last executing test programs:

1m1.594514243s ago: executing program 0 (id=1132):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)=' ', 0x3fffff}])
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19)

1m0.953852447s ago: executing program 0 (id=1135):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xa2, 0x0, &(0x7f0000000000))

1m0.668694044s ago: executing program 0 (id=1138):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)

1m0.481256043s ago: executing program 0 (id=1139):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_usb_disconnect(r0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95)

55.636047822s ago: executing program 0 (id=1159):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r1, 0x0, &(0x7f00000001c0)="2ef4", 0x2, 0x8})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1})

27.550551821s ago: executing program 1 (id=1292):
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @empty}, {0x4100, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x22000401)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201080000000040e70430000000000000010902240001000000000904000001030000000921000000012207000905810300000000004a45e2a2c3d38d"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)

24.75904895s ago: executing program 1 (id=1304):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x108c30}]}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

24.321818104s ago: executing program 1 (id=1309):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000640)='./file1\x00', r1, &(0x7f0000000780)='./file1\x00')
renameat2(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x4)
faccessat(r1, &(0x7f00000001c0)='./file0\x00', 0x0)

23.9773556s ago: executing program 1 (id=1311):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000200)={[{@lastblock={'lastblock', 0x3d, 0xfe}}, {@longad}, {@partition={'partition', 0x3d, 0x6}}, {@shortad}, {@unhide}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@nostrict}, {@utf8}]}, 0x1, 0xc6b, &(0x7f0000001c00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

23.477241905s ago: executing program 1 (id=1315):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0)

23.366691286s ago: executing program 0 (id=1159):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r1, 0x0, &(0x7f00000001c0)="2ef4", 0x2, 0x8})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1})

22.434590073s ago: executing program 1 (id=1323):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read$FUSE(r1, &(0x7f0000004380)={0x2020}, 0x2020)
write$P9_RGETLOCK(r2, &(0x7f00000094c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r2, 0x407, 0x7000000)

12.316062646s ago: executing program 5 (id=1352):
accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0xf58a3180, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3.92759765s ago: executing program 4 (id=1374):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6)

3.563054332s ago: executing program 2 (id=1376):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]})
chdir(&(0x7f00000000c0)='./file0\x00')
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
chdir(&(0x7f0000000100)='./bus\x00')

3.211655549s ago: executing program 2 (id=1378):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000001340)={{@local}, @my=0x0, 0x0, 0x8})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f0000000180)={{@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000007, 0x20000005})
close_range(r0, 0xffffffffffffffff, 0x0)

3.070291193s ago: executing program 5 (id=1380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1)

2.652164177s ago: executing program 5 (id=1381):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x103, &(0x7f0000000380)=<r2=>0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x48, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004005}, 0x4008094)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

2.645140562s ago: executing program 2 (id=1382):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000280)='d', 0x1}, {&(0x7f0000000300)="df", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="bd91b5", 0x3}, {&(0x7f0000000500)="ff28", 0x2}, {&(0x7f0000000580)="d69cc6", 0x3}, {&(0x7f0000000640)="69d59bf9", 0x4}, {&(0x7f0000000700)="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", 0x425}], 0x5}}], 0x2, 0x40400c1)
sendto$inet(r0, &(0x7f0000000b40)="bf8e", 0x2, 0xff361699c0bc776d, 0x0, 0x0)

2.51975288s ago: executing program 3 (id=1383):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x4)

2.170331711s ago: executing program 4 (id=1384):
ioperm(0x0, 0x3ff, 0x20000000009)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002062, 0x0)

2.119037553s ago: executing program 2 (id=1385):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0xfffffffc}], 0x1, 0x0, 0x0)

2.11873452s ago: executing program 5 (id=1386):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040), 0xfea0)
ftruncate(r0, 0x9)
write$cgroup_int(r0, &(0x7f0000000040), 0xfea0)

2.111813706s ago: executing program 3 (id=1387):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = syz_open_procfs(0x0, &(0x7f0000000a80)='smaps_rollup\x00')
preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000140)=""/226, 0xe2}], 0x1, 0x0, 0x0)

1.946580359s ago: executing program 4 (id=1388):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1d, r1}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3ef4a64f1caecffe"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x844, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d015d48f126de17910da6b6d6db83da5f30b7ba8d8d599b92370931f6720dcbfc3acf07fff2873e9c557e080d3ee193bfbb811a7b47acb7d51c00d6f9a9fa54e"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "dd80d75448bc3c22"}}, 0x48}}, 0x0)

1.943950477s ago: executing program 5 (id=1389):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041)
syz_usb_disconnect(r1)
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0)

1.814495342s ago: executing program 3 (id=1390):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1200c86, &(0x7f0000000700)=ANY=[@ANYBLOB='codepage=euc-jp,umask=00000000000000000000000,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303430312c00c994e48a9982fd053a91804fd916d456fbdad755abc919da7043fe4b61596d3ff66315b84278e675ecc2703026dae370642e1e144299773d50b3e346959705c70300e831d95fbcaf24ffda352e6218b6df10ccfa7bd138ca492d5ccd6443fee65a368969318ca163c876cf2ea518"], 0x1, 0x286, &(0x7f0000000200)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, 0x0, 0x0)

1.701167257s ago: executing program 4 (id=1391):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
write$binfmt_script(r2, &(0x7f0000000000), 0x4)
splice(r1, 0x0, r0, 0x0, 0x100000004, 0x0)

1.497999665s ago: executing program 3 (id=1392):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.300861511s ago: executing program 3 (id=1393):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000640)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0x8010aa01, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}})

1.272877976s ago: executing program 4 (id=1394):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000"], 0x5b0}, 0x20008001)
sendmsg$inet6(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

1.020648078s ago: executing program 4 (id=1395):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x2008000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c6e6f6164696e6963622c6e6f6164696e6963622c73686f727461642c7569643d666f726765742c6769643d666f726765742c6769643d69676e6f72652c6e6f6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c00508d5c6fd14a140518c2f8949ec502a29ec1c3795fd47c03a3a72c97984a3502b51d8bfa33ab6090f2e4dc00fe8ed0b41f905b98973a0ca9e4c5eea9e8f394f5f12b6f8f8f86dda2c5d5dd18d0075da59034af306372c1b6cf04e02375a1f7ce9a910a4fc47c7e3a34fd"], 0x2, 0xc40, &(0x7f0000002740)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
ftruncate(r1, 0x96ef)
read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020)
sendfile(r0, r1, 0x0, 0x1000000201005)

1.010449411s ago: executing program 3 (id=1396):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0xd55, 0x4}}, 0x30)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="9d064768bcbad105eb87743e7cfc", 0xe}], 0x1, 0x2000, 0x0, 0x3)
sendfile(r0, r0, 0x0, 0x1000200201005)

899.901274ms ago: executing program 2 (id=1397):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_io_uring_setup(0x689b, &(0x7f0000000200)={0x0, 0xf5cf, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000380)={0x0, 0x0, 0x400, 0x0, 0x111}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0x48ed, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041})

118.514274ms ago: executing program 2 (id=1398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
fsmount(0xffffffffffffffff, 0x0, 0x79)

0s ago: executing program 5 (id=1399):
r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

antronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  264.257900][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.269026][ T5293] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  264.291947][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.371226][ T5293] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  264.649839][    T8] usb 6-1: USB disconnect, device number 7
[  264.742102][   T54] Bluetooth: hci2: command tx timeout
[  264.757340][ T8457] team0: Port device team_slave_0 added
[  264.770775][ T8457] team0: Port device team_slave_1 added
[  264.927101][ T8513] chnl_net:caif_netlink_parms(): no params data found
[  265.001760][   T54] Bluetooth: hci7: command tx timeout
[  265.096922][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.151934][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.210661][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.284250][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.302026][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.410695][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.655263][ T8560] chnl_net:caif_netlink_parms(): no params data found
[  265.716192][ T8607] loop4: detected capacity change from 0 to 32768
[  265.837330][ T8607] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.222091][ T8607] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  266.333217][ T8607] XFS (loop4): Starting recovery (logdev: internal)
[  266.433648][ T8607] XFS (loop4): Ending recovery (logdev: internal)
[  266.628949][ T8457] hsr_slave_0: entered promiscuous mode
[  266.661966][ T8644] loop5: detected capacity change from 0 to 2048
[  266.681809][ T8644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.714724][ T5230] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.732888][ T8457] hsr_slave_1: entered promiscuous mode
[  266.748201][ T8644] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  266.766959][ T8644] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  266.779942][ T8644] EXT4-fs (loop5): This should not happen!! Data will be lost
[  266.779942][ T8644] 
[  266.790832][ T8644] EXT4-fs (loop5): Total free blocks count 0
[  266.796927][ T8644] EXT4-fs (loop5): Free/Dirty block details
[  266.802988][ T8644] EXT4-fs (loop5): free_blocks=2415919504
[  266.808753][ T8644] EXT4-fs (loop5): dirty_blocks=32
[  266.813940][ T8644] EXT4-fs (loop5): Block reservation details
[  266.819962][ T8644] EXT4-fs (loop5): i_reserved_data_blocks=2
[  266.841004][ T8457] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.849341][ T8457] Cannot create hsr debugfs directory
[  266.866341][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.917268][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.924253][ T7568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.972564][ T8513] bridge_slave_0: entered allmulticast mode
[  266.992849][ T8513] bridge_slave_0: entered promiscuous mode
[  267.054028][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.061211][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.083603][ T8513] bridge_slave_1: entered allmulticast mode
[  267.092126][ T8513] bridge_slave_1: entered promiscuous mode
[  267.099028][   T54] Bluetooth: hci7: command tx timeout
[  267.357843][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.369979][ T8657] loop4: detected capacity change from 0 to 16
[  267.391020][ T8657] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  267.874071][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.005620][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.142360][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.285376][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.403709][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.439096][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.462661][ T8560] bridge_slave_0: entered allmulticast mode
[  268.480745][ T8560] bridge_slave_0: entered promiscuous mode
[  268.897013][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.962105][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.969231][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.001885][ T8560] bridge_slave_1: entered allmulticast mode
[  269.022826][ T8560] bridge_slave_1: entered promiscuous mode
[  269.118369][ T8513] team0: Port device team_slave_0 added
[  269.180929][ T8513] team0: Port device team_slave_1 added
[  269.373766][ T8671] loop5: detected capacity change from 0 to 40427
[  269.380857][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.416462][ T8671] F2FS-fs (loop5): heap/no_heap options were deprecated
[  269.454923][ T8671] F2FS-fs (loop5): invalid crc value
[  269.473416][ T8671] F2FS-fs (loop5): Found nat_bits in checkpoint
[  269.573305][ T8678] loop4: detected capacity change from 0 to 32768
[  269.627624][ T8678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.890 (8678)
[  269.664301][ T8671] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  269.687827][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.730736][ T8678] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  269.773614][ T8678] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  269.802496][ T8678] BTRFS info (device loop4): using free-space-tree
[  269.844992][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.877769][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.881390][   T29] audit: type=1804 audit(1729655550.479:123): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.886" name="/newroot/38/file0/file1" dev="loop5" ino=10 res=1 errno=0
[  270.017779][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.082225][   T12] kworker/u8:1: attempt to access beyond end of device
[  270.082225][   T12] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  270.129424][   T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  270.140172][   T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  270.150627][   T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  270.220334][ T8671] VFS:Filesystem freeze failed
[  270.237861][ T8560] team0: Port device team_slave_0 added
[  270.313001][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.320030][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.389002][   T12] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  270.441745][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.019422][ T8560] team0: Port device team_slave_1 added
[  271.215878][ T5230] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.290149][ T8513] hsr_slave_0: entered promiscuous mode
[  271.302571][ T8513] hsr_slave_1: entered promiscuous mode
[  271.347139][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.356767][ T8513] Cannot create hsr debugfs directory
[  271.645624][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.656051][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.718206][ T8560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.743583][ T5317] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  271.902263][ T5317] usb 6-1: Using ep0 maxpacket: 8
[  271.911399][ T5317] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  271.922355][ T5317] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  271.965393][ T5317] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  271.976933][ T5317] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  271.990562][ T5317] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  272.009725][ T5317] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  272.033973][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.041090][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.087140][ T5317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.094395][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.334258][ T5317] usb 6-1: usb_control_msg returned -32
[  272.339948][ T5317] usbtmc 6-1:16.0: can't read capabilities
[  272.483662][ T8560] hsr_slave_0: entered promiscuous mode
[  272.506222][ T8560] hsr_slave_1: entered promiscuous mode
[  272.559802][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  272.575354][ T8560] Cannot create hsr debugfs directory
[  272.606929][   T35] bridge_slave_1: left allmulticast mode
[  272.614805][   T35] bridge_slave_1: left promiscuous mode
[  272.652552][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.715207][   T35] bridge_slave_0: left allmulticast mode
[  272.731664][   T35] bridge_slave_0: left promiscuous mode
[  272.741077][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.923497][ T5317] usb 6-1: USB disconnect, device number 8
[  273.266026][ T8745] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘Ì
[  273.749287][ T8753] loop4: detected capacity change from 0 to 1024
[  273.782449][ T8753] EXT4-fs: Ignoring removed orlov option
[  273.788214][ T8753] EXT4-fs: Ignoring removed nomblk_io_submit option
[  273.840667][ T8755] loop5: detected capacity change from 0 to 128
[  273.892469][ T8753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.922112][ T8755] VFS: Found a Xenix FS (block size = 512) on device loop5
[  274.042035][ T8755] syz.5.905: attempt to access beyond end of device
[  274.042035][ T8755] loop5: rw=2049, sector=2066843070, nr_sectors = 1 limit=128
[  274.059898][ T8755] buffer_io_error: 630 callbacks suppressed
[  274.059920][ T8755] Buffer I/O error on dev loop5, logical block 2066843070, lost async page write
[  274.064190][ T8759] sysv_count_free_blocks: free block count was -2041545938, correcting to 0
[  274.070432][ T8755] syz.5.905: attempt to access beyond end of device
[  274.070432][ T8755] loop5: rw=2049, sector=8767744, nr_sectors = 1 limit=128
[  274.112827][ T3024] kworker/u8:8: attempt to access beyond end of device
[  274.112827][ T3024] loop5: rw=1, sector=2066843069, nr_sectors = 1 limit=128
[  274.142028][ T3024] Buffer I/O error on dev loop5, logical block 2066843069, lost async page write
[  274.166524][ T3024] kworker/u8:8: attempt to access beyond end of device
[  274.166524][ T3024] loop5: rw=1, sector=2066843068, nr_sectors = 1 limit=128
[  274.190966][ T8755] Buffer I/O error on dev loop5, logical block 8767744, lost async page write
[  274.200935][ T3024] Buffer I/O error on dev loop5, logical block 2066843068, lost async page write
[  274.247415][ T8755] syz.5.905: attempt to access beyond end of device
[  274.247415][ T8755] loop5: rw=2049, sector=13269809, nr_sectors = 1 limit=128
[  274.271740][ T8755] Buffer I/O error on dev loop5, logical block 13269809, lost async page write
[  274.292302][ T8755] syz.5.905: attempt to access beyond end of device
[  274.292302][ T8755] loop5: rw=2049, sector=1157, nr_sectors = 1 limit=128
[  274.321867][ T8755] Buffer I/O error on dev loop5, logical block 1157, lost async page write
[  274.351018][ T8755] syz.5.905: attempt to access beyond end of device
[  274.351018][ T8755] loop5: rw=2049, sector=3211264, nr_sectors = 1 limit=128
[  274.377945][ T8759] sysv_count_free_inodes: unable to read inode table
[  274.393432][ T8755] Buffer I/O error on dev loop5, logical block 3211264, lost async page write
[  274.426327][ T8755] syz.5.905: attempt to access beyond end of device
[  274.426327][ T8755] loop5: rw=2049, sector=8768635, nr_sectors = 1 limit=128
[  274.453902][ T8755] Buffer I/O error on dev loop5, logical block 8768635, lost async page write
[  274.475185][ T8755] syz.5.905: attempt to access beyond end of device
[  274.475185][ T8755] loop5: rw=2049, sector=13466417, nr_sectors = 1 limit=128
[  274.490231][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.499369][ T8755] Buffer I/O error on dev loop5, logical block 13466417, lost async page write
[  274.522752][ T8755] Buffer I/O error on dev loop5, logical block 209285, lost async page write
[  274.536098][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.569170][   T35] bond0 (unregistering): Released all slaves
[  274.702047][ T7568] sysv_free_block: trying to free block not in datazone
[  274.731885][ T7568] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  275.764370][ T8513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.825634][ T8457] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  275.860067][   T35] hsr_slave_0: left promiscuous mode
[  275.870512][   T35] hsr_slave_1: left promiscuous mode
[  275.882195][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.900048][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.910931][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.928754][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.978472][   T35] veth1_macvtap: left promiscuous mode
[  275.984773][   T35] veth0_macvtap: left promiscuous mode
[  275.990428][   T35] veth1_vlan: left promiscuous mode
[  275.995877][   T35] veth0_vlan: left promiscuous mode
[  277.338314][ T8789] loop5: detected capacity change from 0 to 32768
[  277.377807][ T8789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.919 (8789)
[  277.448059][ T8789] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.468822][ T8789] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  277.489090][ T8789] BTRFS info (device loop5): using free-space-tree
[  277.658820][   T29] audit: type=1804 audit(1729655558.259:124): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.919" name="/newroot/49/file1/bus" dev="loop5" ino=264 res=1 errno=0
[  277.819698][   T35] team0 (unregistering): Port device team_slave_1 removed
[  277.873502][ T7568] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.931177][   T35] team0 (unregistering): Port device team_slave_0 removed
[  278.786085][ T8811] sctp: [Deprecated]: syz.5.921 (pid 8811) Use of struct sctp_assoc_value in delayed_ack socket option.
[  278.786085][ T8811] Use struct sctp_sack_info instead
[  279.672011][ T8457] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  279.702996][ T8457] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  279.855708][ T8513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.873914][ T8815] loop5: detected capacity change from 0 to 64
[  279.913341][ T8457] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  280.098012][ T8513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.341951][ T8513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.583760][ T8833] Bluetooth: MGMT ver 1.23
[  280.727711][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.800923][ T8513] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  281.024791][ T8513] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  281.080184][ T8513] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  281.115759][ T8513] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  281.190124][ T5336] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  281.253158][ T8457] 8021q: adding VLAN 0 to HW filter on device team0
[  281.307381][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.314646][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.382034][ T5336] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  281.386243][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.398477][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.428430][ T5336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.466900][ T5336] usb 3-1: config 0 descriptor??
[  281.835630][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.054014][ T8513] 8021q: adding VLAN 0 to HW filter on device team0
[  282.107210][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.114895][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.178229][ T8560] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  282.205645][ T8560] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  282.225219][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.232624][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.262794][ T8560] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  282.301706][ T5295] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  282.314519][ T8560] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  282.441139][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.482098][ T5295] usb 6-1: Using ep0 maxpacket: 16
[  282.494990][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.547019][ T5295] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  282.599759][ T5295] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  282.629268][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.670604][ T5295] usb 6-1: config 0 descriptor??
