last executing test programs:

8.519007672s ago: executing program 0 (id=1599):
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

8.142333196s ago: executing program 0 (id=1606):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000540)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0})

5.449477107s ago: executing program 0 (id=1630):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000280), 0x3, 0x440, &(0x7f00000006c0)="$eJzs28tvG8UfAPDvrpP019cvoZRHH0CgICIeSZMW6IEDIJA4FAkJDnCMkrQqdRvUBIlWFRSEygkhJO6II/8CJ7ggxAmJK9xRpQr10paT0dq7ie3YbuLaNcWfj7TtzO5sZr7eHXtmxw5gaE1m/yQRuyLi94gYr2UbC0zW/rtx7eLCzWsXF5KoVN76K6mWu37t4kJRtDhvZ56ZSiPSz5I40KLelfMXTs+Xy0vn8vzM6pn3Z1bOX3j21Jn5k0snl87OHTt29MjsC8/PPdeTOLM2Xd//0fLBfa+/+9Ubx79oiL8pjh6Z7HTwiUqlx9UN1u66dDIywIawJaWIyC7XaLX/j0cp1i/eeLz26UAbB/RVpVKp7Gx/+FIF+A9LojGvy8OwKD7os/lvsTUPAl7q3/Bj4K6+XJsAZXHfyLfakZFI8zKjTfPbXpqMiHcu/f1NtkV/nkMAADT4IRv/PNNq/JfG/XXl/p+vDU1ExD0RsSci7o2IvRFxX0S17AMR8eAW629eJNk4/kmvdBXYJmXjvxfzta3G8V8x+ouJUp7bXY1/NDlxqrx0OH9NpmJ0W5af7VDHj6/+9mW7Y/Xjv2zL6i/Ggnk7roxsazxncX51/nZirnf1k4j9I63iT9ZWApKI2BcR+7us49RT3x1sd+zW8XfQg3WmyrcRT9au/6Voir+QdF6fnPlflJcOzxR3xUa//Hr5zXb131b8PZBd/x0t7/+1+CeS+vXala3XcfmPz9vOabq9/8eSt6vpsXzfh/Orq+dmI8aS47VG1++fWz+3yBfls/inDrXu/3ti/ZU4EBHZTfxQRDwcEY/kbX80Ih6LiEMd4v/5lcff6z7+/sriX9zS9V9PjEXzntaJ0umfvm+odGJD/Dc7X/+j1dRUvmcz73+baVd3dzMAAADcfdKI2BVJOr2WTtPp6dr35ffGjrS8vLL69InlD84u1n4jMBGjafGka7zueehsPq0v8nNR+2pBkT+SPzf+urS9mp9eWC4vDjp4GHI72/T/zJ+lQbcO6Du/14Lhpf/D8NL/YXjp/zC8WvT/7YNoB3Dntfr8/3gA7QDuvKb+b9kPhoj5Pwwv/R+Gl/4PQ2lle9z6R/IdE8Vf6vJ0ibs0Eem/ohkSfUoM9n0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/4JAAD//3sE4iY=")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)

5.34626894s ago: executing program 1 (id=1631):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20000001, 0x4)
shutdown(r0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

5.279141361s ago: executing program 3 (id=1632):
socket$igmp(0x2, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

5.019052269s ago: executing program 1 (id=1635):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000009dc0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000067c0)="56cfc07d250a0db4f29e410181727b71", 0x10}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000006540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1}}], 0x2, 0x0, 0x0)

5.01857363s ago: executing program 3 (id=1636):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x41}, [@ldst={0x6}]}, 0x0, 0x0, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x90)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'})
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=@getsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@mark={0xc}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x48}}, 0x0)

4.949787446s ago: executing program 1 (id=1637):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f00000000c0)=@tcp6=r1}, 0x20)

4.708505246s ago: executing program 1 (id=1641):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

4.65489118s ago: executing program 0 (id=1642):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.49608208s ago: executing program 3 (id=1643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

4.266295718s ago: executing program 3 (id=1646):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)

4.206715634s ago: executing program 4 (id=1647):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18)

3.810409171s ago: executing program 4 (id=1648):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r0, 0x381b, 0x0, 0x0, 0x0, 0x0)

3.680716257s ago: executing program 1 (id=1649):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010280)='./mnt\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ffffffff6c03bb00007367", @ANYRESHEX=0x0, @ANYBLOB=',usrjquota=jqfmt=vfsold,\x00'], 0x1, 0x10212, &(0x7f00000102c0)="$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")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x541b, 0x0)

3.006859556s ago: executing program 5 (id=1651):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)

3.005519247s ago: executing program 4 (id=1652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0)

2.388778836s ago: executing program 4 (id=1654):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x7, "00000000f4eef7fffa000004000000004000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x11)

2.256293992s ago: executing program 5 (id=1655):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)

2.087823095s ago: executing program 2 (id=1656):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8000, @none, 0x7}, 0xe)
listen(r0, 0xd50a)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x516f55c6494de8e3)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1f}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x60d6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f, 0x2}, 0xe)

1.682069308s ago: executing program 5 (id=1657):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2004d95, &(0x7f0000000040), 0x0, 0x523, &(0x7f0000000a80)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x0, r1}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4d0101, 0x0)

1.557700774s ago: executing program 2 (id=1658):
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040500d3fc09000000478803", 0xd, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)

1.213584551s ago: executing program 0 (id=1659):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000010000e400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25OPTRT(r1, 0x89e8, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

1.132172207s ago: executing program 1 (id=1660):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x25, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)

1.084720412s ago: executing program 2 (id=1672):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

934.624591ms ago: executing program 4 (id=1661):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000})
lseek(r2, 0x0, 0x2)

933.441599ms ago: executing program 2 (id=1674):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"})
r1 = dup(r0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x82f6, 0x0, "0800000000000002"})
readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000240)=""/64, 0x40}], 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff)

856.057775ms ago: executing program 3 (id=1662):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)

808.338225ms ago: executing program 0 (id=1663):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

595.126867ms ago: executing program 5 (id=1664):
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="b9", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x1, 0x0, 0xc, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2a638679d94497ae59d1542efcd2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x9]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

565.752344ms ago: executing program 3 (id=1665):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

561.59344ms ago: executing program 2 (id=1666):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x600})

548.972874ms ago: executing program 4 (id=1667):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')

156.868999ms ago: executing program 5 (id=1668):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90)

17.775024ms ago: executing program 5 (id=1669):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

0s ago: executing program 2 (id=1670):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1f, &(0x7f0000000140)=[&(0x7f0000323000/0x2000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000001500), 0x0)

kernel console output (not intermixed with test programs):

