last executing test programs:

1m40.868089167s ago: executing program 3 (id=430):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x33, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x41d1, 0x4)
recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

1m38.156965754s ago: executing program 3 (id=437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x6db6e559)
sendfile(r2, r3, 0x0, 0x28000000000002)
sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000340)=""/244}, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020}, 0x2030)

1m35.718917812s ago: executing program 3 (id=444):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m35.350117024s ago: executing program 0 (id=445):
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x168e, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1m34.474248859s ago: executing program 4 (id=446):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1m32.98251964s ago: executing program 4 (id=448):
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xb, "12"}], 0x18}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0})
bind$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x8000000000000003, 0x2}, 0xc)

1m32.746864488s ago: executing program 4 (id=449):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x33, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x41d1, 0x4)
recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

1m32.294577399s ago: executing program 0 (id=451):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57)

1m31.675254168s ago: executing program 0 (id=453):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x14927e, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)

1m31.01765675s ago: executing program 3 (id=455):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x6db6e559)
sendfile(r2, r3, 0x0, 0x28000000000002)
sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000340)=""/244}, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020}, 0x2030)

1m30.781152329s ago: executing program 4 (id=457):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

1m30.374694217s ago: executing program 0 (id=459):
r0 = add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
io_setup(0x685, &(0x7f0000000280)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

1m28.587450736s ago: executing program 4 (id=461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00')
readv(r5, &(0x7f0000000240)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1)

1m28.501586389s ago: executing program 3 (id=462):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003120000"], 0x0, 0x0}, 0x0)

1m25.027799653s ago: executing program 3 (id=464):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffd)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400), 0x24, 0x0)
lremovexattr(0x0, &(0x7f0000000400)=@known='system.posix_acl_default\x00')
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x2}]}}]}, 0x3c}}, 0x0)

1m25.02724289s ago: executing program 4 (id=465):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
faccessat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0)

1m25.02445715s ago: executing program 0 (id=475):
r0 = open(0x0, 0x6d6cc3, 0x0)
syz_emit_vhci(0x0, 0x22)
ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f00000010c0)="aabf", 0x2}], 0x1, 0xf1, 0x5)

1m24.483174192s ago: executing program 0 (id=468):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
io_uring_setup(0x5, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48})

10.793904029s ago: executing program 2 (id=540):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
socket(0x0, 0x0, 0x1)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x8003, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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")
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

10.029653361s ago: executing program 1 (id=541):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0)
mlockall(0x2)
shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000000000/0xc00000)=nil)
open_tree(0xffffffffffffffff, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
mmap$binder(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

7.483774097s ago: executing program 5 (id=542):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

6.106641907s ago: executing program 1 (id=543):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x4, 0x9ab9)
fdatasync(0xffffffffffffffff)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f00000001c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0)

5.72504592s ago: executing program 5 (id=544):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCFLSH(r1, 0x80047456, 0xfffffffffffffffe)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x24, 0x9, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000214e224e0000", 0x58}], 0x1)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x7, 0x0, 0x2)
r5 = fcntl$dupfd(r3, 0x0, r3)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)

5.561641884s ago: executing program 2 (id=545):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M'])
chdir(&(0x7f0000000140)='./file0\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

5.267509372s ago: executing program 5 (id=546):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

4.160186626s ago: executing program 1 (id=547):
socket$inet6(0xa, 0x2, 0x0)
gettid()
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ce, &(0x7f0000001a40)="$eJzs3c1vHGcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeJg9bJoZmftXe/6LfFb4POJxvM888w889vfPDPjXWc1Af5vXb+Q5qMUuX7hjYdlfXVltr26Mnuibm4nKcuNpNmdpbibFI+TubK96JvSNx/y8eK1tz57svp5t9asp2r9se22G2HEusv1lOm6v+mRW47vdhfLdXh5McmNej5oYrd9DaxYJu18PYcj1xmyvJfN93LeAsdM7+5UdO+bQ6aSF5JM1r8HpL46NA4vwoOxp6scAAAAPKc+vXfUEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDzp37+f1FPjXqe6RS95/9P9JbV5WNobtdrPjrQOAAAAAAAAADgcHx9LWt5mJO9eqeo/uZ/rqqczhed5Et5Pw+ykPu5mIeZz1KWcj+Xk0z1dTTxcH5p6f7l9S1Lo7e8MnLLK4f1igEAAAAAAADgf9Iv09r4+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwHRTLWnVXT6XqeqTSa2WjLcvLPJBNHHe8eFKMWPjr8OAAAAOCZTD7FNl9ey1oe5mSv3imq9/xfqd4vT+b93M1SFrOUdhZys34PXb7rb6yuzLZXV2bvlFNZH+z3+//eUxgTdQ9jVW3Uns9Wa7RyK4vVkou5UQVzM43uvs8nZ3vx9MXV56MypuJ7tV1G1qzTWu7s91t9irAvdv9RRKtXaJY/ehmZqWMrs3Gqm4Gi+qAm2ZyJHY9Oc6A2VfU6vr6ny2msf/Jz+gBy/kI9L1/Pbw4053u1nolGqkxc6Y2+8pzZPhPJN/76p7dvt+++e/vWgwvH5yXtYGyL5ZvHxGxfJl55rjPR3OP6M1UmzqzXr+dH+UkuZDpv5n4W89PMZykL6dTt8/V4Ln9ObZ+puYHamztFMlEfl+4x201M0/lhVZrPuWrbk1lMkXu5mYW8Xv27ksv5dq7maq71HeEzW8ZdvbbqrG9sPut7R/pvI4M//826UF7dfrtxlZvb7hVvNTr3S/faX+b1VF9eu6P+yfpap/rOg5m+LL3Uy874yM6f5trY/GpdKPfxq+H77hGaOtHNRHkC9e4Svehe7maiWd2Lhsf5Hzrldmnf7XRuz7+3Rf/Lm+qv1fNyWK18bae1e0Yfiv1VjpeXMllfSQZHR9n28vpVpq+tszGWu22Dd9xyuzNVW1H0ztQf5141AIbP1In6d7jhnq5Uba+MbJut2s72tQ38vpV7aefmIeQPgKfxj7fXi1N5YaL1r9anrU9av27dbr0x+YMT3znx6kTG/z7+3ebM2GuNV4u/5JP8fOP9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8PQefPDhu/Pt9sL90YXG1k0DhVY2L9mp502Fon6gz962Or6FySQDS6rnHB16GK3NYQwVOr9IDj0/vYcIjl7nd2WhOTSiRhXmBpb8ebjDj/YYYfdZZWudTueoxk8jh7vTsYweAEd6WQIOwaWlO+9devDBh99avDP/zsI7C3fHr169NnPt6uuzl24tthdmuj+POkrgIGzc9I86EgAAAAAAAAAAAGC3Rn0x4NyLO31pZFff8fA/CwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9cf1Cmo9S5PLMxZmyvroy2y6nXnljzWaSRiMpfpYUj5O5dKdM9XVX5I+P0xmxn48Xr7312ZPVzzf6anbXTxr1fGvbtyZZrqdMJxmr589goL8bz9xf8Z/eaygT9kWn05l7tvhgf/w3AAD//5sD+B8=")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xc4540, 0x0)
unlink(&(0x7f00000001c0)='./control/file0\x00')
rmdir(&(0x7f0000000040)='./control\x00')
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x24)

4.086612516s ago: executing program 2 (id=548):
unshare(0x20020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x23d0ce, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000001c0)='./file0\x00')
unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x200)

3.625335577s ago: executing program 5 (id=549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r0, &(0x7f00000000c0)=@xdp={0x2c, 0x0, <r1=>0x0}, &(0x7f0000000140)=0x80)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000810500"/20, @ANYRES32=r1, @ANYBLOB="5989ffffffdf0000140012800a000100767863616e"], 0x34}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r1}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

3.195232954s ago: executing program 1 (id=550):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
pipe(&(0x7f0000000d00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0x5)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x7151, 0x0)

2.888939195s ago: executing program 2 (id=551):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x20, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r0}, 0x38)

2.734526631s ago: executing program 5 (id=552):
prlimit64(0x0, 0xe, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)

1.422853117s ago: executing program 2 (id=553):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000ac0), 0x12)
write$cgroup_int(r2, &(0x7f0000000200), 0x48400)
write$cgroup_type(r0, &(0x7f0000000040), 0x9)
write$cgroup_int(r1, &(0x7f0000000700), 0x12)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendfile(r4, r0, 0x0, 0xfacf)

1.244117958s ago: executing program 1 (id=554):
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340))
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x3ff}, 0x0, 0x0)

930.427541ms ago: executing program 2 (id=555):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)

300.272266ms ago: executing program 5 (id=556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247474260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa1810000000319"})

0s ago: executing program 1 (id=557):
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800804, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES32], 0xfe, 0xa15, &(0x7f00000002c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