[  282.684644][ T8457] veth0_vlan: entered promiscuous mode
[  282.738405][ T8457] veth1_vlan: entered promiscuous mode
[  282.803406][ T5336] pegasus 3-1:0.0: can't reset MAC
[  282.808969][ T5336] pegasus 3-1:0.0: probe with driver pegasus failed with error -5
[  282.885907][ T8457] veth0_macvtap: entered promiscuous mode
[  282.892004][ T5336] usb 3-1: USB disconnect, device number 9
[  282.970509][ T8457] veth1_macvtap: entered promiscuous mode
[  283.048585][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.114580][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.142130][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.166694][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.198509][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.220832][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.241519][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.262685][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.289140][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.311036][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.331654][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.351539][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.378531][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.396450][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.429991][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.463432][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.510008][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.561563][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.582744][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.604895][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.627323][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.651593][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.674547][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.698601][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.721959][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.733803][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.751588][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.762511][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.774427][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.800443][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.820389][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.863423][ T8457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.889942][ T8457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.902174][ T8457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.911243][ T8457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.934766][ T8560] 8021q: adding VLAN 0 to HW filter on device team0
[  283.955583][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.962833][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.981381][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.988664][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.045772][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.543940][ T8513] veth0_vlan: entered promiscuous mode
[  284.587872][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.614334][ T8513] veth1_vlan: entered promiscuous mode
[  284.636476][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.686464][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  284.704189][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  284.713729][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  284.724161][ T5246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  284.732619][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  284.744483][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  284.954401][ T5295] usbhid 6-1:0.0: can't add hid device: -71
[  284.960953][ T5295] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  285.038452][ T5295] usb 6-1: USB disconnect, device number 9
[  285.127690][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.169468][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.287790][ T8513] veth0_macvtap: entered promiscuous mode
[  285.397655][ T8513] veth1_macvtap: entered promiscuous mode
[  285.483900][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.521823][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.534213][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.545179][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.555327][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.566175][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.576324][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.587211][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.610144][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.620920][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.632486][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.644364][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.654733][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.665486][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.675625][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.686314][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.699016][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.816987][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.907219][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.918668][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.942614][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.974480][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.002073][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.041613][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.071605][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.101500][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.131510][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.164919][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.195957][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.221524][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.242726][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.253636][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.269807][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.297837][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.324019][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.399205][ T8513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.432206][ T8513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.489626][ T8513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.541880][ T8513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.730512][ T8898] chnl_net:caif_netlink_parms(): no params data found
[  286.808960][ T8560] veth0_vlan: entered promiscuous mode
[  286.844352][   T54] Bluetooth: hci8: command tx timeout
[  287.068434][ T8560] veth1_vlan: entered promiscuous mode
[  287.578813][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.593390][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.668156][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.688049][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.718553][ T8898] bridge_slave_0: entered allmulticast mode
[  287.739838][ T8898] bridge_slave_0: entered promiscuous mode
[  287.768296][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.792085][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.800158][ T8898] bridge_slave_1: entered allmulticast mode
[  287.808131][ T8898] bridge_slave_1: entered promiscuous mode
[  287.913981][ T8943] loop1: detected capacity change from 0 to 32768
[  287.934849][ T8943] XFS: attr2 mount option is deprecated.
[  287.940623][ T8943] XFS: ikeep mount option is deprecated.
[  287.961220][ T8943] XFS: noikeep mount option is deprecated.
[  287.992925][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.024877][ T8560] veth0_macvtap: entered promiscuous mode
[  288.074534][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.092287][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.114242][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.156765][ T8943] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  288.297323][ T8943] XFS (loop1): Ending clean mount
[  288.325285][ T8943] XFS (loop1): Quotacheck needed: Please wait.
[  288.370930][ T8943] XFS (loop1): Quotacheck: Done.
[  288.418308][ T8898] team0: Port device team_slave_0 added
[  288.445556][ T8560] veth1_macvtap: entered promiscuous mode
[  288.483382][ T8898] team0: Port device team_slave_1 added
[  288.574723][ T8946] loop5: detected capacity change from 0 to 32768
[  288.586044][ T8946] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.941 (8946)
[  288.630532][ T8946] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  288.642777][ T8946] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  288.651367][ T8946] BTRFS info (device loop5): using free-space-tree
[  288.718701][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.726273][ T8457] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  288.736627][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.834305][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.901155][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.933324][   T54] Bluetooth: hci8: command tx timeout
[  288.972141][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.982242][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.982473][ T8946] BTRFS info (device loop5): rebuilding free space tree
[  288.993059][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.015009][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.025677][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.035685][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.046448][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.056439][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.067085][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.077234][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.088227][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.098703][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.141895][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.162094][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.191571][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.221807][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.253420][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.284074][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.350086][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.372005][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.414267][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.545374][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.551229][ T7568] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.572340][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.599654][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.624177][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.634657][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.645600][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.655746][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.666468][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.676471][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.687053][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.697035][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.707656][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.717697][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.729826][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.740541][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.751167][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.761336][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.771921][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.801876][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.816507][ T8560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.826229][ T8560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.835630][ T8560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.844503][ T8560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.255309][ T8898] hsr_slave_0: entered promiscuous mode
[  290.300802][ T8898] hsr_slave_1: entered promiscuous mode
[  290.401629][ T8898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  290.428020][ T8898] Cannot create hsr debugfs directory
[  290.931849][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.939734][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.006969][   T54] Bluetooth: hci8: command tx timeout
[  291.107550][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.143454][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.684490][ T8898] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.005706][ T8898] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.097682][ T8992] loop1: detected capacity change from 0 to 32768
[  292.242058][ T8898] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.301855][ T8992] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  292.626907][ T8992] XFS (loop1): Ending clean mount
[  292.657606][ T8992] XFS (loop1): Quotacheck needed: Please wait.
[  292.705769][ T8898] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.819650][ T8992] XFS (loop1): Quotacheck: Done.
[  292.854263][ T9006] loop3: detected capacity change from 0 to 32768
[  293.093915][   T54] Bluetooth: hci8: command tx timeout
[  293.443275][ T8457] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  293.460071][ T9006] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  293.554096][ T9006] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  293.587648][ T9006] bcachefs (loop3): Version upgrade required:
[  293.587648][ T9006] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  293.587648][ T9006] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  293.587648][ T9006]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  293.676759][ T8898] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  293.772121][ T9006] bcachefs (loop3): dropping and reconstructing all alloc info
[  293.789377][ T8898] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  293.816846][ T8898] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  293.849975][ T9006] bcachefs (loop3): check_topology... done
[  293.856601][ T9006] bcachefs (loop3): accounting_read... done
[  293.878180][ T9006] bcachefs (loop3): alloc_read...
[  293.886107][ T8898] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  293.911064][ T9006]  done
[  293.919171][ T9006] bcachefs (loop3): stripes_read... done
[  293.946184][ T9006] bcachefs (loop3): snapshots_read... done
[  293.981685][ T9006] bcachefs (loop3): check_allocations... done
[  294.064060][ T9006] bcachefs (loop3): going read-write
[  294.096719][ T9049] netlink: 'syz.0.965': attribute type 1 has an invalid length.
[  294.112750][ T9049] netlink: 3440 bytes leftover after parsing attributes in process `syz.0.965'.
[  294.134607][ T9006] bcachefs (loop3): done starting filesystem
[  294.164869][ T9049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.965'.
[  294.211577][ T9049] netlink: 'syz.0.965': attribute type 1 has an invalid length.
[  294.246002][ T9049] netlink: 5876 bytes leftover after parsing attributes in process `syz.0.965'.
[  294.278241][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.301059][ T8898] 8021q: adding VLAN 0 to HW filter on device team0
[  294.322136][   T51] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  294.347997][ T8898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  294.359001][ T8898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  294.385833][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.393030][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.401978][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.409519][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.478332][ T8560] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX
[  294.478394][ T8560] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0  compress incompressible ptr: 0:34:0 gen 0, shutting down
[  294.587136][   T51] usb 6-1: config 0 has no interfaces?
[  294.592839][   T51] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  294.602753][   T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.636109][ T5295] bcachefs (loop3): going read-only
