last executing test programs:

55.938484798s ago: executing program 4 (id=649):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e00020000007f000001800000000000000002000100000000000000000200000000030005000000000002"], 0x50}}, 0x0)

55.193230825s ago: executing program 4 (id=652):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0xc0044dff, &(0x7f0000001480))
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@map_normal}, {@nocompress}, {@map_off}, {@overriderock}, {@check_relaxed}, {@map_off}, {@session={'session', 0x3d, 0x3e}}, {@hide}, {}, {@overriderock}, {@overriderock}, {@unhide}, {@cruft}, {@block={'block', 0x3d, 0x200}}]}, 0x2, 0x9e8, &(0x7f0000000440)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x801c582d, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0)

52.897945429s ago: executing program 4 (id=656):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
socket$packet(0x11, 0x3, 0x300)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0)

52.689207443s ago: executing program 4 (id=658):
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0)
userfaultfd(0x801)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x398, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
write$binfmt_script(r4, 0x0, 0x0)
shmget$private(0x0, 0x400000, 0x2, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmget$private(0x0, 0x4000, 0x800, &(0x7f000035f000/0x4000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)

51.6118308s ago: executing program 4 (id=661):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200))

51.229673954s ago: executing program 4 (id=663):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000300)=""/198)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
userfaultfd(0x80001)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
openat$cgroup_int(r3, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_read_part_table(0x1056, &(0x7f0000000040)="$eJzsz7GNwlAQBND5Z91Zl5OQUQEtYIqgAgrBGb0Q0Q5NIJEbfWTAogPk4L1oNTsbbJiL/TFJk6Sm/8ttjEo51yQ/SdquGXfp3+2h1sPn9nca7pehjrqkfZU3z7xksd4uk7K6Jv9Te3f63nsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMF+PAAAA//992BTp")
fstat(0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000001500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xff, 0x1, 0x80b}}}, 0x7)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000004000000190000009500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
read$alg(r2, &(0x7f0000000080)=""/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

35.520110076s ago: executing program 0 (id=693):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
pread64(r1, &(0x7f0000000b80)=""/152, 0x98, 0x2)

35.033591667s ago: executing program 0 (id=695):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

34.745701561s ago: executing program 0 (id=698):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0)

34.558660055s ago: executing program 0 (id=699):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x0)

32.097728365s ago: executing program 0 (id=706):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x8100000018000000}, 0x4000000)

31.141471973s ago: executing program 0 (id=709):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = gettid()
futex(&(0x7f000000cffc)=0x1, 0x80000000000d, 0x0, 0x0, 0x0, 0x0)
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880000000314010000000000400000000900020073797a3200000000080041007278650014003300766c616e3000000000000029976fe0000900020073797a3000000000080041007369770014003300776c618f3000000000000000000000000900020073797a3200000000080041007369770014003300697036677265746170300065000000000cf0a0aff7dfa152d39e726faa3829200e6d0dee20da62b197fa714231b0d02b571f1910182af06c5f7906ee76e4f290baa194eee71824069ec9e976e0744459101301a64fe64a79d75caaa30375ff39fa3e2b6d8278d5f196af43ed9f082ad9fb26f3a57069ef9af5ae6b552f2ef7"], 0x88}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_io_uring_setup(0x4ee7, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x8, 0x8000, 0x8, {{0x2e, 0x4, 0x0, 0x3d, 0xb8, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x10, 0x7c, 0x0, 0x3, [0x463, 0x7, 0x7]}, @noop, @timestamp_addr={0x44, 0x34, 0x6, 0x1, 0x4, [{@multicast1, 0x8}, {@multicast1, 0x9}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010102, 0x7b9}, {@loopback, 0x80000000}]}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x3, [{@empty, 0xffff29b6}, {@rand_addr=0x64010102, 0x200000}]}, @timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0x9, [{@rand_addr=0x64010100, 0x1}, {@private=0xa010101, 0xff}, {@local}, {@empty, 0x4e}, {@broadcast, 0x81}]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x5, [0x10000, 0x3b25, 0xa, 0x3]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x2, [0xffff7fff]}]}}}}})

6.916111516s ago: executing program 3 (id=758):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0)

6.613587746s ago: executing program 3 (id=759):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.951056727s ago: executing program 1 (id=760):
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0)
userfaultfd(0x801)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x398, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
write$binfmt_script(r4, 0x0, 0x0)
shmget$private(0x0, 0x400000, 0x2, &(0x7f000000e000/0x400000)=nil)
shmget$private(0x0, 0x4000, 0x800, &(0x7f000035f000/0x4000)=nil)
shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)

5.949989343s ago: executing program 3 (id=761):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
poll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x8)

5.377542888s ago: executing program 2 (id=763):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x7fffffff, 0x7, 0x1, 0x2})

4.620752537s ago: executing program 1 (id=764):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000))

4.33577371s ago: executing program 1 (id=765):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f0000003840)=""/4114, 0x1012}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000340)=""/68, 0x44}], 0x4}, 0x0)
recvmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0)

3.826053657s ago: executing program 2 (id=766):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

3.548609104s ago: executing program 3 (id=767):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x28, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0x0)

3.216243623s ago: executing program 2 (id=768):
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0)
userfaultfd(0x801)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x398, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
shmget$private(0x0, 0x400000, 0x2, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmget$private(0x0, 0x4000, 0x800, &(0x7f000035f000/0x4000)=nil)
shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)

2.889295371s ago: executing program 3 (id=769):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000840)='./bus\x00', 0x8, &(0x7f00000007c0)={[{@nls={'nls', 0x3d, 'iso8859-1'}}, {@nobarrier}, {@umask={'umask', 0x3d, 0x8}}, {@type={'type', 0x3d, "dafd5c7f"}}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0xa)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e0612"], 0x9)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_fc_track_range\x00', r2}, 0x10)
openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x100000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0xe3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8000}, 0xc)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r8, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78)
write$cgroup_int(r7, &(0x7f0000000280), 0x12)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@p, {0x5}, {}, {}, {}, {}, {0x16, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x18}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0xa713, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0xdf, &(0x7f0000000380)=""/223, 0x41100, 0x2, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0xffff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000700)=[r7, r9], &(0x7f0000000740)=[{0x5, 0x2, 0x0, 0xa}, {0x5, 0x5, 0x5, 0x4}, {0x1, 0x5, 0x3, 0xa}, {0x1, 0x0, 0xc, 0x9}, {0x1, 0x5, 0xf, 0xb}, {0x0, 0x3, 0xe, 0x7}, {0x4, 0x5}, {0x3, 0x5, 0x8, 0x6}, {0x5, 0x5, 0x6, 0x9}], 0x10, 0x1ff, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x6, &(0x7f00000008c0)=@raw=[@kfunc, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, @alu={0x7, 0x0, 0x6, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @exit, @alu={0x7, 0x0, 0x1, 0x4, 0x6, 0x20, 0xfffffffffffffffc}], &(0x7f0000000100)='GPL\x00', 0x0, 0x1d, &(0x7f0000000140)=""/29, 0x41100, 0x23, '\x00', 0x0, @cgroup_sock_addr, r4, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[r5], &(0x7f0000000200)=[{0x3, 0x4, 0xd, 0xd}], 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2.889008998s ago: executing program 1 (id=770):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/720], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe40, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28)

2.121234285s ago: executing program 2 (id=771):
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0)
userfaultfd(0x801)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x398, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
write$binfmt_script(r4, 0x0, 0x0)
shmget$private(0x0, 0x400000, 0x2, &(0x7f000000e000/0x400000)=nil)
shmget$private(0x0, 0x4000, 0x800, &(0x7f000035f000/0x4000)=nil)
shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)

1.983841904s ago: executing program 1 (id=772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000080a05000000000000000000020000000900020073797a32000000000900010073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.775015429s ago: executing program 1 (id=773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbb34f000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
getdents64(r5, &(0x7f00000000c0)=""/44, 0x2c)
r6 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe, 0x0, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=<r8=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r8, r7, 0x0)
io_uring_enter(r6, 0xb15, 0x0, 0x0, 0x0, 0x0)
unshare(0x24020400)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x80040, 0x0)
r10 = dup(r9)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESOCT=r11])
sendmsg$NFT_BATCH(r0, 0x0, 0x20000000)

1.735055883s ago: executing program 3 (id=774):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
semget$private(0x0, 0x4000, 0x0)

684.715664ms ago: executing program 2 (id=775):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x40004)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0)

0s ago: executing program 2 (id=776):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000540)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="039b070000"])

kernel console output (not intermixed with test programs):