1038][    T9] microsoft 0003:045E:07DA.000D: no inputs found
[  225.061320][    T9] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway
[  225.174396][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.214798][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.623299][    T9] usb 2-1: USB disconnect, device number 4
[  225.831921][ T5414] usb 5-1: USB disconnect, device number 4
[  226.032866][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  226.050044][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  226.064568][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  226.111702][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  226.121685][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  226.130691][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  226.606566][ T5518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.939497][ T2463] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.135709][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  227.792751][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.846826][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.895167][    T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  227.944189][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  228.006809][    T9] usb 2-1: SerialNumber: syz
[  228.214372][ T5229] Bluetooth: hci6: command tx timeout
[  228.268360][ T2463] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.330800][    T9] usb 2-1: 0:2 : does not exist
[  228.563119][ T6243] loop1: detected capacity change from 0 to 512
[  228.586958][ T6254] loop3: detected capacity change from 0 to 1024
[  228.773794][ T6243] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.161: corrupted in-inode xattr: bad e_name length
[  228.806869][ T2463] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.814380][ T6254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.896517][ T6243] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.161: couldn't read orphan inode 15 (err -117)
[  229.062664][ T6243] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.105918][ T6254] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.175: missing EA_INODE flag
[  229.135912][ T6243] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000.
[  229.146567][ T6254] EXT4-fs error (device loop3): ext4_xattr_inode_iget:443: comm syz.3.175: error while reading EA inode 11 err=-117
[  229.183012][ T2463] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.217202][   T29] audit: type=1804 audit(1726557926.074:11): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.175" name="/newroot/32/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  230.079269][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  230.284670][ T5229] Bluetooth: hci6: command tx timeout
[  230.706957][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  230.845976][ T5414] usb 2-1: USB disconnect, device number 5
[  230.885979][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  230.924796][ T6234] chnl_net:caif_netlink_parms(): no params data found
[  231.104871][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  231.440665][ T5307] IPVS: starting estimator thread 0...
[  231.453738][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  231.564422][ T6278] IPVS: using max 13 ests per chain, 31200 per kthread
[  231.581751][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  231.883480][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  232.021415][ T2463] bridge_slave_1: left allmulticast mode
[  232.053041][ T2463] bridge_slave_1: left promiscuous mode
[  232.078446][ T2463] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.132569][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  232.186361][ T2463] bridge_slave_0: left allmulticast mode
[  232.209610][ T4616] Bluetooth: hci1: command 0x0406 tx timeout
[  232.216282][ T5229] Bluetooth: hci0: command 0x0406 tx timeout
[  232.309324][ T2463] bridge_slave_0: left promiscuous mode
[  232.320651][ T2463] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.389222][   T54] Bluetooth: hci6: command tx timeout
[  232.389604][ T5238] Bluetooth: hci2: command 0x0406 tx timeout
[  232.654800][ T5307] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  232.869013][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  232.924552][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  232.984533][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  233.039680][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  233.071418][ T6289] loop4: detected capacity change from 0 to 4096
[  233.132441][ T5307] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  233.211054][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.251301][ T5307] usb 3-1: config 0 descriptor??
[  233.305154][ T6296] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.534419][   T29] audit: type=1804 audit(1726557930.394:12): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.185" name="/newroot/4/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  233.611032][   T29] audit: type=1804 audit(1726557930.454:13): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.185" name="/newroot/4/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  233.670412][   T29] audit: type=1804 audit(1726557930.454:14): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.185" name="/newroot/4/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  233.864443][ T5307] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  233.927965][ T5307] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  234.272775][ T5227] EXT4-fs error: 8 callbacks suppressed
[  234.272803][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  234.444860][ T5238] Bluetooth: hci6: command tx timeout
[  234.501365][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  234.618974][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  234.692281][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  234.786873][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  234.843593][ T5414] usb 3-1: USB disconnect, device number 6
[  234.950093][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  234.985658][ T2463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.043832][ T2463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.061947][ T2463] bond0 (unregistering): Released all slaves
[  235.125786][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  235.258923][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  235.356762][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  235.497827][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  235.541915][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.587070][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.620585][ T6234] bridge_slave_0: entered allmulticast mode
[  235.660341][ T6234] bridge_slave_0: entered promiscuous mode
[  235.759939][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.810066][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.840854][ T6234] bridge_slave_1: entered allmulticast mode
[  235.866581][ T6234] bridge_slave_1: entered promiscuous mode
[  236.314906][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.342128][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.418046][ T2463] hsr_slave_0: left promiscuous mode
[  236.439260][ T2463] hsr_slave_1: left promiscuous mode
[  236.456033][ T2463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.463682][ T2463] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.485494][ T2463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.492932][ T2463] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.594606][ T2463] veth1_macvtap: left promiscuous mode
[  236.600419][ T2463] veth0_macvtap: left promiscuous mode
[  236.621832][ T2463] veth1_vlan: left promiscuous mode
[  236.634676][ T2463] veth0_vlan: left promiscuous mode
[  238.034471][ T2463] team0 (unregistering): Port device team_slave_1 removed
[  238.107790][ T2463] team0 (unregistering): Port device team_slave_0 removed
[  239.356660][ T6234] team0: Port device team_slave_0 added
[  239.361409][ T5227] EXT4-fs error: 53 callbacks suppressed
[  239.361432][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  239.381328][ T6234] team0: Port device team_slave_1 added
[  239.468796][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  239.561111][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.580575][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.607365][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.623334][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.632722][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.637499][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  239.703955][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.788696][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  239.886894][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  239.968189][ T6234] hsr_slave_0: entered promiscuous mode
[  239.998830][ T6234] hsr_slave_1: entered promiscuous mode
[  240.006158][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  240.148481][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  240.245803][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  240.378263][ T5227] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  241.433571][ T5227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.529623][ T2562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.578767][ T6234] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  241.608702][ T6234] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  241.650636][ T6234] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  241.734118][ T2562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.768767][ T6234] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  241.877091][ T2562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.021379][ T2562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.477339][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.492169][ T2562] bridge_slave_1: left allmulticast mode
[  242.500582][ T2562] bridge_slave_1: left promiscuous mode
[  242.514501][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.527127][ T2562] bridge_slave_0: left allmulticast mode
[  242.532804][ T2562] bridge_slave_0: left promiscuous mode
[  242.549536][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.350133][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  243.381175][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.416284][ T2562] bond0 (unregistering): Released all slaves
[  243.538852][ T6234] 8021q: adding VLAN 0 to HW filter on device team0
[  243.586426][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.593711][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.731014][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.738560][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.002127][ T2562] hsr_slave_0: left promiscuous mode
[  244.010447][ T2562] hsr_slave_1: left promiscuous mode
[  244.026390][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.041362][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.051104][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.070113][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.126446][ T2562] veth1_macvtap: left promiscuous mode
[  244.132109][ T2562] veth0_macvtap: left promiscuous mode
[  244.138887][ T2562] veth1_vlan: left promiscuous mode
[  244.144547][ T2562] veth0_vlan: left promiscuous mode
[  245.268419][ T2562] team0 (unregistering): Port device team_slave_1 removed
[  245.320777][ T2562] team0 (unregistering): Port device team_slave_0 removed
[  246.485287][ T2562] IPVS: stop unused estimator thread 0...
[  246.543391][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.093255][ T6234] veth0_vlan: entered promiscuous mode
[  247.135783][ T6234] veth1_vlan: entered promiscuous mode
[  247.230791][ T6234] veth0_macvtap: entered promiscuous mode
[  247.265722][ T6234] veth1_macvtap: entered promiscuous mode
[  247.338597][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.350744][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.365612][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.376708][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.386793][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.397577][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.408179][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.425257][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.438550][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.453837][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.469593][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.480313][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.491274][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.501377][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.511967][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.521899][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.532471][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.551831][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.593436][ T6234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.603436][ T6234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.619530][ T6234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.628477][ T6234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.857830][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.878089][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.950913][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.958987][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.599215][ T6417] loop5: detected capacity change from 0 to 4096
[  248.709134][ T6417] NILFS (loop5): invalid segment: Checksum error in segment payload
[  248.741437][ T6417] NILFS (loop5): trying rollback from an earlier position
[  248.774746][   T58] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  248.839570][ T6417] NILFS (loop5): recovery complete
[  248.859241][ T6431] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.018444][   T58] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  249.057078][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  249.071612][ T6417] overlayfs: upper fs does not support tmpfile.
[  249.118369][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  249.134423][ T6417] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  249.154558][   T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  249.184899][ T6417] overlayfs: failed to set xattr on upper
[  249.212478][   T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  249.234185][ T6417] overlayfs: ...falling back to redirect_dir=nofollow.
[  249.246936][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.298951][   T58] usb 2-1: config 0 descriptor??
[  249.316868][ T6417] overlayfs: ...falling back to index=off.
[  249.344380][ T6417] overlayfs: ...falling back to uuid=null.
[  249.858490][   T58] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  249.951432][   T58] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  250.080187][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.099353][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.112154][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.136588][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.165656][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  250.175521][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.387936][ T6441] loop4: detected capacity change from 0 to 512
[  250.445522][ T6441] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  250.502214][ T6441] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  250.636273][ T6441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  250.661716][ T6441] System zones: 0-2, 18-18, 34-34
[  250.693646][ T6442] loop2: detected capacity change from 0 to 4096
[  250.712812][ T6441] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  250.789886][ T6442] NILFS (loop2): invalid segment: Checksum error in segment payload
[  250.810165][ T6441] EXT4-fs (loop4): 1 truncate cleaned up
[  250.830942][ T6442] NILFS (loop2): trying rollback from an earlier position
[  250.852770][ T6441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.988685][ T6442] NILFS (loop2): recovery complete
[  251.023275][ T6453] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.198891][ T5409] usb 2-1: USB disconnect, device number 6
[  251.407681][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  251.431427][ T6442] overlayfs: upper fs does not support tmpfile.
[  251.480958][ T6442] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  251.505188][ T6442] overlayfs: failed to set xattr on upper
