last executing test programs:

1m39.44192428s ago: executing program 1 (id=170):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0)

1m39.409221341s ago: executing program 1 (id=171):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5e5, &(0x7f0000000c00)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)

1m37.636807999s ago: executing program 1 (id=174):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x49b, &(0x7f0000001e80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

1m36.573359425s ago: executing program 1 (id=184):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0xd)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000400), 0x0, 0x0, 0x1)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xee01, 0x0)

1m33.884077248s ago: executing program 1 (id=194):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x60ae82)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

1m30.264313785s ago: executing program 1 (id=208):
clock_gettime(0x4, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000009ac0)={r0, r1+10000000})
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000380)=""/197)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000340))
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x3, r4)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x280)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4)
ftruncate(r7, 0x40001)
sendfile(r6, r7, 0x0, 0xffe4)

1m30.169866015s ago: executing program 32 (id=208):
clock_gettime(0x4, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000009ac0)={r0, r1+10000000})
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000380)=""/197)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000340))
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x3, r4)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x280)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4)
ftruncate(r7, 0x40001)
sendfile(r6, r7, 0x0, 0xffe4)

13.864027474s ago: executing program 2 (id=501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x215}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}], 0x20})
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001b00010a00000000000000000100000006000175cee9dbf8ffe858e9505a209aea47803f320000d9aefc7d30efa3c2dde60cab199d3c3da62f8cb4a71c746666f4ae2d1a299a940f78598ffeecf907de05a4ad3af54fc7a1dfc431bc0894b8c50b42fb47a97f264051e8801d0171bc93978ff27c3438"], 0x1c}}, 0x0)

11.652122295s ago: executing program 2 (id=509):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x6c3f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000001300), &(0x7f00000001c0)=""/10, 0x2}, 0x20)

11.523643455s ago: executing program 2 (id=511):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x0, 'sed\x00'}, 0x2c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
pread64(r4, &(0x7f00000007c0)=""/29, 0x1d, 0x9)

8.759787458s ago: executing program 3 (id=517):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0xda, &(0x7f0000000fc0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0xa4, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@routing={0x1d, 0x0, 0x0, 0x14}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "ffb10000000000000000009f000100ffff00", {"6c0420afae586d030000000000000079", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl(r1, 0x8b2b, 0x0)
unlink(0x0)

8.597034359s ago: executing program 4 (id=519):
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, 0x0, 0x0)

8.44391472s ago: executing program 5 (id=520):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x215}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}], 0x20})
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001b00010a00000000000000000100000006000175cee9dbf8ffe858e9505a209aea47803f320000d9aefc7d30efa3c2dde60cab199d3c3da62f8cb4a71c746666f4ae2d1a299a940f78598ffeecf907de05a4ad3af54fc7a1dfc431bc0894b8c50b42fb47a97f264051e8801d0171bc93978ff27c3438"], 0x1c}}, 0x0)

8.135026182s ago: executing program 2 (id=521):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed00080001"], 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

7.917629143s ago: executing program 3 (id=522):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket(0x18, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0)
request_key(&(0x7f0000000c40)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
unlink(&(0x7f0000001a80)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x4000001f, 0x0, 0x0})
write$binfmt_script(r3, &(0x7f0000000300), 0xff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00')

7.419173685s ago: executing program 5 (id=523):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read(r0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x1001, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x36, 0x31, 0xbff0d7c57f955fcc, 0x37, 0x36, 0x54], 0x2d, [0x33, 0x32, 0x39, 0x39], 0x2d, [0x63, 0x35, 0x37, 0x65], 0x2d, [0x37, 0x66, 0x38, 0x61], 0x2d, [0x32, 0x31, 0x36, 0x7, 0x65, 0x63, 0x60, 0x37]}}}]}})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000b00)=ANY=[])
ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000040)=r5)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x4}, 0x1, 0x30000024, 0x7b, r6, 0xfffffffffffffd8a, 0x4, 'syz1\x00', 0x0})

6.31815273s ago: executing program 4 (id=524):
clock_gettime(0x4, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000009ac0)={r0, r1+10000000})
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000380)=""/197)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000340))
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x3, r4)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x280)
r6 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4)
ftruncate(r6, 0x40001)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendfile(0xffffffffffffffff, r6, 0x0, 0xffe4)

6.188003611s ago: executing program 2 (id=525):
msgctl$MSG_STAT(0x0, 0xb, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)

5.690983843s ago: executing program 3 (id=527):
syz_open_dev$sndctrl(&(0x7f0000001000), 0x5e5, 0x440)
fchdir(0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0xfffffffffffffffd, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000840)=ANY=[@ANYRES64=r0, @ANYBLOB="8baa66cf07b6fb"], 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f000001a040)=""/102358, 0xffffffffffffff33)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, 0x0)
signalfd4(r2, &(0x7f0000000140), 0x8, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f000001080001000000000014000380060001"], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
shmget(0x0, 0x1000, 0x302, &(0x7f0000ffe000/0x1000)=nil)
shmget(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil)

4.991778897s ago: executing program 5 (id=529):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
readahead(r1, 0x1, 0x5)
read$FUSE(r1, &(0x7f0000003c80)={0x2020}, 0x2020)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x1)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x1, 0x3, 0x100, 0x3, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
eventfd2(0x0, 0x0)
io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}])
ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x8})
io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r0}])
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x9, 0x112, 0x400, 0x6, 0x80130140})
r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5)

4.25033064s ago: executing program 0 (id=531):
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
pread64(r3, &(0x7f00000007c0)=""/29, 0x1d, 0x9)

4.23762469s ago: executing program 3 (id=532):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file5\x00', 0x8000, 0x0)
dup3(r1, r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)

4.120011111s ago: executing program 3 (id=533):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x215}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}], 0x20})
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001b00010a00000000000000000100000006000175cee9dbf8ffe858e9505a209aea47803f320000d9aefc7d30efa3c2dde60cab199d3c3da62f8cb4a71c746666f4ae2d1a299a940f78598ffeecf907de05a4ad3af54fc7a1dfc431bc0894b8c50b42fb47a97f264051e8801d0171bc93978ff27c3438"], 0x1c}}, 0x0)

3.319577614s ago: executing program 5 (id=534):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}})
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2)

3.276577355s ago: executing program 0 (id=535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x88100}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x7, 0x4)

3.079527726s ago: executing program 0 (id=536):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x212, &(0x7f00000001c0)="$eJzsmTFrFEEUx/8zu7d3CSJYaGFzFgEjmL3dPZU0FrEXhETU8jCbcDrJyWXBJCAYbGz8AH4Ri1QWdnbWFioIFqYUBcEnOzuTnbi5M3sSm7wf3N5/37z35s3s3lu4BcMwJ5ZPH799eHFjfukygFOYQdPYv3ilj3T837/0Gka+WT/9ZLccKSIFAKLS6v9l/gDA6wUPeFqkJXKjgRmTcwlSa0wBtyFxyYzfgUBoa6UyOoXAPWN+4OjBlBEqFfcHanmlr9Jopa8C5CrJD12ADtS/tyOwDKBlphBOfRtb2w97ChgWQqVWNMjOUxmqK8btn65vQeK6swX59br7/NlOfh4ae2T3D0AMidjoLgQWjZ5HE2EYts1pGjvrP++X+b3isjnrP+pKWv+2EXXFmbn/N9cY8YuqQ/YOqzh/J6KjZQ4mugTHI/I66kfJdjUqmCBPTSH+tOQ/6H3Lub3dtyod/iAix+fzsdTzeOJwUcNZNy4AlaF300rdPDTq7AHLBXd/HGHvwJG3RNE/hA9cdPqT7zwVOtnao87G1vZcf623mq6m60nSvRZdiaKrSUf35uI4pv+1dH+advI3RvgGIsBmL8uG8SaQDeP986Q4Oh138dXgq46Ruv9JzP4kso8Xvezm4XMI85H6O1ez3sjiGYZhGIZhGIZhGIZhGIZhatGGgPmvUth3YlX85JZ+ofU7AAD//ynzZU4=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@isofs_parent={0x14, 0x2, {0xae, 0x4, 0x7, 0xfe4b, 0x7d, 0x80101}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.500807779s ago: executing program 4 (id=537):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.495752919s ago: executing program 3 (id=538):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x38, 0x87, 0x46, 0x20, 0x123, 0x1, 0x4afe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x72, 0x34, 0x0, [], [{{0x9, 0x5, 0x82, 0x0, 0x400}}]}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

2.16745312s ago: executing program 0 (id=539):
syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4e3, &(0x7f00000005c0)="$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")
sync()
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0)

2.16719337s ago: executing program 4 (id=540):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)

1.597188023s ago: executing program 5 (id=541):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read(r0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x1001, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x36, 0x31, 0xbff0d7c57f955fcc, 0x37, 0x36, 0x54], 0x2d, [0x33, 0x32, 0x39, 0x39], 0x2d, [0x63, 0x35, 0x37, 0x65], 0x2d, [0x37, 0x66, 0x38, 0x61], 0x2d, [0x32, 0x31, 0x36, 0x7, 0x65, 0x63, 0x60, 0x37]}}}]}})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000b00)=ANY=[])
ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000040)=r5)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x4}, 0x1, 0x30000024, 0x7b, r6, 0xfffffffffffffd8a, 0x4, 'syz1\x00', 0x0})

1.212945255s ago: executing program 0 (id=542):
syz_open_dev$sndctrl(&(0x7f0000001000), 0x5e5, 0x440)
fchdir(0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0xfffffffffffffffd, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000840)=ANY=[@ANYRES64=r0, @ANYBLOB="8baa66cf07b6fb"], 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f000001a040)=""/102358, 0xffffffffffffff33)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, 0x0)
signalfd4(r2, &(0x7f0000000140), 0x8, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f000001080001000000000014000380060001"], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
shmget(0x0, 0x1000, 0x302, &(0x7f0000ffe000/0x1000)=nil)
shmget(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil)