ique to avoid problems!
[  914.741425][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  914.752270][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.753899][ T9042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  914.775481][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.786089][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.796007][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.806527][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.816861][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.829889][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.840309][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.851789][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.862846][ T9042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  915.939162][   T54] Bluetooth: Unexpected start frame (len 16)
[  915.945320][   T54] Bluetooth: Frame is too long (len 16, expected len 4)
[  915.950510][ T9042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  915.962082][ T9042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  915.970846][ T9042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  915.979619][ T9042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  916.471915][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.496924][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.626071][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.643591][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.706333][ T8762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.507876][ T9366] loop0: detected capacity change from 0 to 256
[  921.519808][   T54] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  921.544900][ T9366] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  921.807395][ T9366] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  922.720174][ T9366] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  923.270118][   T29] audit: type=1800 audit(923.211:20): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.427" name="file1" dev="loop0" ino=1048778 res=0 errno=0
[  923.294292][ T9371] netlink: 19 bytes leftover after parsing attributes in process `syz.4.426'.
[  923.494722][ T9391] loop3: detected capacity change from 0 to 1024
[  923.529317][ T9391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  924.254347][ T9387] loop2: detected capacity change from 0 to 512
[  924.383900][ T9371] netlink: 'syz.4.426': attribute type 2 has an invalid length.
[  924.398491][ T9389] loop1: detected capacity change from 0 to 512
[  924.512923][ T9371] netlink: 244 bytes leftover after parsing attributes in process `syz.4.426'.
[  925.621007][ T9406] bridge0: port 3(vlan2) entered blocking state
[  925.627420][ T9406] bridge0: port 3(vlan2) entered disabled state
[  925.642887][ T9387] EXT4-fs (loop2): 1 truncate cleaned up
[  925.658816][ T9387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  925.689263][ T9406] vlan2: entered allmulticast mode
[  925.697657][ T9389] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.431: casefold flag without casefold feature
[  925.742561][ T9406] vlan2: left allmulticast mode
[  925.768274][ T9387] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.429: Directory hole found for htree leaf block 0
[  925.787660][ T9389] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.431: couldn't read orphan inode 15 (err -117)
[  925.808447][ T9387] EXT4-fs (loop2): Remounting filesystem read-only
[  925.916767][ T9389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  926.193200][ T9418] loop3: detected capacity change from 0 to 8
[  926.298224][ T9419] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.431: Directory hole found for htree leaf block 0
[  926.313422][ T5286] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  926.352455][ T9419] netlink: 'syz.1.431': attribute type 4 has an invalid length.
[  926.432690][ T9419] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.431: Directory hole found for htree leaf block 0
[  926.535255][ T9419] tun0: tun_chr_ioctl cmd 1074025675
[  926.540838][ T9419] tun0: persist disabled
[  927.162566][ T8849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.176325][ T8762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.340830][ T9422] loop1: detected capacity change from 0 to 256
[  927.351705][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  927.367136][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  927.378312][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  927.449711][ T5286] usb 1-1: string descriptor 0 read error: -22
[  927.456021][ T5286] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  927.475532][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.509089][ T9422] netlink: 116 bytes leftover after parsing attributes in process `syz.1.436'.
[  927.543855][ T9422] tipc: Started in network mode
[  927.558370][ T9422] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[  927.559711][ T5286] usb 1-1: config 0 descriptor??
[  927.582761][ T9424] loop2: detected capacity change from 0 to 4096
[  927.590203][ T5286] em28xx 1-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  927.595768][ T9422] tipc: Enabled bearer <eth:bridge0>, priority 0
[  927.599065][ T5286] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  928.590145][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  928.600988][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  928.611319][ T5246] Bluetooth: hci1: hardware error 0x00
[  928.634824][ T9424] loop2: detected capacity change from 0 to 128
[  928.718875][ T5509] tipc: Node number set to 10922666
[  928.911032][ T5286] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  929.921847][ T5286] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  930.699960][ T9445] loop3: detected capacity change from 0 to 2048
[  930.749799][ T5246] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  931.558220][ T5286] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  931.568309][ T5286] em28xx 1-1:0.0: No AC97 audio processor
[  931.603749][ T5286] usb 1-1: USB disconnect, device number 6
[  931.610714][ T5286] em28xx 1-1:0.0: Disconnecting em28xx
[  931.693675][ T9445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  931.798908][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  931.805501][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  931.814052][ T5286] em28xx 1-1:0.0: Freeing device
[  932.639904][ T8704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.212874][ T9461] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  933.298863][ T9462] libceph: resolve 'c' (ret=-3): failed
[  934.042438][ T9463] loop0: detected capacity change from 0 to 512
[  934.114166][ T9463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  934.314213][ T9463] EXT4-fs (loop0): 1 truncate cleaned up
[  934.324310][ T9463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  934.435972][ T9470] Cannot find add_set index 0 as target
[  934.629666][ T9469] loop2: detected capacity change from 0 to 128
[  937.828173][   T29] audit: type=1326 audit(937.781:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.0.444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f130317dff9 code=0x0
[  938.517914][ T8864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.531188][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  938.541480][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  938.549911][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  938.560890][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  938.569517][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  938.576974][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  938.885894][ T9483] loop3: detected capacity change from 0 to 1024
[  938.899572][ T9483] EXT4-fs: Ignoring removed orlov option
[  938.923382][ T9483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  938.956951][ T9483] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  939.177948][ T9495] loop2: detected capacity change from 0 to 2048
[  939.228233][ T9495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  940.587032][ T9500] loop0: detected capacity change from 0 to 1024
[  940.596551][ T9500] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  940.831302][   T54] Bluetooth: hci5: command tx timeout
[  940.969907][ T9485] chnl_net:caif_netlink_parms(): no params data found
[  941.168421][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  942.326008][    T9] usb 2-1: Using ep0 maxpacket: 32
[  942.343016][    T9] usb 2-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23
[  942.366496][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.377580][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.612291][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.626372][    T9] usb 2-1: Product: syz
[  942.675783][    T9] usb 2-1: Manufacturer: syz
[  942.707603][ T9485] bridge_slave_0: entered allmulticast mode
[  942.804448][    T9] usb 2-1: SerialNumber: syz
[  942.883826][ T9485] bridge_slave_0: entered promiscuous mode
[  942.909737][   T54] Bluetooth: hci5: command tx timeout
[  942.937101][    T9] usb 2-1: config 0 descriptor??
[  943.161894][    T9] ums-sddr55 2-1:0.0: USB Mass Storage device detected
[  943.200877][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.226842][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.238792][    T9] ums-sddr55 2-1:0.0: Quirks match for vid 07c4 pid a103: 8
[  943.248473][ T9485] bridge_slave_1: entered allmulticast mode
[  943.255552][ T9485] bridge_slave_1: entered promiscuous mode
[  943.602815][ T9485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  943.679668][ T9485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  944.473205][ T8492] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  944.696832][ T9485] team0: Port device team_slave_0 added
[  944.711190][ T9485] team0: Port device team_slave_1 added
[  944.718694][ T8492] usb 1-1: Using ep0 maxpacket: 32
[  944.725516][ T8492] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  944.826201][ T8492] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  944.864665][ T8492] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  944.947416][ T8492] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  945.008422][   T54] Bluetooth: hci5: command tx timeout
[  945.022103][ T8492] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  945.037143][ T8492] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  945.059068][ T8492] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  945.080556][ T8492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.093267][ T8492] usb 1-1: Product: syz
[  945.097439][ T8492] usb 1-1: Manufacturer: syz
[  945.104385][ T8492] usb 1-1: SerialNumber: syz
[  945.209924][ T8492] usb 1-1: can't set config #1, error -71
[  945.388647][ T8492] usb 1-1: USB disconnect, device number 8
[  945.495159][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  945.506242][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  945.654598][ T9485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  946.028837][   T29] audit: type=1326 audit(945.651:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  946.246086][   T29] audit: type=1326 audit(945.651:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  946.282424][ T9549] loop0: detected capacity change from 0 to 128
[  946.490754][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  946.497764][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  946.526697][   T29] audit: type=1326 audit(945.651:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  947.224161][ T5509] usb 2-1: USB disconnect, device number 10
[  947.229898][   T54] Bluetooth: hci5: command tx timeout
[  947.238094][   T29] audit: type=1326 audit(945.651:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  947.259861][   T29] audit: type=1326 audit(945.651:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  947.282456][   T29] audit: type=1326 audit(945.651:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  947.303993][   T29] audit: type=1326 audit(945.651:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  947.378238][ T9485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  947.428181][   T29] audit: type=1326 audit(945.651:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  948.477673][   T29] audit: type=1326 audit(945.651:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  948.618244][   T29] audit: type=1326 audit(945.661:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130317dff9 code=0x7ffc0000
[  948.701255][ T9553] loop1: detected capacity change from 0 to 4096
[  948.875000][ T9553] ntfs3: Unknown parameter 'euid>00000000000000000000'
[  948.897072][ T9564] loop0: detected capacity change from 0 to 256
[  948.903806][ T9565] loop2: detected capacity change from 0 to 256
[  948.931204][ T9485] hsr_slave_0: entered promiscuous mode
[  948.938702][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  949.140869][    T9] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  949.184406][    T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 101
[  949.232905][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  949.263591][ T9485] hsr_slave_1: entered promiscuous mode
[  949.293577][ T9485] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  949.308461][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.312029][ T9485] Cannot create hsr debugfs directory
[  950.104041][ T9572] tipc: Started in network mode
[  950.109105][ T9572] tipc: Node identity ac1414aa, cluster identity 4711
[  950.116825][ T9572] tipc: New replicast peer: 100.1.1.1
[  950.122633][ T9572] tipc: Enabled bearer <udp:syz2>, priority 10
[  950.128928][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'.
[  951.522694][    T9] ath6kl: Failed to submit usb control message: -110
[  951.529552][    T9] ath6kl: unable to send the bmi data to the device: -110
[  951.536830][    T9] ath6kl: Unable to send get target info: -110
[  951.544867][    T9] ath6kl: Failed to init ath6kl core: -110
[  951.545546][  T936] tipc: Node number set to 2886997162
[  951.552787][    T9] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110
[  951.737056][ T9584] loop2: detected capacity change from 0 to 128
[  951.852668][ T9485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.037654][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[  952.227020][ T9485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.339412][ T9595] loop1: detected capacity change from 0 to 256
