc_node_noprof+0x9d6/0xf50
[  395.066552][ T3964]  __kvmalloc_node_noprof+0xc0/0x2d0
[  395.075324][ T3964]  __bch2_btree_node_mem_alloc+0x2be/0xa80
[  395.081478][ T3964]  bch2_fs_btree_cache_init+0x4e4/0xb50
[  395.087207][ T3964]  bch2_fs_open+0x4d3a/0x5b40
[  395.092222][ T3964]  bch2_fs_get_tree+0x983/0x22d0
[  395.097322][ T3964]  vfs_get_tree+0xb1/0x5a0
[  395.102065][ T3964]  do_new_mount+0x71f/0x15e0
[  395.106845][ T3964]  path_mount+0x742/0x1f10
[  395.111584][ T3964]  __se_sys_mount+0x722/0x810
[  395.118792][ T3964]  __x64_sys_mount+0xe4/0x150
[  395.124089][ T3964]  x64_sys_call+0x39bf/0x3c30
[  395.129118][ T3964]  do_syscall_64+0xcd/0x1e0
[  395.133969][ T3964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.140082][ T3964] 
[  395.142655][ T3964] CPU: 0 UID: 0 PID: 3964 Comm: kworker/u8:17 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0
[  395.153545][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  395.163889][ T3964] Workqueue: btree_node_rewrite async_btree_node_rewrite_work
[  395.171725][ T3964] =====================================================
[  395.178774][ T3964] Disabling lock debugging due to kernel taint
[  395.186727][ T3964] Kernel panic - not syncing: kmsan.panic set ...
[  395.193278][ T3964] CPU: 0 UID: 0 PID: 3964 Comm: kworker/u8:17 Tainted: G    B              6.12.0-syzkaller-07749-g28eb75e178d3 #0
[  395.205539][ T3964] Tainted: [B]=BAD_PAGE
[  395.209789][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  395.219991][ T3964] Workqueue: btree_node_rewrite async_btree_node_rewrite_work
[  395.227703][ T3964] Call Trace:
[  395.231086][ T3964]  <TASK>
[  395.234125][ T3964]  dump_stack_lvl+0x216/0x2d0
[  395.238999][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.245033][ T3964]  dump_stack+0x1e/0x30
[  395.249382][ T3964]  panic+0x4e2/0xcf0
[  395.253466][ T3964]  ? kmsan_get_metadata+0x101/0x1c0
[  395.258881][ T3964]  kmsan_report+0x2c7/0x2d0
[  395.263583][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.269590][ T3964]  ? __msan_warning+0x95/0x120
[  395.274559][ T3964]  ? bch2_bucket_alloc_early+0x11c0/0x2520
[  395.280539][ T3964]  ? bch2_bucket_alloc_trans+0x8e6/0x3fb0
[  395.286466][ T3964]  ? bch2_bucket_alloc_set_trans+0x959/0x1650
[  395.292741][ T3964]  ? __open_bucket_add_buckets+0x1dec/0x3070
[  395.298897][ T3964]  ? open_bucket_add_buckets+0x328/0x530
[  395.304693][ T3964]  ? bch2_alloc_sectors_start_trans+0x1833/0x32b0
[  395.311275][ T3964]  ? bch2_btree_reserve_get+0x9d6/0x2290
[  395.317118][ T3964]  ? bch2_btree_update_start+0x1af9/0x2d60
[  395.323123][ T3964]  ? bch2_btree_node_rewrite+0x1da/0x1930
[  395.329054][ T3964]  ? async_btree_node_rewrite_work+0x485/0x1710
[  395.335499][ T3964]  ? process_scheduled_works+0xae0/0x1c40
[  395.341418][ T3964]  ? worker_thread+0xea7/0x14f0
[  395.346457][ T3964]  ? kthread+0x3e2/0x540
[  395.350843][ T3964]  ? ret_from_fork+0x6d/0x90
[  395.355589][ T3964]  ? ret_from_fork_asm+0x1a/0x30
[  395.360722][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.366125][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.372139][ T3964]  ? filter_irq_stacks+0x60/0x1a0
[  395.377348][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.382743][ T3964]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  395.389270][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.394668][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.400680][ T3964]  __msan_warning+0x95/0x120
[  395.405463][ T3964]  bch2_bucket_alloc_early+0x11c0/0x2520
[  395.411269][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.416696][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.422093][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.428112][ T3964]  ? bch2_bucket_alloc_early+0x1aa/0x2520