1.064012045s ago: executing program 4 (id=543):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[@ANYBLOB='lastblock=00000000000000000000,adinicb,dmode=00000000000000004000005,umask=00000000000000000000005,shortad,shortad,undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6c617374626c6f636b3d30303030303030303030303030303030313032332c756d61736b3d30303030303030303030303030303030303030303030362c646d6f64653d3030303030303030301030303030303030303030306f7374726963742c756d61736b3d30303030303030303030303032303030303030303030312c756d61736b3d30303030303030303030303030303030303030303030352c0000000000"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
accept4$unix(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)

265.774759ms ago: executing program 5 (id=544):
socket$caif_seqpacket(0x25, 0x5, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2(&(0x7f00000005c0), 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x280400a, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c696f636861727365743d6d6163726f6d616e69616e2c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c636f6465706167653d3837342c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d300073686f72746e616d653d6c6f7765722c696f636861727365743d69736f383835392d332c0043bf269ec3cd303e697169ccdb28ec33625dd4b5b032b1aed0fb1e602849c415d36cde267ee58f85814c65988b39ed466e54fbe896b052cde78ea0176dae7d128fac681f37c980bee3c44b36afee4d0ffb10bd45d96c4b9bd3e52c80e8c206a9e1f9934b27f5a7b898b2dbd35e59369e3558f3de2d672c55995ccae14846ce5b9474cd7a19007f73041eba9e2efac296ec24ff09b4937504cc83720c1060ae0fcd3facb525a2609bc6b641897a616d7ed2f2b87f34c4627ff088e9ec5af1b74199f0cc4e77c5ec22f5813e23758888018a1b5bd0"], 0x3, 0x294, &(0x7f0000000500)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
pwritev(r2, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r4, 0x103, 0x2, 0x0, &(0x7f00000000c0))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000)
brk(0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f0000000000)=[{}], 0x77, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90)

232.808189ms ago: executing program 2 (id=545):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
pipe2(0x0, 0x0)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

76.18672ms ago: executing program 4 (id=546):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conf_rsp={{0x5, 0x49, 0x6}, {0x8, 0x400, 0x72}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0xfff, 0xd, 0x6f8, 0x6}}]}}, 0x1f)