[  952.971409][ T5286] usb 4-1: USB disconnect, device number 6
[  953.034885][ T9594] loop0: detected capacity change from 0 to 4096
[  953.046060][ T9594] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  953.114049][ T9595] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  953.166109][ T9599] loop2: detected capacity change from 0 to 1024
[  953.195069][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  953.195090][   T29] audit: type=1326 audit(953.151:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9586 comm="syz.1.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f442f77dff9 code=0x0
[  953.231789][ T9594] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  953.245746][ T9485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  953.289064][ T9599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  953.370915][ T9485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  953.609838][ T5500] bridge_slave_1: left allmulticast mode
[  953.620672][ T5500] bridge_slave_1: left promiscuous mode
[  953.626429][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.643861][ T9610] loop3: detected capacity change from 0 to 1024
[  953.698226][ T5287] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  953.740300][ T5500] bridge_slave_0: left allmulticast mode
[  953.780175][ T5500] bridge_slave_0: left promiscuous mode
[  953.800620][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.849983][ T5287] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  953.863877][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.890975][ T5287] usb 1-1: config 0 descriptor??
[  953.904641][   T35] hfsplus: b-tree write err: -5, ino 4
[  954.170266][ T5287] ath6kl: Failed to submit usb control message: -71
[  954.181395][ T5287] ath6kl: unable to send the bmi data to the device: -71
[  954.190385][ T5287] ath6kl: Unable to send get target info: -71
[  954.221521][ T5287] ath6kl: Failed to init ath6kl core: -71
[  954.241099][ T5287] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  954.263107][ T5287] usb 1-1: USB disconnect, device number 9
[  955.764116][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  955.944692][    T9] usb 4-1: Using ep0 maxpacket: 16
[  955.956590][    T9] usb 4-1: config 0 has an invalid interface number: 107 but max is 0
[  955.968349][    T9] usb 4-1: config 0 has no interface number 0
[  955.993210][    T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d620, bcdDevice=bd.79
[  956.014056][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.031778][    T9] usb 4-1: Product: syz
[  956.046707][    T9] usb 4-1: Manufacturer: syz
[  956.051862][    T9] usb 4-1: SerialNumber: syz
[  956.084641][    T9] usb 4-1: config 0 descriptor??
[  956.138649][ T5500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.156643][ T5500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  956.182289][ T5500] bond0 (unregistering): Released all slaves
[  956.304910][    T9] usb 4-1: USB disconnect, device number 7
[  956.463826][ T9631] loop1: detected capacity change from 0 to 128
[  956.551536][ T9631] befs: (loop1): No write support. Marking filesystem read-only
[  956.632085][ T9631] befs: (loop1): invalid magic header
[  956.718737][ T9485] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  956.833361][ T9629] loop0: detected capacity change from 0 to 32768
[  956.854926][ T9485] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  957.003480][ T9485] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  957.340807][ T9641] Cannot find add_set index 0 as target
[  958.128864][ T9633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.483'.
[  958.246742][ T9629] ERROR: (device loop0): dbDiscardAG: -EIO
[  958.246742][ T9629] 
[  958.257257][ T9485] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  958.276341][ T9629] ERROR: (device loop0): remounting filesystem as read-only
[  958.293048][ T9633] loop3: detected capacity change from 0 to 512
[  958.449045][ T5500] hsr_slave_0: left promiscuous mode
[  958.492587][ T5500] hsr_slave_1: left promiscuous mode
[  959.527263][ T5500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  959.537284][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  959.597774][ T5500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  959.615117][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  959.741929][ T5500] veth1_macvtap: left promiscuous mode
[  959.757704][ T5500] veth0_macvtap: left promiscuous mode
[  959.774687][ T5500] veth1_vlan: left promiscuous mode
[  959.781631][ T5500] veth0_vlan: left promiscuous mode
[  959.867519][ T8762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  960.351089][ T9660] loop2: detected capacity change from 0 to 2048
[  960.396402][ T9660] loop2: detected capacity change from 0 to 512
[  960.407824][ T9660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  960.490260][ T9660] EXT4-fs (loop2): 1 orphan inode deleted
[  960.496347][ T9660] EXT4-fs (loop2): 1 truncate cleaned up
[  960.506769][ T9660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  960.568208][ T5509] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  960.868906][ T5509] usb 1-1: Using ep0 maxpacket: 16
[  960.905843][ T5509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.931577][ T5509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.967865][ T5509] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  960.980960][ T5509] usb 1-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00
[  961.002771][ T5509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.042905][ T5509] usb 1-1: config 0 descriptor??
[  961.139424][ T9660] fuse: Unknown parameter 'Rd'
[  961.405383][ T9661] loop0: detected capacity change from 0 to 128
[  961.436597][ T9661] vfat: Unknown parameter 'shortna$8'
[  961.529661][ T8762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.744173][ T5500] team0 (unregistering): Port device team_slave_1 removed
[  961.798984][ T5500] team0 (unregistering): Port device team_slave_0 removed
[  961.833240][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0
[  961.853804][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0
[  961.874077][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0
[  961.893442][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0
[  961.901988][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0
[  961.910849][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0
[  961.923775][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: unbalanced collection at end of report description
[  961.934801][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: hidpp_probe:parse failed
[  961.943277][ T5509] logitech-hidpp-device 0003:046D:0A87.0003: probe with driver logitech-hidpp-device failed with error -22
[  962.060168][ T9670] netlink: 44 bytes leftover after parsing attributes in process `syz.0.488'.
[  962.448307][ T9661] netlink: 'syz.0.488': attribute type 29 has an invalid length.
[  962.459107][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  962.485933][ T9669] netlink: 'syz.0.488': attribute type 29 has an invalid length.
[  962.518152][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  962.600949][ T9677] loop1: detected capacity change from 0 to 2048
[  962.639790][ T9679] loop2: detected capacity change from 0 to 256
[  962.658573][ T9679] vfat: Bad value for 'errors'
[  962.682318][ T9677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  962.698657][ T9682] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  962.714071][ T9682] EXT4-fs (loop1): Remounting filesystem read-only
[  962.757114][ T9485] 8021q: adding VLAN 0 to HW filter on device bond0
[  962.872330][ T9485] 8021q: adding VLAN 0 to HW filter on device team0
[  962.918690][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.925863][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  963.037906][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.045127][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  963.075746][ T9691] loop3: detected capacity change from 0 to 1024
[  963.217737][ T9691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  963.485935][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.812113][   T29] audit: type=1800 audit(963.761:46): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.495" name="file1" dev="loop3" ino=15 res=0 errno=0
[  963.823830][ T8849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  964.168636][    T9] usb 1-1: USB disconnect, device number 10
[  964.401517][ T8704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  964.418783][ T9684] loop2: detected capacity change from 0 to 40427
[  964.541430][ T9714] loop1: detected capacity change from 0 to 64
[  964.576585][ T9719] loop3: detected capacity change from 0 to 512
[  964.624062][ T9719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  964.730750][ T9719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  964.804357][ T9485] veth0_vlan: entered promiscuous mode
[  964.877352][ T9485] veth1_vlan: entered promiscuous mode
[  965.019769][ T9485] veth0_macvtap: entered promiscuous mode
[  965.091123][ T9485] veth1_macvtap: entered promiscuous mode
[  965.114354][ T9731] loop1: detected capacity change from 0 to 512
[  965.363221][ T9734] loop0: detected capacity change from 0 to 1024
[  965.390974][ T9731] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  965.612342][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  965.633920][ T9731] UDF-fs: Scanning with blocksize 512 failed
[  965.918839][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  965.931297][ T9731] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  965.947790][ T9731] UDF-fs: Scanning with blocksize 1024 failed
[  966.109029][   T29] audit: type=1800 audit(966.001:47): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.505" name="file1" dev="loop0" ino=25 res=0 errno=0
[  966.181883][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  966.227061][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.240054][ T9731] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  966.247567][ T9731] UDF-fs: Scanning with blocksize 2048 failed
[  966.265489][ T9730] loop2: detected capacity change from 0 to 8192
[  966.274119][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  966.324702][ T9731] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  966.336028][ T9730] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  966.365522][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.377092][ T9730] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  966.394428][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  966.405351][ T9731] UDF-fs: error (device loop1): udf_read_inode: (ino 28) failed !bh
[  966.423318][ T9730] REISERFS (device loop2): using ordered data mode
[  966.430560][ T9731] UDF-fs: Scanning with blocksize 4096 failed
[  966.437891][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.453006][ T9730] reiserfs: using flush barriers
[  966.484828][ T9730] REISERFS warning (device loop2): sh-457 journal_init_dev: journal_init_dev: Cannot open './busacl': -2
[  966.497880][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  966.507477][ T9730] REISERFS warning (device loop2): sh-462 journal_init: unable to initialize journal device
[  966.525563][ T8704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  966.535196][ T9730] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  966.549967][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  966.560558][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.570545][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  966.581239][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.591144][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  966.601797][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.611718][ T9485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  966.622605][ T9485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  966.633940][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  966.664283][ T9485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  966.673102][ T9485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  966.681894][ T9485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  966.723686][ T9485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  967.023926][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.073793][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.090976][ T9750] loop3: detected capacity change from 0 to 64
[  967.142043][ T2535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.173256][ T2535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.188794][   T11] tipc: Subscription rejected, illegal request
[  967.292722][ T9755] loop2: detected capacity change from 0 to 1024
[  967.727271][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'.
[  968.044512][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  968.283221][ T9787] loop3: detected capacity change from 0 to 1024
[  968.422057][ T9774] loop1: detected capacity change from 0 to 8192
[  968.569892][ T9794] netlink: 'syz.4.527': attribute type 1 has an invalid length.
[  968.577732][ T9794] netlink: 'syz.4.527': attribute type 2 has an invalid length.
[  968.895056][ T9800] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[  968.907070][ T9800] netlink: 'syz.1.529': attribute type 2 has an invalid length.
[  969.059957][ T9802] loop2: detected capacity change from 0 to 512
[  969.098760][ T9802] EXT4-fs: Ignoring removed nobh option
[  969.172329][ T2966] hfsplus: b-tree write err: -5, ino 4
[  969.220071][ T9802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  969.408978][ T9076] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  969.604292][ T9076] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  969.639080][ T9076] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  969.668154][ T9076] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  969.718273][ T6755] Bluetooth: hci4: command 0x0406 tx timeout
[  969.761224][ T9076] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  969.776296][ T9076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.785516][ T9076] usb 5-1: Product: syz
[  969.791015][ T9076] usb 5-1: Manufacturer: syz
[  969.795776][ T9076] usb 5-1: SerialNumber: syz