[  395.434023][ T3964]  ? bch2_bucket_alloc_early+0x1aa/0x2520
[  395.439931][ T3964]  ? __msan_memset+0xf5/0x1b0
[  395.444808][ T3964]  bch2_bucket_alloc_trans+0x8e6/0x3fb0
[  395.450573][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.455968][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.461371][ T3964]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  395.467889][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.473312][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.479332][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.484734][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.490741][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.496138][ T3964]  ? bch2_bucket_alloc_trans+0xb66/0x3fb0
[  395.502077][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.508095][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.514117][ T3964]  ? is_last_task_frame+0x5d/0x450
[  395.519414][ T3964]  ? bch2_bucket_alloc_trans+0xb66/0x3fb0
[  395.525345][ T3964]  ? bch2_bucket_alloc_set_trans+0x732/0x1650
[  395.531684][ T3964]  bch2_bucket_alloc_set_trans+0x959/0x1650
[  395.537844][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.543246][ T3964]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  395.549769][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.555165][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.561186][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.567223][ T3964]  ? __open_bucket_add_buckets+0x3bb/0x3070
[  395.573294][ T3964]  ? filter_irq_stacks+0x60/0x1a0
[  395.578508][ T3964]  ? kmsan_save_stack_with_flags+0x1/0x60
[  395.584420][ T3964]  __open_bucket_add_buckets+0x1dec/0x3070
[  395.590411][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.596424][ T3964]  ? bch2_btree_path_verify_locks+0x1423/0x1490
[  395.602845][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.608243][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.614275][ T3964]  ? bch2_alloc_sectors_start_trans+0xd1/0x32b0
[  395.620710][ T3964]  open_bucket_add_buckets+0x328/0x530
[  395.626365][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.631781][ T3964]  bch2_alloc_sectors_start_trans+0x1833/0x32b0
[  395.638212][ T3964]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  395.644274][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.649685][ T3964]  bch2_btree_reserve_get+0x9d6/0x2290
[  395.655401][ T3964]  ? __bch2_fs_usage_read_short+0xad6/0xc10
[  395.661482][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.666891][ T3964]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  395.673457][ T3964]  bch2_btree_update_start+0x1af9/0x2d60
[  395.679309][ T3964]  ? bch2_btree_path_verify+0x36d/0x4a0
[  395.685091][ T3964]  ? bch2_btree_node_rewrite+0x1da/0x1930
[  395.691052][ T3964]  bch2_btree_node_rewrite+0x1da/0x1930
[  395.696835][ T3964]  ? kmsan_get_metadata+0x13e/0x1c0
[  395.702261][ T3964]  async_btree_node_rewrite_work+0x485/0x1710
[  395.708553][ T3964]  ? async_btree_node_rewrite_work+0x282/0x1710
[  395.715039][ T3964]  ? __pfx_async_btree_node_rewrite_work+0x10/0x10
[  395.721778][ T3964]  process_scheduled_works+0xae0/0x1c40
[  395.727580][ T3964]  worker_thread+0xea7/0x14f0
[  395.732511][ T3964]  kthread+0x3e2/0x540
[  395.736750][ T3964]  ? __pfx_worker_thread+0x10/0x10
[  395.742075][ T3964]  ? __pfx_kthread+0x10/0x10
[  395.746851][ T3964]  ret_from_fork+0x6d/0x90
[  395.751433][ T3964]  ? __pfx_kthread+0x10/0x10
[  395.756174][ T3964]  ret_from_fork_asm+0x1a/0x30
[  395.761176][ T3964]  </TASK>
[  395.764573][ T3964] Kernel Offset: disabled
[  395.768967][ T3964] Rebooting in 86400 seconds..