0s ago: executing program 0 (id=547):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0xfd}, 0x2e)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1}, 0xe)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x829a, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(0xffffffffffffffff, 0x0, 0xb)
splice(r6, 0x0, r7, 0x0, 0xf3a, 0x2)
write$binfmt_misc(r7, &(0x7f0000000240), 0xfdef)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80, 0x2)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x4000004)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x12, r0, 0x80000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts.
[   56.220723][ T4154] cgroup: Unknown subsys name 'net'
[   56.379964][ T4154] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.842982][ T4154] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   59.250135][ T4169] chnl_net:caif_netlink_parms(): no params data found
[   59.266868][ T4167] chnl_net:caif_netlink_parms(): no params data found
[   59.306679][ T4165] chnl_net:caif_netlink_parms(): no params data found
[   59.365825][ T4168] chnl_net:caif_netlink_parms(): no params data found
[   59.414400][ T4166] chnl_net:caif_netlink_parms(): no params data found
[   59.514642][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.521761][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.530320][ T4169] device bridge_slave_0 entered promiscuous mode
[   59.542768][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.550123][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.558363][ T4167] device bridge_slave_0 entered promiscuous mode
[   59.569099][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.576296][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.584809][ T4165] device bridge_slave_0 entered promiscuous mode
[   59.592936][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.600257][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.608627][ T4165] device bridge_slave_1 entered promiscuous mode
[   59.616353][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.623691][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.631486][ T4169] device bridge_slave_1 entered promiscuous mode
[   59.645953][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.653035][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.661559][ T4167] device bridge_slave_1 entered promiscuous mode
[   59.719950][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.727159][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.735807][ T4168] device bridge_slave_0 entered promiscuous mode
[   59.761659][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.772922][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.785787][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.795140][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.802207][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.810322][ T4168] device bridge_slave_1 entered promiscuous mode
[   59.819323][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.839209][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.873037][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.890293][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.897653][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.905791][ T4166] device bridge_slave_0 entered promiscuous mode
[   59.924839][ T4169] team0: Port device team_slave_0 added
[   59.954192][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.961279][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.969743][ T4166] device bridge_slave_1 entered promiscuous mode
[   59.978567][ T4169] team0: Port device team_slave_1 added
[   59.987436][ T4165] team0: Port device team_slave_0 added
[   59.995981][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.007661][ T4167] team0: Port device team_slave_0 added
[   60.015791][ T4167] team0: Port device team_slave_1 added
[   60.036813][ T4165] team0: Port device team_slave_1 added
[   60.050919][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.082470][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.089559][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.115865][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.146349][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.164751][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.171722][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.197881][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.216946][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.224201][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.250773][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.263871][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.273523][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.280579][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.307058][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.319202][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.326278][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.353041][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.371259][ T4168] team0: Port device team_slave_0 added
[   60.405561][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.412539][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.438651][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.462062][ T4168] team0: Port device team_slave_1 added
[   60.502973][ T4166] team0: Port device team_slave_0 added
[   60.512326][ T4167] device hsr_slave_0 entered promiscuous mode
[   60.519613][ T4167] device hsr_slave_1 entered promiscuous mode
[   60.539142][ T4169] device hsr_slave_0 entered promiscuous mode
[   60.546037][ T4169] device hsr_slave_1 entered promiscuous mode
[   60.552578][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.560688][ T4169] Cannot create hsr debugfs directory
[   60.575361][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.582338][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.609329][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.622513][ T4166] team0: Port device team_slave_1 added
[   60.647966][ T4165] device hsr_slave_0 entered promiscuous mode
[   60.655108][ T4165] device hsr_slave_1 entered promiscuous mode
[   60.661798][ T4165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.671912][ T4165] Cannot create hsr debugfs directory
[   60.678767][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.686653][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.713136][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.763766][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.770837][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.797061][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.838747][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.845917][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.871920][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.874490][ T2303] Bluetooth: hci3: command 0x0409 tx timeout
[   60.895765][ T2303] Bluetooth: hci2: command 0x0409 tx timeout
[   60.902042][ T2303] Bluetooth: hci0: command 0x0409 tx timeout
[   60.908964][ T2303] Bluetooth: hci4: command 0x0409 tx timeout
[   60.944700][ T4168] device hsr_slave_0 entered promiscuous mode
[   60.951615][ T4168] device hsr_slave_1 entered promiscuous mode
[   60.957910][ T2303] Bluetooth: hci1: command 0x0409 tx timeout
[   60.964116][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.971678][ T4168] Cannot create hsr debugfs directory
[   61.011013][ T4166] device hsr_slave_0 entered promiscuous mode
[   61.018041][ T4166] device hsr_slave_1 entered promiscuous mode
[   61.024976][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.032628][ T4166] Cannot create hsr debugfs directory
[   61.285673][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.298503][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.308262][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.322363][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.369004][ T4169] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.380781][ T4169] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.393620][ T4169] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.403095][ T4169] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.467014][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.478438][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   61.488755][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   61.514562][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   61.580235][ T4165] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   61.590568][ T4165] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   61.615200][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.625809][ T4165] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   61.652445][ T4165] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.687473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.697636][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.721826][ T4167] 8021q: adding VLAN 0 to HW filter on device team0
[   61.740685][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.769537][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.779836][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.790993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.801145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.811472][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.818805][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.828062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.842023][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.851173][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.860414][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.867697][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.885740][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.906796][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.916749][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.942327][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.956077][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.979629][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.989325][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.999266][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.008125][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.016776][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.025651][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.040098][ T4169] 8021q: adding VLAN 0 to HW filter on device team0
[   62.058725][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.067192][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.075576][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.084375][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.092988][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.101979][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.109068][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.117646][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.128290][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.137042][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.144153][ T1408] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.152060][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.171399][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.184136][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.199217][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.208309][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.217879][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.227248][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.255008][ T4168] 8021q: adding VLAN 0 to HW filter on device team0
[   62.262023][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.278024][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.288129][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.299195][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.308521][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.328840][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.338172][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.347995][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.386236][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.397139][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.406676][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.415548][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.424369][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.433161][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.444017][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.451123][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.459654][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.469026][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.477991][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.485115][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.493773][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.502836][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.521578][ T4165] 8021q: adding VLAN 0 to HW filter on device team0
[   62.532448][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.541172][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.550678][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.569960][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.579055][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.600904][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.612709][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.622305][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.633078][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.642153][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.649312][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.680660][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.688690][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.697561][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.707069][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.717444][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.726269][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.736313][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.746541][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.755756][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.764473][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.771514][ T1408] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.785608][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.798548][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.823560][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.832113][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.841655][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.866709][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.894317][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.907516][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.922352][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.934399][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.954435][ T4212] Bluetooth: hci4: command 0x041b tx timeout
[   62.960869][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.969667][ T4212] Bluetooth: hci0: command 0x041b tx timeout
[   62.976958][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.985735][ T4212] Bluetooth: hci2: command 0x041b tx timeout
[   63.002011][ T4212] Bluetooth: hci3: command 0x041b tx timeout
[   63.010967][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.022514][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.031869][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.040468][ T4214] Bluetooth: hci1: command 0x041b tx timeout
[   63.041457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.074743][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.086069][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.099871][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.112540][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.124680][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.133098][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.145792][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.154379][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.162213][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.170156][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.184890][ T4166] 8021q: adding VLAN 0 to HW filter on device team0