[  969.860244][ T9076] usb 5-1: bad CDC descriptors
[  969.998384][ T9823] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[  970.071636][  T936] usb 5-1: USB disconnect, device number 5
[  970.079341][ T9824] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.530: bg 0: block 224: padding at end of block bitmap is not set
[  970.119412][ T9824] EXT4-fs (loop2): Remounting filesystem read-only
[  970.552174][ T9832] loop1: detected capacity change from 0 to 1024
[  970.643543][ T8762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.670024][ T2966] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  970.710355][ T2966] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  970.754249][ T9835] loop3: detected capacity change from 0 to 1024
[  970.795613][ T2966] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  970.848730][ T2535] hfsplus: b-tree write err: -5, ino 4
[  970.898673][ T2966] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  971.845197][ T9848] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  971.859587][ T3014] hfsplus: b-tree write err: -5, ino 4
[  971.947601][ T9852] netlink: 'syz.2.550': attribute type 1 has an invalid length.
[  972.138685][ T9856] siw: device registration error -23
[  972.196595][ T9860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.552'.
[  972.535004][ T9869] loop1: detected capacity change from 0 to 1024
[  972.723849][ T9876] netlink: 'syz.3.559': attribute type 1 has an invalid length.
[  972.886857][ T9878] loop2: detected capacity change from 0 to 1024
[  972.979766][   T11] hfsplus: b-tree write err: -5, ino 4
[  973.167603][ T9884] netlink: 'syz.1.563': attribute type 1 has an invalid length.
[  974.525411][ T9886] hfsplus: xattr searching failed
[  974.685888][   T11] hfsplus: b-tree write err: -5, ino 4
[  974.928212][    T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  975.102795][    T9] usb 2-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=f5.0f
[  975.112229][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.161720][    T9] usb 2-1: Product: syz
[  975.170553][ T9909] /dev/loop4: Can't open blockdev
[  975.178216][    T9] usb 2-1: Manufacturer: syz
[  975.182872][    T9] usb 2-1: SerialNumber: syz
[  975.263355][    T9] usb 2-1: config 0 descriptor??
[  975.297621][ T9913] netlink: 'syz.3.574': attribute type 1 has an invalid length.
[  975.498719][    T9] dvb-usb: found a 'PCTV 2002e SE' in warm state.
[  975.732429][    T9] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  976.172223][ T5286] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  976.704322][    T9] dvbdev: DVB: registering new adapter (PCTV 2002e SE)
[  976.712030][    T9] usb 2-1: media controller created
[  976.723351][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  976.896858][    T9] DVB: Unable to find symbol dib7000p_attach()
[  976.903370][    T9] dvb-usb: no frontend was attached by 'PCTV 2002e SE'
[  976.920565][    T9] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  976.935460][    T9] dvbdev: DVB: registering new adapter (PCTV 2002e SE)
[  976.954458][    T9] usb 2-1: media controller created
[  976.972881][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  977.019575][ T5509] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  977.064887][    T9] DVB: Unable to find symbol dib7000p_attach()
[  977.072371][    T9] dvb-usb: no frontend was attached by 'PCTV 2002e SE'
[  977.178424][ T5509] usb 4-1: Using ep0 maxpacket: 32
[  977.185989][ T5509] usb 4-1: config 5 has an invalid interface number: 19 but max is 0
[  977.195359][ T5509] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  977.229486][ T5509] usb 4-1: config 5 has no interface number 0
[  977.243653][ T5509] usb 4-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  977.277947][ T5286] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  977.278262][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[  977.295920][ T5286] usb 5-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  977.312589][    T9] Registered IR keymap rc-empty
[  977.329698][ T5509] usb 4-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38
[  977.338204][ T5286] usb 5-1: config 1 interface 0 has no altsetting 0
[  977.350678][    T9] dvb-usb: could not initialize remote control.
[  977.358011][ T5509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.368475][ T5286] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  977.375020][    T9] dvb-usb: PCTV 2002e SE successfully initialized and connected.
[  977.383536][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  977.385589][ T5509] usb 4-1: Product: syz
[  977.409931][    T9] usb 2-1: USB disconnect, device number 11
[  977.448136][ T5509] usb 4-1: Manufacturer: syz
[  977.449257][ T5286] usb 5-1: SerialNumber: syz
[  977.463700][ T5509] usb 4-1: SerialNumber: syz
[  977.509052][ T5509] hub 4-1:5.19: bad descriptor, ignoring hub
[  977.518755][ T5286] cdc_ether 5-1:1.0: skipping garbage
[  977.528467][ T5286] cdc_ether 5-1:1.0: skipping garbage
[  977.528569][ T5509] hub 4-1:5.19: probe with driver hub failed with error -5
[  977.551288][ T5286] usb 5-1: bad CDC descriptors
[  977.565458][    T9] dvb-usb: PCTV 2002e SE successfully deinitialized and disconnected.
[  977.599427][ T5509] sierra 4-1:5.19: Sierra USB modem converter detected
[  977.708487][ T5509] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  977.798155][ T5509] usb 4-1: USB disconnect, device number 8
[  977.820720][ T5509] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  977.861998][ T5509] sierra 4-1:5.19: device disconnected
[  978.449478][ T9954] loop3: detected capacity change from 0 to 1024
[  979.197818][ T9076] usb 5-1: USB disconnect, device number 6
[  979.371586][ T9960] netlink: 'syz.2.591': attribute type 1 has an invalid length.
[  979.381420][ T9960] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.591'.
[  979.559898][   T11] hfsplus: b-tree write err: -5, ino 4
[  979.739183][ T9967] omfs: Invalid superblock (0)
[  979.870776][ T9948] loop1: detected capacity change from 0 to 32768
[  979.903846][ T9975] netlink: 'syz.3.599': attribute type 8 has an invalid length.
[  980.058515][ T9979] netlink: 'syz.3.600': attribute type 1 has an invalid length.
[  980.262967][ T9948] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  980.827436][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'.
[  981.440589][ T9997] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  985.733262][ T4628] Bluetooth: hci0: command 0x0406 tx timeout
[  985.742489][ T4628] Bluetooth: hci3: command 0x0406 tx timeout
[  993.289171][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  993.299895][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  999.305926][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  999.340145][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  999.373573][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  999.395797][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  999.423732][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  999.433297][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1001.728112][   T54] Bluetooth: hci1: command tx timeout
[ 1004.130207][   T54] Bluetooth: hci1: command tx timeout
[ 1006.198185][   T54] Bluetooth: hci1: command tx timeout
[ 1008.278483][   T54] Bluetooth: hci1: command tx timeout
[ 1009.390295][ T6755] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1009.508510][ T4628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1009.522701][ T4628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1009.540935][ T4628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1009.552800][ T4628] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1009.562317][ T4628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1009.587502][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1009.925460][ T5246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1010.323952][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1010.474564][ T4628] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1010.564144][ T4628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1010.575579][ T4628] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1010.592274][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1010.979728][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1011.054555][ T6755] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1011.149676][ T6755] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1011.180091][ T6755] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1011.204941][ T6755] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1011.951539][ T6755] Bluetooth: hci7: command tx timeout
[ 1013.080143][ T6755] Bluetooth: hci6: command tx timeout
[ 1013.560670][ T6755] Bluetooth: hci8: command tx timeout
[ 1014.028525][ T6755] Bluetooth: hci7: command tx timeout
[ 1015.105774][ T3014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1015.148301][ T6755] Bluetooth: hci6: command tx timeout
[ 1015.269144][T10013] chnl_net:caif_netlink_parms(): no params data found
[ 1015.638939][ T5246] Bluetooth: hci8: command tx timeout
[ 1015.926949][ T3014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.113417][ T6755] Bluetooth: hci7: command tx timeout
[ 1016.192964][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1016.270067][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1016.338142][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1016.400611][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1016.460445][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1016.472034][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1016.845453][ T3014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.238212][ T6755] Bluetooth: hci6: command tx timeout
[ 1017.460044][ T3014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.708205][ T6755] Bluetooth: hci8: command tx timeout
[ 1018.198625][ T6755] Bluetooth: hci7: command tx timeout
[ 1018.223931][T10013] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.302422][T10013] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1018.375146][T10013] bridge_slave_0: entered allmulticast mode
[ 1018.510027][ T6755] Bluetooth: hci2: command tx timeout
[ 1018.547818][T10013] bridge_slave_0: entered promiscuous mode
[ 1018.786241][T10013] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.794765][T10013] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1018.807522][T10013] bridge_slave_1: entered allmulticast mode
[ 1018.827460][T10013] bridge_slave_1: entered promiscuous mode
[ 1019.308197][ T6755] Bluetooth: hci6: command tx timeout
[ 1019.788217][ T6755] Bluetooth: hci8: command tx timeout
[ 1020.598229][ T6755] Bluetooth: hci2: command tx timeout
[ 1022.678361][ T6755] Bluetooth: hci2: command tx timeout
[ 1023.153873][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1024.395475][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1024.748225][ T6755] Bluetooth: hci2: command tx timeout
[ 1027.092686][ T3014] bridge_slave_1: left allmulticast mode
[ 1027.237281][ T3014] bridge_slave_1: left promiscuous mode
[ 1027.301051][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1027.459648][ T3014] bridge_slave_0: left allmulticast mode
[ 1027.465590][ T3014] bridge_slave_0: left promiscuous mode
[ 1027.515145][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.260888][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1034.331361][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1034.842528][ T3014] bond0 (unregistering): Released all slaves
[ 1035.706038][T10013] team0: Port device team_slave_0 added
[ 1036.445345][T10013] team0: Port device team_slave_1 added
[ 1036.532439][T10021] chnl_net:caif_netlink_parms(): no params data found
[ 1039.448933][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1039.460913][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.489568][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1039.979493][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1039.986514][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1040.095054][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1041.662245][ T3014] hsr_slave_0: left promiscuous mode
[ 1041.691191][ T3014] hsr_slave_1: left promiscuous mode
[ 1041.707217][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1041.715167][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.732576][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1041.752989][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1042.298707][ T3014] veth1_macvtap: left promiscuous mode
[ 1042.354192][ T3014] veth0_macvtap: left promiscuous mode
[ 1042.388096][ T3014] veth1_vlan: left promiscuous mode
[ 1042.440273][ T3014] veth0_vlan: left promiscuous mode
[ 1048.264464][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1048.731804][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1054.673332][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.683929][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.249272][T10013] hsr_slave_0: entered promiscuous mode
[ 1055.295413][T10013] hsr_slave_1: entered promiscuous mode
[ 1055.381859][T10021] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.421131][T10021] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.459364][T10021] bridge_slave_0: entered allmulticast mode
[ 1055.488867][T10021] bridge_slave_0: entered promiscuous mode
[ 1055.527627][T10020] chnl_net:caif_netlink_parms(): no params data found
[ 1056.380748][T10021] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.423132][T10021] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.502435][T10021] bridge_slave_1: entered allmulticast mode
[ 1056.608449][T10021] bridge_slave_1: entered promiscuous mode
[ 1057.946191][T10024] chnl_net:caif_netlink_parms(): no params data found
[ 1060.714932][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1060.733435][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1060.744266][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1060.780297][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1060.834634][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1060.844103][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1063.150045][ T6755] Bluetooth: hci3: command tx timeout