[  251.525917][ T6442] overlayfs: ...falling back to redirect_dir=nofollow.
[  251.664232][    T9] usb 6-1: Using ep0 maxpacket: 16
[  251.670985][ T6442] overlayfs: ...falling back to index=off.
[  251.723059][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.730181][ T6442] overlayfs: ...falling back to uuid=null.
[  251.784719][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  251.898440][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  251.936526][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.990375][    T9] usb 6-1: config 0 descriptor??
[  252.059932][ T6090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.281798][ T6436] chnl_net:caif_netlink_parms(): no params data found
[  252.290606][   T54] Bluetooth: hci0: command tx timeout
[  252.588619][    T9] microsoft 0003:045E:07DA.0010: No inputs registered, leaving
[  252.630867][    T9] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  252.769672][    T9] microsoft 0003:045E:07DA.0010: no inputs found
[  252.800669][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.805227][    T9] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  252.952697][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.966946][ T6475] loop4: detected capacity change from 0 to 64
[  253.791772][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.857058][    T9] usb 6-1: USB disconnect, device number 4
[  253.860995][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.907111][ T6436] bridge_slave_0: entered allmulticast mode
[  253.979255][ T6436] bridge_slave_0: entered promiscuous mode
[  254.075595][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.132486][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.192721][ T6436] bridge_slave_1: entered allmulticast mode
[  254.264230][ T6436] bridge_slave_1: entered promiscuous mode
[  254.365358][   T54] Bluetooth: hci0: command tx timeout
[  254.950495][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.991173][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.587344][ T5409] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  256.299063][ T6501] loop2: detected capacity change from 0 to 512
[  256.333441][ T6501] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.197: lblock 0 mapped to illegal pblock 3 (length 1)
[  256.376891][ T6501] EXT4-fs (loop2): Remounting filesystem read-only
[  256.401763][ T6501] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.197: error -117 reading directory block
[  256.428916][ T5409] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.444406][   T54] Bluetooth: hci0: command tx timeout
[  256.450300][ T5409] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.495077][ T6501] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  256.508938][ T5409] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  256.539434][ T5409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  256.580323][ T6501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.598960][ T5409] usb 5-1: SerialNumber: syz
[  256.694283][ T6436] team0: Port device team_slave_0 added
[  256.751230][ T6436] team0: Port device team_slave_1 added
[  256.933121][ T5409] usb 5-1: 0:2 : does not exist
[  257.008882][ T5231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.092514][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.099887][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.183529][ T6495] loop4: detected capacity change from 0 to 512
[  257.206324][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.237128][ T6495] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.196: corrupted in-inode xattr: bad e_name length
[  257.258267][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.266632][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.308063][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.196: couldn't read orphan inode 15 (err -117)
[  257.323798][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.362059][ T6495] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.432649][ T6495] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000000000.
[  257.770475][ T6436] hsr_slave_0: entered promiscuous mode
[  257.834647][ T6436] hsr_slave_1: entered promiscuous mode
[  257.897448][ T6436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.947817][ T6436] Cannot create hsr debugfs directory
[  258.180423][ T5409] usb 5-1: USB disconnect, device number 5
[  258.205782][ T5292] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  258.316000][ T5445] IPVS: starting estimator thread 0...
[  258.445485][ T6527] IPVS: using max 15 ests per chain, 36000 per kthread
[  258.465841][ T5292] usb 3-1: Using ep0 maxpacket: 16
[  258.500368][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.524164][   T54] Bluetooth: hci0: command tx timeout
[  258.594950][ T5292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  258.697821][ T5292] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  258.732847][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.782079][ T5292] usb 3-1: config 0 descriptor??
[  259.476658][ T5292] microsoft 0003:045E:07DA.0011: No inputs registered, leaving
[  259.598237][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.653168][ T5292] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  259.718646][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.734103][ T5292] microsoft 0003:045E:07DA.0011: no inputs found
[  259.740512][ T5292] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway
[  259.914970][ T5445] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  260.144331][ T5445] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  260.214212][ T5445] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  260.262606][ T5445] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  260.286282][ T5445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  260.316002][ T5445] usb 5-1: SerialNumber: syz
[  260.402592][ T5414] usb 3-1: USB disconnect, device number 7
[  260.763016][ T5445] usb 5-1: 0:2 : does not exist
[  260.972239][ T6534] loop4: detected capacity change from 0 to 512
[  261.129928][ T6534] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.221: corrupted in-inode xattr: bad e_name length
[  261.260828][ T6534] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.221: couldn't read orphan inode 15 (err -117)
[  261.441844][ T6534] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.580126][ T6534] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000000000.
[  261.673798][ T6548] loop5: detected capacity change from 0 to 4096
[  262.005010][ T6554] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.244437][ T5307] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  262.315599][   T29] audit: type=1804 audit(1726557959.164:15): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.206" name="/newroot/5/file0/bus" dev="loop5" ino=18 res=1 errno=0
[  262.365007][ T6436] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  262.413665][ T6436] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  262.424274][   T29] audit: type=1804 audit(1726557959.234:16): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.206" name="/newroot/5/file0/bus" dev="loop5" ino=18 res=1 errno=0
[  262.502478][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  262.534107][ T6436] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  262.545458][   T29] audit: type=1804 audit(1726557959.244:17): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.206" name="/newroot/5/file0/bus" dev="loop5" ino=18 res=1 errno=0
[  262.549667][ T5162] usb 5-1: USB disconnect, device number 6
[  262.574125][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  262.590630][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  262.602225][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  262.622733][ T5307] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.657419][ T6436] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  262.669201][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.683558][ T5307] usb 3-1: config 0 descriptor??
[  263.220660][ T5307] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  263.307493][ T5307] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  263.622612][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.687538][ T6571] loop1: detected capacity change from 0 to 64
[  263.855629][ T6436] 8021q: adding VLAN 0 to HW filter on device team0
[  263.952045][ T2545] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.959541][ T2545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.082139][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.089545][ T2545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.795872][ T5162] usb 3-1: USB disconnect, device number 8
[  265.742190][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  265.758332][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  266.358928][ T6595] loop1: detected capacity change from 0 to 512
[  266.499993][ T6595] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 3: comm syz.1.223: lblock 0 mapped to illegal pblock 3 (length 1)
[  266.684045][ T6595] EXT4-fs (loop1): Remounting filesystem read-only
[  266.705944][ T6595] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.223: error -117 reading directory block
[  266.776379][ T6595] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  266.829788][ T6595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.393839][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.494506][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.019807][ T6621] loop5: detected capacity change from 0 to 512
[  268.121692][ T6436] veth0_vlan: entered promiscuous mode
[  268.800186][ T6621] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  268.929799][ T6621] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  268.949757][ T5162] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  268.952485][ T6436] veth1_vlan: entered promiscuous mode
[  269.005269][ T6621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  269.056772][ T6621] System zones: 0-2, 18-18, 34-34
[  269.164779][ T5162] usb 2-1: Using ep0 maxpacket: 16
[  269.183122][ T6621] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  269.188399][ T5162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.276956][ T6621] EXT4-fs (loop5): 1 truncate cleaned up
[  269.313536][ T6621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.325830][ T5162] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  269.325945][ T5162] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  269.326004][ T5162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.395796][ T5162] usb 2-1: config 0 descriptor??
[  269.443622][ T6436] veth0_macvtap: entered promiscuous mode
[  269.514385][ T6436] veth1_macvtap: entered promiscuous mode
[  269.789113][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.874050][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.955801][ T5162] microsoft 0003:045E:07DA.0013: No inputs registered, leaving
[  269.967189][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.012701][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.067328][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.069402][ T5162] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  270.134046][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.142297][ T5162] microsoft 0003:045E:07DA.0013: no inputs found
[  270.152166][ T5162] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway
[  270.196786][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.290061][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.353440][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.372223][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.385868][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.403753][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.416804][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.469978][ T6234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.547485][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.664330][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.690672][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.774125][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.814870][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.922882][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.975513][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.046838][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.072916][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.104528][ T5162] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  271.149521][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.334960][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.370983][ T5307] usb 2-1: USB disconnect, device number 7
[  272.452717][ T6436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.499849][ T5162] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.531803][ T6436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.541836][ T5162] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  272.577389][ T6436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.616364][ T5162] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  272.625881][ T6436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.716870][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  272.808314][ T5162] usb 1-1: SerialNumber: syz
[  273.058378][ T6658] loop5: detected capacity change from 0 to 4096
[  273.181832][ T6658] NILFS (loop5): invalid segment: Checksum error in segment payload
[  273.214375][ T6658] NILFS (loop5): trying rollback from an earlier position
[  273.337220][ T5162] usb 1-1: 0:2 : does not exist
[  273.366404][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.421155][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.424569][ T6658] NILFS (loop5): recovery complete
[  273.491095][ T6668] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  273.818820][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.987925][ T6658] overlayfs: upper fs does not support tmpfile.
[  273.994468][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.014837][ T6658] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  274.036029][ T6672] loop1: detected capacity change from 0 to 64
[  274.104195][ T6658] overlayfs: failed to set xattr on upper
[  274.116349][ T5162] usb 1-1: USB disconnect, device number 6
[  274.187071][ T6658] overlayfs: ...falling back to redirect_dir=nofollow.
[  274.294094][ T6658] overlayfs: ...falling back to index=off.
[  274.398038][ T6658] overlayfs: ...falling back to uuid=null.
[  274.617840][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  276.694056][ T5162] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  277.020260][ T5162] usb 6-1: Using ep0 maxpacket: 8
[  277.509817][ T6716] loop3: detected capacity change from 0 to 512
[  277.526034][ T5162] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  277.565898][ T6716] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  277.594057][ T5162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.614107][ T6716] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  277.661949][ T5162] usb 6-1: config 0 descriptor??
[  277.818137][ T6716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  277.861229][ T6718] loop2: detected capacity change from 0 to 4096
[  277.868561][ T6716] System zones: 0-2, 18-18, 34-34
[  277.921820][ T6716] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  278.040628][ T6716] EXT4-fs (loop3): 1 truncate cleaned up
[  278.064674][ T6730] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.091450][ T6716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.354687][   T29] audit: type=1800 audit(1726557975.204:18): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.246" name="bus" dev="loop2" ino=18 res=0 errno=0
[  278.412553][ T5307] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  278.638979][   T29] audit: type=1804 audit(1726557975.494:19): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.246" name="/newroot/45/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  278.694072][ T5307] usb 1-1: Using ep0 maxpacket: 16
[  278.744488][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.806664][   T29] audit: type=1804 audit(1726557975.534:20): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.246" name="/newroot/45/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  278.827963][ T5307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  278.923617][ T5307] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  278.979713][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.990200][   T29] audit: type=1804 audit(1726557975.544:21): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.246" name="/newroot/45/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  279.075780][ T5307] usb 1-1: config 0 descriptor??