[   63.193232][ T4167] device veth0_vlan entered promiscuous mode
[   63.206329][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.217815][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.238062][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.246019][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.254361][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.263174][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.272173][  T484] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.279461][  T484] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.293693][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.308171][ T4167] device veth1_vlan entered promiscuous mode
[   63.338526][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.356949][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.366280][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.376205][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.386055][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.393144][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.402595][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.413163][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.434742][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.444594][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.456522][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.467145][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.476469][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.531089][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.552127][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.574208][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.589503][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.599586][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.609617][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.618180][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.626812][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.636010][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.645020][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.652988][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.663727][ T4169] device veth0_vlan entered promiscuous mode
[   63.684429][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.711502][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.723620][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.747454][ T4169] device veth1_vlan entered promiscuous mode
[   63.776033][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.796343][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.807260][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.818632][ T4167] device veth0_macvtap entered promiscuous mode
[   63.857244][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.875427][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.886509][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.907834][ T4167] device veth1_macvtap entered promiscuous mode
[   63.932099][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.942222][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.951359][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.961016][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.968817][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.986638][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.996148][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.009293][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.030621][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.039263][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.047658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.058371][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.069651][ T4169] device veth0_macvtap entered promiscuous mode
[   64.083115][ T4168] device veth0_vlan entered promiscuous mode
[   64.092681][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.101166][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.109963][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.122070][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.134456][ T4169] device veth1_macvtap entered promiscuous mode
[   64.141531][ T4165] device veth0_vlan entered promiscuous mode
[   64.154315][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.162520][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.171029][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.179079][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.188311][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.200095][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.216145][ T4165] device veth1_vlan entered promiscuous mode
[   64.226818][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   64.238074][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.247327][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.257587][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.266542][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.277712][ T4168] device veth1_vlan entered promiscuous mode
[   64.287218][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.297075][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.306014][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.315823][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.332292][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.346305][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.357655][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.391361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   64.399864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   64.409929][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   64.419064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.427874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.437653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.446400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.457951][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.468833][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.481685][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.499315][ T4166] device veth0_vlan entered promiscuous mode
[   64.508598][ T4165] device veth0_macvtap entered promiscuous mode
[   64.519442][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.527907][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.537059][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.546079][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.556418][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.567183][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.575472][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.589961][ T4165] device veth1_macvtap entered promiscuous mode
[   64.608545][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.617561][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.626446][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.635493][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.662642][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.676641][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.686928][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.700961][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.712158][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.723076][ T4166] device veth1_vlan entered promiscuous mode
[   64.743865][ T4168] device veth0_macvtap entered promiscuous mode
[   64.758107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.767834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.778020][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.791287][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.802365][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.819103][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.829768][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.840217][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.850998][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.862744][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.889167][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.898185][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.910930][ T4168] device veth1_macvtap entered promiscuous mode
[   64.919593][ T4165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.929040][ T4165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.938577][ T4165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.947437][ T4165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.011815][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.026337][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.036668][ T4214] Bluetooth: hci3: command 0x040f tx timeout
[   65.036988][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.042777][ T4214] Bluetooth: hci2: command 0x040f tx timeout
[   65.059455][ T4214] Bluetooth: hci0: command 0x040f tx timeout
[   65.063282][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.065619][ T4214] Bluetooth: hci4: command 0x040f tx timeout
[   65.078826][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.092327][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.104159][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.114486][    T7] Bluetooth: hci1: command 0x040f tx timeout
[   65.133971][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.142069][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.144583][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.162902][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.172464][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.181477][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.191117][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.204356][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.215874][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.225861][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.236701][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.246911][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.257710][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.269340][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.281431][ T4166] device veth0_macvtap entered promiscuous mode
[   65.307024][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.317808][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.327274][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.336664][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.355762][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.364849][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.376900][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.385789][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.413158][ T4166] device veth1_macvtap entered promiscuous mode
[   65.426134][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.437094][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.449349][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.459027][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.500846][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.514516][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.521001][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.529225][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.532471][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.550184][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.560561][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.572548][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.582824][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.593358][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.607808][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.651418][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.668401][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.679029][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.689694][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.701148][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.711360][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.721924][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.732357][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.743024][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.752882][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.766344][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.777622][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.799338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.824850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.835879][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.848915][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.856396][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.868302][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.880200][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.883534][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.901738][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.917112][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.938418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.949116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.073523][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.128410][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.146738][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.148657][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.208672][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.220399][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.269361][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.274492][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.277640][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.309684][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.322466][ T4255] loop1: detected capacity change from 0 to 128
[   66.330891][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.348668][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.397684][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.425891][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.470304][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.512059][   T26] audit: type=1800 audit(1731741850.531:2): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="bus" dev="loop1" ino=1048588 res=0 errno=0
[   66.548496][ T4257] loop3: detected capacity change from 0 to 512
[   66.953017][ T4257] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   67.141730][ T4257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[   67.336315][ T4211] Bluetooth: hci4: command 0x0419 tx timeout
[   67.342568][ T4211] Bluetooth: hci0: command 0x0419 tx timeout
[   67.348704][ T4211] Bluetooth: hci2: command 0x0419 tx timeout
[   67.355762][ T4211] Bluetooth: hci3: command 0x0419 tx timeout
[   67.361952][ T4211] Bluetooth: hci1: command 0x0419 tx timeout
[   67.375263][ T4257] EXT4-fs (loop3): orphan cleanup on readonly fs
[   67.382385][ T4257] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949761 > max in inode 13
[   67.433654][ T4257] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949762 > max in inode 13
[   67.448779][ T4268] loop1: detected capacity change from 0 to 512
[   67.495286][ T4257] EXT4-fs (loop3): 1 truncate cleaned up
[   67.505249][ T4257] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none.
[   68.606354][ T4257] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.4: dx entry: limit 65535 != root limit 120
[   68.628681][ T4257] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended
[   68.686458][ T4283] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.4: dx entry: limit 65535 != root limit 120
[   68.733719][ T4257] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.4: path /0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   68.761568][ T4283] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended
[   68.820443][ T4283] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.4: path /0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   68.867813][ T4279] loop4: detected capacity change from 0 to 8192
[   68.974326][ T4279] =======================================================