[  294.641349][ T5295] bcachefs (loop3): finished waiting for writes to stop
[  294.712879][   T51] usb 6-1: config 0 descriptor??
[  294.721118][   T54] bcachefs (loop3): unable to write journal to sufficient devices
[  294.731585][ T5293] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  294.760510][ T8560] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 11
[  294.783581][ T8560] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX
[  294.783623][ T8560] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0  compress incompressible ptr: 0:34:0 gen 0, shutting down
[  294.813301][ T8560] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX
[  294.813326][ T8560] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0  compress incompressible ptr: 0:34:0 gen 0, shutting down
[  294.935587][ T5295] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  294.936412][ T8560] bcachefs (loop3): shutting down
[  294.946436][ T5295] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[  294.987409][ T5295] bcachefs (loop3): unshutdown complete, journal seq 11
[  295.002593][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.017699][ T5295] bcachefs (loop3): done going read-only, filesystem not clean
[  295.036167][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.054113][ T5293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.067439][ T5293] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  295.075935][ T8898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.077318][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.102072][ T5293] usb 3-1: config 0 descriptor??
[  295.186795][ T8560] bcachefs (loop3): shutdown complete
[  295.374711][ T5293] usbhid 3-1:0.0: can't add hid device: -71
[  295.405461][ T5293] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  295.430467][  T931] usb 6-1: USB disconnect, device number 10
[  295.467286][ T5293] usb 3-1: USB disconnect, device number 10
[  295.769835][ T8898] veth0_vlan: entered promiscuous mode
[  295.782312][ T8898] veth1_vlan: entered promiscuous mode
[  295.807314][ T8898] veth0_macvtap: entered promiscuous mode
[  295.856919][ T8898] veth1_macvtap: entered promiscuous mode
[  295.882967][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.903217][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.916396][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.947635][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.990010][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.028373][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.080457][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.124957][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.152942][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.173013][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.217597][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.241622][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.257064][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.267710][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.278898][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.291239][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.301763][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.312389][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.322496][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.333108][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.345346][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.749859][ T9080] loop5: detected capacity change from 0 to 40427
[  296.787110][ T9080] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff
[  296.795810][ T9080] F2FS-fs (loop5): Image doesn't support compression
[  296.811895][ T9080] F2FS-fs (loop5): Image doesn't support compression
[  296.821102][ T9074] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  296.832970][ T9074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  296.862157][ T9080] F2FS-fs (loop5): invalid crc value
[  296.870358][ T9080] F2FS-fs (loop5): Found nat_bits in checkpoint
[  296.914167][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.923913][ T9070] loop1: detected capacity change from 0 to 40427
[  296.942257][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.971588][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.997004][ T9070] F2FS-fs (loop1): invalid crc value
[  297.005155][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.022730][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.033540][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.043567][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.054170][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.064148][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.074797][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.084875][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.096650][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.102922][ T9080] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  297.107682][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.124706][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.134694][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.145247][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.155283][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.166100][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.176084][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.186633][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.200495][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.211980][ T8898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.220723][ T8898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.229586][ T8898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.238429][ T8898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.277964][ T9070] F2FS-fs (loop1): Found nat_bits in checkpoint
[  297.356465][ T9089] F2FS-fs (loop5): inject orphan in f2fs_acquire_orphan_inode of f2fs_unlink+0x3c2/0x960
[  297.528397][ T9070] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  297.642968][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.650870][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.713595][ T3024] bio_check_eod: 1 callbacks suppressed
[  297.713622][ T3024] kworker/u8:8: attempt to access beyond end of device
[  297.713622][ T3024] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  297.733494][ T3024] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  297.740495][ T3024] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  297.768960][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.790692][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.798915][ T2902] kworker/u8:6: attempt to access beyond end of device
[  297.798915][ T2902] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  297.831958][ T2902] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  298.995366][ T9111] loop1: detected capacity change from 0 to 16
[  299.032470][ T9111] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  299.469093][ T9123] loop3: detected capacity change from 0 to 256
[  299.582879][ T9123] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  299.789594][ T9131] input: syz1 as /devices/virtual/input/input10
[  299.851924][ T5336] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  300.036396][ T9140] loop3: detected capacity change from 0 to 16
[  300.044458][ T5336] usb 3-1: Using ep0 maxpacket: 8
[  300.091629][ T5336] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  300.115362][ T5336] usb 3-1: config 179 has no interface number 0
[  300.141815][ T5336] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  300.167687][ T9140] erofs: (device loop3): mounted with root inode @ nid 36.
[  300.199313][ T5336] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  300.251998][ T5336] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  300.288376][ T5336] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  300.312905][ T5336] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  300.381213][ T5336] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  300.410651][ T5336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.521389][ T9129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  300.628694][ T5336] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11
[  300.781413][ T4666] input input11: unable to receive magic message: -110
[  300.904244][ T9156] loop3: detected capacity change from 0 to 256
[  300.978285][ T9156] exfat: Deprecated parameter 'namecase'
[  300.993138][ T5336] usb 3-1: USB disconnect, device number 11
[  300.993222][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  301.018767][ T5336] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  301.057349][ T9156] exfat: Deprecated parameter 'utf8'
[  301.081866][ T9156] exfat: Deprecated parameter 'namecase'
[  301.211595][ T9156] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d)
[  301.238953][ T9161] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  301.622300][ T9171] all: renamed from lo (while UP)
[  302.333756][   T29] audit: type=1326 audit(1729655582.939:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.1.1017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ad157dff9 code=0x0
[  302.666417][ T9173] loop3: detected capacity change from 0 to 32768
[  302.711968][ T9173] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.881301][ T9173] XFS (loop3): Ending clean mount
[  302.921067][ T9173] XFS (loop3): Quotacheck needed: Please wait.
[  302.958321][ T9173] XFS (loop3): Quotacheck: Done.
[  303.312962][ T8560] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  303.844744][  T931] kernel read not supported for file [fanotify] (pid: 931 comm: kworker/1:2)
[  304.282048][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  304.321804][    T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  304.362158][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!!
[  304.522803][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  304.549945][    T8] usb 4-1: Using ep0 maxpacket: 16
[  304.562030][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  304.694328][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.705778][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.715729][    T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  304.725029][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.735896][    T8] usb 4-1: config 0 descriptor??
[  304.752129][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  305.225109][    T8] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0010/input/input12
[  305.373347][    T8] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  305.641837][ T5336] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  306.036122][ T5293] usb 4-1: USB disconnect, device number 7
[  307.479236][ T9294] loop3: detected capacity change from 0 to 40427
[  307.488976][ T9294] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff
[  307.497710][ T9294] F2FS-fs (loop3): Image doesn't support compression
[  307.504610][ T9294] F2FS-fs (loop3): heap/no_heap options were deprecated
[  307.511700][ T9294] F2FS-fs (loop3): Image doesn't support compression
[  307.569832][ T9294] F2FS-fs (loop3): invalid crc value
[  307.572966][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  307.599924][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  307.610350][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  307.610372][ T9294] F2FS-fs (loop3): Found nat_bits in checkpoint
[  307.706018][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  307.715614][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  307.728286][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  307.970702][ T9294] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  308.002294][ T9294] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x44ec/0x4f10
[  308.078510][ T9300] chnl_net:caif_netlink_parms(): no params data found
[  308.118011][ T9294] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[  308.429099][ T5336] usb 5-1: unable to get BOS descriptor or descriptor too short
[  308.440649][ T5336] usb 5-1: no configurations
[  308.445672][ T5336] usb 5-1: can't read configurations, error -22
[  308.526523][ T5236] Bluetooth: hci5: command 0x0406 tx timeout
[  308.608709][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.632007][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.664688][ T9300] bridge_slave_0: entered allmulticast mode
[  308.674214][ T9300] bridge_slave_0: entered promiscuous mode
[  308.882700][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.907381][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.955228][ T9300] bridge_slave_1: entered allmulticast mode
[  308.986105][ T9300] bridge_slave_1: entered promiscuous mode
[  309.372457][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.436597][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.618701][ T9300] team0: Port device team_slave_0 added
[  309.627666][ T9300] team0: Port device team_slave_1 added
[  309.882198][   T54] Bluetooth: hci9: command tx timeout
[  309.913599][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.920643][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.961587][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.059660][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.067115][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.161552][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.421760][ T9356] netlink: 'syz.3.1075': attribute type 9 has an invalid length.
[  310.429740][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'.
[  310.816955][ T9300] hsr_slave_0: entered promiscuous mode
[  310.871912][ T9300] hsr_slave_1: entered promiscuous mode
[  310.897953][ T9300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.956263][ T9300] Cannot create hsr debugfs directory
[  311.191588][ T5293] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  311.351773][ T5293] usb 4-1: Using ep0 maxpacket: 16
[  311.382916][ T5293] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  311.409705][ T5293] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  311.444436][ T5293] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  311.504189][ T5293] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  311.531847][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.564803][ T5293] usb 4-1: Product: syz
[  311.569072][ T5293] usb 4-1: Manufacturer: syz
[  311.651715][ T5293] usb 4-1: SerialNumber: syz
[  311.788928][ T9300] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.961926][ T5236] Bluetooth: hci9: command tx timeout
[  312.025943][ T9382] loop1: detected capacity change from 0 to 4096
[  312.120831][ T5293] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  312.250958][   T29] audit: type=1800 audit(1729655592.849:126): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1085" name="bus" dev="loop1" ino=0 res=0 errno=0
[  312.295648][   T29] audit: type=1800 audit(1729655592.899:127): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1085" name="bus" dev="loop1" ino=0 res=0 errno=0
[  312.519353][ T9300] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.796502][ T9300] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.959164][ T5293] usb 4-1: failed to read current rate; disabling the check
[  312.967848][  T931] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  313.026844][ T9300] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.153557][  T931] usb 1-1: Using ep0 maxpacket: 16
[  313.175525][  T931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  313.200376][  T931] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  313.240683][  T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.317212][  T931] usb 1-1: config 0 descriptor??
[  313.322613][ T5293] usb 4-1: USB disconnect, device number 8
[  313.658949][ T5236] Bluetooth: hci3: command 0x0406 tx timeout
[  313.751921][ T5317] usb 1-1: USB disconnect, device number 11