 Port device team_slave_1 added
[  437.966018][ T8866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.985958][ T8866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.013635][ T8866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.046747][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.055663][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.063277][ T8901] bridge_slave_0: entered allmulticast mode
[  438.072264][ T8901] bridge_slave_0: entered promiscuous mode
[  438.104526][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.137236][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.144726][ T8901] bridge_slave_1: entered allmulticast mode
[  438.174301][ T8901] bridge_slave_1: entered promiscuous mode
[  438.238820][ T8948] random: crng reseeded on system resumption
[  438.623234][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.643992][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.680217][ T8953] loop2: detected capacity change from 0 to 4096
[  438.701434][ T8953] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  438.715712][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.744037][ T8953] ntfs3: loop2: Failed to load $Extend (-22).
[  438.758688][ T8953] ntfs3: loop2: Failed to initialize $Extend.
[  438.767636][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.778652][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.812741][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.846846][ T8866] hsr_slave_0: entered promiscuous mode
[  438.879686][ T8866] hsr_slave_1: entered promiscuous mode
[  439.043197][ T8901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.147544][   T54] Bluetooth: hci3: command tx timeout
[  439.443422][ T8958] loop2: detected capacity change from 0 to 1024
[  439.483864][  T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.557188][   T29] audit: type=1800 audit(1725039211.954:174): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1084" name="file1" dev="loop2" ino=20 res=0 errno=0
[  439.589236][ T8901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.597396][ T8958] syz.2.1084: attempt to access beyond end of device
[  439.597396][ T8958] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  439.970342][  T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.097748][ T8901] team0: Port device team_slave_0 added
[  440.181419][  T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.503471][ T8901] team0: Port device team_slave_1 added
[  441.244498][ T8964] loop0: detected capacity change from 0 to 32768
[  441.312616][ T8964] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  441.321635][ T8964] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  441.365422][ T8964] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms
[  441.399780][ T5419] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  441.422072][ T5419] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  441.507039][  T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.531203][ T5419] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms
[  441.539549][ T5419] gfs2: fsid=syz:syz.0: jid=0: Done
[  441.547215][ T8964] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  441.598172][ T8865] hsr_slave_0: entered promiscuous mode
[  441.627960][ T8865] hsr_slave_1: entered promiscuous mode
[  441.677911][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  441.686558][ T8865] Cannot create hsr debugfs directory
[  441.894105][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.938079][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.087152][ T8901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.133583][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.159757][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.247578][ T8901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.447550][ T8970] loop2: detected capacity change from 0 to 256
[  442.661407][ T8970] FAT-fs (loop2): Directory bread(block 64) failed
[  442.697176][ T8970] FAT-fs (loop2): Directory bread(block 65) failed
[  442.717541][ T8970] FAT-fs (loop2): Directory bread(block 66) failed
[  442.747697][ T8970] FAT-fs (loop2): Directory bread(block 67) failed
[  442.771575][ T8970] FAT-fs (loop2): Directory bread(block 68) failed
[  442.807095][ T8970] FAT-fs (loop2): Directory bread(block 69) failed
[  442.813899][ T8970] FAT-fs (loop2): Directory bread(block 70) failed
[  442.879907][ T8970] FAT-fs (loop2): Directory bread(block 71) failed
[  442.886757][ T8970] FAT-fs (loop2): Directory bread(block 72) failed
[  442.946658][ T8970] FAT-fs (loop2): Directory bread(block 73) failed
[  443.257899][ T8901] hsr_slave_0: entered promiscuous mode
[  443.297717][ T8901] hsr_slave_1: entered promiscuous mode
[  443.347005][ T8901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  443.354628][ T8901] Cannot create hsr debugfs directory
[  443.696121][ T8978] cgroup: fork rejected by pids controller in /syz0
[  444.507460][  T136] bridge_slave_1: left allmulticast mode
[  444.518027][  T136] bridge_slave_1: left promiscuous mode
[  444.523951][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.618857][  T136] bridge_slave_0: left allmulticast mode
[  444.624580][  T136] bridge_slave_0: left promiscuous mode
[  444.667478][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.788411][  T136] bridge_slave_1: left allmulticast mode
[  444.794103][  T136] bridge_slave_1: left promiscuous mode
[  444.825544][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.881911][  T136] bridge_slave_0: left allmulticast mode
[  444.899211][  T136] bridge_slave_0: left promiscuous mode
[  444.907863][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.946426][ T8989] loop2: detected capacity change from 0 to 32768
[  447.020540][ T8989] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  447.028871][ T8989] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  447.046482][ T8989] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  447.058866][ T5419] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  447.065650][ T5419] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  447.319250][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  447.360399][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  447.371464][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  447.382856][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  447.392692][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  447.407314][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  447.414793][ T5419] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 349ms
[  447.424264][ T5419] gfs2: fsid=syz:syz.0: jid=0: Done
[  447.431090][ T8989] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  448.488018][  T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.504098][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.516151][  T136] bond0 (unregistering): Released all slaves
[  448.686510][  T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.705971][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.719649][  T136] bond0 (unregistering): Released all slaves
[  449.547531][   T54] Bluetooth: hci2: command tx timeout
[  449.736636][ T8866] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  449.807165][ T8866] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  449.867129][ T8866] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  449.905377][  T136] hsr_slave_0: left promiscuous mode
[  449.915605][  T136] hsr_slave_1: left promiscuous mode
[  449.933651][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.948060][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.970785][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.978351][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.992841][  T136] hsr_slave_0: left promiscuous mode
[  450.006214][  T136] hsr_slave_1: left promiscuous mode
[  450.012948][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  450.020550][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.030328][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.040071][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.096431][  T136] veth1_macvtap: left promiscuous mode
[  450.102694][  T136] veth0_macvtap: left promiscuous mode
[  450.110843][  T136] veth1_vlan: left promiscuous mode
[  450.116242][  T136] veth0_vlan: left promiscuous mode
[  450.124168][  T136] veth1_macvtap: left promiscuous mode
[  450.131985][  T136] veth0_macvtap: left promiscuous mode
[  450.138023][  T136] veth1_vlan: left promiscuous mode
[  450.143423][  T136] veth0_vlan: left promiscuous mode
[  450.196201][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  450.203337][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  451.268532][  T136] team0 (unregistering): Port device team_slave_1 removed
[  451.342732][  T136] team0 (unregistering): Port device team_slave_0 removed
[  451.619667][   T54] Bluetooth: hci2: command tx timeout
[  452.692647][  T136] team0 (unregistering): Port device team_slave_1 removed
[  452.759938][  T136] team0 (unregistering): Port device team_slave_0 removed
[  453.380659][ T8866] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  453.482973][ T8992] chnl_net:caif_netlink_parms(): no params data found
[  453.697899][   T54] Bluetooth: hci2: command tx timeout
[  453.855245][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.865005][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.872404][ T8992] bridge_slave_0: entered allmulticast mode
[  453.892890][ T8992] bridge_slave_0: entered promiscuous mode
[  453.939850][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.947638][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.958097][ T8992] bridge_slave_1: entered allmulticast mode
[  453.966625][ T8992] bridge_slave_1: entered promiscuous mode
[  454.169574][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.225912][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.366736][ T8866] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.416686][ T8992] team0: Port device team_slave_0 added
[  454.481176][ T8992] team0: Port device team_slave_1 added
[  454.562410][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.571093][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.598484][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.617280][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.624347][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.657065][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.686553][ T8866] 8021q: adding VLAN 0 to HW filter on device team0
[  454.732883][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.740280][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.752394][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.759697][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.798067][  T136] IPVS: stop unused estimator thread 0...
[  455.028145][ T8992] hsr_slave_0: entered promiscuous mode
[  455.042180][ T8992] hsr_slave_1: entered promiscuous mode
[  455.053085][ T8992] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  455.061386][ T8992] Cannot create hsr debugfs directory
[  455.159037][ T8865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  455.237110][  T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.273825][ T8865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  455.293953][ T8865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  455.393835][ T8865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  455.465426][  T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.607218][  T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.728821][  T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.779851][   T54] Bluetooth: hci2: command tx timeout
[  455.803087][ T8901] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  455.877108][ T8901] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  455.905049][ T8901] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  455.957224][ T8901] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  456.383759][  T136] bridge_slave_1: left allmulticast mode
[  456.391594][  T136] bridge_slave_1: left promiscuous mode
[  456.398535][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.413732][  T136] bridge_slave_0: left allmulticast mode
[  456.445054][  T136] bridge_slave_0: left promiscuous mode
[  456.453037][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.055758][  T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.076550][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.097316][  T136] bond0 (unregistering): Released all slaves
[  457.440826][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.654621][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.828098][  T136] hsr_slave_0: left promiscuous mode
[  457.836281][  T136] hsr_slave_1: left promiscuous mode
[  457.855101][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.875721][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.886299][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.906138][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.946010][  T136] veth1_macvtap: left promiscuous mode
[  457.953284][  T136] veth0_macvtap: left promiscuous mode
[  457.960941][  T136] veth1_vlan: left promiscuous mode
[  457.966326][  T136] veth0_vlan: left promiscuous mode
[  458.812150][  T136] team0 (unregistering): Port device team_slave_1 removed
[  458.887157][  T136] team0 (unregistering): Port device team_slave_0 removed
[  459.762779][ T8865] 8021q: adding VLAN 0 to HW filter on device team0
[  459.905944][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.913392][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.971420][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.979787][ T8992] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  460.013030][ T8992] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  460.076608][ T8992] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  460.118386][ T8992] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  460.143481][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.150898][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.225507][ T8901] 8021q: adding VLAN 0 to HW filter on device team0
[  460.296623][ T2560] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.303915][ T2560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.391476][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.398786][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.432476][ T8866] veth0_vlan: entered promiscuous mode
[  460.553061][ T8866] veth1_vlan: entered promiscuous mode
[  460.891116][ T8866] veth0_macvtap: entered promiscuous mode
[  460.990228][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.052302][ T8866] veth1_macvtap: entered promiscuous mode
[  461.130720][ T8992] 8021q: adding VLAN 0 to HW filter on device team0
[  461.184939][ T2560] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.192271][ T2560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.260803][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.301089][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.327191][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.347035][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.371016][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.431620][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.438965][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.464664][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.483426][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.493547][ T8866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.504207][ T8866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.518025][ T8866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  461.560429][ T8866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.569701][ T8866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.578593][ T8866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.596054][ T8866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.648058][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.804630][ T8901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.988346][ T2560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.996247][ T2560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.164517][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.190173][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.266372][ T8865] veth0_vlan: entered promiscuous mode