[   68.974326][ T4279] WARNING: The mand mount option has been deprecated and
[   68.974326][ T4279]          and is ignored by this kernel. Remove the mand
[   68.974326][ T4279]          option from the mount to silence this warning.
[   68.974326][ T4279] =======================================================
[   69.017367][ T4285] loop0: detected capacity change from 0 to 512
[   69.058346][ T4279] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   69.137913][ T4285] EXT4-fs (loop0): orphan cleanup on readonly fs
[   69.150723][ T4285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.10: bg 0: block 248: padding at end of block bitmap is not set
[   69.178999][ T4285] Quota error (device loop0): write_blk: dquota write failed
[   69.186808][ T4285] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   69.197898][ T4285] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.10: Failed to acquire dquot type 1
[   69.234806][ T4285] EXT4-fs (loop0): 1 truncate cleaned up
[   69.313630][ T4285] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback.
[   70.537326][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   70.578621][ T4313] loop1: detected capacity change from 0 to 1024
[   70.581568][ T4316] loop0: detected capacity change from 0 to 512
[   70.888617][ T4316] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   70.910655][ T4316] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.291205][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[   71.299447][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[   71.592318][ T4311] loop1: detected capacity change from 0 to 512
[   71.646474][ T4311] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   71.655250][ T4311] EXT4-fs (loop1): 1 truncate cleaned up
[   71.660899][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback.
[   71.722168][ T4325] loop4: detected capacity change from 0 to 2048
[   71.731174][ T4330] loop3: detected capacity change from 0 to 256
[   71.779158][ T4330] exfat: Deprecated parameter 'utf8'
[   71.822270][ T4330] exfat: Bad value for 'gid'
[   71.845673][ T4325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.439657][ T4341] capability: warning: `syz.4.26' uses 32-bit capabilities (legacy support in use)
[   72.819046][ T4345] loop4: detected capacity change from 0 to 1024
[   72.862185][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'.
[   72.903579][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'.
[   73.182251][ T4353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.988817][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   75.013397][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   75.022286][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   75.031240][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   75.040100][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   75.049010][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   75.057862][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   75.172685][ T4380] loop3: detected capacity change from 0 to 256
[   75.276772][ T4380] netlink: 'syz.3.41': attribute type 4 has an invalid length.
[   75.553598][ T4382] Zero length message leads to an empty skb
[   76.053671][ T2303] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   76.103698][    C0] raw-gadget.0 gadget: ignoring, device is not running
[   76.253668][ T2303] usb 4-1: device descriptor read/64, error -32
[   76.683443][ T2303] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   76.850034][ T4393] loop0: detected capacity change from 0 to 16
[   76.933521][ T2303] usb 4-1: Using ep0 maxpacket: 32
[   77.046587][ T4393] erofs: (device loop0): mounted with root inode @ nid 36.
[   77.054543][ T2303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[   77.152657][ T4180] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[   77.228714][ T4393] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[   77.251664][   T26] audit: type=1800 audit(1731741861.271:3): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.45" name="file3" dev="loop0" ino=89 res=0 errno=0
[   77.271356][ T2303] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   77.280625][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.289284][ T2303] usb 4-1: Product: syz
[   77.303434][ T2303] usb 4-1: Manufacturer: syz
[   77.308083][ T2303] usb 4-1: SerialNumber: syz
[   77.345593][ T2303] usb 4-1: config 0 descriptor??
[   77.364595][ T4386] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   77.649485][ T2303] usb 4-1: USB disconnect, device number 3
[   77.738714][ T4393] syz.0.45 (4393) used greatest stack depth: 18528 bytes left
[   77.914946][ T4396] loop4: detected capacity change from 0 to 1024
[   78.143124][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.178665][ T4396] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   78.213544][ T4396] hfsplus: xattr searching failed
[   79.094847][ T4417] loop3: detected capacity change from 0 to 128
[   79.468421][ T4417] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   79.544874][ T4417] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 77: 0x5a != 0xd8
[   79.606315][ T4417] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   79.657446][ T4417] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 77: 0x5a != 0xd8
[   79.713573][ T4417] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   79.793145][ T4417] UDF-fs: Scanning with blocksize 512 failed
[   79.825990][ T4417] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   79.862755][ T4417] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[   79.889329][ T4423] loop4: detected capacity change from 0 to 1024
[   79.892933][ T4417] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   79.923508][ T4417] UDF-fs: Scanning with blocksize 1024 failed
[   79.976999][ T4417] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   80.008791][ T4417] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[   80.033482][ T4417] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   80.051542][ T4423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.113673][ T4417] UDF-fs: Scanning with blocksize 2048 failed
[   80.121953][ T4423] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.214428][ T4417] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   80.244109][ T4302] Bluetooth: hci3: command 0x0409 tx timeout
[   80.352309][ T4417] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[   80.392944][ T4417] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   80.476075][ T4417] UDF-fs: Scanning with blocksize 4096 failed
[   80.493468][ T4417] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[   81.553469][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   81.563592][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   81.572640][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   81.629131][   T13] cfg80211: failed to load regulatory.db
[   82.268548][ T4448] loop3: detected capacity change from 0 to 512
[   82.510433][ T4453] binder: 4452:4453 ioctl 400c620e 20000180 returned -22
[   82.848426][ T4455] loop4: detected capacity change from 0 to 2048
[   83.377147][ T4455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.430987][ T4448] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.59: inode #1: comm syz.3.59: iget: illegal inode #
[   83.464256][   T26] audit: type=1800 audit(1731741867.491:4): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.62" name="file1" dev="loop4" ino=1335 res=0 errno=0
[   83.582376][ T4448] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.59: error while reading EA inode 1 err=-117
[   83.643876][ T4448] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   83.721035][ T4448] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.59: inode #1: comm syz.3.59: iget: illegal inode #
[   83.798732][ T4448] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.59: error while reading EA inode 1 err=-117
[   83.874733][ T4448] EXT4-fs (loop3): 1 orphan inode deleted
[   83.880518][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[   85.137606][ T4476] loop3: detected capacity change from 0 to 1024
[   88.721821][ T4504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.79'.
[   88.765127][ T4504] unsupported nlmsg_type 40
[   89.107782][ T4512] process 'syz.4.83' launched './file0' with NULL argv: empty string added
[   89.178457][ T4210] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   90.563343][    C1] sched: RT throttling activated
[   90.755776][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   90.777662][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.817724][ T4210] usb 3-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00
[   91.555066][ T4535] loop0: detected capacity change from 0 to 1024
[   91.628211][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.639329][ T4210] usb 3-1: config 0 descriptor??
[   91.666807][ T4540] loop3: detected capacity change from 0 to 256
[   91.872232][ T4535] EXT4-fs (loop0): Test dummy encryption mode enabled
[   92.013981][ T4210] usbhid 3-1:0.0: can't add hid device: -71
[   92.019263][ T4535] EXT4-fs (loop0): Test dummy encryption mode enabled
[   92.035777][ T4210] usbhid: probe of 3-1:0.0 failed with error -71
[   92.057234][ T4535] EXT4-fs (loop0): Ignoring removed orlov option
[   92.103639][ T4210] usb 3-1: USB disconnect, device number 2
[   92.135414][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[   97.945297][ T4210] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   97.993460][ T4210] Bluetooth: hci2: Injecting HCI hardware error event
[   98.027887][ T4180] Bluetooth: hci2: hardware error 0x00
[   98.088952][ T4535] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[   99.085944][ T4596] loop0: detected capacity change from 0 to 128
[   99.109340][ T4598] loop3: detected capacity change from 0 to 256
[   99.316118][ T4598] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[   99.425578][ T4596] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none.
[   99.581912][ T4598] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   99.597242][ T4596] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  100.335208][ T4614] loop3: detected capacity change from 0 to 8
[  100.449007][    C1] IPv4: Oversized IP packet from 172.20.20.10
[  101.129684][ T4622] loop0: detected capacity change from 0 to 1024
[  102.432413][ T4616] ODEBUG: Out of memory. ODEBUG disabled
[  104.078942][ T4622] EXT4-fs (loop0): Test dummy encryption mode enabled
[  104.106776][ T4622] EXT4-fs (loop0): Test dummy encryption mode enabled
[  104.148476][ T4622] EXT4-fs (loop0): Ignoring removed orlov option
[  104.199374][ T4622] EXT4-fs: failed to create workqueue
[  104.236201][ T4622] EXT4-fs (loop0): mount failed
[  104.621696][ T4653] loop4: detected capacity change from 0 to 1024
[  105.133292][ T4663] loop3: detected capacity change from 0 to 256
[  105.211629][ T4663] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  105.274595][ T4663] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  105.309647][ T4672] loop0: detected capacity change from 0 to 128
[  105.731246][ T4672] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  106.007551][ T4672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.142818][ T4694] loop1: detected capacity change from 0 to 128
[  108.173647][ T4694] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  108.244150][ T4694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.324469][   T26] audit: type=1800 audit(1731741892.329:5): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.139" name="file1" dev="loop1" ino=94 res=0 errno=0
[  108.547607][ T4698] loop1: detected capacity change from 0 to 16
[  108.567232][ T4209] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  108.646661][ T4698] erofs: (device loop1): mounted with root inode @ nid 36.
[  108.789337][ T4698] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36
[  108.843445][ T4209] usb 3-1: Using ep0 maxpacket: 8
[  108.913885][ T4700] loop3: detected capacity change from 0 to 256
[  108.987825][ T4209] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  109.036990][ T4700] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  109.057559][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.073849][ T4700] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  109.109100][ T4209] usb 3-1: config 0 descriptor??
[  109.137342][ T4704] loop1: detected capacity change from 0 to 1024
[  109.303045][ T4704] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  109.336632][ T4704] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.772629][ T4716] loop0: detected capacity change from 0 to 256
[  110.427174][ T4716] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  110.511662][ T4721] loop4: detected capacity change from 0 to 1024
[  110.603237][ T4721] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,block_validity,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback.
[  110.741157][ T4729] loop0: detected capacity change from 0 to 512
[  111.012383][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[  111.016085][ T4729] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6
[  111.052821][ T4741] device syz_tun entered promiscuous mode
[  111.173699][ T4750] loop1: detected capacity change from 0 to 8
[  111.357305][ T4755] loop0: detected capacity change from 0 to 764
[  111.422391][ T4750] SQUASHFS error: zlib decompression failed, data probably corrupt
[  111.446801][ T4750] SQUASHFS error: Failed to read block 0x4de: -5
[  111.462171][ T4750] SQUASHFS error: Failed to read block 0x4e2: -5
[  111.472248][ T4750] SQUASHFS error: Failed to read block 0x9ca: -5
[  111.483273][ T4750] SQUASHFS error: Failed to read block 0x2cf2: -5
[  111.492369][ T4750] SQUASHFS error: Failed to read block 0x35f2: -5
[  111.508530][   T26] audit: type=1800 audit(1731741895.529:6): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.156" name="file1" dev="loop1" ino=5 res=0 errno=0
[  111.696911][ T4209] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  111.707081][ T4209] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  111.719013][ T4209] asix: probe of 3-1:0.0 failed with error -71
[  111.737241][ T4209] usb 3-1: USB disconnect, device number 3
[  111.768479][ T4764] loop1: detected capacity change from 0 to 16
[  111.783997][ T4764] erofs: (device loop1): mounted with root inode @ nid 36.
[  112.163785][   T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  112.397128][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[  112.416684][ T4775] device syz_tun entered promiscuous mode
[  112.501403][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  112.537062][   T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.561958][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.788232][ T4210] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  112.811743][ T4786] loop1: detected capacity change from 0 to 1024
[  113.242468][ T4786] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback.
[  113.293898][ T4210] usb 4-1: unable to get BOS descriptor or descriptor too short
[  113.423823][ T4210] usb 4-1: not running at top speed; connect to a high speed hub
[  114.088835][   T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.100119][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.110773][   T13] usb 5-1: Product: syz
[  114.116151][   T13] usb 5-1: Manufacturer: syz
[  114.121083][   T13] usb 5-1: SerialNumber: syz
[  114.273071][ T4786] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.171: bad inode number: 6
[  114.274117][   T13] usb 5-1: selecting invalid altsetting 1
[  114.286809][ T4786] EXT4-fs (loop1): Remounting filesystem read-only
[  114.323929][ T4210] usb 4-1: config 6 has an invalid interface number: 62 but max is 0
[  114.339369][ T4210] usb 4-1: config 6 has no interface number 0
[  114.389165][ T4210] usb 4-1: config 6 interface 62 has no altsetting 0
[  114.763832][ T4210] usb 4-1: New USB device found, idVendor=d84b, idProduct=41da, bcdDevice=9c.b3
[  114.773515][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.781629][ T4210] usb 4-1: Product: syz
[  114.792970][ T4210] usb 4-1: Manufacturer: syz
[  114.799998][ T4210] usb 4-1: SerialNumber: syz
[  115.050961][ T4802] loop1: detected capacity change from 0 to 512