[  313.832605][ T9300] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  313.915128][ T9300] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  313.984434][ T9300] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  314.017435][ T9300] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  314.042358][   T54] Bluetooth: hci9: command tx timeout
[  314.226175][ T9391] loop1: detected capacity change from 0 to 32768
[  314.335424][ T9391] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  314.430267][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.515141][ T9395] loop3: detected capacity change from 0 to 32768
[  314.544625][ T9300] 8021q: adding VLAN 0 to HW filter on device team0
[  314.586632][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.593895][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.612642][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.619944][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.702934][ T9395] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  314.894638][ T9300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  315.033676][ T9391] XFS (loop1): Ending clean mount
[  315.068614][ T9391] XFS (loop1): Quotacheck needed: Please wait.
[  315.214449][ T9391] XFS (loop1): Quotacheck: Done.
[  315.430143][ T8560] ocfs2: Unmounting device (7,3) on (node local)
[  315.634563][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'.
[  315.664158][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'.
[  315.905771][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.187686][   T54] Bluetooth: hci9: command tx timeout
[  316.275592][ T8457] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  316.487996][ T9442] loop3: detected capacity change from 0 to 512
[  316.668916][ T9442] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1099: casefold flag without casefold feature
[  316.702955][ T1827] bridge_slave_1: left allmulticast mode
[  316.708643][ T1827] bridge_slave_1: left promiscuous mode
[  316.715428][ T1827] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.724791][ T1827] bridge_slave_0: left allmulticast mode
[  316.731359][ T1827] bridge_slave_0: left promiscuous mode
[  316.738127][ T1827] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.856449][ T9442] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1099: couldn't read orphan inode 15 (err -117)
[  316.941739][ T9442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.986303][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  316.995767][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  317.031730][   T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  317.728753][ T8560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.161855][ T5336] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  318.332037][ T5336] usb 5-1: Using ep0 maxpacket: 32
[  318.340041][ T5336] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  318.351619][ T5336] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  318.403933][ T5336] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  318.437055][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  318.491565][ T5336] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  318.524695][ T5336] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  318.589872][ T5336] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  318.630804][ T5336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.681173][ T5336] usb 5-1: config 0 descriptor??
[  318.770851][ T5236] Bluetooth: hci6: command 0x0406 tx timeout
[  318.927242][ T5336] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  318.951033][ T5336] usb 5-1: USB disconnect, device number 14
[  318.970356][ T5336] usblp0: removed
[  319.166549][ T9458] loop3: detected capacity change from 0 to 4096
[  319.265163][ T9458] NILFS (loop3): invalid segment: Checksum error in segment payload
[  319.275831][ T9458] NILFS (loop3): trying rollback from an earlier position
[  319.337974][ T9458] NILFS (loop3): recovery complete
[  319.367004][ T9466] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.531660][    T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  319.724212][    T8] usb 5-1: Using ep0 maxpacket: 32
[  319.735169][    T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  319.757701][    T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  319.791612][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  319.800699][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  319.851835][    T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  319.882374][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  319.963467][    T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  319.986171][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.107288][    T8] usb 5-1: config 0 descriptor??
[  320.195528][ T9477] loop3: detected capacity change from 0 to 4096
[  320.214749][ T9477] ntfs3(loop3): Primary boot: invalid bytes per index 12288(3).
[  320.261153][ T9477] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  320.361227][ T1827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.411846][    T8] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  320.478400][ T1827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.539838][ T1827] bond0 (unregistering): Released all slaves
[  320.803994][ T9471] loop1: detected capacity change from 0 to 32768
[  320.861740][ T9471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1113 (9471)
[  320.915510][ T9465] usblp0:failed reading printer status (-32)
[  321.182192][    T8] usb 5-1: USB disconnect, device number 15
[  321.196103][    T8] usblp0: removed
[  321.310387][ T9471] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  321.382196][ T9471] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  321.411392][ T9471] BTRFS info (device loop1): using free-space-tree
[  322.008056][ T9515] loop3: detected capacity change from 0 to 4096
[  322.039265][ T8457] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  322.059541][ T9515] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  322.424494][ T9300] veth0_vlan: entered promiscuous mode
[  322.483225][ T9300] veth1_vlan: entered promiscuous mode
[  322.630838][ T1827] hsr_slave_0: left promiscuous mode
[  322.701165][ T1827] hsr_slave_1: left promiscuous mode
[  322.766444][ T1827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.801157][ T1827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.832016][ T1827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.859212][ T1827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.956472][ T1827] veth1_macvtap: left promiscuous mode
[  323.020188][ T1827] veth0_macvtap: left promiscuous mode
[  323.039624][ T1827] veth1_vlan: left promiscuous mode
[  323.046278][ T1827] veth0_vlan: left promiscuous mode
[  323.735397][ T9542] loop1: detected capacity change from 0 to 32768
[  323.742963][ T9542] XFS: ikeep mount option is deprecated.
[  323.836684][ T9542] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  324.062200][ T9542] XFS (loop1): Ending clean mount
[  324.070641][ T9542] XFS (loop1): Quotacheck needed: Please wait.
[  324.128508][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.345388][ T9542] XFS (loop1): Quotacheck: Done.
[  324.541769][ T8457] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  324.971149][ T9568] binder: 9567:9568 ioctl c0306201 0 returned -14
[  324.994776][ T9568] binder: 9567:9568 ioctl c0306201 20000480 returned -22
[  325.972192][ T9590] loop1: detected capacity change from 0 to 64
[  326.004108][ T9590] hfs: unable to locate alternate MDB
[  326.033777][ T1827] team0 (unregistering): Port device team_slave_1 removed
[  326.035842][ T9590] hfs: continuing without an alternate MDB
[  326.187525][ T1827] team0 (unregistering): Port device team_slave_0 removed
[  326.195031][   T29] audit: type=1800 audit(1729655606.789:128): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1147" name="file1" dev="loop1" ino=18 res=0 errno=0
[  326.251687][   T29] audit: type=1800 audit(1729655606.789:129): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1147" name="file1" dev="loop1" ino=18 res=0 errno=0
[  327.011411][ T9606] loop1: detected capacity change from 0 to 2048
[  327.102260][ T9607] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  327.128973][ T9606] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  327.150771][    C1] vkms_vblank_simulate: vblank timer overrun
[  327.272185][ T9606] Remounting filesystem read-only
[  328.263711][ T9534] netlink: 'syz.3.1128': attribute type 27 has an invalid length.
[  328.378635][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.386330][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.604339][ T9534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.619859][ T9534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.800247][ T9534] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.811393][ T9534] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.821705][ T9534] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.830671][ T9534] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.044398][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.083883][ T9536] 8021q: adding VLAN 0 to HW filter on device team0
[  329.111686][ T9536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  329.528430][ T9300] veth0_macvtap: entered promiscuous mode
[  329.538162][ T9300] veth1_macvtap: entered promiscuous mode
[  329.557006][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.567742][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.578006][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.588648][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.599205][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.609817][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.619809][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.630492][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.640502][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.651644][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.662823][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.674430][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.684567][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.695138][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.705118][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.715647][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.726418][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.737493][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.749338][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.837021][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.848460][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.859122][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.871829][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.883576][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.894470][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.904656][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.915593][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.925958][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.936812][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.946868][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.957555][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.969353][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.981051][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.991176][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.001816][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.011855][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.022971][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.034779][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.114482][ T9300] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.131877][ T9300] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.140722][ T9300] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.151730][ T9300] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.714400][ T9624] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  330.725185][ T9624] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  330.731744][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.740826][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.771231][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.859991][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.109163][ T1827] IPVS: stop unused estimator thread 0...
[  331.256338][ T9615] loop3: detected capacity change from 0 to 40427
[  331.303894][ T9615] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  331.319053][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.335949][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.350740][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.351668][ T9615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  331.383789][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.401687][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  331.409638][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.444837][ T9615] F2FS-fs (loop3): invalid crc value
[  331.695360][ T1827] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.767708][ T9615] F2FS-fs (loop3): Found nat_bits in checkpoint
[  332.039179][ T9615] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  332.057386][ T9615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  332.138181][ T1827] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.446139][ T8560] syz-executor: attempt to access beyond end of device
[  332.446139][ T8560] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  332.562646][ T8560] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  332.582188][ T1827] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.210824][ T1827] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.246818][ T9639] loop1: detected capacity change from 0 to 32768
[  333.276207][ T9639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1165 (9639)
[  333.351338][ T9639] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  333.430363][ T9639] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  333.488332][ T5236] Bluetooth: hci2: command tx timeout
[  333.507663][ T9639] BTRFS info (device loop1): using free-space-tree
[  333.531628][    T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  333.767641][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.843056][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.882298][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  333.934683][   T29] audit: type=1804 audit(1729655614.529:130): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1165" name="/newroot/44/file0/file1" dev="loop1" ino=260 res=1 errno=0
[  333.972222][    T8] usb 6-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[  334.016031][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.071417][    T8] usb 6-1: config 0 descriptor??
[  334.140423][   T29] audit: type=1804 audit(1729655614.739:131): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1165" name="/newroot/44/file0/file1" dev="loop1" ino=260 res=1 errno=0
[  334.247348][ T9683] netlink: 14569 bytes leftover after parsing attributes in process `syz.4.1176'.
[  334.379750][ T9632] chnl_net:caif_netlink_parms(): no params data found
[  334.455957][ T1827] bridge_slave_1: left allmulticast mode
[  334.462765][ T1827] bridge_slave_1: left promiscuous mode
[  334.488126][ T1827] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.505738][ T8457] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  334.563250][ T1827] bridge_slave_0: left allmulticast mode
[  334.569148][ T1827] bridge_slave_0: left promiscuous mode
[  334.578446][    T8] holtek_mouse 0003:04D9:A070.0011: item fetching failed at offset 1/5
[  334.580338][ T1827] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.588104][    T8] holtek_mouse 0003:04D9:A070.0011: hid parse failed: -22
[  334.602329][    T8] holtek_mouse 0003:04D9:A070.0011: probe with driver holtek_mouse failed with error -22
[  334.764291][ T5317] usb 6-1: USB disconnect, device number 11
[  335.561755][ T5236] Bluetooth: hci2: command tx timeout
[  337.176102][ T1827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.218167][ T1827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.267721][ T1827] bond0 (unregistering): Released all slaves