[  462.344555][ T8901] veth0_vlan: entered promiscuous mode
[  462.404113][ T8865] veth1_vlan: entered promiscuous mode
[  462.464626][ T8901] veth1_vlan: entered promiscuous mode
[  462.621202][ T9028] loop5: detected capacity change from 0 to 64
[  462.687626][ T8901] veth0_macvtap: entered promiscuous mode
[  462.792708][ T8865] veth0_macvtap: entered promiscuous mode
[  462.845631][ T8901] veth1_macvtap: entered promiscuous mode
[  462.891063][ T8865] veth1_macvtap: entered promiscuous mode
[  462.984028][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.086140][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.106160][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.116799][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.128018][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.139529][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.150236][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.170119][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.183151][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.202634][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.215364][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.227432][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.237409][ T8901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.247997][ T8901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.276830][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.355199][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.367424][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.379256][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.392031][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.402765][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.413921][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.429740][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  463.441019][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.454132][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.470984][ T8901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.483722][ T8901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.493644][ T8901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.502505][ T8901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.593216][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.612340][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.640109][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.657033][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.669204][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.689455][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.716989][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.736990][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.750205][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.869273][ T2583] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.960071][ T8865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.989932][ T8865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.009539][ T8865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.051281][ T8865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.155197][ T2583] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.315680][ T2583] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.424907][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.445694][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.492809][ T2583] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.608441][ T8992] veth0_vlan: entered promiscuous mode
[  464.644672][ T2560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.660120][ T2560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.663651][ T8992] veth1_vlan: entered promiscuous mode
[  464.799731][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.847007][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.901304][ T9032] input: syz0 as /devices/virtual/input/input16
[  464.991865][ T2583] bridge_slave_1: left allmulticast mode
[  465.004448][ T2583] bridge_slave_1: left promiscuous mode
[  465.017042][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.100811][ T2583] bridge_slave_0: left allmulticast mode
[  465.106784][ T2583] bridge_slave_0: left promiscuous mode
[  465.148493][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.397121][ T5293] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  465.636981][ T5293] usb 3-1: Using ep0 maxpacket: 32
[  465.647805][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.674118][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.717146][ T5293] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  465.726318][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.770130][ T5293] usb 3-1: config 0 descriptor??
[  465.784744][ T5293] hub 3-1:0.0: USB hub found
[  466.031674][ T5293] hub 3-1:0.0: 1 port detected
[  466.195205][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  466.230710][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  466.247156][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  466.267220][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  466.291352][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  466.311505][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  466.493774][ T9046] loop4: detected capacity change from 0 to 1024
[  466.518328][ T9046] EXT4-fs: Ignoring removed nobh option
[  466.596731][ T9046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.765705][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.797890][ T5293] hub 3-1:0.0: activate --> -90
[  466.865458][ T9038] loop1: detected capacity change from 0 to 32768
[  466.885819][ T9038] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1102 (9038)
[  466.924247][ T9038] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  466.955117][ T9038] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  466.967784][ T9038] BTRFS info (device loop1): using free-space-tree
[  467.202276][ T5419] usb 3-1: USB disconnect, device number 9
[  467.208921][ T5293] usb 3-1-port1: config error
[  467.215607][ T2583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  467.290881][ T2583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.330342][ T2583] bond0 (unregistering): Released all slaves
[  467.409420][ T2525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.421506][ T2525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.467571][   T29] audit: type=1800 audit(1725039239.864:175): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1102" name="file2" dev="loop1" ino=261 res=0 errno=0
[  467.565862][ T8992] veth0_macvtap: entered promiscuous mode
[  467.667581][ T8992] veth1_macvtap: entered promiscuous mode
[  468.078553][ T9074] loop2: detected capacity change from 0 to 512
[  468.095909][ T8901] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  468.181865][ T9074] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1115: bg 0: block 393: padding at end of block bitmap is not set
[  468.204919][ T9074] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  468.251934][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.282574][ T9074] EXT4-fs (loop2): 2 truncates cleaned up
[  468.306990][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.316891][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.324199][ T9074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.338635][ T9081] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  468.358011][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.375995][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.395726][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.405671][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.416518][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.417830][   T54] Bluetooth: hci4: command tx timeout
[  468.428157][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.448728][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.526695][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.632858][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.959697][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.997234][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.046994][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.087388][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.117035][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.152265][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.187399][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.222806][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.266999][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.307766][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.350268][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.706651][ T2583] hsr_slave_0: left promiscuous mode
[  469.778282][ T2583] hsr_slave_1: left promiscuous mode
[  469.785996][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.806525][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.850037][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.867082][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.925611][ T2583] veth1_macvtap: left promiscuous mode
[  469.934775][ T2583] veth0_macvtap: left promiscuous mode
[  469.942135][ T2583] veth1_vlan: left promiscuous mode
[  469.951416][ T2583] veth0_vlan: left promiscuous mode
[  470.076751][ T9100] syz.2.1125[9100] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  470.081605][ T9100] syz.2.1125[9100] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  470.164595][ T9102] loop3: detected capacity change from 0 to 256
[  470.206273][ T9102] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395f9f4b, utbl_chksum : 0xe619d30d)
[  470.508932][   T54] Bluetooth: hci4: command tx timeout
[  470.526719][ T9106] loop4: detected capacity change from 0 to 1024
[  470.578640][ T9104] loop2: detected capacity change from 0 to 4096
[  470.616735][ T9104] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  470.701496][ T9104] ntfs3: loop2: Failed to load $Extend (-22).
[  470.719802][ T9104] ntfs3: loop2: Failed to initialize $Extend.
[  471.278114][ T9116] loop4: detected capacity change from 0 to 512
[  471.328078][ T9116] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1131: casefold flag without casefold feature
[  471.354969][ T9116] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1131: couldn't read orphan inode 15 (err -117)
[  471.443948][ T9116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.651682][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.818756][ T9126] loop4: detected capacity change from 0 to 1024
[  472.138481][ T9132] loop2: detected capacity change from 0 to 256
[  472.157595][ T9132] exfat: Deprecated parameter 'utf8'
[  472.184357][ T2583] team0 (unregistering): Port device team_slave_1 removed
[  472.185626][ T9132] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  472.340904][ T2583] team0 (unregistering): Port device team_slave_0 removed
[  472.588144][   T54] Bluetooth: hci4: command tx timeout
[  472.664988][ T9140] syz.2.1142: attempt to access beyond end of device
[  472.664988][ T9140] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  472.738960][ T9138] loop4: detected capacity change from 0 to 4096
[  472.771654][ T9138] NILFS (loop4): invalid segment: Checksum error in segment payload
[  472.805464][ T9138] NILFS (loop4): trying rollback from an earlier position
[  472.866853][ T9138] NILFS (loop4): recovery complete
[  472.892083][ T9143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  473.559914][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'.
[  473.624711][ T9115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  473.730930][ T8992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.770482][ T8992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.784317][ T8992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.793357][ T8992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.607329][ T5295] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  474.657202][   T54] Bluetooth: hci4: command tx timeout
[  474.682393][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.696138][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.746328][ T9169] loop2: detected capacity change from 0 to 256
[  474.832457][ T5295] usb 5-1: Using ep0 maxpacket: 32
[  474.855103][ T5295] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  474.914906][ T9174] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  474.915765][ T5295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  475.001385][ T5295] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  475.044386][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.053918][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.096182][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.107639][ T5295] usb 5-1: Product: syz
[  475.111879][ T5295] usb 5-1: Manufacturer: syz
[  475.126884][ T5295] usb 5-1: SerialNumber: syz
[  475.175367][ T9043] chnl_net:caif_netlink_parms(): no params data found
[  475.443298][ T9179] loop2: detected capacity change from 0 to 256
[  475.463322][ T9178] loop1: detected capacity change from 0 to 128
[  476.064415][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.107297][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.135288][ T9043] bridge_slave_0: entered allmulticast mode
[  476.163019][ T9043] bridge_slave_0: entered promiscuous mode
[  476.199348][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.219782][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.238678][ T9043] bridge_slave_1: entered allmulticast mode
[  476.271481][ T9194] Bluetooth: MGMT ver 1.23
[  476.271745][ T9043] bridge_slave_1: entered promiscuous mode
[  476.525430][ T5295] cdc_ncm 5-1:1.0: bind() failure
[  476.557610][ T5295] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  476.568106][ T9198] loop1: detected capacity change from 0 to 64
[  476.596080][ T5295] usb 5-1: USB disconnect, device number 13
[  476.633400][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.694487][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.018667][ T9043] team0: Port device team_slave_0 added
[  477.072666][ T9043] team0: Port device team_slave_1 added
[  477.252698][ T9207] loop3: detected capacity change from 0 to 4096
[  477.298948][ T9207] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  477.394025][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.409414][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.499934][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.560683][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.598228][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.655317][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.689904][ T9216] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1170'.
[  477.739417][ T9216] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1170'.
[  478.089755][ T9043] hsr_slave_0: entered promiscuous mode
[  478.116420][ T9043] hsr_slave_1: entered promiscuous mode
[  478.127197][    T8] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  478.351696][    T8] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  478.361534][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.392938][    T8] usb 1-1: config 0 descriptor??