[ 1064.351774][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1064.913878][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1064.934295][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1064.949215][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1065.007738][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1065.016656][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1065.031012][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1065.173462][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1065.184728][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1065.208327][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1065.228351][ T5246] Bluetooth: hci3: command tx timeout
[ 1065.242767][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1065.254061][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1065.268229][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1065.333613][T10034] chnl_net:caif_netlink_parms(): no params data found
[ 1065.392730][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1065.412313][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1065.455167][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1065.497826][ T9948] ocfs2: Unmounting device (7,1) on (node local)
[ 1065.526669][ T6755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1065.535203][ T6755] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1065.543259][ T6755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1065.899153][T10034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1065.906374][T10034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.916569][T10034] bridge_slave_0: entered allmulticast mode
[ 1065.923500][T10034] bridge_slave_0: entered promiscuous mode
[ 1065.950462][T10034] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1065.957652][T10034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.965474][T10034] bridge_slave_1: entered allmulticast mode
[ 1065.972974][T10034] bridge_slave_1: entered promiscuous mode
[ 1066.022258][ T3014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.074313][T10034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1066.088672][T10034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1066.124493][ T3014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.296884][ T3014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.327599][T10034] team0: Port device team_slave_0 added
[ 1066.350127][T10034] team0: Port device team_slave_1 added
[ 1066.484389][ T3014] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.586674][T10034] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1066.597397][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1066.625517][T10034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1066.652436][T10034] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1066.668534][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1066.718260][T10034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1066.733920][T10060] chnl_net:caif_netlink_parms(): no params data found
[ 1066.747951][T10078] chnl_net:caif_netlink_parms(): no params data found
[ 1066.764354][T10086] chnl_net:caif_netlink_parms(): no params data found
[ 1066.863624][T10082] chnl_net:caif_netlink_parms(): no params data found
[ 1066.885083][T10034] hsr_slave_0: entered promiscuous mode
[ 1066.893600][T10034] hsr_slave_1: entered promiscuous mode
[ 1066.900459][T10034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1066.908868][T10034] Cannot create hsr debugfs directory
[ 1067.148626][ T6755] Bluetooth: hci0: command tx timeout
[ 1067.201458][T10078] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1067.213743][T10078] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.228816][T10078] bridge_slave_0: entered allmulticast mode
[ 1067.236018][T10078] bridge_slave_0: entered promiscuous mode
[ 1067.318389][ T6755] Bluetooth: hci3: command tx timeout
[ 1067.502142][ T3014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.552317][T10078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.560628][ T6755] Bluetooth: hci1: command tx timeout
[ 1067.570005][T10078] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.577312][T10078] bridge_slave_1: entered allmulticast mode
[ 1067.599831][T10078] bridge_slave_1: entered promiscuous mode
[ 1067.621156][T10086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1067.628509][ T6755] Bluetooth: hci4: command tx timeout
[ 1067.635038][T10086] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.642490][T10086] bridge_slave_0: entered allmulticast mode
[ 1067.649727][T10086] bridge_slave_0: entered promiscuous mode
[ 1067.663457][T10086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.670827][T10086] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.678597][T10086] bridge_slave_1: entered allmulticast mode
[ 1067.686257][T10086] bridge_slave_1: entered promiscuous mode
[ 1067.694214][T10060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1067.701924][T10060] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.709827][T10060] bridge_slave_0: entered allmulticast mode
[ 1067.716646][T10060] bridge_slave_0: entered promiscuous mode
[ 1067.725481][T10060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.733192][T10060] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.740794][T10060] bridge_slave_1: entered allmulticast mode
[ 1067.747514][T10060] bridge_slave_1: entered promiscuous mode
[ 1067.810851][ T3014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.873338][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1067.937910][ T3014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.978305][T10060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1067.995991][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1068.006315][T10082] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.014535][T10082] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.021881][T10082] bridge_slave_0: entered allmulticast mode
[ 1068.028926][T10082] bridge_slave_0: entered promiscuous mode
[ 1068.046754][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1068.065189][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1068.093537][ T3014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.115578][T10060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1068.145645][T10082] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.153766][T10082] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.161153][T10082] bridge_slave_1: entered allmulticast mode
[ 1068.168269][T10082] bridge_slave_1: entered promiscuous mode
[ 1068.227195][T10078] team0: Port device team_slave_0 added
[ 1068.320518][T10086] team0: Port device team_slave_0 added
[ 1068.339526][T10078] team0: Port device team_slave_1 added
[ 1068.370235][T10060] team0: Port device team_slave_0 added
[ 1068.388809][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1068.417219][T10086] team0: Port device team_slave_1 added
[ 1068.471712][T10060] team0: Port device team_slave_1 added
[ 1068.479620][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1068.486696][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.514245][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1068.532678][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1068.620850][T10034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.736941][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1068.746076][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.774589][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1068.795697][T10086] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1068.808189][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.835406][T10086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1068.891885][T10034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.914514][T10060] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1068.927274][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.958813][T10060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1068.986475][T10060] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1069.008144][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1069.052598][T10060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1069.112468][T10082] team0: Port device team_slave_0 added
[ 1069.129106][T10086] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1069.136110][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1069.168040][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1069.180428][T10086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1069.198229][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1069.207379][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1069.223267][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1069.230824][   T54] Bluetooth: hci0: command tx timeout
[ 1069.237886][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1069.245375][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1069.281402][T10034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.325754][T10082] team0: Port device team_slave_1 added
[ 1069.398489][ T6755] Bluetooth: hci3: command tx timeout
[ 1069.462029][T10034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.504232][T10086] hsr_slave_0: entered promiscuous mode
[ 1069.517720][T10086] hsr_slave_1: entered promiscuous mode
[ 1069.528147][T10086] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1069.535973][T10086] Cannot create hsr debugfs directory
[ 1069.555963][T10060] hsr_slave_0: entered promiscuous mode
[ 1069.562485][T10060] hsr_slave_1: entered promiscuous mode
[ 1069.569224][T10060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1069.576818][T10060] Cannot create hsr debugfs directory
[ 1069.606171][T10078] hsr_slave_0: entered promiscuous mode
[ 1069.612937][T10078] hsr_slave_1: entered promiscuous mode
[ 1069.620106][T10078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1069.627704][T10078] Cannot create hsr debugfs directory
[ 1069.635761][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1069.643635][ T6755] Bluetooth: hci1: command tx timeout
[ 1069.648149][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1069.675355][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1069.689670][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1069.696678][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1069.722883][ T6755] Bluetooth: hci4: command tx timeout
[ 1069.729554][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1069.932191][T10082] hsr_slave_0: entered promiscuous mode
[ 1069.948524][T10082] hsr_slave_1: entered promiscuous mode
[ 1069.958209][T10082] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1069.965870][T10082] Cannot create hsr debugfs directory
[ 1070.053330][ T3014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.236101][ T3014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.341391][ T3014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.496624][ T3014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.985784][ T3014] bridge_slave_1: left allmulticast mode
[ 1070.995544][ T3014] bridge_slave_1: left promiscuous mode
[ 1071.003295][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.031062][ T3014] bridge_slave_0: left allmulticast mode
[ 1071.036782][ T3014] bridge_slave_0: left promiscuous mode
[ 1071.043274][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.054158][ T3014] bridge_slave_1: left allmulticast mode
[ 1071.061366][ T3014] bridge_slave_1: left promiscuous mode
[ 1071.067083][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.077346][ T3014] bridge_slave_0: left allmulticast mode
[ 1071.084504][ T3014] bridge_slave_0: left promiscuous mode
[ 1071.090889][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.101898][ T3014] bridge_slave_1: left allmulticast mode
[ 1071.107603][ T3014] bridge_slave_1: left promiscuous mode
[ 1071.131252][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.140928][ T3014] bridge_slave_0: left allmulticast mode
[ 1071.146701][ T3014] bridge_slave_0: left promiscuous mode
[ 1071.155066][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.179795][ T3014] bridge_slave_1: left allmulticast mode
[ 1071.185664][ T3014] bridge_slave_1: left promiscuous mode
[ 1071.193320][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.210113][ T3014] bridge_slave_0: left allmulticast mode
[ 1071.215849][ T3014] bridge_slave_0: left promiscuous mode
[ 1071.236768][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.255108][ T3014] bridge_slave_1: left allmulticast mode
[ 1071.268398][ T3014] bridge_slave_1: left promiscuous mode
[ 1071.274178][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.300347][ T3014] bridge_slave_0: left allmulticast mode
[ 1071.306062][ T3014] bridge_slave_0: left promiscuous mode
[ 1071.318232][ T6755] Bluetooth: hci5: command tx timeout
[ 1071.325686][ T6755] Bluetooth: hci0: command tx timeout
[ 1071.346670][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.359725][ T3014] bridge_slave_1: left allmulticast mode
[ 1071.365460][ T3014] bridge_slave_1: left promiscuous mode
[ 1071.386487][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.423498][ T3014] bridge_slave_0: left allmulticast mode
[ 1071.438202][ T3014] bridge_slave_0: left promiscuous mode
[ 1071.444177][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.465097][ T3014] tipc: Resetting bearer <eth:bridge0>
[ 1071.730231][ T6755] Bluetooth: hci1: command tx timeout
[ 1071.806196][ T6755] Bluetooth: hci4: command tx timeout
[ 1072.746185][ T3014] tipc: Disabling bearer <eth:bridge0>
[ 1073.053490][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1073.065713][ T3014] bond0 (unregistering): Released all slaves
[ 1073.272657][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1073.284284][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1073.296848][ T3014] bond0 (unregistering): Released all slaves
[ 1073.311619][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1073.324375][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1073.335613][ T3014] bond0 (unregistering): Released all slaves
[ 1073.398371][ T5246] Bluetooth: hci5: command tx timeout
[ 1073.404021][ T6755] Bluetooth: hci0: command tx timeout
[ 1073.547004][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1073.559905][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1073.579877][ T3014] bond0 (unregistering): Released all slaves
[ 1073.767401][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1073.778683][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1073.789808][ T3014] bond0 (unregistering): Released all slaves