[  337.353299][ T9707] netlink: 'syz.5.1180': attribute type 10 has an invalid length.
[  337.416902][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.426895][ T9707] team0: Port device batadv0 added
[  337.681735][ T5236] Bluetooth: hci2: command tx timeout
[  338.518537][ T9734] loop1: detected capacity change from 0 to 32768
[  338.526649][ T9734] XFS: noikeep mount option is deprecated.
[  338.928365][ T9734] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  339.011222][ T9734] XFS (loop1): Ending clean mount
[  339.032617][ T9734] XFS (loop1): Quotacheck needed: Please wait.
[  339.268781][ T9734] XFS (loop1): Quotacheck: Done.
[  339.439293][ T8457] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  339.702694][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.709907][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.726702][ T5236] Bluetooth: hci2: command tx timeout
[  339.760215][ T9632] bridge_slave_0: entered allmulticast mode
[  339.797120][ T9632] bridge_slave_0: entered promiscuous mode
[  339.815185][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.873378][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.880816][ T9632] bridge_slave_1: entered allmulticast mode
[  339.919139][ T9632] bridge_slave_1: entered promiscuous mode
[  340.109923][ T9632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.299261][ T1827] hsr_slave_0: left promiscuous mode
[  340.420061][ T1827] hsr_slave_1: left promiscuous mode
[  340.455300][ T1827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.504192][ T1827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.553711][ T1827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.597280][ T1827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.760681][ T1827] veth1_macvtap: left promiscuous mode
[  340.893934][ T1827] veth0_macvtap: left promiscuous mode
[  340.900039][ T1827] veth1_vlan: left promiscuous mode
[  340.954789][ T1827] veth0_vlan: left promiscuous mode
[  341.011765][ T5293] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  341.172006][ T5293] usb 4-1: Using ep0 maxpacket: 8
[  341.187348][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  341.210574][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  341.244662][ T5293] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  341.276296][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  341.309634][ T5293] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  341.341319][ T5293] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  341.371204][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.405218][ T5293] usb 4-1: config 0 descriptor??
[  341.474366][ T5236] Bluetooth: hci10: urb ffff888026eaaa00 submission failed (90)
[  341.664323][   T25] usb 4-1: USB disconnect, device number 9
[  342.706031][ T9821] loop1: detected capacity change from 0 to 4096
[  342.737657][ T9821] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  342.805278][ T9821] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  343.295061][ T9827] loop3: detected capacity change from 0 to 32768
[  343.718613][ T8457] ntfs3(loop1): ino=1a, ntfs_sync_fs failed, -22.
[  343.925399][ T9836] fuse: Bad value for 'fd'
[  344.149403][ T9827] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  344.565426][ T1827] team0 (unregistering): Port device team_slave_1 removed
[  344.675797][ T9827] XFS (loop3): Starting recovery (logdev: internal)
[  344.869461][ T9827] XFS (loop3): Ending recovery (logdev: internal)
[  344.982322][  T931] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  345.035789][ T1827] team0 (unregistering): Port device team_slave_0 removed
[  345.193994][  T931] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.207257][  T931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  345.272161][  T931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  345.291602][ T8560] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  345.311559][  T931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  345.341556][  T931] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.366548][  T931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.372896][   T29] audit: type=1326 audit(1729655625.979:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.393822][  T931] usb 6-1: config 0 descriptor??
[  345.441959][   T29] audit: type=1326 audit(1729655625.999:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.510819][   T29] audit: type=1326 audit(1729655626.009:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.583537][   T29] audit: type=1326 audit(1729655626.009:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.649258][   T29] audit: type=1326 audit(1729655626.009:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.721268][   T29] audit: type=1326 audit(1729655626.019:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.788690][   T29] audit: type=1326 audit(1729655626.019:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.881701][   T29] audit: type=1326 audit(1729655626.019:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.904576][  T931] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  345.941856][   T29] audit: type=1326 audit(1729655626.019:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  345.958796][  T931] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  346.004803][   T29] audit: type=1326 audit(1729655626.019:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa97dff9 code=0x7ffc0000
[  347.134374][ T9878] loop3: detected capacity change from 0 to 512
[  347.142447][ T9878] EXT4-fs: Ignoring removed i_version option
[  347.148674][ T9878] EXT4-fs: Ignoring removed nobh option
[  347.156041][ T9878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  347.254657][ T9878] EXT4-fs (loop3): 1 truncate cleaned up
[  347.266044][ T9878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.567463][ T8560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.059463][  T931] usb 6-1: USB disconnect, device number 12
[  348.213388][ T9632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.348662][ T9866] netlink: 'syz.2.1238': attribute type 29 has an invalid length.
[  348.858291][ T9632] team0: Port device team_slave_0 added
[  349.073309][ T9901] loop1: detected capacity change from 0 to 4096
[  349.128941][ T9901] NILFS (loop1): invalid segment: Checksum error in segment payload
[  349.156272][ T9901] NILFS (loop1): trying rollback from an earlier position
[  349.238250][ T9632] team0: Port device team_slave_1 added
[  349.255394][ T9901] NILFS (loop1): recovery complete
[  349.411854][ T9905] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  349.806942][ T9894] loop3: detected capacity change from 0 to 32768
[  349.961928][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.023534][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.136444][ T9632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.230223][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.263071][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.330753][ T9632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.705860][ T9632] hsr_slave_0: entered promiscuous mode
[  350.862499][ T9632] hsr_slave_1: entered promiscuous mode
[  350.894408][ T9632] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  350.937121][ T9632] Cannot create hsr debugfs directory
[  351.125552][ T9931] team_slave_0: entered promiscuous mode
[  351.131769][ T9931] team_slave_1: entered promiscuous mode
[  351.483982][ T9930] team_slave_0: left promiscuous mode
[  351.490352][ T9930] team_slave_1: left promiscuous mode
[  351.798284][ T9949] loop3: detected capacity change from 0 to 512
[  351.830954][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  351.830978][   T29] audit: type=1326 audit(1729655632.429:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.4.1262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f412d77dff9 code=0x0
[  351.868279][ T9949] EXT4-fs: Ignoring removed i_version option
[  351.883090][ T9949] EXT4-fs: Ignoring removed nobh option
[  351.913219][ T9949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  351.965800][ T9949] EXT4-fs (loop3): 1 truncate cleaned up
[  351.990843][ T9949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.542896][ T8560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.658985][    C1] vkms_vblank_simulate: vblank timer overrun
[  352.925834][ T5236] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0
[  352.937401][ T5236] Bluetooth: hci9: Injecting HCI hardware error event
[  352.949505][   T54] Bluetooth: hci9: hardware error 0x00
[  354.759928][  T931] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  354.826567][ T9965] loop1: detected capacity change from 0 to 32768
[  354.921675][  T931] usb 4-1: Using ep0 maxpacket: 16
[  354.930041][  T931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.942193][  T931] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  354.953571][  T931] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  354.971180][  T931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  354.981145][  T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  354.989794][  T931] usb 4-1: SerialNumber: syz
[  355.139887][ T9990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  355.154816][ T9965] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  355.166901][  T931] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  355.177149][   T54] Bluetooth: hci9: Opcode 0x0c03 failed: -110
[  355.259822][ T9965] XFS (loop1): Ending clean mount
[  355.287157][ T9965] XFS (loop1): Quotacheck needed: Please wait.
[  355.419320][ T9632] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  355.438556][  T931] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  355.451888][  T931] usb 4-1: USB disconnect, device number 10
[  355.586758][ T9632] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  355.706788][ T9632] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  355.722522][ T9965] XFS (loop1): Quotacheck: Done.
[  355.773632][ T9632] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  355.895277][ T8457] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  356.140536][ T9632] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.160622][ T9632] 8021q: adding VLAN 0 to HW filter on device team0
[  356.187731][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.195000][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.352888][    C1] vkms_vblank_simulate: vblank timer overrun
[  356.513751][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.520962][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.046004][T10035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  357.385997][T10051] loop3: detected capacity change from 0 to 256
[  357.496369][T10051] syz.3.1288[10051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  357.496479][T10051] syz.3.1288[10051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  357.593383][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.622795][T10051] syz.3.1288[10051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  357.697469][T10051] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  357.762747][T10051] FAT-fs (loop3): Filesystem has been set read-only
[  357.831265][T10051] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198)
[  357.850582][ T9632] veth0_vlan: entered promiscuous mode
[  357.994832][ T9632] veth1_vlan: entered promiscuous mode
[  358.100425][ T9632] veth0_macvtap: entered promiscuous mode
[  358.131685][ T5233] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  358.150019][ T9632] veth1_macvtap: entered promiscuous mode
[  358.236272][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.290589][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.317500][ T5233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.321297][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.380916][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.393189][ T5233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.417536][ T5233] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  358.426832][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.426861][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.426891][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.426912][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.459478][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.471894][ T5233] usb 2-1: config 0 descriptor??
[  358.561840][    T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  358.591531][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.632059][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.661509][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.692769][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.711864][    T8] usb 6-1: Using ep0 maxpacket: 8
[  358.719533][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  358.730501][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.730530][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.730557][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.730583][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.793495][    T8] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  358.815373][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.843482][    T8] usb 6-1: config 0 descriptor??
[  358.852243][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.882360][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.929607][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.958902][ T5233] elo 0003:04E7:0030.0013: unknown main item tag 0xd
[  358.960849][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.980786][ T5233] elo 0003:04E7:0030.0013: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0
[  359.001766][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  359.046816][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.091797][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.103536][    T8] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  359.131790][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.173525][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.183276][    T8] usb 2-1: USB disconnect, device number 14
[  359.211682][    T9] usb 5-1: Using ep0 maxpacket: 8
[  359.219222][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.231304][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[  359.256515][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  359.269153][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.288660][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  359.311594][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.311685][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  359.361727][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.402007][    T9] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  359.409580][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.411135][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.429256][    T9] usb 5-1: Product: syz
[  359.433576][    T9] usb 5-1: Manufacturer: syz
[  359.438565][    T9] usb 5-1: SerialNumber: syz
[  359.451881][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.480965][    T9] usb 5-1: config 0 descriptor??
[  359.487161][T10093] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  359.524368][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.544001][T10109] loop3: detected capacity change from 0 to 128
[  359.583385][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.611553][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.631593][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.677309][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.701659][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.745133][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.777883][   T25] usb 6-1: USB disconnect, device number 13
[  359.788282][    T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  359.802808][   T25] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected
[  359.808439][    T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  359.820693][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.921287][ T9632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.931759][  T931] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  359.990543][ T9632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.029465][ T9632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.060799][ T9632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.103782][  T931] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[  360.125024][  T931] usb 4-1: config 0 has no interface number 1
[  360.133104][    C0] powermate: config urb returned -71
[  360.142938][    C0] powermate: config urb returned -71
[  360.148743][    C0] powermate: config urb returned -71
[  360.154301][  T931] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  360.154350][    C0] powermate: config urb returned -71
[  360.165348][   T25] usb 5-1: USB disconnect, device number 16
[  360.169739][    C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  360.228010][  T931] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  360.266759][  T931] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  360.313711][  T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  360.351687][  T931] usb 4-1: SerialNumber: syz
[  360.403763][  T931] usb 4-1: config 0 descriptor??
[  360.445254][  T931] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  360.497990][  T931] usb 4-1: No valid video chain found.
[  360.584053][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.611843][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.694351][  T931] usb 4-1: USB disconnect, device number 11
[  360.966608][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.007415][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.457860][T10152] loop1: detected capacity change from 0 to 2048
[  361.551974][T10152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.751826][ T8457] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  361.802168][ T8457] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  362.454058][ T2935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.829527][ T2935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.858417][    T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  363.042527][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.053932][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.091661][    T8] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  363.111941][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.134762][ T2935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.152576][    T8] usb 6-1: config 0 descriptor??
[  363.256955][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.288832][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.299965][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.323016][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.342485][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  363.353497][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.526019][ T2935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.776537][    T8] usb 6-1: string descriptor 0 read error: -22
[  363.791702][   T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  364.028731][    C0] vkms_vblank_simulate: vblank timer overrun
[  364.150552][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.162031][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.182033][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  364.183284][    T8] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #100: -71
[  364.256544][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  364.277899][    T8] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71
[  364.294139][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.328861][    T8] uclogic 0003:256C:006D.0014: failed probing pen v1 parameters: -71
[  364.335380][   T25] usb 3-1: config 0 descriptor??
[  364.395218][    T8] uclogic 0003:256C:006D.0014: failed probing parameters: -71
[  364.430582][    T8] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71
[  364.645001][    T8] usb 6-1: USB disconnect, device number 14
[  364.711183][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.766237][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.795801][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.808677][ T2935] bridge_slave_1: left allmulticast mode
[  364.816944][ T2935] bridge_slave_1: left promiscuous mode
[  364.836544][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.887448][   T25] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  364.905903][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.916070][   T25] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  364.916323][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  364.954877][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.966833][   T25] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  365.144564][ T2935] bridge_slave_0: left allmulticast mode
[  365.150322][ T2935] bridge_slave_0: left promiscuous mode
[  365.157265][   T25] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  365.203899][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.235142][   T25] usb 3-1: USB disconnect, device number 12
[  365.493557][   T54] Bluetooth: hci0: command tx timeout
[  367.271598][   T54] Bluetooth: hci2: command tx timeout
[  367.793791][   T54] Bluetooth: hci0: command tx timeout
[  369.331651][   T54] Bluetooth: hci2: command tx timeout
[  369.802425][   T54] Bluetooth: hci0: command tx timeout
[  371.084077][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.162831][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.246181][ T2935] bond0 (unregistering): Released all slaves
[  371.403289][   T54] Bluetooth: hci2: command tx timeout
[  371.566760][T10195] chnl_net:caif_netlink_parms(): no params data found
[  371.812898][ T5233] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  371.901582][   T54] Bluetooth: hci0: command tx timeout
[  371.991631][ T5233] usb 3-1: Using ep0 maxpacket: 16
[  371.998894][ T5233] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  372.007208][ T5233] usb 3-1: config 0 has no interface number 0
[  372.016939][ T5233] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  372.026645][ T5233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.036962][ T5233] usb 3-1: Product: syz
[  372.041248][ T5233] usb 3-1: Manufacturer: syz
[  372.046508][ T5233] usb 3-1: SerialNumber: syz
[  372.056112][ T5233] usb 3-1: config 0 descriptor??
[  372.064974][ T5233] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  372.597772][ T5294] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  372.774194][ T5294] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  372.783723][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.798199][T10195] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.813853][ T5294] usb 4-1: config 0 descriptor??
[  372.844709][T10195] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.886586][T10195] bridge_slave_0: entered allmulticast mode
[  372.943594][T10195] bridge_slave_0: entered promiscuous mode
[  373.043944][ T5294] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  373.083866][ T5294] asix 4-1:0.0: probe with driver asix failed with error -71
[  373.129588][ T5294] usb 4-1: USB disconnect, device number 12
[  373.191924][ T2935] hsr_slave_0: left promiscuous mode
[  373.221895][ T2935] hsr_slave_1: left promiscuous mode
[  373.244083][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.256429][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.300984][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  373.328696][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.414715][ T2935] veth1_macvtap: left promiscuous mode
[  373.440890][ T2935] veth0_macvtap: left promiscuous mode
[  373.461159][ T2935] veth1_vlan: left promiscuous mode
[  373.477034][ T2935] veth0_vlan: left promiscuous mode
[  373.483662][   T54] Bluetooth: hci2: command tx timeout
[  373.602729][ T5233] gspca_spca1528: reg_w err -71
[  373.607789][ T5233] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  373.632431][ T5233] usb 3-1: USB disconnect, device number 13
[  374.751994][ T5295] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  374.925328][ T5295] usb 5-1: Using ep0 maxpacket: 32
[  374.943242][ T5295] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  374.956985][ T5295] usb 5-1: config 0 has no interface number 0
[  374.973719][ T5295] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  374.983298][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.008545][ T5295] usb 5-1: Product: syz
[  375.013216][ T5295] usb 5-1: Manufacturer: syz
[  375.022401][ T5295] usb 5-1: SerialNumber: syz
[  375.039360][ T5295] usb 5-1: config 0 descriptor??
[  375.063346][ T5295] smsc95xx v2.0.0
[  375.185121][ T2935] team0 (unregistering): Port device team_slave_1 removed
[  375.350188][ T2935] team0 (unregistering): Port device team_slave_0 removed
[  375.483187][ T5295] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  375.521880][ T5295] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  376.149383][ T5295] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  376.181718][ T5295] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  376.213264][ T5295] usb 5-1: USB disconnect, device number 17
[  377.661943][T10195] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.669130][T10195] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.713262][T10195] bridge_slave_1: entered allmulticast mode
[  377.734378][T10195] bridge_slave_1: entered promiscuous mode
[  378.134612][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  378.141006][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  378.856099][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.886103][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.026917][T10224] chnl_net:caif_netlink_parms(): no params data found
[  379.061741][ T5295] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  379.212556][ T5295] usb 4-1: Using ep0 maxpacket: 8
[  379.232888][ T5295] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  379.264144][ T5295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  379.340704][ T5295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  379.372696][ T5295] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  379.397112][ T5295] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  379.427591][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.530844][T10195] team0: Port device team_slave_0 added
[  379.702370][ T5295] usb 4-1: GET_CAPABILITIES returned 0
[  379.707957][ T5295] usbtmc 4-1:16.0: can't read capabilities
[  379.925455][T10195] team0: Port device team_slave_1 added
[  380.101937][ T5295] usb 4-1: USB disconnect, device number 13
[  380.493476][    T9] kernel read not supported for file /newroot/102/file0 (pid: 9 comm: kworker/0:1)
[  380.594188][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.625074][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.751596][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.028086][T10373] loop3: detected capacity change from 0 to 2048
[  381.042191][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.049202][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.076029][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.123736][T10373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.200638][T10224] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.240658][T10224] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.250048][T10224] bridge_slave_0: entered allmulticast mode
[  381.268053][T10224] bridge_slave_0: entered promiscuous mode
[  381.274662][T10373] EXT4-fs (loop3): shut down requested (0)
[  381.294219][T10224] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.301324][T10224] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.351976][T10224] bridge_slave_1: entered allmulticast mode
[  381.359306][T10224] bridge_slave_1: entered promiscuous mode
[  381.445321][T10195] hsr_slave_0: entered promiscuous mode
[  381.502183][T10195] hsr_slave_1: entered promiscuous mode
[  381.516646][T10195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  381.531610][T10195] Cannot create hsr debugfs directory
[  381.546472][ T8560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.812374][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.855211][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.384077][T10397] loop3: detected capacity change from 0 to 2048
[  382.457696][T10397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.575536][ T2935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.603624][   T29] audit: type=1800 audit(1729655663.209:152): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1379" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  382.625416][   T29] audit: type=1800 audit(1729655663.209:153): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1379" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  382.670808][T10224] team0: Port device team_slave_0 added
[  382.695035][T10224] team0: Port device team_slave_1 added
[  382.853403][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.885561][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.996710][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.310512][ T2935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.387356][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.413558][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.491582][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.553385][T10430] loop3: detected capacity change from 0 to 64
[  383.632966][ T5295] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  383.707399][ T2935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.823224][ T5295] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  383.845632][ T5295] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  383.878808][ T5295] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  383.903889][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.933151][T10427] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  383.978379][ T5295] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  384.165091][ T2935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.254684][ T5233] usb 6-1: USB disconnect, device number 15
[  384.446428][T10224] hsr_slave_0: entered promiscuous mode
[  384.523433][T10224] hsr_slave_1: entered promiscuous mode
[  384.556072][T10224] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  384.581663][T10224] Cannot create hsr debugfs directory
[  384.772675][T10451] vivid-007: disconnect
[  384.857435][T10449] vivid-007: reconnect
[  385.151086][T10446] loop3: detected capacity change from 0 to 32768
[  385.229842][T10446] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1396 (10446)
[  385.286723][T10446] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  385.310962][T10446] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  385.331862][ T5236] Bluetooth: hci7: command 0x0406 tx timeout
[  387.492932][T10446] BTRFS info (device loop3): disk space caching is enabled
[  387.500261][T10446] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  389.941579][ T5233] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  394.541948][ T2935] bridge_slave_1: left allmulticast mode
[  394.547716][ T2935] bridge_slave_1: left promiscuous mode
[  394.675294][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.851771][   T30] INFO: task syz.0.796:8331 blocked for more than 143 seconds.
[  394.859441][   T30]       Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  394.883766][ T2935] bridge_slave_0: left allmulticast mode
[  394.889546][ T2935] bridge_slave_0: left promiscuous mode
[  394.961860][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  394.970672][   T30] task:syz.0.796       state:D stack:27296 pid:8331  tgid:8325  ppid:7676   flags:0x00004006
[  394.982652][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.181776][   T30] Call Trace:
[  395.185182][   T30]  <TASK>
[  395.188560][   T30]  __schedule+0x18af/0x4bd0
[  395.302866][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.308646][   T30]  ? __pfx___schedule+0x10/0x10
[  395.421693][   T30]  ? __pfx_lock_release+0x10/0x10
[  395.426872][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  395.551880][   T30]  ? schedule+0x90/0x320
[  395.556432][   T30]  schedule+0x14b/0x320
[  395.560660][   T30]  schedule_preempt_disabled+0x13/0x30