[  279.083995][    C1] hrtimer: interrupt took 161300 ns
[  279.181008][ T6436] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.648149][ T5307] microsoft 0003:045E:07DA.0014: No inputs registered, leaving
[  279.711240][ T5307] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  279.780063][ T5307] microsoft 0003:045E:07DA.0014: no inputs found
[  279.798754][ T5307] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway
[  279.847954][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.921206][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.305334][    T9] usb 1-1: USB disconnect, device number 7
[  281.592352][ T5162] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  281.729984][ T5162] asix 6-1:0.0: probe with driver asix failed with error -71
[  281.847767][ T5162] usb 6-1: USB disconnect, device number 5
[  282.464032][ T5162] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  282.737145][ T5162] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.794084][ T5162] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  282.812778][ T5162] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  282.884009][ T5162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  282.933762][ T5162] usb 6-1: SerialNumber: syz
[  283.436101][ T5162] usb 6-1: 0:2 : does not exist
[  283.664399][ T6764] loop5: detected capacity change from 0 to 512
[  283.768291][ T6764] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.256: corrupted in-inode xattr: bad e_name length
[  283.839937][ T6764] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.256: couldn't read orphan inode 15 (err -117)
[  283.984408][ T6764] EXT4-fs (loop5): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.092950][ T6764] EXT4-fs (loop5): unmounting filesystem 00000004-0000-0000-0000-000000000000.
[  285.453214][ T5162] usb 6-1: USB disconnect, device number 6
[  285.815529][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  286.144295][ T6803] loop1: detected capacity change from 0 to 512
[  286.175706][ T6803] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  286.256800][ T6803] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  286.420592][ T6803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  286.529975][ T6803] System zones: 0-2, 18-18, 34-34
[  286.590931][ T6803] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  286.689468][ T6803] EXT4-fs (loop1): 1 truncate cleaned up
[  286.716847][ T6803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.366461][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.040868][ T6826] loop1: detected capacity change from 0 to 4096
[  289.214007][ T6835] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.358890][   T29] audit: type=1800 audit(1726557986.214:22): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.265" name="bus" dev="loop1" ino=18 res=0 errno=0
[  289.401670][ T6833] loop2: detected capacity change from 0 to 512
[  289.501669][ T6833] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 3: comm syz.2.270: lblock 0 mapped to illegal pblock 3 (length 1)
[  289.506690][   T29] audit: type=1804 audit(1726557986.344:23): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.265" name="/newroot/20/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  289.557992][ T6833] EXT4-fs (loop2): Remounting filesystem read-only
[  289.568911][ T6833] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.270: error -117 reading directory block
[  289.622094][   T29] audit: type=1804 audit(1726557986.374:24): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.265" name="/newroot/20/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  289.660017][   T29] audit: type=1804 audit(1726557986.394:25): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.265" name="/newroot/20/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  289.672652][ T6833] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  289.751974][ T6833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.118504][ T5231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.677421][ T6863] loop1: detected capacity change from 0 to 1024
[  291.729143][ T6863] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  291.816800][ T6863] JBD2: no valid journal superblock found
[  291.843682][ T6863] EXT4-fs (loop1): Could not load journal inode
[  292.451937][ T6870] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  292.874992][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'.
[  292.936218][ T6866] loop4: detected capacity change from 0 to 1024
[  293.132501][ T6881] batman_adv: batadv1: Adding interface: netdevsim0
[  293.174619][ T6881] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.344339][ T6881] batman_adv: batadv1: Interface activated: netdevsim0
[  295.201757][ T6897] trusted_key: syz.0.288 sent an empty control message without MSG_MORE.
[  295.641479][ T6896] loop4: detected capacity change from 0 to 4096
[  295.833537][ T6903] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.912503][   T29] audit: type=1800 audit(1726557992.764:26): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.289" name="bus" dev="loop4" ino=18 res=0 errno=0
[  295.989043][   T29] audit: type=1804 audit(1726557992.784:27): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.289" name="/newroot/22/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  296.108494][   T29] audit: type=1804 audit(1726557992.804:28): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.289" name="/newroot/22/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  296.141220][   T29] audit: type=1804 audit(1726557992.814:29): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.289" name="/newroot/22/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  298.164059][ T6926] sd 0:0:1:0: PR command failed: 1026
[  298.169571][ T6926] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  298.185260][ T6926] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  298.294256][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  298.494070][    T9] usb 5-1: Using ep0 maxpacket: 16
[  298.515853][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  298.565037][    T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  298.605191][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.633270][    T9] usb 5-1: Product: syz
[  298.646865][ T6933] syz.5.300[6933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  298.647143][ T6933] syz.5.300[6933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  298.649081][    T9] usb 5-1: Manufacturer: syz
[  298.713404][    T9] usb 5-1: SerialNumber: syz
[  298.756460][    T9] usb 5-1: config 0 descriptor??
[  298.815974][    T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  298.859372][    T9] usb 5-1: Detected FT232R
[  299.005853][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  299.043634][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.119509][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.242654][ T6941] loop2: detected capacity change from 0 to 4096
[  299.294405][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  299.344760][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  299.372546][    T9] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  299.416289][    T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  299.422116][ T6947] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  299.503815][    T9] usb 5-1: USB disconnect, device number 7
[  299.540367][   T29] audit: type=1800 audit(1726557996.394:30): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.305" name="bus" dev="loop2" ino=18 res=0 errno=0
[  299.596713][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  299.660977][    T9] ftdi_sio 5-1:0.0: device disconnected
[  299.695691][   T29] audit: type=1804 audit(1726557996.454:31): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.305" name="/newroot/56/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  299.814256][   T29] audit: type=1804 audit(1726557996.494:32): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.305" name="/newroot/56/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  299.874044][   T29] audit: type=1804 audit(1726557996.514:33): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.305" name="/newroot/56/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  301.121249][ T6975] overlayfs: invalid redirect ((null))
[  302.305114][ T6990] loop1: detected capacity change from 0 to 1024
[  302.349662][ T6990] EXT4-fs: Ignoring removed nobh option
[  302.387619][ T6995] delete_channel: no stack
[  302.394171][ T6990] ext4: Unknown parameter 'uid<00000000000000000000'
[  303.039543][ T6981] loop3: detected capacity change from 0 to 8192
[  303.128931][ T6981] REISERFS warning (device loop3): super-6506 reiserfs_getopt: empty argument for "commit"
[  303.128931][ T6981] 
[  303.594686][ T7000] loop5: detected capacity change from 0 to 2048
[  303.625409][ T7000] udf: Unknown parameter 'ÿÿÿÿ'
[  306.634464][ T7024] loop5: detected capacity change from 0 to 128
[  306.983694][   T29] audit: type=1800 audit(1726558003.834:34): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.328" name="bus" dev="loop5" ino=1048614 res=0 errno=0
[  307.025880][   T29] audit: type=1800 audit(1726558003.874:35): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.328" name="bus" dev="loop5" ino=1048614 res=0 errno=0
[  307.306618][ T1062] kworker/u8:6: attempt to access beyond end of device
[  307.306618][ T1062] loop5: rw=1, sector=129, nr_sectors = 1 limit=128
[  307.433806][ T6992] bridge_slave_1: left allmulticast mode
[  307.449365][ T6992] bridge_slave_1: left promiscuous mode
[  307.470052][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.625935][ T7008] netdevsim netdevsim3: Direct firmware load for ng failed with error -2
[  307.655007][ T7008] netdevsim netdevsim3: Falling back to sysfs fallback for: ng
[  307.908087][ T7026] loop5: detected capacity change from 0 to 1024
[  307.955771][ T7026] EXT4-fs: Ignoring removed orlov option
[  308.011152][ T7026] EXT4-fs: Ignoring removed nomblk_io_submit option
[  308.120925][ T7026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.607046][ T7044] process 'syz.5.329' launched './file0/file0' with NULL argv: empty string added
[  309.422433][ T6234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.732024][ T7071] syz.2.343[7071] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.732301][ T7071] syz.2.343[7071] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.867247][ T7063] loop5: detected capacity change from 0 to 8192
[  311.000426][ T7063] REISERFS warning (device loop5): super-6506 reiserfs_getopt: empty argument for "commit"
[  311.000426][ T7063] 
[  312.282139][   T29] audit: type=1326 audit(1726558009.134:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.2.345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48a9f7def9 code=0x0
[  313.894119][ T5238] Bluetooth: hci5: command 0x0406 tx timeout
[  314.659579][ T7110] loop3: detected capacity change from 0 to 64
[  315.061833][ T7115] loop1: detected capacity change from 0 to 1024
[  315.110577][ T7115] EXT4-fs: Ignoring removed orlov option
[  315.149308][ T7115] EXT4-fs: Ignoring removed nomblk_io_submit option
[  315.327352][ T7115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.390798][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.906924][ T7138] loop1: detected capacity change from 0 to 512
[  317.264461][ T7138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  317.373436][ T7138] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.468399][   T29] audit: type=1326 audit(1726558014.314:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059537def9 code=0x7ffc0000
[  317.596099][   T29] audit: type=1326 audit(1726558014.374:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059537def9 code=0x7ffc0000
[  317.698326][   T29] audit: type=1326 audit(1726558014.384:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f059537def9 code=0x7ffc0000
[  317.814497][   T29] audit: type=1326 audit(1726558014.384:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059537def9 code=0x7ffc0000
[  317.894041][   T29] audit: type=1326 audit(1726558014.384:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f059537def9 code=0x7ffc0000
[  318.004055][   T29] audit: type=1326 audit(1726558014.514:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059537def9 code=0x7ffc0000
[  318.098357][   T29] audit: type=1326 audit(1726558014.514:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059537def9 code=0x7ffc0000
[  318.154168][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  318.156600][ T7152] raw_sendmsg: syz.4.379 forgot to set AF_INET. Fix it!
[  318.739484][ T7162] loop5: detected capacity change from 0 to 1764
[  320.028835][ T7179] loop4: detected capacity change from 0 to 64
[  320.204561][ T5414] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  320.415717][ T5414] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  320.448574][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.481522][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.537695][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  320.561094][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.591713][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.611463][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  320.651388][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.671275][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.741094][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  320.793272][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.833509][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  320.863964][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  320.889277][ T2906] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.909207][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  320.921312][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  321.085260][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  321.144911][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.175591][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  321.228587][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  321.268174][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.312165][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  321.332172][ T2906] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.349531][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  321.380253][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.422081][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  321.456570][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0
[  321.488706][ T5414] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  321.519046][ T5414] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  321.538423][ T5414] usb 3-1: Product: syz
[  321.547451][ T5414] usb 3-1: Manufacturer: syz
[  321.558879][ T5414] usb 3-1: SerialNumber: syz
[  321.626045][ T5414] usb 3-1: config 0 descriptor??
[  321.658022][ T2906] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.692846][ T5414] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  321.926682][ T5414] usb 3-1: USB disconnect, device number 9
[  321.947064][ T5414] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  322.120983][ T2906] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.555626][ T2906] bridge_slave_1: left allmulticast mode
[  323.561333][ T2906] bridge_slave_1: left promiscuous mode
[  323.607602][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.734969][ T2906] bridge_slave_0: left allmulticast mode
[  323.758433][ T2906] bridge_slave_0: left promiscuous mode
[  323.802797][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.013156][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  327.040031][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  327.049190][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  327.059198][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  327.067910][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  327.076082][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  327.186211][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  327.192812][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  329.002304][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.083731][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.164181][   T54] Bluetooth: hci3: command tx timeout