[  115.109752][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'.
[  115.128482][ T4210] cdc_ether 4-1:6.62: skipping garbage
[  115.138244][ T4210] usb 4-1: bad CDC descriptors
[  115.145772][ T4808] loop3: detected capacity change from 0 to 764
[  115.157226][ T4210] usb 4-1: USB disconnect, device number 4
[  115.168329][ T4807] device syz_tun entered promiscuous mode
[  115.194162][ T4802] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  115.202662][ T4802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  115.233320][    C1] IPv4: Oversized IP packet from 172.20.20.10
[  115.239279][ T4802] EXT4-fs (loop1): orphan cleanup on readonly fs
[  115.248415][   T13] usb 5-1: selecting invalid altsetting 1
[  115.254300][   T13] cdc_ncm 5-1:1.0: bind() failure
[  115.264832][ T4802] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13
[  115.275789][ T4802] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13
[  115.287480][ T4802] EXT4-fs (loop1): 1 truncate cleaned up
[  115.292178][ T4815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.181'.
[  115.293402][ T4802] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none.
[  115.352435][ T4815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.181'.
[  115.454629][ T4802] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.174: dx entry: limit 65535 != root limit 120
[  115.517962][   T13] usb 5-1: USB disconnect, device number 2
[  115.526416][ T4802] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.174: Corrupt directory, running e2fsck is recommended
[  115.722141][ T4815] loop0: detected capacity change from 0 to 2048
[  116.298422][ T4824] tmpfs: Unknown parameter ',0'
[  116.328204][ T4815] EXT4-fs (loop0): blocks per group (0) and clusters per group (16384) inconsistent
[  117.312311][ T4833] loop1: detected capacity change from 0 to 512
[  117.874088][ T4833] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  117.891867][ T4833] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.947263][ T4833] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #4: block 16: comm syz.1.184: lblock 0 mapped to illegal pblock 16 (length 1)
[  117.986286][ T4833] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 1
[  118.042288][ T4833] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 60929
[  118.085412][ T4833] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.184: Failed to acquire dquot type 1
[  118.203453][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  118.211034][ T4167] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  118.290266][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[  118.391767][ T4855] loop3: detected capacity change from 0 to 764
[  120.110594][ T4862] loop0: detected capacity change from 0 to 256
[  121.479513][ T4167] device syz_tun left promiscuous mode
[  122.019992][ T4265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.423342][ T4897] loop4: detected capacity change from 0 to 256
[  123.567637][ T4265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.898520][ T4265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.919388][ T4910] netlink: 'syz.3.217': attribute type 3 has an invalid length.
[  123.995347][ T4265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.087043][ T4919] loop4: detected capacity change from 0 to 256
[  124.281556][ T4209] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  124.321066][ T4919] FAT-fs (loop4): Directory bread(block 64) failed
[  124.371788][ T4919] FAT-fs (loop4): Directory bread(block 65) failed
[  124.400801][ T4901] chnl_net:caif_netlink_parms(): no params data found
[  124.428675][ T4919] FAT-fs (loop4): Directory bread(block 66) failed
[  124.462445][ T4919] FAT-fs (loop4): Directory bread(block 67) failed
[  124.486207][ T4919] FAT-fs (loop4): Directory bread(block 68) failed
[  124.513655][ T4919] FAT-fs (loop4): Directory bread(block 69) failed
[  124.550955][ T4919] FAT-fs (loop4): Directory bread(block 70) failed
[  124.571108][ T4919] FAT-fs (loop4): Directory bread(block 71) failed
[  124.582331][ T4919] FAT-fs (loop4): Directory bread(block 72) failed
[  124.597114][ T4919] FAT-fs (loop4): Directory bread(block 73) failed
[  124.609153][ T4209] usb 3-1: Using ep0 maxpacket: 32
[  124.789400][ T4209] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.968754][ T4209] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.194340][ T4209] usb 3-1: config 0 interface 0 has no altsetting 0
[  125.363168][ T4209] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  125.391147][ T4919] attempt to access beyond end of device
[  125.391147][ T4919] loop4: rw=524288, want=1768, limit=256
[  125.438122][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.708505][ T4919] attempt to access beyond end of device
[  125.708505][ T4919] loop4: rw=0, want=1744, limit=256
[  125.722006][ T4209] usb 3-1: config 0 descriptor??
[  125.747437][ T4943] loop0: detected capacity change from 0 to 256
[  125.840141][ T4945] attempt to access beyond end of device
[  125.840141][ T4945] loop4: rw=524288, want=1772, limit=256
[  125.886105][ T4945] attempt to access beyond end of device
[  125.886105][ T4945] loop4: rw=0, want=1772, limit=256
[  125.992140][   T26] audit: type=1800 audit(1731741909.309:7): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.221" name="file1" dev="loop4" ino=1048599 res=0 errno=0
[  126.080219][   T26] audit: type=1800 audit(1731741909.337:8): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.221" name="file0" dev="loop4" ino=1048597 res=0 errno=0
[  126.381207][ T4246] Bluetooth: hci1: command 0x0409 tx timeout
[  126.397747][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.431433][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.456460][ T4209] hkems 0003:2006:0118.0001: unbalanced delimiter at end of report description
[  126.467160][ T4209] hkems 0003:2006:0118.0001: parse failed
[  126.473031][ T4209] hkems: probe of 0003:2006:0118.0001 failed with error -22
[  126.491510][ T4901] device bridge_slave_0 entered promiscuous mode
[  126.576190][ T4956] loop4: detected capacity change from 0 to 256
[  126.619993][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.634847][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.649973][ T4302] usb 3-1: USB disconnect, device number 4
[  126.664359][ T4901] device bridge_slave_1 entered promiscuous mode
[  126.696757][ T4956] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  126.766145][ T4956] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  127.545500][ T4901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.648781][   T26] audit: type=1326 audit(1731741910.864:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5100c1719 code=0x7ffc0000
[  127.876125][   T26] audit: type=1326 audit(1731741910.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff5100c1719 code=0x7ffc0000
[  127.897018][ T4964] loop4: detected capacity change from 0 to 1024
[  128.246394][   T26] audit: type=1326 audit(1731741910.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5100c1719 code=0x7ffc0000
[  128.250052][ T4901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.277955][   T26] audit: type=1326 audit(1731741910.910:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5100c1719 code=0x7ffc0000
[  128.346703][ T4964] EXT4-fs (loop4): Ignoring removed orlov option
[  128.355440][   T26] audit: type=1326 audit(1731741910.910:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5100c1719 code=0x7ffc0000
[  128.378059][ T4964] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  128.387565][ T4973] loop0: detected capacity change from 0 to 128
[  128.403372][   T26] audit: type=1326 audit(1731741910.910:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5100c1719 code=0x7ffc0000
[  128.434322][   T26] audit: type=1326 audit(1731741910.910:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5100c1753 code=0x7ffc0000
[  128.459178][   T26] audit: type=1326 audit(1731741910.920:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5100c01ff code=0x7ffc0000
[  129.217143][ T4302] Bluetooth: hci1: command 0x041b tx timeout
[  129.265581][ T4964] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  129.324236][ T4973] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  130.039869][ T4901] team0: Port device team_slave_0 added
[  130.355090][ T4901] team0: Port device team_slave_1 added
[  130.902014][ T4901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.911287][ T4973] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,nobarrier,,errors=continue. Quota mode: none.
[  130.937189][ T4973] ext2 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  130.946098][ T4901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.009045][ T4901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.023944][ T5002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.067690][ T4901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.074709][ T4901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.113394][ T5009] loop4: detected capacity change from 0 to 256
[  131.134961][ T4901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.183902][ T5009] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  131.209962][ T5009] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  131.283809][ T4901] device hsr_slave_0 entered promiscuous mode
[  131.312929][ T4901] device hsr_slave_1 entered promiscuous mode
[  131.346591][ T4901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.358383][ T4901] Cannot create hsr debugfs directory
[  131.442189][ T1107] Bluetooth: hci1: command 0x040f tx timeout
[  131.622728][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  131.666717][ T4901] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  131.864989][ T4901] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  131.932763][ T1107] usb 5-1: Using ep0 maxpacket: 32
[  132.061894][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.139852][ T1107] usb 5-1: config 0 has no interfaces?
[  132.274803][ T1107] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  132.319929][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.381109][ T1107] usb 5-1: config 0 descriptor??
[  132.435114][ T4210] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  132.459454][ T4901] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  132.617376][ T4901] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.728478][ T4265] device hsr_slave_0 left promiscuous mode
[  132.760525][ T4265] device hsr_slave_1 left promiscuous mode
[  132.792405][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.825852][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.866199][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.901572][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.934371][ T4265] device bridge_slave_1 left promiscuous mode
[  132.966104][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.019139][ T4265] device bridge_slave_0 left promiscuous mode
[  133.033894][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.088107][ T4265] device veth1_macvtap left promiscuous mode
[  133.094584][ T4265] device veth0_macvtap left promiscuous mode
[  133.109226][ T4265] device veth1_vlan left promiscuous mode
[  133.117946][ T4265] device veth0_vlan left promiscuous mode
[  133.252722][ T4210] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[  133.276217][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.309992][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.341393][ T4210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  133.529062][ T4210] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  133.538728][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.557968][ T4210] usb 3-1: config 0 descriptor??
[  133.606023][ T5056] loop3: detected capacity change from 0 to 256
[  133.664704][ T2303] Bluetooth: hci1: command 0x0419 tx timeout
[  133.685551][ T4265] team0 (unregistering): Port device team_slave_1 removed
[  133.698727][ T5060] loop0: detected capacity change from 0 to 256
[  133.712048][ T4265] team0 (unregistering): Port device team_slave_0 removed
[  133.727444][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.756837][ T5060] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  133.769169][ T5060] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  133.769353][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.881365][ T4265] bond0 (unregistering): Released all slaves
[  133.926211][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  133.932607][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  134.032625][ T1107] usb 5-1: USB disconnect, device number 3
[  134.162751][ T4210] wacom 0003:056A:0331.0002: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0
[  135.002354][ T4210] usb 3-1: USB disconnect, device number 5
[  135.033938][ T4901] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.061096][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.126231][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.230732][ T4901] 8021q: adding VLAN 0 to HW filter on device team0
[  135.294849][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.295446][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.295849][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.295921][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.296435][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  135.819865][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.820535][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.820932][  T484] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.820975][  T484] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.996005][ T4901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  135.996035][ T4901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.020645][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.021755][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.022649][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.025312][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.026277][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.027437][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.028308][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.054683][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.055719][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.056382][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.075784][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  137.078914][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.556315][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  137.556560][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  137.591909][ T4901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.633265][ T5116] loop0: detected capacity change from 0 to 512
[  137.757842][ T5116] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262162)!
[  137.757873][ T5116] EXT4-fs (loop0): group descriptors corrupted!
[  138.602557][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'.
[  140.166541][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.224782][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.310625][ T4901] device veth0_vlan entered promiscuous mode
[  140.384276][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.403300][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.293878][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.358475][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.168351][ T4901] device veth1_vlan entered promiscuous mode
[  142.466588][ T5188] loop0: detected capacity change from 0 to 256
[  142.518892][ T4901] device veth0_macvtap entered promiscuous mode
[  142.569380][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.597338][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.659190][ T4901] device veth1_macvtap entered promiscuous mode