[  478.789002][ T9246] loop3: detected capacity change from 0 to 64
[  479.079299][ T9246] syz.3.1183: attempt to access beyond end of device
[  479.079299][ T9246] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  479.685073][    T8] pegasus 1-1:0.0: can't reset MAC
[  479.691013][    T8] pegasus 1-1:0.0: probe with driver pegasus failed with error -5
[  479.701830][ T5292] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  479.734974][    T8] usb 1-1: USB disconnect, device number 9
[  479.931346][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  479.955608][ T5292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  479.993089][ T5292] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  480.026497][ T9043] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  480.033648][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  480.051480][ T5292] usb 3-1: SerialNumber: syz
[  480.079138][ T5332] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  480.079915][ T9043] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  480.170095][ T9043] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  480.203800][ T9043] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  480.287698][ T5332] usb 5-1: Using ep0 maxpacket: 32
[  480.354446][ T5332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.387783][ T5292] usb 3-1: 0:2 : does not exist
[  480.409459][ T5332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.438668][ T5332] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  480.462493][ T5292] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  480.497133][ T5332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.543701][ T5332] usb 5-1: config 0 descriptor??
[  480.593877][ T5332] hub 5-1:0.0: USB hub found
[  480.617158][ T5292] usb 3-1: USB disconnect, device number 10
[  480.865390][ T5332] hub 5-1:0.0: 1 port detected
[  480.934981][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0
[  481.058638][ T9043] 8021q: adding VLAN 0 to HW filter on device team0
[  481.148051][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.155482][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.197748][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.205159][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.667122][ T5332] hub 5-1:0.0: activate --> -90
[  481.745018][ T9276] loop3: detected capacity change from 0 to 256
[  482.066159][ T5332] usb 5-1-port1: config error
[  482.066220][ T1167] usb 5-1: USB disconnect, device number 14
[  482.408115][ T9266] loop0: detected capacity change from 0 to 32768
[  482.430200][ T9266] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1191 (9266)
[  482.508356][ T9266] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  482.508790][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  482.537442][ T9266] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  482.546018][ T9266] BTRFS info (device loop0): using free-space-tree
[  483.210975][   T29] audit: type=1800 audit(1725039255.614:176): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1191" name="file2" dev="loop0" ino=261 res=0 errno=0
[  483.663266][ T8992] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  483.723510][ T9328] loop3: detected capacity change from 0 to 4096
[  483.775736][ T9328] NILFS (loop3): invalid segment: Checksum error in segment payload
[  483.808243][ T9340] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  483.857919][ T9328] NILFS (loop3): trying rollback from an earlier position
[  483.921726][ T9328] NILFS (loop3): recovery complete
[  483.959625][ T9341] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  483.987129][ T5332] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  484.015077][ T9043] veth0_vlan: entered promiscuous mode
[  484.057187][ T9043] veth1_vlan: entered promiscuous mode
[  484.200697][ T9043] veth0_macvtap: entered promiscuous mode
[  484.211378][ T5332] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  484.237734][ T5332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.256043][ T9043] veth1_macvtap: entered promiscuous mode
[  484.300607][ T5332] usb 2-1: config 0 descriptor??
[  484.398437][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.424644][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.447042][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.464865][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.480655][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.500032][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.511706][ T5294] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  484.550868][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.579218][ T9345] loop4: detected capacity change from 0 to 2048
[  484.593801][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.608514][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.647668][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.691582][ T9345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.714520][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  484.726973][ T5294] usb 3-1: Using ep0 maxpacket: 32
[  484.745881][ T5294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.764606][ T5332] usb 2-1: Cannot set MAC address
[  484.783416][ T5332] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  484.809694][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.812486][ T5332] usb 2-1: USB disconnect, device number 5
[  484.846247][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.872840][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.891426][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.905746][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  484.924176][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.949715][ T5294] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  484.960778][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.987164][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.999345][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.041970][ T5294] usb 3-1: config 0 descriptor??
[  485.047301][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.080421][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.110962][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.117179][ T9345] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.1215: bg 0: block 234: padding at end of block bitmap is not set
[  485.147205][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.160172][ T9345] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 158 with error 117
[  485.173885][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.193970][ T9345] EXT4-fs (loop4): This should not happen!! Data will be lost
[  485.193970][ T9345] 
[  485.203556][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.293536][ T9043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.306735][ T9043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.321213][ T9043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.332208][ T9043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.380642][ T5292] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  485.588048][ T5292] usb 4-1: Using ep0 maxpacket: 32
[  485.605764][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.620529][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.642500][ T5294] hid-generic 0003:1B96:9F0A.000A: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0
[  485.685122][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.749434][ T5292] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  485.785372][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.838986][ T5292] usb 4-1: config 0 descriptor??
[  485.882170][ T5292] hub 4-1:0.0: USB hub found
[  485.917481][ T9357] Process accounting resumed
[  485.950397][ T2583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.991166][ T2583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.154649][ T5292] hub 4-1:0.0: 1 port detected
[  486.269864][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.313511][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.464878][ T5419] usb 3-1: USB disconnect, device number 11
[  486.644914][ T9371] loop5: detected capacity change from 0 to 256
[  486.740740][ T9371] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  486.846011][ T9374] loop1: detected capacity change from 0 to 128
[  486.874037][ T9374] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff0177777777777777777777701777777777777777777777'
[  486.993627][ T5292] hub 4-1:0.0: activate --> -90
[  487.439909][ T5332] usb 4-1: USB disconnect, device number 6
[  487.469729][ T9380] loop5: detected capacity change from 0 to 512
[  487.567725][ T9380] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  487.590060][ T9380] EXT4-fs (loop5): orphan cleanup on readonly fs
[  487.638902][ T9380] EXT4-fs warning (device loop5): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  487.690089][ T9380] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  487.774870][ T9389] loop0: detected capacity change from 0 to 512
[  487.777527][ T9380] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1225: bg 0: block 40: padding at end of block bitmap is not set
[  487.836450][ T9380] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  487.857363][ T9389] EXT4-fs (loop0): orphan cleanup on readonly fs
[  487.880538][ T9389] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  487.900721][ T9380] EXT4-fs (loop5): 1 truncate cleaned up
[  487.909779][ T9380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  487.911862][ T9392] ALSA: seq fatal error: cannot create timer (-22)
[  487.939665][ T9389] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  487.941978][ T9380] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1225: bad symlink.
[  487.999323][ T9389] EXT4-fs error (device loop0): ext4_acquire_dquot:6846: comm syz.0.1230: Failed to acquire dquot type 1
[  488.062940][ T9389] EXT4-fs (loop0): 1 truncate cleaned up
[  488.099693][ T9389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  488.165465][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.459989][ T8992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.787555][ T5293] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  489.007540][ T5293] usb 5-1: Using ep0 maxpacket: 32
[  489.019336][ T5293] usb 5-1: config index 0 descriptor too short (expected 45574, got 18)
[  489.037088][ T5293] usb 5-1: config 171 has too many interfaces: 148, using maximum allowed: 32
[  489.046014][ T5293] usb 5-1: config 171 has an invalid descriptor of length 223, skipping remainder of the config
[  489.077877][ T5293] usb 5-1: config 171 has 0 interfaces, different from the descriptor's value: 148
[  489.107989][ T5293] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  489.117485][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.126445][ T5293] usb 5-1: Product: syz
[  489.138099][ T5292] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  489.142270][ T5293] usb 5-1: Manufacturer: syz
[  489.167091][ T5293] usb 5-1: SerialNumber: syz
[  489.349065][ T5292] usb 4-1: Using ep0 maxpacket: 16
[  489.367185][ T5419] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  489.378175][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.427702][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.459235][ T5292] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  489.484434][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.514152][ T5292] usb 4-1: config 0 descriptor??
[  489.578025][ T5419] usb 2-1: Using ep0 maxpacket: 32
[  489.597728][ T5419] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.630175][ T5419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.648159][ T5295] usb 5-1: USB disconnect, device number 15
[  489.662798][ T5419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.682855][ T5419] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  489.683413][ T9429] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  489.714274][ T5419] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  489.732261][ T5419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.740648][ T5293] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  489.781360][ T5419] usb 2-1: config 0 descriptor??
[  489.973305][ T5293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  489.987902][ T5292] playstation 0003:054C:05C4.000B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0
[  490.002786][ T5293] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  490.036481][ T5293] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  490.057335][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  490.065511][ T5293] usb 1-1: SerialNumber: syz
[  490.170642][ T5292] playstation 0003:054C:05C4.000B: Invalid reportID received, expected 18 got 26
[  490.216862][ T5292] playstation 0003:054C:05C4.000B: Failed to retrieve DualShock4 pairing info: -22
[  490.243106][ T5292] playstation 0003:054C:05C4.000B: Failed to get MAC address from DualShock4
[  490.263821][ T5292] playstation 0003:054C:05C4.000B: Failed to create dualshock4.
[  490.292709][ T5419] hid-generic 0003:1B96:9F0A.000C: hidraw1: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0
[  490.328687][ T5292] playstation 0003:054C:05C4.000B: probe with driver playstation failed with error -22
[  490.385886][ T5293] usb 1-1: USB disconnect, device number 10
[  490.401628][ T5292] usb 4-1: USB disconnect, device number 7
[  490.468386][ T9439] loop4: detected capacity change from 0 to 512
[  490.502761][ T9439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  490.555532][ T9439] EXT4-fs (loop4): 1 truncate cleaned up
[  490.568346][ T9439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  490.650327][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.537097][ T5244] Bluetooth: hci4: command tx timeout
[  492.063335][ T5292] usb 2-1: USB disconnect, device number 6
[  492.108949][   T54] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  493.384527][ T9472] loop7: detected capacity change from 0 to 16384
[  493.503189][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  493.598095][ T9475] loop5: detected capacity change from 0 to 256
[  493.615524][ T9476] loop0: detected capacity change from 0 to 512
[  493.671512][ T9476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  493.759048][ T9478] loop4: detected capacity change from 0 to 1024
[  493.794831][ T9476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  493.803454][    T9] usb 4-1: Using ep0 maxpacket: 8
[  493.819942][ T9476] System zones: 1-12
[  493.820568][    T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  493.846840][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  493.854774][ T9478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  493.857442][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  493.875819][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  493.875875][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  493.907223][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  493.916629][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.099654][ T9476] EXT4-fs (loop0): 1 truncate cleaned up
[  494.130986][ T9476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.186841][    T9] usb 4-1: GET_CAPABILITIES returned 0
[  494.237099][    T9] usbtmc 4-1:16.0: can't read capabilities
[  494.253808][   T29] audit: type=1800 audit(1725039266.654:177): pid=9476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1267" name="bus" dev="loop0" ino=18 res=0 errno=0
[  494.328788][ T9455] loop2: detected capacity change from 0 to 32768
[  494.372515][ T9455] 
[  494.372515][ T9455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.372515][ T9455] 
[  494.513039][ T9455] 
[  494.513039][ T9455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.513039][ T9455] 
[  494.547121][ T9455] 
[  494.547121][ T9455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.547121][ T9455] 