[  329.227272][ T2906] bond0 (unregistering): Released all slaves
[  330.329499][ T2906] hsr_slave_0: left promiscuous mode
[  330.350700][ T2906] hsr_slave_1: left promiscuous mode
[  330.374221][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.396672][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.454971][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.462534][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.557609][ T2906] veth1_macvtap: left promiscuous mode
[  330.573323][ T2906] veth0_macvtap: left promiscuous mode
[  330.581923][ T2906] veth1_vlan: left promiscuous mode
[  330.611774][ T2906] veth0_vlan: left promiscuous mode
[  331.244663][   T54] Bluetooth: hci3: command tx timeout
[  331.257901][ T7265] loop4: detected capacity change from 0 to 256
[  331.392031][ T7265] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60c5118c, utbl_chksum : 0xe619d30d)
[  331.611568][   T29] audit: type=1800 audit(1726558028.464:44): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.411" name="bus" dev="loop4" ino=1048616 res=0 errno=0
[  331.744326][   T29] audit: type=1804 audit(1726558028.584:45): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.411" name="/newroot/38/file1/bus" dev="loop4" ino=1048616 res=1 errno=0
[  332.838849][ T7282] binder: 7279:7282 ioctl c0306201 20000380 returned -14
[  333.348289][   T54] Bluetooth: hci3: command tx timeout
[  333.928087][ T7285] fuse: Bad value for 'fd'
[  334.313122][ T7290] loop2: detected capacity change from 0 to 256
[  334.343110][ T7290] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿŸÜÿ2�¨6'
[  334.367733][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  335.391718][ T2906] team0 (unregistering): Port device team_slave_1 removed
[  335.404331][ T5238] Bluetooth: hci3: command tx timeout
[  335.463285][ T2906] team0 (unregistering): Port device team_slave_0 removed
[  336.823152][ T7311] binder: 7301:7311 ioctl c0306201 20000380 returned -14
[  337.871563][   T29] audit: type=1800 audit(1726558034.684:46): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.407" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  338.021868][ T7224] chnl_net:caif_netlink_parms(): no params data found
[  338.157292][ T7306] loop3: detected capacity change from 0 to 1024
[  339.160619][ T7334] loop2: detected capacity change from 0 to 4096
[  339.288217][ T7336] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.608137][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.652467][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.670571][ T7224] bridge_slave_0: entered allmulticast mode
[  339.775233][ T7224] bridge_slave_0: entered promiscuous mode
[  339.862576][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.913403][ T2906] IPVS: stop unused estimator thread 0...
[  339.952713][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.975277][ T7224] bridge_slave_1: entered allmulticast mode
[  340.038760][ T7224] bridge_slave_1: entered promiscuous mode
[  340.479976][ T1062] hfsplus: b-tree write err: -5, ino 4
[  340.694693][ T5414] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  340.774861][ T7224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.830812][ T7224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.927194][ T5414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.942947][ T7357] loop2: detected capacity change from 0 to 512
[  340.985800][ T5414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.036095][ T5414] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  341.072205][ T5414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.118533][ T5414] usb 1-1: config 0 descriptor??
[  341.344061][    T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  341.350425][ T7224] team0: Port device team_slave_0 added
[  341.481940][ T7224] team0: Port device team_slave_1 added
[  341.575821][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  341.610873][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  341.651908][    T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  341.680974][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  341.700907][    T8] usb 2-1: SerialNumber: syz
[  341.846745][ T5414] usb 1-1: language id specifier not provided by device, defaulting to English
[  342.003727][    T8] usb 2-1: 0:2 : does not exist
[  342.019164][    T8] usb 2-1: unit 5: unexpected type 0x0d
[  342.130628][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.169095][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.203844][    T8] usb 2-1: USB disconnect, device number 8
[  342.273211][ T7224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.437190][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.473733][ T5414] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #100: -71
[  342.473926][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.505005][ T5414] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71
[  342.548989][ T5414] uclogic 0003:256C:006D.0015: failed probing pen v1 parameters: -71
[  342.575897][ T5414] uclogic 0003:256C:006D.0015: failed probing parameters: -71
[  342.583718][ T5414] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71
[  342.630094][ T7224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.702098][ T5414] usb 1-1: USB disconnect, device number 8
[  342.783416][ T7377] loop2: detected capacity change from 0 to 2048
[  342.976728][ T7377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.142792][ T7224] hsr_slave_0: entered promiscuous mode
[  343.222382][ T7224] hsr_slave_1: entered promiscuous mode
[  344.053040][ T5231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.540736][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'.
[  347.301304][ T7425] loop1: detected capacity change from 0 to 512
[  347.525864][ T7425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  347.766473][ T7425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.784232][ T7425] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.510190][ T7425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  348.619876][ T7425] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  350.617070][ T7224] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  350.670775][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.821098][ T7224] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  351.073970][ T7224] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  351.145471][ T7224] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  351.917612][ T7471] [U] 
[  351.920892][ T7471] [U] \ÏfŸN#k·v”„í42yÛìÐláÞ%
[  351.925738][ T7471] [U] ˆŠ
[  351.928813][ T7471] [U] 
[  351.931583][ T7471] [U] 
[  351.944002][ T7471] [U] 
[  351.946758][ T7471] [U] 
[  351.949530][ T7471] [U] 
[  351.952270][ T7471] [U] 
[  351.966425][ T7471] [U] 
[  351.969183][ T7471] [U] 
[  351.971920][ T7471] [U] 
[  352.128643][ T7469] [U] 
[  352.199200][ T7224] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.336240][ T7476] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  352.520727][ T7224] 8021q: adding VLAN 0 to HW filter on device team0
[  352.603202][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.610634][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.743600][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.751008][ T2463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.884318][   T58] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  356.149834][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.180955][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.258414][   T58] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  356.285279][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.346127][   T58] usb 4-1: config 0 descriptor??
[  356.586651][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.988305][   T58] usb 4-1: language id specifier not provided by device, defaulting to English
[  357.482604][ T7224] veth0_vlan: entered promiscuous mode
[  357.521488][ T7224] veth1_vlan: entered promiscuous mode
[  357.602674][   T58] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71
[  357.628990][   T58] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71
[  357.654637][   T58] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71
[  357.679289][   T58] uclogic 0003:256C:006D.0016: failed probing parameters: -71
[  357.686808][ T7224] veth0_macvtap: entered promiscuous mode
[  357.707817][ T7224] veth1_macvtap: entered promiscuous mode
[  357.713603][   T58] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71
[  357.765682][   T58] usb 4-1: USB disconnect, device number 8
[  357.831276][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.861407][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.875214][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.901710][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.914702][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.929841][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.940231][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.974098][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.995021][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  358.018733][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.040967][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.099607][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.125815][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.147899][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.193632][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.208939][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.233106][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.243211][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.313566][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.360156][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.395910][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.457476][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.661985][ T7224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.740838][ T7224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.774123][ T7224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.852595][ T7224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.161621][ T7566] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  371.939913][ T6589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.024125][ T6589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.376258][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.453943][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.785185][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.825503][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.914219][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.979862][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.045648][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  375.058636][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.070818][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  375.158611][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  375.170962][ T4616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  375.180740][ T4616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  375.191574][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  375.203326][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  375.211707][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  375.227760][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  375.238503][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  375.284653][ T4616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  375.325292][ T4616] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  375.364656][ T4616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  375.551702][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  375.606353][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  375.620678][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  375.631434][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  375.640008][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  375.652977][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  377.158176][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  377.168730][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  377.179012][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  377.211130][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  377.220439][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  377.236406][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.320466][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'.
[  377.330852][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.478'.
[  377.342775][ T7616] block nbd0: Unsupported socket: shutdown callout must be supported.
[  377.505930][ T5237] Bluetooth: hci7: command tx timeout
[  377.581706][ T6588] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.805257][ T5237] Bluetooth: hci6: command tx timeout
[  377.813744][ T5237] Bluetooth: hci5: command tx timeout
[  377.930740][ T6588] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.091059][ T6588] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.379851][ T6588] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.084461][ T5237] Bluetooth: hci8: command tx timeout
[  379.364802][ T5237] Bluetooth: hci0: command tx timeout
[  379.634778][ T4616] Bluetooth: hci7: command tx timeout
[  379.884005][ T4616] Bluetooth: hci5: command tx timeout
[  379.889491][ T4616] Bluetooth: hci6: command tx timeout
[  380.661808][ T6588] bridge_slave_1: left allmulticast mode
[  380.677803][ T6588] bridge_slave_1: left promiscuous mode
[  380.694644][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.741749][ T6588] bridge_slave_0: left allmulticast mode
[  380.759576][ T6588] bridge_slave_0: left promiscuous mode
[  380.763527][ T7645] loop5: detected capacity change from 0 to 1024
[  380.773489][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.167360][ T4616] Bluetooth: hci8: command tx timeout
[  381.484630][ T4616] Bluetooth: hci0: command tx timeout
[  381.644901][ T4616] Bluetooth: hci7: command tx timeout
[  381.968431][ T5237] Bluetooth: hci5: command tx timeout
[  381.974058][ T4616] Bluetooth: hci6: command tx timeout
[  382.191220][ T7661] loop5: detected capacity change from 0 to 256
[  382.261742][ T7661] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60c5118c, utbl_chksum : 0xe619d30d)
[  382.292232][ T6588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.333476][ T6588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.355171][ T6588] bond0 (unregistering): Released all slaves
[  382.365486][   T29] audit: type=1804 audit(1726558079.214:47): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.487" name="/newroot/12/file1/bus" dev="loop5" ino=1048620 res=1 errno=0
[  382.427239][   T29] audit: type=1804 audit(1726558079.254:48): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.487" name="/newroot/12/file1/bus" dev="loop5" ino=1048620 res=1 errno=0
[  382.449921][   T29] audit: type=1804 audit(1726558079.284:49): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.487" name="/newroot/12/file1/bus" dev="loop5" ino=1048620 res=1 errno=0
[  383.099032][ T7667] loop5: detected capacity change from 0 to 2048
[  383.228369][ T7671] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  383.249669][ T4616] Bluetooth: hci8: command tx timeout
[  383.561585][ T4616] Bluetooth: hci3: unexpected cc 0x0403 length: 65 > 1
[  383.569909][ T5237] Bluetooth: hci0: command tx timeout
[  383.657864][ T7598] chnl_net:caif_netlink_parms(): no params data found
[  383.726798][ T5237] Bluetooth: hci7: command tx timeout
[  383.737575][ T7613] chnl_net:caif_netlink_parms(): no params data found
[  383.930725][ T7683] vhci_hcd: default hub control req: 0000 v0000 i0007 l0
[  384.044687][ T5237] Bluetooth: hci6: command tx timeout
[  384.050283][ T5237] Bluetooth: hci5: command tx timeout
[  384.246157][ T6588] hsr_slave_0: left promiscuous mode
[  384.268625][ T6588] hsr_slave_1: left promiscuous mode
[  384.289760][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.304454][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.328414][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.353956][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.426172][ T6588] veth1_macvtap: left promiscuous mode
[  384.432183][ T6588] veth0_macvtap: left promiscuous mode
[  384.457015][ T6588] veth1_vlan: left promiscuous mode
[  384.462711][ T6588] veth0_vlan: left promiscuous mode
[  385.325914][ T5237] Bluetooth: hci8: command tx timeout