[  142.674284][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.761581][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.843303][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.911928][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.975981][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.985836][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.212685][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.237935][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.254070][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.266557][ T5211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  143.287625][ T4901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.326102][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.349464][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.482888][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.505636][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.556507][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.585895][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.595758][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.626026][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.648327][ T4901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.674119][ T5226] loop3: detected capacity change from 0 to 512
[  143.681929][ T4901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.696588][ T4901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.745104][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.775377][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.819068][ T5226] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  143.832884][ T4901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.839889][ T5226] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.842126][ T4901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.861025][ T4901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.869857][ T4901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.890037][   T26] kauditd_printk_skb: 37 callbacks suppressed
[  143.890054][   T26] audit: type=1800 audit(1731741926.057:54): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.292" name="file1" dev="loop3" ino=15 res=0 errno=0
[  143.951765][   T26] audit: type=1800 audit(1731741926.104:55): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.292" name="file2" dev="loop3" ino=16 res=0 errno=0
[  144.131203][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.162275][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.211315][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.267082][ T4898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.308777][ T5242] loop3: detected capacity change from 0 to 1024
[  144.308997][ T4898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.366440][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.652026][ T5252] loop0: detected capacity change from 0 to 512
[  145.301433][ T5242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.320750][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  145.442797][ T5252] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  145.621173][ T5267] loop5: detected capacity change from 0 to 512
[  145.855949][ T5267] EXT4-fs (loop5): Ignoring removed bh option
[  145.874341][ T5267] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  145.951971][ T5267] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  146.021470][ T5267] EXT4-fs (loop5): 1 truncate cleaned up
[  146.033797][ T5267] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bh,discard,auto_da_alloc,barrier,sysvgroups,,errors=continue. Quota mode: none.
[  147.045694][ T5290] loop0: detected capacity change from 0 to 512
[  147.282350][ T5290] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.305: invalid indirect mapped block 10 (level 1)
[  147.380701][ T5290] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.305: invalid indirect mapped block 8 (level 1)
[  147.497820][ T5290] EXT4-fs (loop0): 1 truncate cleaned up
[  147.514508][ T5290] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none.
[  148.246619][ T5313] loop0: detected capacity change from 0 to 512
[  148.563794][ T5313] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  149.272216][ T5324] loop5: detected capacity change from 0 to 512
[  149.426335][ T5325] loop3: detected capacity change from 0 to 736
[  149.428150][ T5313] EXT4-fs (loop0): 1 truncate cleaned up
[  149.457289][ T5313] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none.
[  149.576417][ T5324] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.309: inode #1: comm syz.5.309: iget: illegal inode #
[  149.660744][ T5324] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.309: error while reading EA inode 1 err=-117
[  149.685479][ T5324] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.309: inode #1: comm syz.5.309: iget: illegal inode #
[  149.811678][ T5325] Symlink component flag not implemented
[  149.851261][ T5325] Symlink component flag not implemented (7)
[  149.857111][ T5324] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.309: error while reading EA inode 1 err=-117
[  149.929917][ T5348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.317'.
[  149.964657][ T5324] EXT4-fs (loop5): 1 orphan inode deleted
[  149.982512][ T5324] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,dioread_lock,,errors=continue. Quota mode: none.
[  150.098791][ T5354] loop4: detected capacity change from 0 to 1024
[  150.476563][ T5361] loop3: detected capacity change from 0 to 256
[  150.523162][ T5354] EXT4-fs (loop4): Ignoring removed orlov option
[  150.966206][ T5354] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  151.170567][ T5354] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  153.341297][ T5396] loop4: detected capacity change from 0 to 40427
[  153.483480][ T5396] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  153.491742][ T5396] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  153.511840][ T5396] F2FS-fs (loop4): invalid crc value
[  153.607701][ T5396] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.660190][ T5396] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  153.667847][ T5396] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  153.912644][ T5414] attempt to access beyond end of device
[  153.912644][ T5414] loop4: rw=2049, want=78344, limit=40427
[  155.605313][ T2303] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  156.617510][ T2303] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  156.643002][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.674721][ T2303] usb 4-1: Product: syz
[  156.678976][ T2303] usb 4-1: Manufacturer: syz
[  156.703338][ T5458] loop4: detected capacity change from 0 to 1024
[  156.710444][ T2303] usb 4-1: SerialNumber: syz
[  156.733003][ T2303] usb 4-1: config 0 descriptor??
[  156.800415][ T2303] ch341 4-1:0.0: ch341-uart converter detected
[  157.258795][ T2303] usb 4-1: failed to send control message: -71
[  157.265159][ T2303] ch341-uart: probe of ttyUSB0 failed with error -71
[  157.343469][ T5473] loop4: detected capacity change from 0 to 40427
[  157.362542][ T2303] usb 4-1: USB disconnect, device number 5
[  157.463465][ T2303] ch341 4-1:0.0: device disconnected
[  157.553078][ T5473] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  157.560916][ T5473] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  157.700848][ T5473] F2FS-fs (loop4): invalid crc value
[  157.989001][ T5473] F2FS-fs (loop4): Found nat_bits in checkpoint
[  158.059133][ T5473] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  158.066259][ T5473] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  158.324238][ T5495] attempt to access beyond end of device
[  158.324238][ T5495] loop4: rw=2049, want=78344, limit=40427
[  162.450100][ T5540] loop4: detected capacity change from 0 to 1024
[  162.641479][ T5540] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  164.467399][ T5567] loop0: detected capacity change from 0 to 256
[  165.203512][ T5571] loop3: detected capacity change from 0 to 512
[  165.255246][   T26] audit: type=1326 audit(163.491:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  165.329105][   T26] audit: type=1326 audit(163.500:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.063626][   T26] audit: type=1326 audit(163.500:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.226772][   T26] audit: type=1326 audit(163.500:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.254888][ T5571] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.382515][   T26] audit: type=1326 audit(163.528:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.559935][   T26] audit: type=1326 audit(163.528:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.623355][   T26] audit: type=1326 audit(163.528:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.754870][ T5571] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.369: Directory hole found for htree leaf block 0
[  166.801001][   T26] audit: type=1326 audit(163.528:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.916144][   T26] audit: type=1326 audit(163.528:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5572 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781e36e719 code=0x7ffc0000
[  166.973316][ T5593] loop4: detected capacity change from 0 to 512
[  167.040690][ T1107] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  167.074357][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[  167.095802][ T5593] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  167.137327][ T5593] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  167.183549][ T5599] loop3: detected capacity change from 0 to 512
[  167.215354][ T5593] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.377: casefold flag without casefold feature
[  167.255750][ T5593] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.377: couldn't read orphan inode 15 (err -117)
[  167.268248][ T5593] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000027,noload,jqfmt=vfsold,grpquota,sysvgroups,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  167.297154][ T1107] usb 3-1: Using ep0 maxpacket: 32
[  167.328132][ T5593] syz.4.377 (pid 5593) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  167.400592][ T5599] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.378: casefold flag without casefold feature
[  167.434736][ T5599] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.378: couldn't read orphan inode 15 (err -117)
[  167.468925][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short
[  167.476830][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  168.331847][ T5617] loop0: detected capacity change from 0 to 256
[  168.377121][ T1107] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  168.419438][ T1107] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  168.522782][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  169.404178][ T1107] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  170.009826][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.587004][ T1107] usb 3-1: Product: syz
[  170.608699][ T1107] usb 3-1: Manufacturer: syz
[  170.625847][ T5646] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  170.640437][ T1107] usb 3-1: SerialNumber: syz
[  170.720051][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.739643][ T1107] usb 3-1: can't set config #1, error -71
[  170.750797][ T1107] usb 3-1: USB disconnect, device number 6
[  170.781232][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.807132][ T5651] xt_SECMARK: invalid mode: 2
[  170.860660][ T5640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.940258][ T5655] loop0: detected capacity change from 0 to 1024
[  170.940888][ T5652] tap0: tun_chr_ioctl cmd 1074025677
[  170.978444][ T5652] tap0: linktype set to 0
[  171.345037][ T5666] loop3: detected capacity change from 0 to 256
[  171.793261][ T5685] loop3: detected capacity change from 0 to 512
[  172.441122][ T5685] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  172.765300][ T5685] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.399: bg 0: block 64: padding at end of block bitmap is not set
[  172.832001][ T5685] Quota error (device loop3): write_blk: dquota write failed
[  172.941985][ T5685] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  172.952152][ T5685] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.399: Failed to acquire dquot type 0
[  173.019532][ T5714] loop0: detected capacity change from 0 to 2048
[  173.037865][ T5685] EXT4-fs (loop3): 1 truncate cleaned up
[  173.069475][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.120509][ T5714] Alternate GPT is invalid, using primary GPT.
[  173.136310][ T5714]  loop0: p1 p2 p3
[  173.819141][ T5685] EXT4-fs warning (device loop3): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[  174.020639][ T5724] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  174.186360][ T5737] loop4: detected capacity change from 0 to 256
[  174.229268][ T5738] loop5: detected capacity change from 0 to 256
[  174.428097][ T4242] udevd[4242]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  174.431318][ T4335] udevd[4335]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  174.479106][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  174.545764][ T5740] loop0: detected capacity change from 0 to 512
[  174.677455][ T5740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=885ec01c, mo2=0002]
[  174.725203][ T5740] EXT4-fs (loop0): orphan cleanup on readonly fs
[  174.758342][ T5740] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  174.895596][ T5740] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  174.913787][ T5740] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.408: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  175.009791][ T5740] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.408: couldn't read orphan inode 13 (err -117)
[  175.869561][ T5740] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,usrquota,debug,grpid,,errors=continue. Quota mode: writeback.
[  175.985368][ T5758] loop5: detected capacity change from 0 to 1024
[  175.999800][ T5740] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.408: inode #15: comm syz.0.408: iget: illegal inode #
[  177.005147][ T5758] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  178.740466][ T5792] loop3: detected capacity change from 0 to 1024
[  178.967165][ T5796] loop4: detected capacity change from 0 to 256
[  179.401368][ T5792] hfsplus: unable to parse mount options
[  179.653780][ T5813] loop0: detected capacity change from 0 to 512
[  181.077463][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  181.483816][   T23] usb 5-1: Using ep0 maxpacket: 16
[  181.633768][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.787582][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  182.081637][   T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  182.221251][   T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  182.270379][ T5849] loop3: detected capacity change from 0 to 256
[  182.355578][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.477968][   T13] usb 3-1: Using ep0 maxpacket: 16
[  182.506014][ T5855] device lo entered promiscuous mode
[  182.530464][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'.
[  182.540224][   T23] usb 5-1: config 0 descriptor??
[  182.670619][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.689769][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.701815][   T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  182.715164][   T13] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  182.724286][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.744409][   T13] usb 3-1: config 0 descriptor??
[  182.997434][ T5819] loop4: detected capacity change from 0 to 1024
[  183.253853][ T5819] EXT4-fs (loop4): Ignoring removed orlov option
[  183.617387][ T5819] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,orlov,. Quota mode: none.
[  183.831701][   T13] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input9
[  183.935912][   T13] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  183.986917][   T13] usb 3-1: USB disconnect, device number 7
[  184.042709][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  184.091296][   T23] HID 045e:07da: Invalid code 65791 type 1
[  184.111780][   T23] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input10
[  185.026654][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.034122][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.056024][   T23] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  185.119577][   T23] usb 5-1: USB disconnect, device number 4
[  186.541244][ T5898] loop4: detected capacity change from 0 to 764