[  494.591707][ T9455] 
[  494.591707][ T9455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.591707][ T9455] 
[  494.613767][ T9455] 
[  494.613767][ T9455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.613767][ T9455] 
[  494.633931][ T9455] 
[  494.633931][ T9455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.633931][ T9455] 
[  494.653967][  T111] 
[  494.653967][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.653967][  T111] 
[  494.846223][ T8992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.907624][ T2583] 
[  494.907624][ T2583]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.907624][ T2583] 
[  494.952153][ T2583] 
[  494.952153][ T2583]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.952153][ T2583] 
[  494.982485][ T2583] 
[  494.982485][ T2583]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.982485][ T2583] 
[  495.010112][  T111] 
[  495.010112][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  495.010112][  T111] 
[  495.039792][ T6446] 
[  495.039792][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  495.039792][ T6446] 
[  495.083897][ T6446] 
[  495.083897][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  495.083897][ T6446] 
[  495.167610][ T5332] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  495.357232][ T5332] usb 5-1: Using ep0 maxpacket: 32
[  495.382972][ T5332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.424273][ T5332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  495.501021][ T5332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  495.521895][ T5332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  495.565748][ T5332] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  495.622432][ T5332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.682191][ T5332] usb 5-1: config 0 descriptor??
[  495.777219][ T5293] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  496.157094][ T5293] usb 6-1: Using ep0 maxpacket: 16
[  496.169421][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.247734][ T5293] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  496.260451][ T5332] hid-generic 0003:1B96:9F0A.000D: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.4-1/input0
[  496.336809][ T5293] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  496.378704][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.427770][ T5332] usb 4-1: USB disconnect, device number 8
[  496.478827][ T5293] usb 6-1: config 0 descriptor??
[  496.812449][ T9502] loop2: detected capacity change from 0 to 128
[  496.869720][ T9502] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  496.902771][ T9502] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  496.996367][ T5293] HID 045e:07da: Invalid code 65791 type 1
[  497.027715][ T5293] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000E/input/input17
[  497.074230][ T5293] microsoft 0003:045E:07DA.000E: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  497.152549][ T9510] loop3: detected capacity change from 0 to 512
[  497.182477][ T9510] EXT4-fs: Ignoring removed i_version option
[  497.305491][ T9510] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1280: bad orphan inode 1
[  497.395804][ T6446] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  497.421777][ T9510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.737643][ T9518] loop2: detected capacity change from 0 to 512
[  497.851246][ T8865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.854115][ T9519] loop0: detected capacity change from 0 to 512
[  497.879518][ T9518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.916405][ T9519] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  497.928343][ T9518] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.001158][ T9519] EXT4-fs (loop0): 1 truncate cleaned up
[  498.026345][ T9519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  498.055507][ T5292] usb 6-1: USB disconnect, device number 6
[  498.196426][ T5293] usb 5-1: USB disconnect, device number 16
[  498.476093][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.300710][ T8992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.731455][ T2560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.061669][ T2560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.271235][ T9527] loop4: detected capacity change from 0 to 32768
[  500.352871][ T9527] 
[  500.352871][ T9527]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  500.352871][ T9527] 
[  500.391599][ T2560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.599972][ T9540] 
[  500.599972][ T9540]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  500.599972][ T9540] 
[  500.642330][ T9540] 
[  500.642330][ T9540]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  500.642330][ T9540] 
[  500.667421][ T9540] 
[  500.667421][ T9540]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  500.667421][ T9540] 
[  500.707376][ T9540] 
[  500.707376][ T9540]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  500.707376][ T9540] 
[  500.857734][ T9540] 
[  500.857734][ T9540]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  500.857734][ T9540] 
[  500.888945][ T2560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.968740][  T110] 
[  500.968740][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  500.968740][  T110] 
[  500.980700][ T9544] loop2: detected capacity change from 0 to 256
[  501.040686][ T9547] netlink: 'syz.5.1296': attribute type 4 has an invalid length.
[  501.110751][ T2525] 
[  501.110751][ T2525]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  501.110751][ T2525] 
[  501.147321][ T2525] 
[  501.147321][ T2525]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  501.147321][ T2525] 
[  501.203820][  T110] 
[  501.203820][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  501.203820][  T110] 
[  501.234901][ T5235] 
[  501.234901][ T5235]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  501.234901][ T5235] 
[  501.255648][ T9548] netlink: 'syz.5.1296': attribute type 4 has an invalid length.
[  501.305516][ T5235] 
[  501.305516][ T5235]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  501.305516][ T5235] 
[  502.031376][ T2560] bridge_slave_1: left allmulticast mode
[  502.056974][ T2560] bridge_slave_1: left promiscuous mode
[  502.085951][ T2560] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.110378][ T9558] loop5: detected capacity change from 0 to 256
[  502.150336][ T2560] bridge_slave_0: left allmulticast mode
[  502.198942][ T2560] bridge_slave_0: left promiscuous mode
[  502.205008][ T2560] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.240642][ T9558] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  502.739033][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  502.757148][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  502.787987][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  502.810181][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  502.821824][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  502.831565][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  503.495778][ T9576] loop5: detected capacity change from 0 to 32768
[  503.539719][ T9576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1306 (9576)
[  503.594698][ T9576] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  503.605054][ T9576] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  503.613606][ T9576] BTRFS info (device loop5): using free-space-tree
[  504.068500][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  504.081818][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  504.090412][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  504.105522][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  504.114966][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  504.122722][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  504.402336][ T9600] overlayfs: invalid origin (0000)
[  504.450295][ T9576] syz.5.1306 (9576) used greatest stack depth: 20368 bytes left
[  504.915361][ T5244] Bluetooth: hci2: command tx timeout
[  505.130330][ T9611] loop2: detected capacity change from 0 to 256
[  505.324812][   T29] audit: type=1800 audit(1725039277.724:178): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1313" name="bus" dev="loop2" ino=1048767 res=0 errno=0
[  505.822442][ T9043] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  506.189015][ T5244] Bluetooth: hci6: command tx timeout
[  506.943953][ T9628] loop4: detected capacity change from 0 to 128
[  506.988014][ T5244] Bluetooth: hci2: command tx timeout
[  507.113734][ T9631] loop5: detected capacity change from 0 to 1024
[  507.166056][ T2560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.214827][ T9636] loop2: detected capacity change from 0 to 128
[  507.233005][ T2560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.234588][ T9636] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  507.291841][ T2560] bond0 (unregistering): Released all slaves
[  507.370726][ T9636] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  508.151632][ T9653] loop5: detected capacity change from 0 to 512
[  508.197126][ T9653] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1331: casefold flag without casefold feature
[  508.253013][ T9653] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1331: couldn't read orphan inode 15 (err -117)
[  508.274940][ T5244] Bluetooth: hci6: command tx timeout
[  508.317035][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  508.341985][ T9653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  508.527187][    T9] usb 3-1: Using ep0 maxpacket: 32
[  508.556783][    T9] usb 3-1: config 0 has an invalid interface number: 250 but max is 1
[  508.573514][    T9] usb 3-1: config 0 has no interface number 1
[  508.607697][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  508.641309][    T9] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  508.668402][ T2560] hsr_slave_0: left promiscuous mode
[  508.671540][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.693493][ T2560] hsr_slave_1: left promiscuous mode
[  508.705344][    T9] usb 3-1: Product: syz
[  508.725518][    T9] usb 3-1: Manufacturer: syz
[  508.735593][    T9] usb 3-1: SerialNumber: syz
[  508.744799][ T2560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.754987][ T2560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.772359][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.789571][ T2560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.797300][ T2560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.803179][    T9] usb 3-1: config 0 descriptor??
[  508.866725][ T2560] veth1_macvtap: left promiscuous mode
[  508.884643][ T2560] veth0_macvtap: left promiscuous mode
[  508.897523][ T2560] veth1_vlan: left promiscuous mode
[  508.917234][ T2560] veth0_vlan: left promiscuous mode
[  509.069374][ T5244] Bluetooth: hci2: command tx timeout
[  509.105837][    T9] usb 3-1: Found UVC 0.00 device syz (0408:3090)
[  509.112443][    T9] usb 3-1: No valid video chain found.
[  509.333570][ T9675] input: syz1 as /devices/virtual/input/input18
[  509.459719][    T9] usb 3-1: USB disconnect, device number 12
[  509.473576][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'.
[  509.545110][ T9680] loop5: detected capacity change from 0 to 128
[  510.341528][ T5244] Bluetooth: hci6: command tx timeout
[  511.107239][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  511.137869][ T5244] Bluetooth: hci2: command tx timeout
[  511.155366][ T9693] loop5: detected capacity change from 0 to 65536
[  511.193686][ T9693] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  511.304881][ T9693] XFS (loop5): Ending clean mount
[  511.323736][ T9693] XFS (loop5): Quotacheck needed: Please wait.
[  511.358689][    T9] usb 3-1: Using ep0 maxpacket: 16
[  511.387843][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.427378][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.481912][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  511.510892][ T9693] XFS (loop5): Quotacheck: Done.
[  511.551635][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.589762][    T9] usb 3-1: config 0 descriptor??
[  511.626290][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  511.643817][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  511.713545][ T2560] team0 (unregistering): Port device team_slave_1 removed
[  511.840251][ T9043] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  511.934639][ T9713] loop4: detected capacity change from 0 to 40427
[  512.005708][ T9713] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  512.021144][ T9713] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  512.029529][    T9] savu 0003:1E7D:2D5A.000F: item fetching failed at offset 2/5
[  512.030933][    T9] savu 0003:1E7D:2D5A.000F: parse failed
[  512.052618][    T9] savu 0003:1E7D:2D5A.000F: probe with driver savu failed with error -22
[  512.099671][ T9713] F2FS-fs (loop4): Found nat_bits in checkpoint
[  512.172278][ T2560] team0 (unregistering): Port device team_slave_0 removed
[  512.234176][    T9] usb 3-1: USB disconnect, device number 13
[  512.258193][ T9713] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  512.265807][ T9713] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  512.373746][ T5235] syz-executor: attempt to access beyond end of device
[  512.373746][ T5235] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  512.393855][ T5235] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  512.417920][ T5244] Bluetooth: hci6: command tx timeout
[  513.146505][ T9719] loop5: detected capacity change from 0 to 1024
[  513.156115][ T9719] EXT4-fs: Ignoring removed orlov option
[  513.178302][ T9719] EXT4-fs (loop5): Test dummy encryption mode enabled
[  513.213821][ T9719] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  513.299617][ T9719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.718823][ T9719] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  513.746356][ T9730] loop2: detected capacity change from 0 to 512
[  513.875949][ T9730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.920658][ T9730] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.950612][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 3: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  514.015625][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.043571][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 12: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  514.158797][ T9733] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4116: comm syz.2.1358: Allocating blocks 18-19 which overlap fs metadata
[  514.224218][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 13: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  514.285775][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 14: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  514.361128][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 15: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  514.388493][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 16: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  514.444799][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 17: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  514.521522][ T9730] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.1358: lblock 23 mapped to illegal pblock 18 (length 1)
[  514.553559][ T9730] EXT4-fs error (device loop2): ext4_readdir:258: inode #2: block 19: comm syz.2.1358: path /207/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  514.755052][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.997667][ T9751] team0: entered promiscuous mode
[  515.023202][ T9751] team_slave_0: entered promiscuous mode
[  515.051960][ T9751] team_slave_1: entered promiscuous mode
[  515.199780][ T9750] team0: left promiscuous mode