[  385.645390][ T5237] Bluetooth: hci0: command tx timeout
[  386.068075][ T6588] team0 (unregistering): Port device team_slave_1 removed
[  386.157598][ T6588] team0 (unregistering): Port device team_slave_0 removed
[  387.092303][ T7602] chnl_net:caif_netlink_parms(): no params data found
[  387.282878][ T7595] chnl_net:caif_netlink_parms(): no params data found
[  387.316198][ T7600] chnl_net:caif_netlink_parms(): no params data found
[  387.443483][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.451679][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.460014][ T7598] bridge_slave_0: entered allmulticast mode
[  387.470914][ T7598] bridge_slave_0: entered promiscuous mode
[  387.567317][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.575769][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.583350][ T7598] bridge_slave_1: entered allmulticast mode
[  387.603245][ T7598] bridge_slave_1: entered promiscuous mode
[  387.651570][ T5237] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  387.660530][ T5237] Bluetooth: hci3: Injecting HCI hardware error event
[  387.670039][ T4616] Bluetooth: hci3: hardware error 0x00
[  388.070604][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.105259][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.166025][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.180264][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.195742][ T7613] bridge_slave_0: entered allmulticast mode
[  388.215948][ T7613] bridge_slave_0: entered promiscuous mode
[  388.554379][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.590213][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.625839][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  388.632237][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  388.639521][ T7613] bridge_slave_1: entered allmulticast mode
[  388.689227][ T7613] bridge_slave_1: entered promiscuous mode
[  388.838622][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.864408][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.883998][ T7602] bridge_slave_0: entered allmulticast mode
[  388.892901][ T7602] bridge_slave_0: entered promiscuous mode
[  389.006028][ T7598] team0: Port device team_slave_0 added
[  389.218499][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.263083][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.290119][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.325500][ T7602] bridge_slave_1: entered allmulticast mode
[  389.354803][ T7602] bridge_slave_1: entered promiscuous mode
[  389.434744][ T7598] team0: Port device team_slave_1 added
[  389.508496][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.534602][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.542117][ T7595] bridge_slave_0: entered allmulticast mode
[  389.580577][ T7595] bridge_slave_0: entered promiscuous mode
[  389.674839][ T7746] loop5: detected capacity change from 0 to 2048
[  389.676159][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.734424][ T4616] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  389.759559][ T7746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  389.776338][ T7602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.889588][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.900803][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.911904][ T7595] bridge_slave_1: entered allmulticast mode
[  389.950642][ T7595] bridge_slave_1: entered promiscuous mode
[  390.279256][ T7602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.441233][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.450873][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.486391][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.580358][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.595888][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.610678][ T7600] bridge_slave_0: entered allmulticast mode
[  390.634157][ T7600] bridge_slave_0: entered promiscuous mode
[  390.647248][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.675259][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.682584][ T7600] bridge_slave_1: entered allmulticast mode
[  390.716805][ T7600] bridge_slave_1: entered promiscuous mode
[  390.729114][ T7224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.787135][ T7613] team0: Port device team_slave_0 added
[  390.871083][ T7602] team0: Port device team_slave_0 added
[  390.899625][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.907489][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.970555][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.031844][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.162988][ T7613] team0: Port device team_slave_1 added
[  391.263340][ T7602] team0: Port device team_slave_1 added
[  391.423271][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.471058][ T7600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.797371][ T6588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.009211][ T7600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.121003][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.143702][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.187910][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.201504][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.209337][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.278028][ T7602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.363210][ T6588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.421655][ T7598] hsr_slave_0: entered promiscuous mode
[  392.429546][ T7598] hsr_slave_1: entered promiscuous mode
[  392.437586][ T7598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.451836][ T7598] Cannot create hsr debugfs directory
[  393.417142][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.434108][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.534326][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.598463][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.624647][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.703113][ T7602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.838135][ T6588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.984675][ T7595] team0: Port device team_slave_0 added
[  394.025717][ T7595] team0: Port device team_slave_1 added
[  394.056272][ T7600] team0: Port device team_slave_0 added
[  394.178922][ T6588] batman_adv: batadv1: Interface deactivated: netdevsim0
[  394.278521][ T6588] batman_adv: batadv1: Removing interface: netdevsim0
[  394.314672][ T6588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.641385][ T7600] team0: Port device team_slave_1 added
[  395.069440][ T7602] hsr_slave_0: entered promiscuous mode
[  395.190605][ T7602] hsr_slave_1: entered promiscuous mode
[  395.212485][ T7602] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.227338][ T7602] Cannot create hsr debugfs directory
[  395.346740][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.353759][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.422059][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.441171][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.448500][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.480414][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.556579][ T7613] hsr_slave_0: entered promiscuous mode
[  395.584487][ T7613] hsr_slave_1: entered promiscuous mode
[  395.604169][ T7613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.611790][ T7613] Cannot create hsr debugfs directory
[  395.710230][ T7786] loop5: detected capacity change from 0 to 256
[  395.827664][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.839433][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.860237][ T7786] FAT-fs (loop5): Directory bread(block 64) failed
[  395.870614][ T7600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.872879][ T7786] FAT-fs (loop5): Directory bread(block 65) failed
[  395.888950][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.899015][ T7786] FAT-fs (loop5): Directory bread(block 66) failed
[  395.906270][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.914771][ T7786] FAT-fs (loop5): Directory bread(block 67) failed
[  395.942504][ T7600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.964871][ T7786] FAT-fs (loop5): Directory bread(block 68) failed
[  395.971580][ T7786] FAT-fs (loop5): Directory bread(block 69) failed
[  395.998026][ T7786] FAT-fs (loop5): Directory bread(block 70) failed
[  396.013924][ T7786] FAT-fs (loop5): Directory bread(block 71) failed
[  396.020703][ T7786] FAT-fs (loop5): Directory bread(block 72) failed
[  396.037615][ T7786] FAT-fs (loop5): Directory bread(block 73) failed
[  396.484886][ T7595] hsr_slave_0: entered promiscuous mode
[  396.503070][ T7595] hsr_slave_1: entered promiscuous mode
[  396.533393][ T7595] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.541454][ T7595] Cannot create hsr debugfs directory
[  397.610486][ T7600] hsr_slave_0: entered promiscuous mode
[  397.629640][ T7600] hsr_slave_1: entered promiscuous mode
[  397.659572][ T7600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  397.669510][ T7600] Cannot create hsr debugfs directory
[  398.024754][ T6588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.542727][ T6588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.708318][ T6588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.090545][ T6588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.508269][ T6588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.692313][ T6588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.834298][ T7613] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.890186][ T7598] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  401.006354][ T6588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.112646][ T7613] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.140578][ T7598] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  401.197310][ T7598] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  401.206884][ T7823] input: syz0 as /devices/virtual/input/input13
[  401.292026][ T6588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.383574][ T7613] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.430625][ T7598] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  401.547749][ T7613] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.121938][ T6588] bridge_slave_1: left allmulticast mode
[  402.139648][ T6588] bridge_slave_1: left promiscuous mode
[  402.154128][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.173930][ T6588] bridge_slave_0: left allmulticast mode
[  402.182258][ T6588] bridge_slave_0: left promiscuous mode
[  402.205903][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.229669][ T6588] bridge_slave_1: left allmulticast mode
[  402.244485][ T6588] bridge_slave_1: left promiscuous mode
[  402.259166][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.281690][ T6588] bridge_slave_0: left allmulticast mode
[  402.294139][ T6588] bridge_slave_0: left promiscuous mode
[  402.301846][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.329654][ T6588] bridge_slave_1: left allmulticast mode
[  402.335636][ T6588] bridge_slave_1: left promiscuous mode
[  402.343366][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.364998][ T6588] bridge_slave_0: left allmulticast mode
[  402.370676][ T6588] bridge_slave_0: left promiscuous mode
[  402.396465][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.503808][ T6588] bridge_slave_0: left allmulticast mode
[  402.510297][ T6588] bridge_slave_0: left promiscuous mode
[  402.523290][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.046553][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.515'.
[  404.465345][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  404.664431][    T9] usb 6-1: Using ep0 maxpacket: 16
[  404.677744][    T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  404.694622][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.722227][    T9] usb 6-1: config 0 descriptor??
[  404.756782][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  405.493589][ T6588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.512931][ T6588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.529957][ T6588] bond0 (unregistering): Released all slaves
[  405.731483][ T6588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.749480][ T6588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.764787][ T6588] bond0 (unregistering): Released all slaves
[  405.948980][ T6588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.965676][ T6588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.989118][ T6588] bond0 (unregistering): Released all slaves
[  406.216435][ T6588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.233278][ T6588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.249661][ T6588] bond0 (unregistering): Released all slaves
[  406.701522][ T7598] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.813175][ T7598] 8021q: adding VLAN 0 to HW filter on device team0
[  406.952160][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.959573][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.071256][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.078621][ T2463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.149194][ T7602] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  407.256786][    T9] gspca_sonixj: reg_w1 err -71
[  407.279118][    T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  407.294783][ T7602] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  407.312386][    T9] usb 6-1: USB disconnect, device number 7
[  407.332713][ T7602] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  407.459830][ T7602] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  409.099909][ T7595] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  409.337578][ T7595] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  409.522359][ T7595] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  409.583699][ T7595] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  410.093374][ T7598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.160812][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.236195][ T6588] hsr_slave_0: left promiscuous mode
[  410.273532][ T6588] hsr_slave_1: left promiscuous mode
[  410.324605][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.332135][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.367720][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.390854][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.434351][ T6588] hsr_slave_0: left promiscuous mode
[  410.451682][ T6588] hsr_slave_1: left promiscuous mode
[  410.465765][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.485239][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.505514][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.520095][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.551250][ T6588] hsr_slave_0: left promiscuous mode
[  410.572552][ T6588] hsr_slave_1: left promiscuous mode
[  410.606389][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.614579][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.643658][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.654921][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.724447][ T6588] hsr_slave_0: left promiscuous mode
[  410.733803][ T6588] hsr_slave_1: left promiscuous mode
[  410.751730][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.760107][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.771659][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.781153][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.937974][ T6588] veth1_macvtap: left promiscuous mode
[  410.944439][ T6588] veth0_macvtap: left promiscuous mode
[  410.950405][ T6588] veth1_vlan: left promiscuous mode
[  410.964889][ T6588] veth0_vlan: left promiscuous mode
[  410.990579][ T6588] veth1_macvtap: left promiscuous mode
[  411.006211][ T6588] veth0_macvtap: left promiscuous mode
[  411.012511][ T6588] veth1_vlan: left promiscuous mode
[  411.024159][ T6588] veth0_vlan: left promiscuous mode
[  411.046414][ T6588] veth1_macvtap: left promiscuous mode
[  411.052139][ T6588] veth0_macvtap: left promiscuous mode
[  411.058617][ T6588] veth1_vlan: left promiscuous mode
[  411.068793][ T6588] veth0_vlan: left promiscuous mode
[  411.081384][ T6588] veth1_macvtap: left promiscuous mode
[  411.089827][ T6588] veth0_macvtap: left promiscuous mode
[  411.098369][ T6588] veth1_vlan: left promiscuous mode
[  411.105669][ T6588] veth0_vlan: left promiscuous mode
[  413.162151][ T6588] team0 (unregistering): Port device team_slave_1 removed