[ 1073.798414][ T6755] Bluetooth: hci1: command tx timeout
[ 1073.879000][ T6755] Bluetooth: hci4: command tx timeout
[ 1074.003657][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1074.015548][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1074.032223][ T3014] bond0 (unregistering): Released all slaves
[ 1074.150269][T10161] chnl_net:caif_netlink_parms(): no params data found
[ 1074.409946][ T3014] tipc: Left network mode
[ 1074.686750][ T3014] tipc: Disabling bearer <udp:syz2>
[ 1074.698287][T10161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1074.700261][ T3014] tipc: Left network mode
[ 1074.705399][T10161] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.748381][T10161] bridge_slave_0: entered allmulticast mode
[ 1074.762067][T10161] bridge_slave_0: entered promiscuous mode
[ 1074.780645][T10161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1074.787871][T10161] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.795504][T10161] bridge_slave_1: entered allmulticast mode
[ 1074.802671][T10161] bridge_slave_1: entered promiscuous mode
[ 1074.981399][T10161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1075.083966][T10161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1075.243315][T10161] team0: Port device team_slave_0 added
[ 1075.252655][T10161] team0: Port device team_slave_1 added
[ 1075.357772][T10161] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1075.375136][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1075.423555][T10161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1075.478411][ T6755] Bluetooth: hci5: command tx timeout
[ 1075.503552][T10161] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1075.510668][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1075.537435][T10161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1075.716079][T10161] hsr_slave_0: entered promiscuous mode
[ 1075.731116][T10161] hsr_slave_1: entered promiscuous mode
[ 1075.738521][T10161] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1075.746665][T10161] Cannot create hsr debugfs directory
[ 1076.244914][ T3014] hsr_slave_0: left promiscuous mode
[ 1076.256628][ T3014] hsr_slave_1: left promiscuous mode
[ 1076.267648][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1076.278909][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.286698][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1076.294405][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.302698][ T3014] hsr_slave_0: left promiscuous mode
[ 1076.309045][ T3014] hsr_slave_1: left promiscuous mode
[ 1076.318828][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.326660][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.337450][ T3014] hsr_slave_0: left promiscuous mode
[ 1076.346998][ T3014] hsr_slave_1: left promiscuous mode
[ 1076.353732][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1076.361639][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.370211][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1076.377682][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.389107][ T3014] hsr_slave_0: left promiscuous mode
[ 1076.395040][ T3014] hsr_slave_1: left promiscuous mode
[ 1076.402271][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1076.410020][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.417794][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1076.426169][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.437441][ T3014] hsr_slave_0: left promiscuous mode
[ 1076.443877][ T3014] hsr_slave_1: left promiscuous mode
[ 1076.450383][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1076.457843][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.465958][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1076.474757][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.549372][ T3014] veth1_macvtap: left promiscuous mode
[ 1076.554949][ T3014] veth0_macvtap: left promiscuous mode
[ 1076.560963][ T3014] veth1_vlan: left promiscuous mode
[ 1076.566257][ T3014] veth0_vlan: left promiscuous mode
[ 1076.572526][ T3014] veth1_macvtap: left promiscuous mode
[ 1076.578220][ T3014] veth0_macvtap: left promiscuous mode
[ 1076.583849][ T3014] veth1_vlan: left promiscuous mode
[ 1076.589598][ T3014] veth0_vlan: left promiscuous mode
[ 1076.595573][ T3014] veth1_macvtap: left promiscuous mode
[ 1076.601487][ T3014] veth0_macvtap: left promiscuous mode
[ 1076.607107][ T3014] veth1_vlan: left promiscuous mode
[ 1076.612886][ T3014] veth0_vlan: left promiscuous mode
[ 1076.619351][ T3014] veth1_macvtap: left promiscuous mode
[ 1076.624898][ T3014] veth0_macvtap: left promiscuous mode
[ 1076.630759][ T3014] veth1_vlan: left promiscuous mode
[ 1076.636065][ T3014] veth0_vlan: left promiscuous mode
[ 1077.551905][ T6755] Bluetooth: hci5: command tx timeout
[ 1077.687134][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1077.747275][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1078.503585][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1078.556469][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1079.392846][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1079.473773][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1081.215502][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1081.288737][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1082.486198][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1082.566390][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1083.536996][T10086] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1083.566082][T10086] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1083.614260][T10086] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1083.662569][T10086] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1083.941886][T10086] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1083.997043][T10086] 8021q: adding VLAN 0 to HW filter on device team0
[ 1084.050906][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1084.058143][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1084.132335][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1084.139647][ T5512] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1084.299324][T10082] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1084.332243][T10082] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1084.400284][T10082] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1084.430767][T10082] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1084.729626][T10086] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1084.744970][T10078] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1084.799956][T10078] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1084.850621][T10078] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1084.882550][T10078] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1085.076981][T10086] veth0_vlan: entered promiscuous mode
[ 1085.120591][T10082] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1085.202337][T10082] 8021q: adding VLAN 0 to HW filter on device team0
[ 1085.236800][T10060] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1085.249551][T10060] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1085.312871][T10086] veth1_vlan: entered promiscuous mode
[ 1085.346451][T10060] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1085.363343][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.370574][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1085.380889][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.388094][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1085.425326][T10060] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1085.586630][T10086] veth0_macvtap: entered promiscuous mode
[ 1085.746956][T10086] veth1_macvtap: entered promiscuous mode
[ 1085.765669][T10161] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1085.839719][T10161] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1085.864415][T10161] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1085.920986][T10161] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1085.967330][T10078] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1086.045870][T10078] 8021q: adding VLAN 0 to HW filter on device team0
[ 1086.080523][T10086] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1086.132012][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.139204][ T5512] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1086.160739][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1086.168044][ T5512] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1086.193888][T10086] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1086.272044][T10060] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1086.309772][T10086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.319976][T10086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.329232][T10086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.337966][T10086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.415687][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1086.446296][T10060] 8021q: adding VLAN 0 to HW filter on device team0
[ 1086.627067][ T2535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1086.636801][ T2535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1086.693861][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.701112][ T5512] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1086.731991][T10161] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1086.799037][ T3014] bridge_slave_1: left allmulticast mode
[ 1086.804761][ T3014] bridge_slave_1: left promiscuous mode
[ 1086.817767][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.839249][ T3014] bridge_slave_0: left allmulticast mode
[ 1086.844965][ T3014] bridge_slave_0: left promiscuous mode
[ 1086.851749][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.220478][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1087.242916][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1087.265985][ T3014] bond0 (unregistering): Released all slaves
[ 1087.294469][ T3014] bond0 (unregistering): Released all slaves
[ 1087.326929][ T3014] bond0 (unregistering): Released all slaves
[ 1087.356235][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.363455][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1087.431862][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1087.441330][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1087.524826][T10161] 8021q: adding VLAN 0 to HW filter on device team0
[ 1087.631455][ T3014] hsr_slave_0: left promiscuous mode
[ 1087.657578][ T3014] hsr_slave_1: left promiscuous mode
[ 1087.690334][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1087.712109][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1087.910732][T10331] loop3: detected capacity change from 0 to 1024
[ 1088.050431][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1088.372806][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1088.593019][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1089.797625][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.804784][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1089.821544][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1089.837576][T10082] veth0_vlan: entered promiscuous mode
[ 1089.883767][T10082] veth1_vlan: entered promiscuous mode
[ 1090.029045][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.036228][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1090.260204][T10161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1090.314262][T10082] veth0_macvtap: entered promiscuous mode
[ 1090.345188][T10361] loop3: detected capacity change from 0 to 32768
[ 1090.406863][T10082] veth1_macvtap: entered promiscuous mode
[ 1090.461913][T10078] veth0_vlan: entered promiscuous mode
[ 1090.545129][T10078] veth1_vlan: entered promiscuous mode
[ 1090.664032][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1090.716927][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.754578][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1090.795455][T10078] veth0_macvtap: entered promiscuous mode
[ 1090.827707][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1090.855783][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.874582][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1090.933500][T10082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.942851][T10082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.951784][T10082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.960719][T10082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.991920][T10060] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1091.025670][T10078] veth1_macvtap: entered promiscuous mode
[ 1091.071327][T10060] veth0_vlan: entered promiscuous mode
[ 1091.101301][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.136131][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.150457][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.163959][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.176858][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1091.230502][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.258137][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.270434][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1091.287544][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.300485][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1091.346940][T10161] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1091.356826][T10060] veth1_vlan: entered promiscuous mode
[ 1091.404189][T10078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.438335][T10078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.447109][T10078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.479736][T10078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.579468][ T5513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1091.587516][ T5513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.697408][T10060] veth0_macvtap: entered promiscuous mode
[ 1091.741975][T10060] veth1_macvtap: entered promiscuous mode