[  515.206137][ T9750] team_slave_0: left promiscuous mode
[  515.220610][ T9750] team_slave_1: left promiscuous mode
[  516.498412][ T9776] Bluetooth: MGMT ver 1.23
[  516.638305][ T9592] chnl_net:caif_netlink_parms(): no params data found
[  516.715589][ T9565] chnl_net:caif_netlink_parms(): no params data found
[  516.846151][ T9782] loop5: detected capacity change from 0 to 512
[  516.886868][ T9782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  516.987485][ T9782] EXT4-fs (loop5): 1 orphan inode deleted
[  516.993288][ T9782] EXT4-fs (loop5): 1 truncate cleaned up
[  517.009549][ T9782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.098964][ T9782] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1401: inode #12: block 7: comm syz.5.1376: path /33/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  517.102793][ T9787] loop3: detected capacity change from 0 to 2048
[  517.173302][ T9782] EXT4-fs (loop5): Remounting filesystem read-only
[  517.196060][ T9791] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  517.267454][ T9764] loop4: detected capacity change from 0 to 32768
[  517.321194][ T9764] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  517.384053][ T2560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.418512][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.637185][ T9764] XFS (loop4): Ending clean mount
[  517.705048][ T9764] XFS (loop4): Quotacheck needed: Please wait.
[  517.807965][ T2560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.944215][ T9764] XFS (loop4): Quotacheck: Done.
[  517.983743][ T9813] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  518.090666][ T9821] loop5: detected capacity change from 0 to 2048
[  518.109417][ T9821] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  518.205868][ T2560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.480106][ T5235] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  518.544209][ T2560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.749150][ T9565] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.779711][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.807358][ T9565] bridge_slave_0: entered allmulticast mode
[  518.821972][ T9565] bridge_slave_0: entered promiscuous mode
[  518.869759][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.897723][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.922316][ T9828] loop2: detected capacity change from 0 to 4096
[  518.929610][ T9592] bridge_slave_0: entered allmulticast mode
[  518.940986][ T9592] bridge_slave_0: entered promiscuous mode
[  518.994858][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.022014][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.048507][ T9592] bridge_slave_1: entered allmulticast mode
[  519.075612][ T9592] bridge_slave_1: entered promiscuous mode
[  519.119269][ T9565] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.137179][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.167525][ T9565] bridge_slave_1: entered allmulticast mode
[  519.184062][   T29] audit: type=1804 audit(1725039291.564:179): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1389" name="/newroot/217/file0/file1" dev="loop2" ino=34 res=1 errno=0
[  519.229079][ T9565] bridge_slave_1: entered promiscuous mode
[  519.237152][ T9832] loop3: detected capacity change from 0 to 2048
[  519.289768][ T9832] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  519.512190][ T5419] kernel write not supported for file /snd/seq (pid: 5419 comm: kworker/0:7)
[  519.642389][ T9837] loop2: detected capacity change from 0 to 512
[  519.664697][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.750390][ T9837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  519.765403][ T9565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.788198][ T9837] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.813567][ T9565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.870959][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.110540][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  520.162198][ T9826] loop5: detected capacity change from 0 to 32768
[  520.340165][ T9826] find_entry called with index >= next_index
[  520.356865][ T9826] find_entry called with index >= next_index
[  520.377136][ T9826] find_entry called with index >= next_index
[  520.434715][ T9826] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1
[  520.434715][ T9826] 
[  520.464279][ T9592] team0: Port device team_slave_0 added
[  520.499553][ T9826] ERROR: (device loop5): remounting filesystem as read-only
[  520.509687][ T9592] team0: Port device team_slave_1 added
[  520.541496][ T9826] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 3
[  520.541496][ T9826] 
[  520.587853][ T9826] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  520.587853][ T9826] 
[  520.629887][ T9565] team0: Port device team_slave_0 added
[  520.692442][ T9853] loop3: detected capacity change from 0 to 4096
[  520.709977][ T9853] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  520.770960][ T9565] team0: Port device team_slave_1 added
[  520.807721][ T9853] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  520.976871][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.991164][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.021040][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.070015][ T2560] bridge_slave_1: left allmulticast mode
[  521.089596][ T2560] bridge_slave_1: left promiscuous mode
[  521.130621][ T2560] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.154134][ T2560] bridge_slave_0: left allmulticast mode
[  521.166668][ T2560] bridge_slave_0: left promiscuous mode
[  521.183069][ T2560] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.018965][ T9878] loop4: detected capacity change from 0 to 2048
[  522.621001][ T2560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.638303][ T2560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.655552][ T2560] bond0 (unregistering): Released all slaves
[  522.682688][ T9565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.690622][ T9565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.736789][ T9565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.761666][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.784276][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.810308][    C0] vkms_vblank_simulate: vblank timer overrun
[  522.854376][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.174582][ T9565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.209408][ T9565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.292564][ T9565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.625782][ T9907] loop4: detected capacity change from 0 to 4096
[  523.649167][ T9907] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  523.673915][ T9909] loop5: detected capacity change from 0 to 4096
[  523.710961][ T9909] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  523.776005][ T9909] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  523.792016][ T9907] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  523.895408][   T29] audit: type=1800 audit(1725039296.294:180): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1420" name="bus" dev="loop4" ino=33 res=0 errno=0
[  524.153811][ T9888] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  524.187078][ T9888] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  524.339764][ T9592] hsr_slave_0: entered promiscuous mode
[  524.362319][ T9592] hsr_slave_1: entered promiscuous mode
[  524.389455][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.413453][ T9592] Cannot create hsr debugfs directory
[  524.440984][ T9918] netlink: 'syz.3.1423': attribute type 10 has an invalid length.
[  524.495056][ T9918] team0: Port device netdevsim0 added
[  524.549091][ T9919] netlink: 'syz.3.1423': attribute type 10 has an invalid length.
[  524.574487][ T9930] capability: warning: `syz.5.1427' uses deprecated v2 capabilities in a way that may be insecure
[  524.606409][ T9919] team0: Port device netdevsim0 removed
[  524.634167][ T9919] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  524.822654][ T9933] loop5: detected capacity change from 0 to 64
[  524.848932][ T9933] hfs: unable to parse mount options
[  524.858222][ T9888] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  524.877395][ T9888] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  524.882762][ T9565] hsr_slave_0: entered promiscuous mode
[  524.926096][ T9565] hsr_slave_1: entered promiscuous mode
[  524.948042][ T9565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.955657][ T9565] Cannot create hsr debugfs directory
[  525.028118][ T9936] loop5: detected capacity change from 0 to 256
[  525.348430][ T9888] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  525.384581][ T9888] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  525.498567][ T9944] loop3: detected capacity change from 0 to 1024
[  525.981182][ T5295] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  526.037476][ T9888] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  526.070997][ T9888] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  526.156686][ T9888] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  526.184739][ T9888] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  526.207304][ T5295] usb 6-1: Using ep0 maxpacket: 16
[  526.234827][ T5295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.270272][ T5419] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  526.271332][ T5295] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  526.296648][ T5295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.336945][ T5295] usb 6-1: Product: syz
[  526.341193][ T5295] usb 6-1: Manufacturer: syz
[  526.356043][ T5295] usb 6-1: SerialNumber: syz
[  526.374191][ T5295] usb 6-1: config 0 descriptor??
[  526.439870][ T5295] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  526.510448][ T5419] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  526.539071][ T5419] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  526.587161][ T5419] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  526.627348][ T5419] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  526.677026][ T5419] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  526.725514][ T5419] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  526.735074][ T5419] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  526.755582][ T5419] usb 4-1: Product: syz
[  526.764199][ T5419] usb 4-1: Manufacturer: syz
[  526.787152][ T5419] cdc_wdm 4-1:1.0: skipping garbage
[  526.792429][ T5419] cdc_wdm 4-1:1.0: skipping garbage
[  526.814251][ T5419] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  526.827368][ T5419] cdc_wdm 4-1:1.0: Unknown control protocol
[  526.911291][ T9961] loop4: detected capacity change from 0 to 512
[  526.938989][ T9961] EXT4-fs: Ignoring removed i_version option
[  526.945142][ T9961] EXT4-fs: Ignoring removed nobh option
[  527.011774][ T9961] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  527.029631][ T5419] usb 4-1: USB disconnect, device number 9
[  527.073461][ T9961] EXT4-fs (loop4): 1 truncate cleaned up
[  527.089232][ T9961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.138646][ T9961] EXT4-fs (loop4): shut down requested (0)
[  527.187065][ T2560] hsr_slave_0: left promiscuous mode
[  527.222462][ T2560] hsr_slave_1: left promiscuous mode
[  527.263726][ T2560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.283441][ T5295] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19
[  527.307728][ T2560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.321091][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.378012][ T2560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.385553][ T2560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.500579][ T5295] usb 6-1: USB disconnect, device number 7
[  527.585148][ T2560] veth1_macvtap: left promiscuous mode
[  527.597306][ T2560] veth0_macvtap: left promiscuous mode
[  527.603185][ T2560] veth1_vlan: left promiscuous mode
[  527.625141][ T2560] veth0_vlan: left promiscuous mode
[  527.798452][ T5419] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  527.997143][ T5419] usb 5-1: Using ep0 maxpacket: 8
[  528.019133][ T5419] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  528.057176][ T5419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.095844][ T5419] usb 5-1: Product: syz
[  528.108178][ T5419] usb 5-1: Manufacturer: syz
[  528.133214][ T5419] usb 5-1: SerialNumber: syz
[  528.161499][ T5419] usb 5-1: config 0 descriptor??
[  528.205072][ T5419] gspca_main: sq905-2.14.0 probing 2770:9120
[  528.346417][ T9984] loop5: detected capacity change from 0 to 128
[  528.446570][ T9984] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  528.544381][ T9984] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  528.853595][ T9043] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  529.325171][ T5419] gspca_sq905: bulk read fail (-22) len 0/4
[  529.332026][ T5419] sq905 5-1:0.0: probe with driver sq905 failed with error -5
[  529.387706][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  529.495304][T10002] loop5: detected capacity change from 0 to 4096
[  529.503910][T10002] ntfs3: Unknown parameter 'ÿ01777777777777777777777'
[  529.585751][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.620193][ T5295] usb 5-1: USB disconnect, device number 17
[  529.647434][    T9] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba
[  529.669367][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.695649][    T9] usb 3-1: Product: syz
[  529.700290][    T9] usb 3-1: Manufacturer: syz
[  529.709278][    T9] usb 3-1: SerialNumber: syz
[  529.728800][    T9] usb 3-1: config 0 descriptor??
[  529.970201][    T9] kaweth 3-1:0.0: Firmware present in device.
[  530.154210][    T9] kaweth 3-1:0.0: Statistics collection: 0
[  530.174315][    T9] kaweth 3-1:0.0: Multicast filter limit: 0
[  530.197134][    T9] kaweth 3-1:0.0: MTU: 0
[  530.219398][    T9] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  530.598375][ T2560] team0 (unregistering): Port device team_slave_1 removed
[  530.851541][ T2560] team0 (unregistering): Port device team_slave_0 removed
[  531.543611][T10030] loop5: detected capacity change from 0 to 512
[  531.627387][T10030] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  531.693394][T10032] loop2: detected capacity change from 0 to 512
[  531.735991][T10030] EXT4-fs (loop5): 1 truncate cleaned up
[  531.744382][T10030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.791299][T10032] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1452: casefold flag without casefold feature
[  531.825778][T10032] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1452: couldn't read orphan inode 15 (err -117)
[  531.893882][T10032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.995421][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.215535][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.927066][ T5419] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  532.982081][    T9] kaweth 3-1:0.0: kaweth interface created at eth3
[  533.039078][    T9] usb 3-1: USB disconnect, device number 14
[  533.109209][ T5419] usb 6-1: Using ep0 maxpacket: 8
[  533.126744][ T5419] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  533.157075][ T5419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  533.177115][ T5419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  533.212734][ T5419] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  533.247248][ T5419] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  533.256417][ T5419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.550216][ T5419] usb 6-1: GET_CAPABILITIES returned 0
[  533.595865][ T5419] usbtmc 6-1:16.0: can't read capabilities
[  533.632079][T10065] loop2: detected capacity change from 0 to 512