[  413.240076][ T6588] team0 (unregistering): Port device team_slave_0 removed
[  414.787386][ T6588] team0 (unregistering): Port device team_slave_1 removed
[  414.867059][ T6588] team0 (unregistering): Port device team_slave_0 removed
[  416.321252][ T6588] team0 (unregistering): Port device team_slave_1 removed
[  416.389444][ T6588] team0 (unregistering): Port device team_slave_0 removed
[  417.679583][ T6588] team0 (unregistering): Port device team_slave_1 removed
[  417.742065][ T6588] team0 (unregistering): Port device team_slave_0 removed
[  418.919429][ T7602] 8021q: adding VLAN 0 to HW filter on device team0
[  419.139572][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.147010][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.199185][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.206529][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.230432][ T7600] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  419.260102][ T7600] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  419.342649][ T7600] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  419.385228][ T7600] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  419.741357][ T7598] veth0_vlan: entered promiscuous mode
[  420.179424][ T7598] veth1_vlan: entered promiscuous mode
[  420.239288][ T7613] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  420.355415][ T7613] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  420.405772][ T7613] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  420.530923][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.612983][ T7613] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  420.756266][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.523'.
[  420.983614][ T7898] 8021q: adding VLAN 0 to HW filter on device team1
[  420.998622][ T7898] bond0: (slave team1): Enslaving as an active interface with an up link
[  421.068719][ T7595] 8021q: adding VLAN 0 to HW filter on device team0
[  421.288600][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.295964][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.450560][ T7598] veth0_macvtap: entered promiscuous mode
[  421.480368][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.487734][ T6589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.549522][ T7598] veth1_macvtap: entered promiscuous mode
[  422.858773][ T7602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.050206][ T6588] IPVS: stop unused estimator thread 0...
[  423.105884][ T6588] IPVS: stop unused estimator thread 0...
[  423.122786][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.163672][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.180164][ T6588] IPVS: stop unused estimator thread 0...
[  423.223366][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.263522][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.393667][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.416564][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.439408][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.553502][ T7600] 8021q: adding VLAN 0 to HW filter on device team0
[  423.677409][ T7598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.714353][ T7598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.723239][ T7598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.761966][ T7598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.907991][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.915322][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.063095][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.070444][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.569117][ T6589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.599435][ T6589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.762563][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.834628][ T7602] veth0_vlan: entered promiscuous mode
[  424.941242][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.964523][ T2545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.999138][ T2545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.151509][ T7602] veth1_vlan: entered promiscuous mode
[  425.377045][ T7613] 8021q: adding VLAN 0 to HW filter on device team0
[  425.773043][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.780444][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.501573][ T7602] veth0_macvtap: entered promiscuous mode
[  426.732384][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.796912][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.804402][ T2545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.860289][ T7961] loop1: detected capacity change from 0 to 256
[  426.869629][ T7595] veth0_vlan: entered promiscuous mode
[  426.912949][ T7602] veth1_macvtap: entered promiscuous mode
[  427.026993][ T7961] FAT-fs (loop1): Directory bread(block 64) failed
[  427.054723][ T7961] FAT-fs (loop1): Directory bread(block 65) failed
[  427.061511][ T7961] FAT-fs (loop1): Directory bread(block 66) failed
[  427.072059][   T29] audit: type=1326 audit(1726558379.921:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.5.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f458ed7def9 code=0x0
[  427.128457][ T7961] FAT-fs (loop1): Directory bread(block 67) failed
[  427.136630][ T7595] veth1_vlan: entered promiscuous mode
[  427.174618][ T7961] FAT-fs (loop1): Directory bread(block 68) failed
[  427.181323][ T7961] FAT-fs (loop1): Directory bread(block 69) failed
[  427.188913][ T7961] FAT-fs (loop1): Directory bread(block 70) failed
[  427.195978][ T7961] FAT-fs (loop1): Directory bread(block 71) failed
[  427.203379][ T7961] FAT-fs (loop1): Directory bread(block 72) failed
[  427.209486][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.213791][ T7961] FAT-fs (loop1): Directory bread(block 73) failed
[  427.239616][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.261962][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.272648][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.297862][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.515473][   T29] audit: type=1326 audit(1726558380.371:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e86d7def9 code=0x0
[  427.535838][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.564476][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.596397][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.607707][ T7973] loop5: detected capacity change from 0 to 1024
[  427.616243][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.638644][ T7973] EXT4-fs: Mount option(s) incompatible with ext2
[  427.647008][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.727905][ T2463] kworker/u8:7: attempt to access beyond end of device
[  427.727905][ T2463] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256
[  427.862719][ T7602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.883331][ T7602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.919575][ T7602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.954229][ T7602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.743471][ T7595] veth0_macvtap: entered promiscuous mode
[  428.794762][ T7595] veth1_macvtap: entered promiscuous mode
[  428.833795][ T7600] veth0_vlan: entered promiscuous mode
[  429.140441][ T7600] veth1_vlan: entered promiscuous mode
[  429.236838][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.272916][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.304547][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.339219][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.377986][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.404446][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.456804][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.566046][ T7997] loop1: detected capacity change from 0 to 512
[  429.575295][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.615586][ T7997] EXT4-fs: Ignoring removed mblk_io_submit option
[  429.622152][ T7997] EXT4-fs: Ignoring removed mblk_io_submit option
[  429.634330][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.648375][ T7997] EXT4-fs: Ignoring removed i_version option
[  429.655101][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.676781][ T7997] ext4: Unknown parameter 'pcr'
[  429.684658][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.725226][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.773963][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.811350][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.932795][ T2463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.975250][ T2463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.049069][ T7595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.081587][ T7595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.096783][ T7595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.113898][ T7595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.164622][ T5162] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  430.280566][ T2545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.301096][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.304797][ T2545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.370091][ T5162] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.398518][ T5162] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  430.439782][ T5162] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  430.487716][ T5162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  430.520807][ T5162] usb 2-1: SerialNumber: syz
[  430.598638][ T7600] veth0_macvtap: entered promiscuous mode
[  430.691120][ T7600] veth1_macvtap: entered promiscuous mode
[  430.874615][ T5162] usb 2-1: 0:2 : does not exist
[  430.985124][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.042221][ T5162] usb 2-1: USB disconnect, device number 9
[  431.052323][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.079738][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.126668][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.159195][ T7872] udevd[7872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.171918][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.223873][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.263889][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.292535][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.318264][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.497464][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.534043][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.566943][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.604063][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.624002][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.675106][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.764555][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.813967][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.880588][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.002740][ T7600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.069441][ T7600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.113923][ T7600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.137341][ T7600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.194806][ T5409] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  432.455697][ T5409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.502203][ T5409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.541644][ T5409] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  432.590317][ T5409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.658290][ T5409] usb 6-1: config 0 descriptor??
[  433.267833][ T5409] hid (null): bogus close delimiter
[  433.515107][ T5409] usb 6-1: string descriptor 0 read error: -22
[  433.826337][ T8056] loop2: detected capacity change from 0 to 128
[  433.839046][ T5409] uclogic 0003:256C:006D.0017: interface is invalid, ignoring
[  434.489614][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  434.504300][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  434.533518][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  434.602183][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  434.629478][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  434.655072][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  434.694425][ T5289] usb 6-1: USB disconnect, device number 8
[  435.918771][ T4616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  435.936535][ T4616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  435.945720][ T4616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  436.008304][ T4616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  436.016693][ T4616] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  436.025084][ T4616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.265671][ T2906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.765658][ T4616] Bluetooth: hci1: command tx timeout
[  436.789191][ T4616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  436.801246][ T4616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  436.819293][ T4616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  436.832135][ T4616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  436.845075][ T4616] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  436.859613][ T4616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  437.391235][ T2906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.764915][ T2906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.940666][ T2906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.129066][ T5237] Bluetooth: hci2: command tx timeout
[  438.884325][ T5237] Bluetooth: hci1: command tx timeout
[  438.925297][ T5237] Bluetooth: hci0: command tx timeout
[  439.439541][ T8100] loop1: detected capacity change from 0 to 1024
[  439.799689][ T8100] hfsplus: xattr searching failed
[  439.850322][   T29] audit: type=1800 audit(1726558392.691:52): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.547" name="file0" dev="loop1" ino=5 res=0 errno=0
[  439.884443][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.549'.
[  439.937754][ T8097] hfsplus: xattr search failed
[  439.951815][ T8107] vxcan3: entered promiscuous mode
[  440.090497][   T12] hfsplus: b-tree write err: -5, ino 3
[  440.137911][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.549'.
[  440.205561][ T5237] Bluetooth: hci2: command tx timeout
[  440.882845][ T2906] bridge_slave_1: left allmulticast mode
[  440.894894][ T2906] bridge_slave_1: left promiscuous mode
[  440.907848][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.928144][ T2906] bridge_slave_0: left allmulticast mode
[  440.944412][ T2906] bridge_slave_0: left promiscuous mode
[  440.955580][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.034748][ T4616] Bluetooth: hci0: command tx timeout
[  441.041354][ T5237] Bluetooth: hci1: command tx timeout
[  442.296859][ T5237] Bluetooth: hci2: command tx timeout
[  443.084541][ T5237] Bluetooth: hci1: command tx timeout
[  443.090112][ T5237] Bluetooth: hci0: command tx timeout
[  443.832951][ T8144] ==================================================================
[  443.841067][ T8144] BUG: KASAN: slab-use-after-free in iov_iter_advance+0x677/0x6c0
[  443.849026][ T8144] Read of size 8 at addr ffff8880251e7120 by task syz.2.555/8144
[  443.856766][ T8144] 
[  443.859098][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.2.555 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[  443.869442][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  443.879523][ T8144] Call Trace:
[  443.882818][ T8144]  <TASK>
[  443.885767][ T8144]  dump_stack_lvl+0x116/0x1f0
[  443.890493][ T8144]  print_report+0xc3/0x620
[  443.894961][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  443.900644][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  443.906318][ T8144]  ? __phys_addr+0xc6/0x150
[  443.910875][ T8144]  kasan_report+0xd9/0x110
[  443.915348][ T8144]  ? iov_iter_advance+0x677/0x6c0
[  443.920614][ T8144]  ? iov_iter_advance+0x677/0x6c0
[  443.925710][ T8144]  iov_iter_advance+0x677/0x6c0
[  443.930631][ T8144]  netfs_write_folio+0x745/0x18f0
[  443.935726][ T8144]  netfs_writepages+0x2ba/0xb90
[  443.940640][ T8144]  ? __pfx_netfs_writepages+0x10/0x10
[  443.946079][ T8144]  ? hlock_class+0x4e/0x130
[  443.950629][ T8144]  ? __pfx___lock_acquire+0x10/0x10
[  443.955885][ T8144]  ? mark_lock+0xb5/0xc60
[  443.960273][ T8144]  ? __pfx_netfs_writepages+0x10/0x10
[  443.965803][ T8144]  do_writepages+0x1a6/0x7f0
[  443.970468][ T8144]  ? __pfx_do_writepages+0x10/0x10
[  443.975627][ T8144]  ? __pfx_lock_acquire+0x10/0x10