[  187.270946][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.362615][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.855663][ T5855] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.864674][ T5855] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.876601][ T5855] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.885638][ T5855] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.698009][ T5950] capability: warning: `syz.0.463' uses deprecated v2 capabilities in a way that may be insecure
[  190.809670][ T5955] loop0: detected capacity change from 0 to 8
[  190.880775][ T5877] Bluetooth: hci3: command 0x0406 tx timeout
[  190.891354][ T5877] Bluetooth: hci0: command 0x0406 tx timeout
[  192.327581][ T5975] loop3: detected capacity change from 0 to 512
[  193.012083][ T5975] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  193.040541][ T5975] EXT4-fs (loop3): Unrecognized mount option "async" or missing value
[  194.178903][ T5992] loop0: detected capacity change from 0 to 512
[  194.734351][ T5992] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.134725][ T6008] netlink: 68 bytes leftover after parsing attributes in process `syz.3.481'.
[  196.323778][ T6019] loop3: detected capacity change from 0 to 1024
[  196.441004][ T6019] attempt to access beyond end of device
[  196.441004][ T6019] loop3: rw=0, want=8556380166, limit=1024
[  196.461913][ T6019] Buffer I/O error on dev loop3, logical block 4278190082, async page read
[  196.470941][ T6019] hfsplus: unable to mark blocks free: error -5
[  196.484528][ T6019] hfsplus: can't free extent
[  196.722426][   T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  196.936066][ T6026] loop5: detected capacity change from 0 to 764
[  197.140852][   T13] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  197.337355][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.350378][   T13] usb 5-1: config 0 descriptor??
[  197.381953][ T5877] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  197.414004][ T5877] Bluetooth: hci0: Injecting HCI hardware error event
[  197.424896][ T4172] Bluetooth: hci0: hardware error 0x00
[  197.502032][   T13] cp210x 5-1:0.0: cp210x converter detected
[  198.129001][   T13] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  198.136667][   T13] cp210x 5-1:0.0: querying part number failed
[  198.183576][ T4213] Bluetooth: hci1: command 0x0405 tx timeout
[  198.227220][   T13] usb 5-1: cp210x converter now attached to ttyUSB0
[  199.067521][ T6064] loop5: detected capacity change from 0 to 512
[  199.611624][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  199.621128][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  199.799841][ T6078] loop0: detected capacity change from 0 to 764
[  199.962871][   T13] usb 5-1: USB disconnect, device number 5
[  199.978593][   T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  200.005380][ T6064] EXT4-fs (loop5): external journal device major/minor numbers have changed
[  200.036744][   T13] cp210x 5-1:0.0: device disconnected
[  200.174015][ T6064] EXT4-fs (loop5): failed to open journal device unknown-block(4,137) -6
[  200.202735][ T6084] loop0: detected capacity change from 0 to 128
[  200.521955][ T6085] attempt to access beyond end of device
[  200.521955][ T6085] loop0: rw=2049, want=345, limit=128
[  200.653098][    T9] attempt to access beyond end of device
[  200.653098][    T9] loop0: rw=1, want=1041, limit=128
[  201.754894][ T6102] loop0: detected capacity change from 0 to 2048
[  202.382017][ T6102] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none.
[  202.579684][ T6111] loop5: detected capacity change from 0 to 16
[  202.671332][ T6111] erofs: (device loop5): mounted with root inode @ nid 36.
[  202.704318][ T6113] input: syz0 as /devices/virtual/input/input11
[  202.785335][ T6114] loop4: detected capacity change from 0 to 512
[  202.846108][ T4183] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  202.877599][ T6111] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  203.115956][ T6114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  203.267401][   T26] audit: type=1800 audit(201.489:65): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.514" name="file3" dev="loop5" ino=89 res=0 errno=0
[  203.589281][ T6127] syz.5.518 uses obsolete (PF_INET,SOCK_PACKET)
[  204.082724][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[  204.112252][ T6131] loop4: detected capacity change from 0 to 40427
[  204.220800][ T6131] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  204.228674][ T6131] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  204.247452][ T6131] F2FS-fs (loop4): invalid crc value
[  204.267397][ T6131] F2FS-fs (loop4): Found nat_bits in checkpoint
[  204.288917][ T6138] loop3: detected capacity change from 0 to 256
[  204.317013][ T6131] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  204.324186][ T6131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  204.394577][ T6138] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  207.192079][ T6160] loop5: detected capacity change from 0 to 16
[  207.484116][ T6160] erofs: (device loop5): mounted with root inode @ nid 36.
[  207.611850][ T4183] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  207.643079][ T6160] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  207.758956][   T26] audit: type=1800 audit(205.688:66): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.529" name="file3" dev="loop5" ino=89 res=0 errno=0
[  207.788735][ T6160] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  207.848734][ T6160] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  209.112143][ T6191] loop5: detected capacity change from 0 to 512
[  209.742062][ T6191] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  210.241372][ T4214] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  210.302933][ T6191] EXT4-fs (loop5): 1 truncate cleaned up
[  210.338068][ T6191] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,data_err=ignore,quota,,errors=continue. Quota mode: writeback.
[  210.572845][ T4214] usb 4-1: Using ep0 maxpacket: 32
[  210.831257][ T4214] usb 4-1: unable to get BOS descriptor or descriptor too short
[  211.075521][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  211.332463][ T4214] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  211.447056][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.478926][ T6212] loop4: detected capacity change from 0 to 2048
[  211.727141][ T4214] usb 4-1: Product: syz
[  211.732796][ T4214] usb 4-1: Manufacturer: syz
[  211.737434][ T4214] usb 4-1: SerialNumber: syz
[  211.760187][ T6212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.811951][ T4214] usb 4-1: config 0 descriptor??
[  211.823782][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'.
[  212.139910][ T6226] 
[  212.142283][ T6226] ======================================================
[  212.149304][ T6226] WARNING: possible circular locking dependency detected
[  212.156325][ T6226] 5.15.172-syzkaller #0 Not tainted
[  212.161527][ T6226] ------------------------------------------------------
[  212.168550][ T6226] syz.0.547/6226 is trying to acquire lock:
[  212.174455][ T6226] ffff888025070c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0
[  212.185551][ T6226] 
[  212.185551][ T6226] but task is already holding lock:
[  212.193039][ T6226] ffffffff8dcbe6a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790
[  212.202700][ T6226] 
[  212.202700][ T6226] which lock already depends on the new lock.
[  212.202700][ T6226] 
[  212.213098][ T6226] 
[  212.213098][ T6226] the existing dependency chain (in reverse order) is:
[  212.222189][ T6226] 
[  212.222189][ T6226] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  212.230187][ T6226]        lock_acquire+0x1db/0x4f0
[  212.235239][ T6226]        __mutex_lock_common+0x1da/0x25a0
[  212.240957][ T6226]        mutex_lock_nested+0x17/0x20
[  212.246246][ T6226]        rfkill_register+0x30/0x880
[  212.251454][ T6226]        hci_register_dev+0x4dd/0xa50
[  212.256855][ T6226]        vhci_create_device+0x310/0x590
[  212.262526][ T6226]        vhci_write+0x382/0x430
[  212.267401][ T6226]        vfs_write+0xacd/0xe50
[  212.272160][ T6226]        ksys_write+0x1a2/0x2c0
[  212.277039][ T6226]        do_syscall_64+0x3b/0xb0
[  212.281976][ T6226]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  212.288402][ T6226] 
[  212.288402][ T6226] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  212.296226][ T6226]        lock_acquire+0x1db/0x4f0
[  212.301251][ T6226]        __mutex_lock_common+0x1da/0x25a0
[  212.307230][ T6226]        mutex_lock_nested+0x17/0x20
[  212.312518][ T6226]        vhci_send_frame+0x8a/0xf0
[  212.317654][ T6226]        hci_send_frame+0x1af/0x2f0
[  212.322936][ T6226]        hci_tx_work+0xb2e/0x1a30
[  212.327954][ T6226]        process_one_work+0x8a1/0x10c0
[  212.333407][ T6226]        worker_thread+0xaca/0x1280
[  212.338621][ T6226]        kthread+0x3f6/0x4f0
[  212.343225][ T6226]        ret_from_fork+0x1f/0x30
[  212.348196][ T6226] 
[  212.348196][ T6226] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  212.357396][ T6226]        lock_acquire+0x1db/0x4f0
[  212.362415][ T6226]        __flush_work+0xeb/0x1a0
[  212.367381][ T6226]        hci_dev_do_close+0x20a/0x1070
[  212.372834][ T6226]        hci_error_reset+0x106/0x2d0
[  212.378266][ T6226]        process_one_work+0x8a1/0x10c0
[  212.383750][ T6226]        worker_thread+0xaca/0x1280
[  212.389094][ T6226]        kthread+0x3f6/0x4f0
[  212.393679][ T6226]        ret_from_fork+0x1f/0x30
[  212.398614][ T6226] 
[  212.398614][ T6226] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  212.406251][ T6226]        lock_acquire+0x1db/0x4f0
[  212.411291][ T6226]        __mutex_lock_common+0x1da/0x25a0
[  212.417003][ T6226]        mutex_lock_nested+0x17/0x20
[  212.422277][ T6226]        bg_scan_update+0xa1/0x4a0
[  212.427377][ T6226]        process_one_work+0x8a1/0x10c0
[  212.432834][ T6226]        worker_thread+0xaca/0x1280
[  212.438029][ T6226]        kthread+0x3f6/0x4f0
[  212.442615][ T6226]        ret_from_fork+0x1f/0x30
[  212.447561][ T6226] 
[  212.447561][ T6226] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  212.457364][ T6226]        validate_chain+0x1649/0x5930
[  212.462730][ T6226]        __lock_acquire+0x1295/0x1ff0
[  212.468091][ T6226]        lock_acquire+0x1db/0x4f0
[  212.473102][ T6226]        __flush_work+0xeb/0x1a0
[  212.478032][ T6226]        __cancel_work_timer+0x519/0x6a0
[  212.483698][ T6226]        hci_request_cancel_all+0xcb/0x300
[  212.489608][ T6226]        hci_dev_do_close+0x51/0x1070
[  212.494988][ T6226]        hci_rfkill_set_block+0x114/0x1a0
[  212.500736][ T6226]        rfkill_set_block+0x1e7/0x430
[  212.506101][ T6226]        rfkill_fop_write+0x5b7/0x790
[  212.511480][ T6226]        vfs_write+0x30c/0xe50
[  212.516755][ T6226]        ksys_write+0x1a2/0x2c0
[  212.521595][ T6226]        do_syscall_64+0x3b/0xb0
[  212.526534][ T6226]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  212.532943][ T6226] 
[  212.532943][ T6226] other info that might help us debug this:
[  212.532943][ T6226] 
[  212.543242][ T6226] Chain exists of:
[  212.543242][ T6226]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  212.543242][ T6226] 
[  212.558958][ T6226]  Possible unsafe locking scenario:
[  212.558958][ T6226] 
[  212.566396][ T6226]        CPU0                    CPU1
[  212.571757][ T6226]        ----                    ----
[  212.577116][ T6226]   lock(rfkill_global_mutex);
[  212.581875][ T6226]                                lock(&data->open_mutex);
[  212.588984][ T6226]                                lock(rfkill_global_mutex);
[  212.596285][ T6226]   lock((work_completion)(&hdev->bg_scan_update));
[  212.602882][ T6226] 
[  212.602882][ T6226]  *** DEADLOCK ***
[  212.602882][ T6226] 
[  212.611011][ T6226] 1 lock held by syz.0.547/6226:
[  212.615935][ T6226]  #0: ffffffff8dcbe6a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790
[  212.626110][ T6226] 
[  212.626110][ T6226] stack backtrace:
[  212.631990][ T6226] CPU: 0 PID: 6226 Comm: syz.0.547 Not tainted 5.15.172-syzkaller #0
[  212.640050][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  212.650110][ T6226] Call Trace:
[  212.653408][ T6226]  <TASK>
[  212.656328][ T6226]  dump_stack_lvl+0x1e3/0x2d0
[  212.661001][ T6226]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  212.666640][ T6226]  ? print_circular_bug+0x12b/0x1a0
[  212.671856][ T6226]  check_noncircular+0x2f8/0x3b0
[  212.676789][ T6226]  ? add_chain_block+0x850/0x850
[  212.681739][ T6226]  ? lockdep_lock+0x11f/0x2a0
[  212.686410][ T6226]  validate_chain+0x1649/0x5930
[  212.691260][ T6226]  ? mark_lock+0x98/0x340
[  212.695575][ T6226]  ? reacquire_held_locks+0x660/0x660
[  212.700935][ T6226]  ? __lock_acquire+0x1295/0x1ff0
[  212.705952][ T6226]  ? mark_lock+0x98/0x340
[  212.710291][ T6226]  ? __lock_acquire+0x1295/0x1ff0
[  212.715338][ T6226]  ? mark_lock+0x98/0x340
[  212.719673][ T6226]  __lock_acquire+0x1295/0x1ff0
[  212.724706][ T6226]  lock_acquire+0x1db/0x4f0
[  212.729193][ T6226]  ? __flush_work+0xcf/0x1a0
[  212.733778][ T6226]  ? rcu_lock_release+0x5/0x20
[  212.738549][ T6226]  ? read_lock_is_recursive+0x10/0x10
[  212.743912][ T6226]  ? start_flush_work+0x776/0x820
[  212.748927][ T6226]  __flush_work+0xeb/0x1a0
[  212.753372][ T6226]  ? __flush_work+0xcf/0x1a0
[  212.757991][ T6226]  ? flush_work+0x20/0x20
[  212.762312][ T6226]  ? print_irqtrace_events+0x210/0x210
[  212.768195][ T6226]  ? lock_timer_base+0x260/0x260
[  212.773163][ T6226]  ? __cancel_work_timer+0x467/0x6a0
[  212.778458][ T6226]  __cancel_work_timer+0x519/0x6a0
[  212.783572][ T6226]  ? cancel_work_sync+0x20/0x20
[  212.788427][ T6226]  ? lockdep_hardirqs_on+0x94/0x130
[  212.793641][ T6226]  ? __cancel_work+0x2ef/0x380
[  212.798397][ T6226]  ? cancel_work+0x20/0x20
[  212.802843][ T6226]  ? print_irqtrace_events+0x210/0x210
[  212.808299][ T6226]  hci_request_cancel_all+0xcb/0x300
[  212.813584][ T6226]  hci_dev_do_close+0x51/0x1070
[  212.818432][ T6226]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  212.824325][ T6226]  ? _raw_spin_unlock+0x40/0x40
[  212.829174][ T6226]  hci_rfkill_set_block+0x114/0x1a0
[  212.834367][ T6226]  ? rcu_lock_release+0x20/0x20
[  212.839211][ T6226]  rfkill_set_block+0x1e7/0x430
[  212.844081][ T6226]  rfkill_fop_write+0x5b7/0x790
[  212.848923][ T6226]  ? rfkill_fop_read+0x470/0x470
[  212.853857][ T6226]  ? fsnotify_perm+0x64/0x590
[  212.858545][ T6226]  ? security_file_permission+0x75/0xa0
[  212.864080][ T6226]  ? rfkill_fop_read+0x470/0x470
[  212.869102][ T6226]  vfs_write+0x30c/0xe50
[  212.873348][ T6226]  ? file_end_write+0x250/0x250
[  212.878192][ T6226]  ? __fget_files+0x413/0x480
[  212.882885][ T6226]  ? __fdget_pos+0x1e9/0x380
[  212.887499][ T6226]  ? ksys_write+0x77/0x2c0
[  212.891910][ T6226]  ksys_write+0x1a2/0x2c0
[  212.896229][ T6226]  ? print_irqtrace_events+0x210/0x210
[  212.901679][ T6226]  ? __ia32_sys_read+0x80/0x80
[  212.906431][ T6226]  ? syscall_enter_from_user_mode+0x2e/0x240
[  212.912417][ T6226]  ? lockdep_hardirqs_on+0x94/0x130
[  212.917602][ T6226]  ? syscall_enter_from_user_mode+0x2e/0x240
[  212.923576][ T6226]  do_syscall_64+0x3b/0xb0
[  212.927996][ T6226]  ? clear_bhb_loop+0x15/0x70
[  212.932662][ T6226]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  212.938545][ T6226] RIP: 0033:0x7f743a6cd719
[  212.943125][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.962731][ T6226] RSP: 002b:00007f7438b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  212.971270][ T6226] RAX: ffffffffffffffda RBX: 00007f743a884f80 RCX: 00007f743a6cd719
[  212.979232][ T6226] RDX: 000000000000002e RSI: 0000000020000300 RDI: 0000000000000004
[  212.987192][ T6226] RBP: 00007f743a74075e R08: 0000000000000000 R09: 0000000000000000
[  212.995221][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.003192][ T6226] R13: 0000000000000000 R14: 00007f743a884f80 R15: 00007ffe3a9af858
[  213.011168][ T6226]  </TASK>
[  213.017633][ T4214] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12
[  213.047706][ T6228] loop5: detected capacity change from 0 to 256
[  213.101260][   T13] Bluetooth: hci4: command 0x0406 tx timeout
[  213.252079][ T2855] usb 4-1: USB disconnect, device number 6
[  213.433974][ T6228] caif:caif_disconnect_client(): nothing to disconnect