[  533.691036][T10065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  533.719781][T10062] hub 9-0:1.0: USB hub found
[  533.731822][T10062] hub 9-0:1.0: 8 ports detected
[  533.742945][T10065] EXT4-fs (loop2): 1 truncate cleaned up
[  533.757124][T10065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.798456][ T5419] usb 6-1: USB disconnect, device number 8
[  534.059885][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.325528][ T9565] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  534.356840][ T9565] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  534.408115][ T9565] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  534.435551][ T9565] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  534.577113][ T5419] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  534.783023][ T5419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.807080][ T5419] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  534.845568][ T5419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.899659][ T5419] usb 4-1: config 0 descriptor??
[  535.014374][T10096] loop2: detected capacity change from 0 to 64
[  535.332463][ T9565] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.427557][ T5419] lenovo 0003:17EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[  535.479947][ T9565] 8021q: adding VLAN 0 to HW filter on device team0
[  535.568621][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.575927][ T2583] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.733545][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.740969][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.074155][ T9592] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  536.176335][ T9592] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  536.188718][ T5419] lenovo 0003:17EF:6047.0010: Sensitivity setting failed: -71
[  536.214922][T10121] loop2: detected capacity change from 0 to 512
[  536.223797][ T5419] usb 4-1: USB disconnect, device number 10
[  536.262639][T10121] EXT4-fs: Ignoring removed nomblk_io_submit option
[  536.279846][T10121] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  536.292963][T10121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002]
[  536.302806][T10121] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[  536.314317][T10121] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features
[  536.315638][ T9592] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  536.331840][T10121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  536.347556][T10121] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  536.374127][T10121] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[  536.462051][ T9592] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  536.469107][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.242406][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.401229][ T9592] 8021q: adding VLAN 0 to HW filter on device team0
[  537.462637][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.470022][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.625608][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.633050][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.940708][ T9565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.277681][ T5295] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  538.336276][T10166] loop5: detected capacity change from 0 to 2048
[  538.356087][ T9565] veth0_vlan: entered promiscuous mode
[  538.379619][T10166] NILFS (loop5): invalid segment: Sequence number mismatch
[  538.397886][T10166] NILFS (loop5): trying rollback from an earlier position
[  538.436949][ T9565] veth1_vlan: entered promiscuous mode
[  538.449932][T10166] NILFS (loop5): recovery complete
[  538.467859][T10170] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  538.493454][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  538.542168][ T5295] usb 5-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00
[  538.551668][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.580854][ T5295] usb 5-1: config 0 descriptor??
[  538.593777][ T5295] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  538.674062][ T9565] veth0_macvtap: entered promiscuous mode
[  538.694173][ T9565] veth1_macvtap: entered promiscuous mode
[  538.807269][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.855091][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.877746][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.907392][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.924944][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.935643][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.977977][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.013885][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.041361][ T9565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.123542][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.169220][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.204671][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.207720][T10184] loop2: detected capacity change from 0 to 128
[  539.221693][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.221727][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.221756][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.221783][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.221811][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.225091][ T9565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.308343][T10184] VFS: Found a Xenix FS (block size = 512) on device loop2
[  539.372930][ T9565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.388729][ T9565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.400077][ T9565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.401506][T10184] sysv_free_block: trying to free block not in datazone
[  539.409081][ T9565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.522269][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.846108][ T6446] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  540.017315][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.037109][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.138466][T10197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  540.329439][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.330625][ T9592] veth0_vlan: entered promiscuous mode
[  540.367933][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.457873][ T9592] veth1_vlan: entered promiscuous mode
[  540.546595][T10203] loop5: detected capacity change from 0 to 512
[  540.627406][T10203] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1507: casefold flag without casefold feature
[  540.650622][T10203] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1507: couldn't read orphan inode 15 (err -117)
[  540.669371][T10203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  540.709596][ T9592] veth0_macvtap: entered promiscuous mode
[  540.780866][ T9592] veth1_macvtap: entered promiscuous mode
[  540.901533][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.945800][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.967422][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.978618][ T1167] usb 5-1: USB disconnect, device number 18
[  540.997554][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.029314][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.059010][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.069396][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.081370][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.099292][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.123896][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.151051][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.162823][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.309799][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.357216][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.382367][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.439113][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.458593][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.497344][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.534852][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.550552][T10219] loop0: detected capacity change from 0 to 256
[  541.566960][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.573826][T10219] exfat: Deprecated parameter 'namecase'
[  541.583308][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.595899][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.641776][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.668286][T10219] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x973db221, utbl_chksum : 0xe619d30d)
[  541.736431][ T9592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.765231][ T9592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.784798][ T9592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.805308][ T9592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.858652][T10221] loop2: detected capacity change from 0 to 4096
[  541.898054][T10221] EXT4-fs: Ignoring removed oldalloc option
[  541.917824][T10221] EXT4-fs (loop2): Test dummy encryption mode enabled
[  541.974051][T10221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.040168][T10228] loop8: detected capacity change from 0 to 7
[  542.105611][T10228] Dev loop8: unable to read RDB block 7
[  542.128532][T10221] EXT4-fs (loop2): shut down requested (2)
[  542.138955][T10228]  loop8: unable to read partition table
[  542.145114][T10228] loop8: partition table beyond EOD, truncated
[  542.196756][T10228] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  542.196756][T10228] 
) failed (rc=-5)
[  542.230018][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  542.243602][ T2560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.259360][ T2560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.342532][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.462110][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  542.480992][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.505256][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  542.524115][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.547872][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  542.577787][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.623108][    T9] usb 5-1: config 0 descriptor??
[  542.747994][T10239] loop2: detected capacity change from 0 to 1024
[  542.778414][T10239] EXT4-fs: Ignoring removed orlov option
[  542.872772][T10239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.085408][T10253] loop0: detected capacity change from 0 to 256
[  543.088502][T10226] syz.4.1516[10226] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  543.092057][T10226] syz.4.1516[10226] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  543.195252][    T9] logitech-djreceiver 0003:046D:C71B.0011: item fetching failed at offset 6/7
[  543.274879][    T9] logitech-djreceiver 0003:046D:C71B.0011: logi_dj_probe: parse failed
[  543.315255][    T9] logitech-djreceiver 0003:046D:C71B.0011: probe with driver logitech-djreceiver failed with error -22
[  543.368942][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.445237][    T9] usb 5-1: USB disconnect, device number 19
[  543.580437][T10265] netlink: 'syz.3.1532': attribute type 2 has an invalid length.
[  544.099239][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  544.128182][T10280] loop2: detected capacity change from 0 to 2048
[  544.176597][T10280] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  544.229819][T10280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  544.316986][    T9] usb 2-1: Using ep0 maxpacket: 16
[  544.375300][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  544.410712][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.469899][    T9] usb 2-1: Product: syz
[  544.507904][    T9] usb 2-1: Manufacturer: syz
[  544.547090][    T9] usb 2-1: SerialNumber: syz
[  544.604654][    T9] usb 2-1: config 0 descriptor??
[  544.674744][    T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  544.902845][T10297] loop0: detected capacity change from 0 to 256
[  544.935674][T10297] exfat: Deprecated parameter 'namecase'
[  544.955505][T10297] exfat: Deprecated parameter 'namecase'
[  544.972887][T10297] exfat: Deprecated parameter 'namecase'
[  545.033286][T10297] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  545.058811][T10288] loop5: detected capacity change from 0 to 8192
[  545.973159][    T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71
[  546.014070][    T9] usb 2-1: USB disconnect, device number 7
[  546.018617][T10320] syzkaller1: entered promiscuous mode
[  546.066628][T10320] syzkaller1: entered allmulticast mode
[  547.070116][T10349] batadv_slave_1: entered allmulticast mode
[  547.155962][T10349] pim6reg: entered allmulticast mode
[  547.215368][T10352] pim6reg: left allmulticast mode
[  547.249866][T10354] loop2: detected capacity change from 0 to 128
[  547.257293][T10352] batadv_slave_1: left allmulticast mode
[  547.286568][T10356] loop1: detected capacity change from 0 to 256
[  547.322888][T10354] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  547.336000][T10354] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  547.388790][T10356] exfat: Deprecated parameter 'utf8'
[  547.488328][T10356] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  547.534055][ T6446] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  547.813042][T10368] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1574'.
[  547.867809][T10368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1574'.
[  547.958698][T10374] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  548.177077][T10379] loop9: detected capacity change from 0 to 7
[  548.214867][T10379] Dev loop9: unable to read RDB block 7
[  548.230766][T10379]  loop9: AHDI p2 p3 p4
[  548.235029][T10379] loop9: partition table partially beyond EOD, truncated
[  548.270682][T10379] loop9: p2 start 2961973428 is beyond EOD, truncated
[  548.299327][T10379] loop9: p3 start 1756542996 is beyond EOD, truncated
[  548.812091][T10404] loop5: detected capacity change from 0 to 256
[  548.894898][T10404] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  549.436713][T10411] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1591'.
[  549.457122][T10411] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.1591'.
[  549.510967][   T29] audit: type=1326 audit(1725039321.914:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.5.1592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f408ef79eb9 code=0x0
[  549.988246][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  550.203896][    T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  550.229913][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.272226][    T9] usb 4-1: Product: syz
[  550.292858][    T9] usb 4-1: Manufacturer: syz
[  550.304920][    T9] usb 4-1: SerialNumber: syz
[  550.338938][    T9] usb 4-1: config 0 descriptor??
[  550.552105][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'.
[  551.082614][T10449] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  551.106538][T10451] loop5: detected capacity change from 0 to 128
[  551.137981][ T1167] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  551.367211][ T1167] usb 1-1: Using ep0 maxpacket: 8
[  551.389193][    T9] usb 4-1: non-Atmel transceiver xxxx1bb6
[  551.397406][ T1167] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  551.422843][ T1167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.457625][ T1167] usb 1-1: Product: syz
[  551.461938][ T1167] usb 1-1: Manufacturer: syz
[  551.466607][ T1167] usb 1-1: SerialNumber: syz
[  551.504931][ T1167] usb 1-1: config 0 descriptor??
[  551.523974][ T1167] gspca_main: vc032x-2.14.0 probing 046d:0896