[  443.980709][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  443.986391][ T8144]  ? do_raw_spin_lock+0x12d/0x2c0
[  443.991460][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  443.997313][ T8144]  ? do_raw_spin_unlock+0x172/0x230
[  444.002553][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.008234][ T8144]  ? _raw_spin_unlock+0x28/0x50
[  444.013148][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.018820][ T8144]  ? wbc_attach_and_unlock_inode+0x597/0x940
[  444.024942][ T8144]  filemap_fdatawrite_wbc+0x148/0x1c0
[  444.030381][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.036077][ T8144]  __filemap_fdatawrite_range+0xba/0x100
[  444.041777][ T8144]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  444.048339][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.054094][ T8144]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  444.060211][ T8144]  v9fs_dir_release+0x429/0x590
[  444.065476][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.071596][ T8144]  ? __pfx_v9fs_dir_release+0x10/0x10
[  444.077014][ T8144]  ? __pfx___might_resched+0x10/0x10
[  444.082337][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.088015][ T8144]  ? __pfx_v9fs_dir_release+0x10/0x10
[  444.093426][ T8144]  __fput+0x3f9/0xb60
[  444.097461][ T8144]  ? _raw_spin_unlock_irq+0x23/0x50
[  444.102731][ T8144]  task_work_run+0x151/0x250
[  444.107386][ T8144]  ? __pfx_task_work_run+0x10/0x10
[  444.112550][ T8144]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  444.118653][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.124324][ T8144]  ? task_work_add+0x1d6/0x370
[  444.129152][ T8144]  get_signal+0x1ca/0x2770
[  444.133611][ T8144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  444.139281][ T8144]  ? fput+0x148/0x390
[  444.143311][ T8144]  ? __pfx_get_signal+0x10/0x10
[  444.148213][ T8144]  arch_do_signal_or_restart+0x90/0x7e0
[  444.153807][ T8144]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  444.160012][ T8144]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  444.165781][ T8144]  syscall_exit_to_user_mode+0x150/0x2a0
[  444.171547][ T8144]  do_syscall_64+0xda/0x250
[  444.176098][ T8144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.182057][ T8144] RIP: 0033:0x7f5538b7def9
[  444.186495][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.206136][ T8144] RSP: 002b:00007f5539950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  444.214585][ T8144] RAX: 0000000000860000 RBX: 00007f5538d35f80 RCX: 00007f5538b7def9
[  444.222604][ T8144] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[  444.230618][ T8144] RBP: 00007f5538bf0b76 R08: 0000000000000000 R09: 0000000000000000
[  444.238625][ T8144] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000
[  444.246632][ T8144] R13: 0000000000000000 R14: 00007f5538d35f80 R15: 00007ffe22a508a8
[  444.254753][ T8144]  </TASK>
[  444.257805][ T8144] 
[  444.258956][ T8154] loop1: detected capacity change from 0 to 1764
[  444.260121][ T8144] Allocated by task 8144:
[  444.270813][ T8144]  kasan_save_stack+0x33/0x60
[  444.275541][ T8144]  kasan_save_track+0x14/0x30
[  444.280263][ T8144]  __kasan_kmalloc+0xaa/0xb0
[  444.284893][ T8144]  netfs_buffer_append_folio+0x181/0x750
[  444.290569][ T8144]  netfs_write_folio+0x542/0x18f0
[  444.295640][ T8144]  netfs_writepages+0x2ba/0xb90
[  444.300538][ T8144]  do_writepages+0x1a6/0x7f0
[  444.305168][ T8144]  filemap_fdatawrite_wbc+0x148/0x1c0
[  444.310588][ T8144]  __filemap_fdatawrite_range+0xba/0x100
[  444.316275][ T8144]  v9fs_dir_release+0x429/0x590
[  444.321137][ T8144]  __fput+0x3f9/0xb60
[  444.321191][ T8144]  task_work_run+0x151/0x250
[  444.330051][ T8144]  get_signal+0x1ca/0x2770
[  444.334495][ T8144]  arch_do_signal_or_restart+0x90/0x7e0
[  444.340069][ T8144]  syscall_exit_to_user_mode+0x150/0x2a0
[  444.345722][ T8144]  do_syscall_64+0xda/0x250
[  444.350247][ T8144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.356181][ T8144] 
[  444.358522][ T8144] Freed by task 6588:
[  444.362502][ T8144]  kasan_save_stack+0x33/0x60
[  444.367208][ T8144]  kasan_save_track+0x14/0x30
[  444.371922][ T8144]  kasan_save_free_info+0x3b/0x60
[  444.376993][ T8144]  poison_slab_object+0xf7/0x160
[  444.381958][ T8144]  __kasan_slab_free+0x32/0x50
[  444.386755][ T8144]  kfree+0x12a/0x3b0
[  444.390673][ T8144]  netfs_delete_buffer_head+0xa6/0x100
[  444.396158][ T8144]  netfs_write_collection_worker+0x20f9/0x4f80
[  444.402365][ T8144]  process_one_work+0x9c8/0x1b40
[  444.407347][ T8144]  worker_thread+0x6c8/0xf00
[  444.411960][ T8144]  kthread+0x2c4/0x3a0
[  444.416051][ T8144]  ret_from_fork+0x48/0x80
[  444.420508][ T8144]  ret_from_fork_asm+0x1a/0x30
[  444.425308][ T8144] 
[  444.427637][ T8144] The buggy address belongs to the object at ffff8880251e7000
[  444.427637][ T8144]  which belongs to the cache kmalloc-512 of size 512
[  444.441712][ T8144] The buggy address is located 288 bytes inside of
[  444.441712][ T8144]  freed 512-byte region [ffff8880251e7000, ffff8880251e7200)
[  444.455539][ T8144] 
[  444.457867][ T8144] The buggy address belongs to the physical page:
[  444.464277][ T8144] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x251e4
[  444.473048][ T8144] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  444.481652][ T8144] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  444.489211][ T8144] page_type: 0xfdffffff(slab)
[  444.493913][ T8144] raw: 00fff00000000040 ffff88801ac41c80 ffffea0001814f00 dead000000000002
[  444.502530][ T8144] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  444.511134][ T8144] head: 00fff00000000040 ffff88801ac41c80 ffffea0001814f00 dead000000000002
[  444.519829][ T8144] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  444.528606][ T8144] head: 00fff00000000002 ffffea0000947901 ffffffffffffffff 0000000000000000
[  444.537386][ T8144] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[  444.546173][ T8144] page dumped because: kasan: bad access detected
[  444.552590][ T8144] page_owner tracks the page as allocated
[  444.558306][ T8144] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4679, tgid 4679 (udevadm), ts 45947884462, free_ts 45903417338
[  444.579285][ T8144]  post_alloc_hook+0x2d1/0x350
[  444.584099][ T8144]  get_page_from_freelist+0x1351/0x2e50
[  444.589716][ T8144]  __alloc_pages_noprof+0x22b/0x2460
[  444.595062][ T8144]  alloc_slab_page+0x4e/0xf0
[  444.599688][ T8144]  new_slab+0x84/0x260
[  444.603784][ T8144]  ___slab_alloc+0xdac/0x1870
[  444.608689][ T8144]  __slab_alloc.constprop.0+0x56/0xb0
[  444.614093][ T8144]  __kmalloc_cache_noprof+0x2b4/0x300
[  444.619588][ T8144]  kernfs_fop_open+0x28b/0xdb0
[  444.624370][ T8144]  do_dentry_open+0x6cd/0x1530
[  444.629153][ T8144]  vfs_open+0x82/0x3f0
[  444.633244][ T8144]  path_openat+0x1e6a/0x2d60
[  444.637850][ T8144]  do_filp_open+0x1dc/0x430
[  444.642368][ T8144]  do_sys_openat2+0x17a/0x1e0
[  444.647069][ T8144]  __x64_sys_openat+0x175/0x210
[  444.651948][ T8144]  do_syscall_64+0xcd/0x250
[  444.656560][ T8144] page last free pid 4679 tgid 4679 stack trace:
[  444.662889][ T8144]  free_unref_page+0x64a/0xe40
[  444.667778][ T8144]  __put_partials+0x14c/0x170
[  444.672480][ T8144]  qlist_free_all+0x4e/0x140
[  444.677101][ T8144]  kasan_quarantine_reduce+0x192/0x1e0
[  444.682594][ T8144]  __kasan_slab_alloc+0x69/0x90
[  444.687482][ T8144]  kmem_cache_alloc_node_noprof+0x153/0x310
[  444.693409][ T8144]  __alloc_skb+0x2b1/0x380
[  444.697861][ T8144]  alloc_uevent_skb+0x7d/0x210
[  444.702662][ T8144]  kobject_uevent_env+0xc8f/0x1860
[  444.707810][ T8144]  kobject_synth_uevent+0x7de/0x8a0
[  444.713043][ T8144]  bus_uevent_store+0x3d/0x90
[  444.717752][ T8144]  bus_attr_store+0x79/0xa0
[  444.722312][ T8144]  sysfs_kf_write+0x11a/0x170
[  444.727015][ T8144]  kernfs_fop_write_iter+0x340/0x500
[  444.732321][ T8144]  vfs_write+0x6b8/0x1140
[  444.736666][ T8144]  ksys_write+0x12f/0x260
[  444.741015][ T8144] 
[  444.743337][ T8144] Memory state around the buggy address:
[  444.748969][ T8144]  ffff8880251e7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  444.757041][ T8144]  ffff8880251e7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  444.765111][ T8144] >ffff8880251e7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  444.773264][ T8144]                                ^
[  444.778380][ T8144]  ffff8880251e7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  444.786454][ T8144]  ffff8880251e7200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  444.794577][ T8144] ==================================================================
[  444.864350][ T5237] Bluetooth: hci2: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  444.983750][ T8144] Disabling lock debugging due to kernel taint
[  445.163941][ T5237] Bluetooth: hci0: command tx timeout
[  445.677958][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.769319][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.790311][ T2906] bond0 (unregistering): Released all slaves
[  445.949412][ T8075] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  445.997580][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'.
[  446.862081][ T2906] hsr_slave_0: left promiscuous mode
[  446.871068][ T2906] hsr_slave_1: left promiscuous mode
[  446.905619][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.913108][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.947725][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.959242][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.982436][ T2906] veth1_macvtap: left promiscuous mode
[  446.989285][ T2906] veth0_macvtap: left promiscuous mode
[  446.996360][ T2906] veth1_vlan: left promiscuous mode
[  447.001753][ T2906] veth0_vlan: left promiscuous mode
[  447.393767][ T2906] team0 (unregistering): Port device team_slave_1 removed
[  447.432508][ T2906] team0 (unregistering): Port device team_slave_0 removed
[  448.338477][ T2906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.426640][ T2906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.529151][ T2906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.612991][ T2906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.862628][ T2906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.946078][ T2906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.017729][ T2906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.070598][ T2906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.262187][ T2906] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.340714][ T2906] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.425647][ T2906] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.479973][ T2906] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.678525][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.731827][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.787879][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.861468][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.052733][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  450.059581][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  450.441601][ T2906] bridge_slave_1: left allmulticast mode
[  450.448970][ T2906] bridge_slave_1: left promiscuous mode
[  450.457073][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.468716][ T2906] bridge_slave_0: left allmulticast mode
[  450.475210][ T2906] bridge_slave_0: left promiscuous mode
[  450.481104][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.499590][ T2906] bridge_slave_1: left allmulticast mode
[  450.505421][ T2906] bridge_slave_1: left promiscuous mode
[  450.511305][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.527851][ T2906] bridge_slave_0: left allmulticast mode
[  450.533542][ T2906] bridge_slave_0: left promiscuous mode
[  450.542483][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.559862][ T2906] bridge_slave_1: left allmulticast mode
[  450.567876][ T2906] bridge_slave_1: left promiscuous mode
[  450.573733][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.588414][ T2906] bridge_slave_0: left allmulticast mode
[  450.595918][ T2906] bridge_slave_0: left promiscuous mode
[  450.601852][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.627182][ T2906] bridge_slave_1: left allmulticast mode
[  450.632900][ T2906] bridge_slave_1: left promiscuous mode
[  450.641203][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.657362][ T2906] bridge_slave_0: left allmulticast mode
[  450.663064][ T2906] bridge_slave_0: left promiscuous mode
[  450.669076][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.689323][ T2906] bridge_slave_1: left allmulticast mode
[  450.695392][ T2906] bridge_slave_1: left promiscuous mode
[  450.701365][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.712201][ T2906] bridge_slave_0: left allmulticast mode
[  450.719810][ T2906] bridge_slave_0: left promiscuous mode
[  450.726314][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.063799][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.076439][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.088528][ T2906] bond0 (unregistering): Released all slaves
[  452.107284][ T2906] bond0 (unregistering): Released all slaves
[  452.133522][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.155529][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.168329][ T2906] bond0 (unregistering): Released all slaves
[  452.189062][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.202720][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.218225][ T2906] bond0 (unregistering): (slave team1): Releasing backup interface
[  452.230042][ T2906] bond0 (unregistering): Released all slaves
[  452.250481][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.265450][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.285277][ T2906] bond0 (unregistering): Released all slaves
[  452.309366][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.321834][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.340666][ T2906] bond0 (unregistering): Released all slaves
[  453.285836][ T2906] hsr_slave_0: left promiscuous mode
[  453.292194][ T2906] hsr_slave_1: left promiscuous mode
[  453.299144][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.307672][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.316416][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.335653][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.351490][ T2906] hsr_slave_0: left promiscuous mode
[  453.360172][ T2906] hsr_slave_1: left promiscuous mode
[  453.370397][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.380222][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.389404][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.400906][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.421890][ T2906] hsr_slave_0: left promiscuous mode
[  453.429866][ T2906] hsr_slave_1: left promiscuous mode
[  453.445617][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.453176][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.487505][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.506849][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.524433][ T2906] hsr_slave_0: left promiscuous mode
[  453.536388][ T2906] hsr_slave_1: left promiscuous mode
[  453.545031][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.552472][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.567584][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.577475][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.592766][ T2906] hsr_slave_0: left promiscuous mode
[  453.614543][ T2906] hsr_slave_1: left promiscuous mode
[  453.621153][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.630153][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.649047][ T2906] veth1_macvtap: left promiscuous mode
[  453.654766][ T2906] veth0_macvtap: left promiscuous mode
[  453.660576][ T2906] veth1_vlan: left promiscuous mode
[  453.667071][ T2906] veth0_vlan: left promiscuous mode
[  453.677160][ T2906] veth1_macvtap: left promiscuous mode
[  453.682761][ T2906] veth0_macvtap: left promiscuous mode
[  453.689098][ T2906] veth1_vlan: left promiscuous mode
[  453.696895][ T2906] veth0_vlan: left promiscuous mode
[  453.705477][ T2906] veth1_macvtap: left promiscuous mode
[  453.711070][ T2906] veth0_macvtap: left promiscuous mode
[  453.718025][ T2906] veth1_vlan: left promiscuous mode
[  453.723537][ T2906] veth0_vlan: left promiscuous mode
[  453.731696][ T2906] veth1_macvtap: left promiscuous mode
[  453.737345][ T2906] veth0_macvtap: left promiscuous mode
[  453.743109][ T2906] veth1_vlan: left promiscuous mode
[  453.749402][ T2906] veth0_vlan: left promiscuous mode