[  395.731580][   T30]  __mutex_lock+0x6a7/0xd70
[  395.736226][   T30]  ? __mutex_lock+0x52a/0xd70
[  395.740996][   T30]  ? exfat_sync_fs+0xb0/0x160
[  395.871718][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  395.877007][   T30]  ? super_lock+0x2d6/0x400
[  395.962123][T10446] BTRFS info (device loop3): rebuilding free space tree
[  395.991562][   T30]  ? __pfx_super_lock+0x10/0x10
[  395.996915][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.151561][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  396.156889][   T30]  exfat_sync_fs+0xb0/0x160
[  396.251573][   T30]  iterate_supers+0xc8/0x190
[  396.256333][   T30]  ? __pfx_sync_fs_one_sb+0x10/0x10
[  396.391554][   T30]  ksys_sync+0xdb/0x1c0
[  396.395826][   T30]  ? __pfx_ksys_sync+0x10/0x10
[  396.400719][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.531505][   T30]  ? do_syscall_64+0xb6/0x230
[  396.536352][   T30]  __do_sys_sync+0xe/0x20
[  396.540898][   T30]  do_syscall_64+0xf3/0x230
[  396.671778][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.677980][   T30] RIP: 0033:0x7fea8817dff9
[  397.553078][T10446] BTRFS info (device loop3): disabling free space tree
[  397.560099][T10446] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  397.601785][   T30] RSP: 002b:00007fea88f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  397.610438][   T30] RAX: ffffffffffffffda RBX: 00007fea88336058 RCX: 00007fea8817dff9
[  397.701820][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  397.710021][   T30] RBP: 00007fea881f0296 R08: 0000000000000000 R09: 0000000000000000
[  397.911530][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.919712][   T30] R13: 0000000000000001 R14: 00007fea88336058 R15: 00007ffcba2b40b8
[  398.303282][T10446] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  398.461600][   T30]  </TASK>
[  398.464949][   T30] INFO: task syz.0.796:8332 blocked for more than 147 seconds.
[  398.531781][   T30]       Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  398.539977][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.631536][   T30] task:syz.0.796       state:D stack:26808 pid:8332  tgid:8325  ppid:7676   flags:0x00004004
[  399.301796][ T5233] usb 6-1: device descriptor read/64, error -110
[  399.571674][ T5233] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  399.782774][   T30] Call Trace:
[  399.786147][   T30]  <TASK>
[  399.789108][   T30]  __schedule+0x18af/0x4bd0
[  399.803028][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.808732][   T30]  ? __pfx___schedule+0x10/0x10
[  399.821541][   T30]  ? __pfx_lock_release+0x10/0x10
[  399.826641][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  399.841568][   T30]  ? schedule+0x90/0x320
[  399.845900][   T30]  schedule+0x14b/0x320
[  399.850115][   T30]  schedule_preempt_disabled+0x13/0x30
[  399.855733][   T30]  __mutex_lock+0x6a7/0xd70
[  399.860303][   T30]  ? __mutex_lock+0x52a/0xd70
[  399.871557][   T30]  ? exfat_sync_fs+0xb0/0x160
[  399.876337][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  399.881403][   T30]  ? super_lock+0x2d6/0x400
[  399.896056][   T30]  ? __pfx_super_lock+0x10/0x10
[  399.901979][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.907725][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  399.921561][   T30]  exfat_sync_fs+0xb0/0x160
[  399.926165][   T30]  iterate_supers+0xc8/0x190
[  399.930814][   T30]  ? __pfx_sync_fs_one_sb+0x10/0x10
[  399.941538][   T30]  ksys_sync+0xdb/0x1c0
[  399.945757][   T30]  ? __pfx_ksys_sync+0x10/0x10
[  399.950562][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.971545][   T30]  ? do_syscall_64+0xb6/0x230
[  399.976354][   T30]  __do_sys_sync+0xe/0x20
[  399.980726][   T30]  do_syscall_64+0xf3/0x230
[  399.985405][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.991370][   T30] RIP: 0033:0x7fea8817dff9
[  400.001560][   T30] RSP: 002b:00007fea88f56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  400.021556][   T30] RAX: ffffffffffffffda RBX: 00007fea88336130 RCX: 00007fea8817dff9
[  400.029613][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  400.041558][   T30] RBP: 00007fea881f0296 R08: 0000000000000000 R09: 0000000000000000
[  400.049578][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.071559][   T30] R13: 0000000000000001 R14: 00007fea88336130 R15: 00007ffcba2b40b8
[  400.079671][   T30]  </TASK>
[  400.083042][   T30] 
[  400.083042][   T30] Showing all locks held in the system:
[  400.090788][   T30] 1 lock held by khungtaskd/30:
[  400.095810][   T30]  #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  400.106881][   T30] 2 locks held by kworker/u8:5/1827:
[  400.112969][   T30] 3 locks held by kworker/u8:6/2902:
[  400.118323][   T30]  #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  400.130273][   T30]  #1: ffffc90009d0fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  400.141573][   T30]  #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  400.150645][   T30] 5 locks held by kworker/u8:7/2935:
[  400.161511][   T30]  #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  400.191526][   T30]  #1: ffffc90009f0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  400.221533][   T30]  #2: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  400.231133][   T30]  #3: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[  400.261597][   T30]  #4: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  400.281528][   T30] 1 lock held by udevd/4681:
[  400.286173][   T30] 2 locks held by getty/4987:
[  400.290873][   T30]  #0: ffff88814baf10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  400.341753][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  400.371720][   T30] 6 locks held by kworker/0:3/5233:
[  400.377024][   T30] 1 lock held by udevd/5291:
[  400.404250][   T30] 3 locks held by kworker/1:4/5295:
[  400.409563][   T30]  #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  400.451545][   T30]  #1: ffffc90004457d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  400.491724][   T30]  #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  400.521951][   T30] 3 locks held by syz.2.629/7463:
[  400.527098][   T30] 2 locks held by syz.0.796/8331:
[  400.621674][ T5233] usb 6-1: device descriptor read/64, error -32
[  400.651544][   T30]  #0: ffff88802e5560e0 (&type->s_umount_key#86){++++}-{3:3}, at: super_lock+0x27c/0x400
[  400.721529][   T30]  #1: ffff88802e5540e8 (&sbi->s_lock#3){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160
[  400.731036][   T30] 2 locks held by syz.0.796/8332:
[  400.791664][ T5233] usb usb6-port1: attempt power cycle
[  400.951731][   T30]  #0: ffff88802e5560e0 (&type->s_umount_key#86){++++}-{3:3}, at: super_lock+0x27c/0x400
[  400.992117][   T30]  #1: ffff88802e5540e8 (&sbi->s_lock#3){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160
[  401.091826][   T30] 2 locks held by syz.4.904/8753:
[  401.097016][   T30]  #0: ffff88802e5560e0 (&type->s_umount_key#86){++++}-{3:3}, at: super_lock+0x27c/0x400
[  401.191655][ T5233] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  401.322104][   T30]  #1: ffff88802e5540e8 (&sbi->s_lock#3){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160
[  401.452331][ T5233] usb 6-1: device descriptor read/8, error -32
[  401.458665][   T30] 2 locks held by syz.5.974/9080:
[  401.521722][   T30]  #0: ffff88802e5560e0 (&type->s_umount_key#86){++++}-{3:3}, at: super_lock+0x27c/0x400
[  401.617144][   T30]  #1: ffff88802e5540e8 (&sbi->s_lock#3){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160
[  401.711587][   T30] 7 locks held by syz-executor/10195:
[  401.717070][   T30]  #0: ffff8880329be420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  401.741732][ T5233] raw-gadget.0 gadget.5: failed to queue resume event
[  401.821962][   T30]  #1: ffff888045c25088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  402.045926][   T30]  #2: ffff88814371a968 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  402.111678][   T30]  #3: ffffffff8f570e28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  402.191738][   T30]  #4: ffff888070de30e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  402.262424][   T30]  #5: ffff888070de5250 (&devlink->lock_key#18){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160
[  402.362489][   T30]  #6: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  402.441972][   T30] 1 lock held by syz.3.1396/10444:
[  402.447253][   T30] 1 lock held by syz.3.1396/10446:
[  402.566485][   T30]  #0: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  402.661632][   T30] 
[  402.664070][   T30] =============================================
[  402.664070][   T30] 
[  402.812590][   T30] NMI backtrace for cpu 1
[  402.817049][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  402.829072][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  402.839205][   T30] Call Trace:
[  402.842577][   T30]  <TASK>
[  402.845543][   T30]  dump_stack_lvl+0x241/0x360
[  402.850289][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.855562][   T30]  ? __pfx__printk+0x10/0x10
[  402.860228][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  402.865263][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  402.870884][   T30]  ? _printk+0xd5/0x120
[  402.875123][   T30]  ? __pfx__printk+0x10/0x10
[  402.879789][   T30]  ? __wake_up_klogd+0xcc/0x110
[  402.884712][   T30]  ? __pfx__printk+0x10/0x10
[  402.889376][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.895079][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  402.900189][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  402.906273][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  402.912332][   T30]  watchdog+0xff4/0x1040
[  402.916647][   T30]  ? watchdog+0x1ea/0x1040
[  402.921133][   T30]  ? __pfx_watchdog+0x10/0x10
[  402.925884][   T30]  kthread+0x2f2/0x390
[  402.930018][   T30]  ? __pfx_watchdog+0x10/0x10
[  402.934775][   T30]  ? __pfx_kthread+0x10/0x10
[  402.939428][   T30]  ret_from_fork+0x4d/0x80
[  402.943925][   T30]  ? __pfx_kthread+0x10/0x10
[  402.948579][   T30]  ret_from_fork_asm+0x1a/0x30
[  402.953430][   T30]  </TASK>
[  402.957857][   T30] Sending NMI from CPU 1 to CPUs 0:
[  402.963483][    C0] NMI backtrace for cpu 0
[  402.963505][    C0] CPU: 0 UID: 0 PID: 8898 Comm: syz-executor Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  402.963536][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  402.963552][    C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x90
[  402.963596][    C0] Code: 44 0a 20 e9 e5 66 5b 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 0c 25 c0 d7 03 00 65 8b 05 70 fd 6e 7e 25 00 01 ff 00 74
[  402.963619][    C0] RSP: 0018:ffffc90004c2faa8 EFLAGS: 00000003
[  402.963643][    C0] RAX: 0000778000000000 RBX: ffff8880c48027e0 RCX: ffff88807e6e0000
[  402.963664][    C0] RDX: 0000000000000000 RSI: ffff8880c48027e0 RDI: 00000000448027e0
[  402.963682][    C0] RBP: 000000000021a100 R08: ffffffff8142ee3b R09: 1ffffffff34d4db1
[  402.963700][    C0] R10: dffffc0000000000 R11: fffffbfff34d4db2 R12: ffff88801c6e03dc
[  402.963720][    C0] R13: ffffea0001120080 R14: 00000000448027e0 R15: ffff88801c6e03c0
[  402.963745][    C0] FS:  00005555589b8500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  402.963769][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  402.963787][    C0] CR2: 0000001b2fa1aff8 CR3: 0000000065602000 CR4: 0000000000350ef0
[  402.963807][    C0] Call Trace:
[  402.963817][    C0]  <NMI>
[  402.963827][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  402.963863][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  402.963907][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  402.963941][    C0]  ? nmi_handle+0x2a/0x5a0
[  402.963981][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  402.964018][    C0]  ? nmi_handle+0x151/0x5a0
[  402.964046][    C0]  ? nmi_handle+0x2a/0x5a0
[  402.964074][    C0]  ? __sanitizer_cov_trace_cmp8+0x8/0x90
[  402.964109][    C0]  ? default_do_nmi+0x63/0x160
[  402.964146][    C0]  ? exc_nmi+0x123/0x1f0
[  402.964179][    C0]  ? end_repeat_nmi+0xf/0x53
[  402.964211][    C0]  ? __phys_addr+0x4b/0x170
[  402.964241][    C0]  ? __sanitizer_cov_trace_cmp8+0x8/0x90
[  402.964276][    C0]  ? __sanitizer_cov_trace_cmp8+0x8/0x90
[  402.964313][    C0]  ? __sanitizer_cov_trace_cmp8+0x8/0x90
[  402.964349][    C0]  </NMI>
[  402.964357][    C0]  <TASK>
[  402.964366][    C0]  __phys_addr+0x4b/0x170
[  402.964398][    C0]  ? __dequeue_signal+0x4ac/0x5c0
[  402.964425][    C0]  check_slab_allocation+0x16/0x110
[  402.964455][    C0]  ? __dequeue_signal+0x4ac/0x5c0
[  402.964481][    C0]  kmem_cache_free+0x14c/0x420
[  402.964523][    C0]  __dequeue_signal+0x4ac/0x5c0
[  402.964558][    C0]  dequeue_signal+0x1e0/0x680
[  402.964586][    C0]  ? __pfx_dequeue_signal+0x10/0x10
[  402.964615][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.964646][    C0]  ? uprobe_deny_signal+0x79/0x230
[  402.964681][    C0]  get_signal+0x604/0x1740
[  402.964724][    C0]  ? __pfx_get_signal+0x10/0x10
[  402.964765][    C0]  arch_do_signal_or_restart+0x96/0x860
[  402.964805][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  402.964841][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  402.964891][    C0]  ? syscall_exit_to_user_mode+0xa3/0x370
[  402.964920][    C0]  syscall_exit_to_user_mode+0xc9/0x370
[  402.964949][    C0]  do_syscall_64+0x100/0x230
[  402.964977][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  402.965010][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.965052][    C0] RIP: 0033:0x7f412d774257
[  402.965073][    C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 55 16 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 a5 16 03 00 8b 44
[  402.965095][    C0] RSP: 002b:00007ffc22e9b730 EFLAGS: 00000293
[  402.965116][    C0] RAX: 0000000000000000 RBX: 0000000000000101 RCX: 00007f412d774257
[  402.965134][    C0] RDX: 0000000040000001 RSI: 00007ffc22e9b78c RDI: 00000000ffffffff
[  402.965153][    C0] RBP: 00007ffc22e9b78c R08: 0000000000000000 R09: 7fffffffffffffff
[  402.965171][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  402.965188][    C0] R13: 000000000005e1b1 R14: 000000000005dd14 R15: 00007ffc22e9b7e0
[  402.965224][    C0]  </TASK>
[  403.702746][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  403.709715][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  403.720334][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  403.730826][   T30] Call Trace:
[  403.734265][   T30]  <TASK>
[  403.737249][   T30]  dump_stack_lvl+0x241/0x360
[  403.742151][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.747410][   T30]  ? __pfx__printk+0x10/0x10
[  403.752050][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  403.758134][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  403.764068][   T30]  ? vscnprintf+0x5d/0x90
[  403.768532][   T30]  panic+0x349/0x880
[  403.772476][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  403.778203][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  403.784516][   T30]  ? __pfx_panic+0x10/0x10
[  403.788987][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  403.794425][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  403.800431][   T30]  ? __irq_work_queue_local+0x137/0x410
[  403.806054][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  403.811747][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  403.817264][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  403.823744][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  403.830054][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  403.835749][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  403.842064][   T30]  watchdog+0x1033/0x1040
[  403.846517][   T30]  ? watchdog+0x1ea/0x1040
[  403.851014][   T30]  ? __pfx_watchdog+0x10/0x10
[  403.855844][   T30]  kthread+0x2f2/0x390
[  403.859985][   T30]  ? __pfx_watchdog+0x10/0x10
[  403.864760][   T30]  ? __pfx_kthread+0x10/0x10
[  403.869423][   T30]  ret_from_fork+0x4d/0x80
[  403.874081][   T30]  ? __pfx_kthread+0x10/0x10
[  403.878725][   T30]  ret_from_fork_asm+0x1a/0x30
[  403.883566][   T30]  </TASK>
[  403.886894][   T30] Kernel Offset: disabled
[  403.891227][   T30] Rebooting in 86400 seconds..