[  551.590348][    T9] usb 4-1: Firmware version (0.0) predates our first public release.
[  551.607130][    T9] usb 4-1: Please update to version 0.2 or newer
[  551.626441][    T9] usb 4-1: atusb_probe: initialization failed, error = -19
[  551.665871][    T9] usb 4-1: USB disconnect, device number 11
[  552.384420][T10484] loop3: detected capacity change from 0 to 64
[  552.434908][T10484] hfs: unable to parse mount options
[  552.493722][T10483] loop1: detected capacity change from 0 to 4096
[  552.615581][T10487] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  552.693685][T10486] loop3: detected capacity change from 0 to 256
[  552.744553][ T1167] gspca_vc032x: reg_w err -71
[  552.764444][ T1167] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  552.805932][ T1167] usb 1-1: USB disconnect, device number 11
[  553.359221][T10497] loop1: detected capacity change from 0 to 128
[  553.656258][T10501] loop0: detected capacity change from 0 to 512
[  553.711119][T10501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  553.764188][T10501] EXT4-fs (loop0): 1 truncate cleaned up
[  553.807215][T10501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  554.248915][ T9565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.369966][T10526] loop1: detected capacity change from 0 to 2048
[  554.380481][T10527] loop2: detected capacity change from 0 to 64
[  554.406601][T10526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  554.431156][T10527] hfs: unable to parse mount options
[  554.728759][T10537] loop2: detected capacity change from 0 to 256
[  554.736682][T10539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.1641: bg 0: block 234: padding at end of block bitmap is not set
[  554.787887][T10539] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 186 with error 117
[  554.847136][T10539] EXT4-fs (loop1): This should not happen!! Data will be lost
[  554.847136][T10539] 
[  555.023659][ T5295] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  555.064781][ T1167] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  555.234513][ T5295] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  555.256133][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.284964][ T9592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.290293][ T5295] usb 1-1: config 0 descriptor??
[  555.297367][ T1167] usb 4-1: Using ep0 maxpacket: 8
[  555.318699][ T1167] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.376207][ T1167] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.405025][ T1167] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  555.459260][ T1167] usb 4-1: config 0 interface 0 has no altsetting 0
[  555.486445][ T1167] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  555.507074][ T1167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.545052][ T1167] usb 4-1: config 0 descriptor??
[  556.190373][   T29] audit: type=1326 audit(1725039328.544:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8b79eb9 code=0x7ffc0000
[  556.364640][   T29] audit: type=1326 audit(1725039328.544:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f52c8b79eb9 code=0x7ffc0000
[  556.423857][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.439407][ T5295] usb 1-1: Cannot set autoneg
[  556.444456][ T5295] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  556.527539][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.556009][   T29] audit: type=1326 audit(1725039328.614:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8b79eb9 code=0x7ffc0000
[  556.610291][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.701902][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.738711][   T29] audit: type=1326 audit(1725039328.614:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8b79eb9 code=0x7ffc0000
[  556.903228][ T5295] usb 1-1: USB disconnect, device number 12
[  557.349031][T10548] loop1: detected capacity change from 0 to 131072
[  557.362379][ T1167] usbhid 4-1:0.0: can't add hid device: -71
[  557.380378][ T1167] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  557.392703][T10548] F2FS-fs (loop1): invalid crc value
[  557.406016][ T1167] usb 4-1: USB disconnect, device number 12
[  557.425073][T10548] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  557.610044][T10548] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[  557.612589][T10572] loop5: detected capacity change from 0 to 512
[  557.680453][T10572] EXT4-fs (loop5): orphan cleanup on readonly fs
[  557.798517][T10572] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  557.853973][T10572] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  557.886029][T10572] EXT4-fs error (device loop5): ext4_acquire_dquot:6846: comm syz.5.1657: Failed to acquire dquot type 1
[  557.945269][T10572] EXT4-fs (loop5): 1 truncate cleaned up
[  557.988405][T10572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  558.349901][ T9043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.616743][T10596] loop7: detected capacity change from 0 to 16384
[  558.619199][   T11] Bluetooth: hci3: Frame reassembly failed (-84)
[  558.814504][ T5332] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  558.959239][T10600] loop5: detected capacity change from 0 to 128
[  559.004632][T10600] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  559.017023][ T5332] usb 5-1: Using ep0 maxpacket: 16
[  559.019973][ T5332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.034632][ T5332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  559.051470][ T5332] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  559.060904][T10600] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  559.071459][ T5332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.083453][ T5332] usb 5-1: config 0 descriptor??
[  559.179868][T10600] ------------[ cut here ]------------
[  559.185560][T10600] Looking for class "&ei->i_data_sem" with key __key.0, but found a different class "&ei->i_data_sem" with the same key
[  559.198346][T10600] WARNING: CPU: 0 PID: 10600 at kernel/locking/lockdep.c:931 look_up_lock_class+0x133/0x140
[  559.208500][T10600] Modules linked in:
[  559.212420][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.5.1669 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0
[  559.223223][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  559.233310][T10600] RIP: 0010:look_up_lock_class+0x133/0x140
[  559.239181][T10600] Code: c7 c7 20 d6 4c 8b e8 4c 02 3a f6 90 0f 0b 90 90 90 31 db eb be c6 05 4c 00 e9 04 01 90 48 c7 c7 40 d9 4c 8b e8 2e 02 3a f6 90 <0f> 0b 90 90 e9 62 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  559.258840][T10600] RSP: 0018:ffffc900045c7848 EFLAGS: 00010082
[  559.264945][T10600] RAX: 0000000000000000 RBX: ffffffff946ef0b0 RCX: ffffc90003879000
[  559.272946][T10600] RDX: 0000000000040000 RSI: ffffffff814e0cb6 RDI: 0000000000000001
[  559.280956][T10600] RBP: ffffffff94ffce41 R08: 0000000000000001 R09: 0000000000000000
[  559.288963][T10600] R10: 0000000000000000 R11: 20676e696b6f6f4c R12: ffff88805e24d248
[  559.296972][T10600] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff94f31160
[  559.305076][T10600] FS:  00007f408e9ff6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  559.314059][T10600] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  559.320685][T10600] CR2: 0000001b307fdff8 CR3: 000000006918c000 CR4: 0000000000350ef0
[  559.328704][T10600] Call Trace:
[  559.332007][T10600]  <TASK>
[  559.334963][T10600]  ? show_regs+0x8c/0xa0
[  559.339278][T10600]  ? __warn+0xe5/0x3c0
[  559.343406][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.349088][T10600]  ? look_up_lock_class+0x133/0x140
[  559.354353][T10600]  ? report_bug+0x3c0/0x580
[  559.358900][T10600]  ? handle_bug+0x3d/0x70
[  559.363293][T10600]  ? exc_invalid_op+0x17/0x50
[  559.368040][T10600]  ? asm_exc_invalid_op+0x1a/0x20
[  559.373119][T10600]  ? __warn_printk+0x1a6/0x350
[  559.377938][T10600]  ? look_up_lock_class+0x133/0x140
[  559.383192][T10600]  ? look_up_lock_class+0x132/0x140
[  559.388449][T10600]  register_lock_class+0xb1/0x1230
[  559.393641][T10600]  ? __pfx_register_lock_class+0x10/0x10
[  559.399347][T10600]  ? lockdep_lock+0xc6/0x200
[  559.403987][T10600]  ? __pfx_lockdep_lock+0x10/0x10
[  559.409065][T10600]  __lock_acquire+0x135/0x3cb0
[  559.413908][T10600]  ? __pfx___lock_acquire+0x10/0x10
[  559.419176][T10600]  lock_acquire+0x1b1/0x560
[  559.423743][T10600]  ? ext4_double_down_write_data_sem+0x42/0x80
[  559.430033][T10600]  ? __pfx_lock_acquire+0x10/0x10
[  559.435123][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.440811][T10600]  ? __pfx___might_resched+0x10/0x10
[  559.446141][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.451835][T10600]  down_write_nested+0x97/0x210
[  559.456818][T10600]  ? ext4_double_down_write_data_sem+0x42/0x80
[  559.463019][T10600]  ? __pfx_down_write_nested+0x10/0x10
[  559.468524][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.474291][T10600]  ? ext4_journal_check_start+0x1b4/0x2b0
[  559.480082][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.485769][T10600]  ext4_double_down_write_data_sem+0x42/0x80
[  559.491797][T10600]  __ext4_ioctl+0x2a13/0x4640
[  559.496527][T10600]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  559.502577][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.508264][T10600]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  559.514199][T10600]  ? __pfx___ext4_ioctl+0x10/0x10
[  559.519269][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.524949][T10600]  ? do_vfs_ioctl+0x515/0x1ad0
[  559.529767][T10600]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  559.534952][T10600]  ? iterate_dir+0xc1/0xb60
[  559.539511][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.545199][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.550877][T10600]  ? __fget_files+0x256/0x400
[  559.555624][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.561395][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.567077][T10600]  ? __pfx_ext4_ioctl+0x10/0x10
[  559.571981][T10600]  __x64_sys_ioctl+0x196/0x220
[  559.572019][ T5332] HID 045e:07da: Invalid code 65791 type 1
[  559.576777][T10600]  do_syscall_64+0xcd/0x250
[  559.576845][T10600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.593063][T10600] RIP: 0033:0x7f408ef79eb9
[  559.597513][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.617170][T10600] RSP: 002b:00007f408e9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  559.625637][T10600] RAX: ffffffffffffffda RBX: 00007f408f115f80 RCX: 00007f408ef79eb9
[  559.633380][ T5332] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0012/input/input20
[  559.633880][T10600] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000005
[  559.633909][T10600] RBP: 00007f408efe793e R08: 0000000000000000 R09: 0000000000000000
[  559.633935][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  559.633962][T10600] R13: 0000000000000000 R14: 00007f408f115f80 R15: 00007ffef959c0f8
[  559.671243][ T5332] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  559.677287][T10600]  </TASK>
[  559.677308][T10600] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  559.677328][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.5.1669 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0
[  559.677376][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  559.677398][T10600] Call Trace:
[  559.677412][T10600]  <TASK>
[  559.677426][T10600]  dump_stack_lvl+0x3d/0x1f0
[  559.677478][T10600]  panic+0x6dc/0x7c0
[  559.677534][T10600]  ? __pfx_panic+0x10/0x10
[  559.677585][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.677636][T10600]  ? show_trace_log_lvl+0x363/0x500
[  559.677715][T10600]  ? look_up_lock_class+0x133/0x140
[  559.677770][T10600]  check_panic_on_warn+0xab/0xb0
[  559.677828][T10600]  __warn+0xf1/0x3c0
[  559.677882][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.677928][T10600]  ? look_up_lock_class+0x133/0x140
[  559.677982][T10600]  report_bug+0x3c0/0x580
[  559.678025][T10600]  handle_bug+0x3d/0x70
[  559.678085][T10600]  exc_invalid_op+0x17/0x50
[  559.678147][T10600]  asm_exc_invalid_op+0x1a/0x20
[  559.678186][T10600] RIP: 0010:look_up_lock_class+0x133/0x140
[  559.678243][T10600] Code: c7 c7 20 d6 4c 8b e8 4c 02 3a f6 90 0f 0b 90 90 90 31 db eb be c6 05 4c 00 e9 04 01 90 48 c7 c7 40 d9 4c 8b e8 2e 02 3a f6 90 <0f> 0b 90 90 e9 62 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  559.678281][T10600] RSP: 0018:ffffc900045c7848 EFLAGS: 00010082
[  559.678313][T10600] RAX: 0000000000000000 RBX: ffffffff946ef0b0 RCX: ffffc90003879000
[  559.678340][T10600] RDX: 0000000000040000 RSI: ffffffff814e0cb6 RDI: 0000000000000001
[  559.678366][T10600] RBP: ffffffff94ffce41 R08: 0000000000000001 R09: 0000000000000000
[  559.678392][T10600] R10: 0000000000000000 R11: 20676e696b6f6f4c R12: ffff88805e24d248
[  559.678418][T10600] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff94f31160
[  559.678454][T10600]  ? __warn_printk+0x1a6/0x350
[  559.678512][T10600]  ? look_up_lock_class+0x132/0x140
[  559.678567][T10600]  register_lock_class+0xb1/0x1230
[  559.678641][T10600]  ? __pfx_register_lock_class+0x10/0x10
[  559.678700][T10600]  ? lockdep_lock+0xc6/0x200
[  559.678747][T10600]  ? __pfx_lockdep_lock+0x10/0x10
[  559.678798][T10600]  __lock_acquire+0x135/0x3cb0
[  559.678870][T10600]  ? __pfx___lock_acquire+0x10/0x10
[  559.678938][T10600]  lock_acquire+0x1b1/0x560
[  559.678995][T10600]  ? ext4_double_down_write_data_sem+0x42/0x80
[  559.679043][T10600]  ? __pfx_lock_acquire+0x10/0x10
[  559.679104][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.679154][T10600]  ? __pfx___might_resched+0x10/0x10
[  559.679193][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.679246][T10600]  down_write_nested+0x97/0x210
[  559.679287][T10600]  ? ext4_double_down_write_data_sem+0x42/0x80
[  559.679328][T10600]  ? __pfx_down_write_nested+0x10/0x10
[  559.679369][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.679416][T10600]  ? ext4_journal_check_start+0x1b4/0x2b0
[  559.679480][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.679531][T10600]  ext4_double_down_write_data_sem+0x42/0x80
[  559.679575][T10600]  __ext4_ioctl+0x2a13/0x4640
[  559.679627][T10600]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  559.679687][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.679733][T10600]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  559.679775][T10600]  ? __pfx___ext4_ioctl+0x10/0x10
[  559.679817][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.679863][T10600]  ? do_vfs_ioctl+0x515/0x1ad0
[  559.679915][T10600]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  559.679985][T10600]  ? iterate_dir+0xc1/0xb60
[  559.680037][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.680091][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.680136][T10600]  ? __fget_files+0x256/0x400
[  559.680196][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.680243][T10600]  ? srso_alias_return_thunk+0x5/0xfbef5
[  559.680290][T10600]  ? __pfx_ext4_ioctl+0x10/0x10
[  559.680336][T10600]  __x64_sys_ioctl+0x196/0x220
[  559.680390][T10600]  do_syscall_64+0xcd/0x250
[  559.680450][T10600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.680515][T10600] RIP: 0033:0x7f408ef79eb9
[  559.680544][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.680582][T10600] RSP: 002b:00007f408e9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  559.680624][T10600] RAX: ffffffffffffffda RBX: 00007f408f115f80 RCX: 00007f408ef79eb9
[  559.680651][T10600] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000005
[  559.680676][T10600] RBP: 00007f408efe793e R08: 0000000000000000 R09: 0000000000000000
[  559.680701][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  559.680726][T10600] R13: 0000000000000000 R14: 00007f408f115f80 R15: 00007ffef959c0f8
[  559.680767][T10600]  </TASK>
[  559.689528][T10600] Kernel Offset: disabled