[ 1091.751952][ T5510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1091.776865][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1091.786004][ T5510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.815869][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.906651][T10060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.931190][T10060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1091.961677][T10060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1091.998122][T10060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.019329][T10060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.038272][T10060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.049845][T10060] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1092.060926][T10060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.071628][T10060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.081726][T10060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.092566][T10060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.102640][T10060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.113803][T10060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.125864][T10060] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1092.140755][ T5513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1092.149511][ T5513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1092.163865][T10060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.173191][T10060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.188187][T10060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.196931][T10060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.424705][T10161] veth0_vlan: entered promiscuous mode
[ 1092.449500][ T5510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1092.476390][ T5510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1092.565078][T10161] veth1_vlan: entered promiscuous mode
[ 1092.599141][ T2535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1092.608228][ T2535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1092.634147][T10400] loop3: detected capacity change from 0 to 32768
[ 1092.706018][T10161] veth0_macvtap: entered promiscuous mode
[ 1092.784292][T10161] veth1_macvtap: entered promiscuous mode
[ 1092.803782][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.815091][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.825843][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.834123][T10408] loop2: detected capacity change from 0 to 32768
[ 1092.839059][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.854363][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.865238][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.881634][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.892236][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.903798][T10161] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1092.914391][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.925011][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.927471][T10408] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.622 (10408)
[ 1092.935364][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.959436][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.969383][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.980045][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.990176][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1093.000837][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.012298][T10161] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1093.023088][T10161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.031999][T10161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.041814][T10161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.052098][T10161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.146058][T10418] loop0: detected capacity change from 0 to 256
[ 1093.152907][T10408] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[ 1093.163963][T10408] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1093.176203][T10408] BTRFS info (device loop2): using free-space-tree
[ 1093.191717][T10400] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1093.367290][T10086] ocfs2: Unmounting device (7,3) on (node local)
[ 1094.046613][ T5512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1094.056571][ T2535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1094.148027][ T5512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1094.171806][ T2535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1094.419788][   T29] audit: type=1804 audit(1094.371:48): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.622" name="/newroot/1/file0/bus" dev="loop2" ino=263 res=1 errno=0
[ 1094.497206][T10449] loop3: detected capacity change from 0 to 512
[ 1094.570228][T10449] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.625: casefold flag without casefold feature
[ 1094.657178][T10449] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.625: couldn't read orphan inode 15 (err -117)
[ 1094.681778][T10449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1094.965762][T10086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1094.983482][T10082] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[ 1096.192992][T10457] loop1: detected capacity change from 0 to 32768
[ 1096.557889][T10465] loop0: detected capacity change from 0 to 32768
[ 1096.703901][T10457] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1096.786133][T10465] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1097.157542][T10060] ocfs2: Unmounting device (7,1) on (node local)
[ 1097.542986][T10465] XFS (loop0): Ending clean mount
[ 1099.045314][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[ 1100.357379][T10078] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1101.644488][T10520] loop1: detected capacity change from 0 to 2048
[ 1101.838660][T10527] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1101.986040][   T29] audit: type=1800 audit(1101.941:49): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.646" name="file2" dev="loop1" ino=16 res=0 errno=0
[ 1102.042273][   T29] audit: type=1800 audit(1101.941:50): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.646" name="file2" dev="loop1" ino=16 res=0 errno=0
[ 1102.042290][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.1.646 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0
[ 1102.072927][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1102.074993][T10533] loop3: detected capacity change from 0 to 256
[ 1102.083007][T10520] Call Trace:
[ 1102.083023][T10520]  <TASK>
[ 1102.083034][T10520]  dump_stack_lvl+0x241/0x360
[ 1102.083082][T10520]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1102.101509][T10533] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1102.105446][T10520]  ? __se_sys_sendfile64+0x17c/0x1e0
[ 1102.121361][T10520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1102.127470][T10520]  nilfs_btree_do_lookup+0xb7b/0xcf0
[ 1102.132802][T10520]  ? __pfx_nilfs_btree_do_lookup+0x10/0x10
[ 1102.138662][T10520]  ? rcu_is_watching+0x15/0xb0
[ 1102.143443][T10520]  ? kmem_cache_alloc_noprof+0x22d/0x380
[ 1102.149103][T10520]  nilfs_btree_lookup_contig+0x2b5/0xfc0
[ 1102.154771][T10520]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1102.161135][T10520]  ? down_read+0x82b/0xa40
[ 1102.165582][T10520]  ? __pfx_nilfs_btree_lookup_contig+0x10/0x10
[ 1102.171760][T10520]  ? filemap_write_and_wait_range+0x1cb/0x280
[ 1102.177853][T10520]  ? __pfx_down_read+0x10/0x10
[ 1102.182640][T10520]  nilfs_bmap_lookup_contig+0x8f/0x160
[ 1102.188123][T10520]  nilfs_get_block+0x245/0x8e0
[ 1102.192917][T10520]  ? __pfx_nilfs_get_block+0x10/0x10
[ 1102.198224][T10520]  ? iov_iter_extract_bvec_pages+0x533/0x5b0
[ 1102.204236][T10520]  ? __pfx_nilfs_get_block+0x10/0x10
[ 1102.209537][T10520]  __blockdev_direct_IO+0x1c8e/0x4890
[ 1102.214984][T10520]  ? __pfx___blockdev_direct_IO+0x10/0x10
[ 1102.220738][T10520]  ? __pfx_nilfs_get_block+0x10/0x10
[ 1102.226071][T10520]  ? __se_sys_sendfile64+0x17c/0x1e0
[ 1102.231390][T10520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1102.237525][T10520]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1102.243531][T10520]  nilfs_direct_IO+0xe8/0x120
[ 1102.248234][T10520]  generic_file_read_iter+0x228/0x420
[ 1102.253635][T10520]  copy_splice_read+0x663/0xb60
[ 1102.258518][T10520]  ? __pfx_copy_splice_read+0x10/0x10
[ 1102.263938][T10520]  ? alloc_pipe_info+0x370/0x4d0
[ 1102.268903][T10520]  splice_direct_to_actor+0x4fa/0xc80
[ 1102.274309][T10520]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1102.279958][T10520]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1102.285873][T10520]  ? __fget_files+0x28/0x430
[ 1102.290482][T10520]  ? __pfx_lock_release+0x10/0x10
[ 1102.295521][T10520]  do_splice_direct+0x289/0x3e0
[ 1102.300391][T10520]  ? __pfx_do_splice_direct+0x10/0x10
[ 1102.305783][T10520]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1102.311723][T10520]  ? rw_verify_area+0x1c3/0x6f0
[ 1102.316594][T10520]  do_sendfile+0x561/0xe10
[ 1102.321042][T10520]  ? __pfx_do_sendfile+0x10/0x10
[ 1102.326011][T10520]  __se_sys_sendfile64+0x17c/0x1e0
[ 1102.331155][T10520]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1102.336809][T10520]  ? do_syscall_64+0x100/0x230
[ 1102.341610][T10520]  ? do_syscall_64+0xb6/0x230
[ 1102.346320][T10520]  do_syscall_64+0xf3/0x230
[ 1102.350863][T10520]  ? clear_bhb_loop+0x35/0x90
[ 1102.355573][T10520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1102.361497][T10520] RIP: 0033:0x7f30c357dff9
[ 1102.365939][T10520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1102.385563][T10520] RSP: 002b:00007f30c42fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1102.393996][T10520] RAX: ffffffffffffffda RBX: 00007f30c3735f80 RCX: 00007f30c357dff9
[ 1102.401977][T10520] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[ 1102.409977][T10520] RBP: 00007f30c35f0296 R08: 0000000000000000 R09: 0000000000000000
[ 1102.417978][T10520] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000000
[ 1102.425977][T10520] R13: 0000000000000000 R14: 00007f30c3735f80 R15: 00007ffe368e7b58
[ 1102.433985][T10520]  </TASK>
[ 1102.522249][T10533] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[ 1102.585179][T10520] NILFS (loop1): btree level mismatch (ino=16): 1 != 7
[ 1102.605089][T10520] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1102.664134][T10520] Remounting filesystem read-only
[ 1104.499145][   T29] audit: type=1804 audit(1104.041:51): pid=10546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.650" name="/newroot/11/file0/bus" dev="loop3" ino=1048813 res=1 errno=0
[ 1104.828156][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1104.974414][T10550] loop3: detected capacity change from 0 to 128
[ 1105.080941][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1105.093707][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1105.125143][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1105.252156][T10538] loop2: detected capacity change from 0 to 32768
[ 1105.355519][T10538] BTRFS: device /dev/loop2 (7:2) using temp-fsid 5e2927e1-0f19-40e7-a164-7632ce7d4b0d
[ 1105.527311][T10538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.651 (10538)
[ 1106.151044][    T9] usb 2-1: config 0 descriptor??
[ 1107.300620][    T9] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[ 1107.323382][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input14
[ 1107.539876][    T9] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 1107.636709][    T9] usb 2-1: USB disconnect, device number 12
[ 1109.477151][T10601] loop1: detected capacity change from 0 to 512
[ 1109.766900][T10601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1110.361414][ T8492] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[ 1110.589618][   T29] audit: type=1800 audit(1110.341:52): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.669" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1110.658462][   T29] audit: type=1800 audit(1110.341:53): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.669" name="file2" dev="loop1" ino=16 res=0 errno=0
[ 1110.686233][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.724063][   T29] audit: type=1800 audit(1110.341:54): pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.669" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1110.767550][ T8492] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1110.779216][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1110.823928][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1110.844071][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1110.918187][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1110.955300][ T8492] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1110.964055][   T29] audit: type=1800 audit(1110.341:55): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.669" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1111.068082][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1111.086849][   T29] audit: type=1800 audit(1110.341:56): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.669" name="file2" dev="loop1" ino=16 res=0 errno=0
[ 1111.938391][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1111.948709][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1111.960066][ T8492] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1112.084423][ T8492] usb 1-1: unable to read config index 2 descriptor/start: -71
[ 1112.093935][ T8492] usb 1-1: can't read configurations, error -71
[ 1112.217612][T10619] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1113.476110][T10625] loop3: detected capacity change from 0 to 128
[ 1113.578272][T10625] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978)
[ 1113.942525][T10633] loop0: detected capacity change from 0 to 2048
[ 1114.255140][T10625] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 1114.335894][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1114.385591][T10620] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.674: checksumming directory block 0
[ 1115.938122][T10625] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.674: checksumming directory block 0
[ 1115.953265][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1116.090103][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1116.182872][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.202070][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.239994][T10627] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1116.333874][T10641] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1116.542773][T10086] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1116.568745][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1116.575911][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1117.263199][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1117.319190][T10641] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1117.347465][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1117.440114][T10627] ip6gretap0 speed is unknown, defaulting to 1000
[ 1117.457880][T10641] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1117.945122][T10641] Remounting filesystem read-only
[ 1117.946084][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1117.952478][T10633] NILFS (loop0): mounting fs with errors
[ 1117.963498][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1117.964793][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1117.997294][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1118.006324][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1118.015459][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1118.738780][T10656] loop2: detected capacity change from 0 to 512
[ 1119.468905][T10647] ip6gretap0 speed is unknown, defaulting to 1000
[ 1120.447242][ T6755] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1120.456235][ T6755] Bluetooth: hci4: Injecting HCI hardware error event
[ 1120.464407][ T6755] Bluetooth: hci2: command tx timeout
[ 1120.471383][ T6755] Bluetooth: hci4: hardware error 0x00
[ 1120.963802][T10659] netlink: 'syz.3.686': attribute type 1 has an invalid length.
[ 1120.993858][T10659] netlink: 'syz.3.686': attribute type 2 has an invalid length.
[ 1121.061023][T10656] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2.
[ 1121.562033][T10641] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1121.588210][T10641] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1121.597389][T10641] Remounting filesystem read-only
[ 1121.709452][T10078] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[ 1121.720296][T10671] netlink: 'syz.3.690': attribute type 2 has an invalid length.
[ 1121.784585][T10671] netlink: 'syz.3.690': attribute type 1 has an invalid length.
[ 1121.807629][T10671] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.690'.
[ 1122.053508][T10660] loop1: detected capacity change from 0 to 32768
[ 1122.075577][T10660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.685 (10660)
[ 1122.136769][T10647] chnl_net:caif_netlink_parms(): no params data found
[ 1122.153950][T10660] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1122.186527][T10660] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1122.300601][T10660] BTRFS info (device loop1): rebuilding free space tree
[ 1122.386786][T10660] BTRFS info (device loop1): disabling free space tree
[ 1122.411980][ T3014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.425930][T10660] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1122.437770][T10660] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1122.511666][ T5246] Bluetooth: hci2: command tx timeout
[ 1122.781031][ T3014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.820949][T10060] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1122.927661][T10709] loop3: detected capacity change from 0 to 256
[ 1122.959976][T10647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.008831][T10709] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[ 1123.028246][T10647] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.035612][T10647] bridge_slave_0: entered allmulticast mode
[ 1123.054414][T10647] bridge_slave_0: entered promiscuous mode
[ 1123.072055][T10709] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1123.157387][ T3014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.229924][T10647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.271817][T10647] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.293802][T10647] bridge_slave_1: entered allmulticast mode
[ 1123.319764][T10647] bridge_slave_1: entered promiscuous mode
[ 1123.390504][T10717] netlink: 'syz.1.696': attribute type 2 has an invalid length.
[ 1123.401964][T10717] netlink: 'syz.1.696': attribute type 8 has an invalid length.
[ 1123.491132][T10719] loop2: detected capacity change from 0 to 1024
[ 1123.545193][ T3014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.618504][ T6755] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1124.673461][ T6755] Bluetooth: hci2: command tx timeout
[ 1125.011914][T10723] loop1: detected capacity change from 0 to 131072
[ 1125.220701][T10723] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1125.323288][T10723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1125.493107][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1125.556811][ T5512] hfsplus: b-tree write err: -5, ino 4
[ 1125.591725][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1125.970523][T10011] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1126.150556][T10736] loop3: detected capacity change from 0 to 40427
[ 1126.158316][T10011] usb 3-1: Using ep0 maxpacket: 32
[ 1126.193847][T10736] F2FS-fs (loop3): heap/no_heap options were deprecated
[ 1126.201086][T10736] F2FS-fs (loop3): Image doesn't support compression
[ 1126.226208][T10736] F2FS-fs (loop3): invalid crc value
[ 1126.289762][T10736] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1126.416382][T10736] F2FS-fs (loop3): Start checkpoint disabled!
[ 1126.439700][T10736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1126.611169][T10742] loop1: detected capacity change from 0 to 512
[ 1126.622056][T10011] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1126.633293][T10011] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1126.643869][T10011] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1126.653777][T10011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.664802][T10011] usb 3-1: config 0 descriptor??
[ 1126.674564][ T5513] kworker/u8:15: attempt to access beyond end of device
[ 1126.674564][ T5513] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[ 1126.682600][T10647] team0: Port device team_slave_0 added
[ 1126.700869][T10742] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.704: corrupted in-inode xattr: invalid ea_ino
[ 1126.731291][T10647] team0: Port device team_slave_1 added
[ 1126.748974][ T5246] Bluetooth: hci2: command tx timeout
[ 1126.762677][T10742] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.704: couldn't read orphan inode 15 (err -117)
[ 1126.793440][ T5513] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1126.808905][ T5513] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1126.819056][T10746] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1126.823357][ T5513] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1126.863899][T10742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1126.930153][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1126.937215][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1126.974650][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1126.988848][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1126.995851][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1127.022775][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1127.041226][ T3014] bridge_slave_1: left allmulticast mode
[ 1127.054177][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1127.100843][ T3014] bridge_slave_1: left promiscuous mode
[ 1127.106829][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.121929][T10011] hkems 0003:2006:0118.0005: item fetching failed at offset 1/5
[ 1127.133415][T10011] hkems 0003:2006:0118.0005: parse failed
[ 1127.139346][T10011] hkems 0003:2006:0118.0005: probe with driver hkems failed with error -22
[ 1127.197453][T10750] siw: device registration error -23
[ 1127.229567][ T3014] bridge_slave_0: left allmulticast mode
[ 1127.238095][ T3014] bridge_slave_0: left promiscuous mode
[ 1127.247235][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.451644][ T5287] usb 3-1: USB disconnect, device number 8
[ 1128.625328][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'.
[ 1130.246365][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1131.064919][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1131.081364][ T3014] bond0 (unregistering): Released all slaves
[ 1131.510548][T10647] hsr_slave_0: entered promiscuous mode
[ 1131.552327][T10647] hsr_slave_1: entered promiscuous mode
[ 1131.587227][T10792] loop2: detected capacity change from 0 to 1024
[ 1132.108953][ T5511] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1132.298462][ T5511] usb 2-1: Using ep0 maxpacket: 8
[ 1132.640613][ T5511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1132.688042][ T5511] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1132.697153][ T5511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.758303][ T5511] usb 2-1: config 0 descriptor??
[ 1132.793908][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1133.173497][ T5511] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1134.073421][ T3014] hsr_slave_0: left promiscuous mode
[ 1134.101716][ T3014] hsr_slave_1: left promiscuous mode
[ 1134.215698][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1134.234456][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1134.259741][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1134.282043][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1135.110226][ T5288] usb 2-1: USB disconnect, device number 13
[ 1135.128879][ T3014] veth1_macvtap: left promiscuous mode
[ 1135.156547][ T3014] veth0_macvtap: left promiscuous mode
[ 1135.182135][ T3014] veth1_vlan: left promiscuous mode
[ 1135.187645][ T3014] veth0_vlan: left promiscuous mode
[ 1137.509979][T10849] loop1: detected capacity change from 0 to 1024
[ 1137.932975][ T6755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1137.948214][ T6755] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1137.957889][ T6755] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1137.968112][ T6755] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1137.977099][ T6755] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1137.997082][ T6755] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1138.008217][ T5513] hfsplus: b-tree write err: -5, ino 4
[ 1139.158161][ T5324] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1139.468356][ T5324] usb 2-1: Using ep0 maxpacket: 8
[ 1139.529516][ T5324] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1139.576202][ T5324] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1139.649636][ T5324] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1139.778071][ T5324] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1139.798635][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 1139.819102][ T5324] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1139.863081][ T5324] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1139.902794][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.950962][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 1140.090854][T10868] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1140.120066][ T5246] Bluetooth: hci5: command tx timeout
[ 1140.158580][ T5324] usb 2-1: GET_CAPABILITIES returned 0
[ 1140.174072][ T5324] usbtmc 2-1:16.0: can't read capabilities
[ 1140.314146][T10872] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1140.404185][ T5324] usb 2-1: USB disconnect, device number 14
[ 1140.506375][T10874] siw: device registration error -23
[ 1140.979249][T10825] netlink: 'syz.2.724': attribute type 10 has an invalid length.
[ 1140.993936][T10825] geneve0: entered promiscuous mode
[ 1141.035951][T10825] bond0: (slave geneve0): Enslaving as an active interface with an up link
[ 1142.132833][T10855] ip6gretap0 speed is unknown, defaulting to 1000
[ 1142.206484][ T5246] Bluetooth: hci5: command tx timeout
[ 1143.166380][T10886] loop2: detected capacity change from 0 to 1024
[ 1145.403346][ T6755] Bluetooth: hci5: command tx timeout
[ 1145.677876][ T5500] hfsplus: b-tree write err: -5, ino 4
[ 1146.119435][T10855] chnl_net:caif_netlink_parms(): no params data found
[ 1146.982045][T10647] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1147.051156][T10910] netlink: 'syz.2.747': attribute type 2 has an invalid length.
[ 1147.110837][T10910] netlink: 'syz.2.747': attribute type 1 has an invalid length.
[ 1147.184389][T10910] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.747'.
[ 1147.238279][T10647] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1147.355041][T10855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1147.372741][T10855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1147.407421][T10855] bridge_slave_0: entered allmulticast mode
[ 1147.439377][T10855] bridge_slave_0: entered promiscuous mode
[ 1147.462997][T10647] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1147.471133][ T6755] Bluetooth: hci5: command tx timeout
[ 1147.512308][T10921] dummy0: entered promiscuous mode
[ 1147.551140][T10855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1147.600026][T10855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1147.607318][T10855] bridge_slave_1: entered allmulticast mode
[ 1147.658905][T10855] bridge_slave_1: entered promiscuous mode
[ 1147.676373][T10647] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1147.803071][T10855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1147.837303][T10855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1148.833578][T10855] team0: Port device team_slave_0 added
[ 1149.007158][T10914] loop1: detected capacity change from 0 to 32768
[ 1149.209283][T10914] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1149.243046][ T3014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.911366][T10855] team0: Port device team_slave_1 added
[ 1149.936364][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1149.958328][T10914] XFS (loop1): Ending clean mount
[ 1149.958485][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.008884][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1150.043981][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.055828][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1150.073968][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.095517][T10060] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1150.106640][T10954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1150.215964][T10954] batadv_slave_0: entered promiscuous mode
[ 1150.338475][T10969] loop3: detected capacity change from 0 to 128
[ 1150.352090][T10969] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 1150.382683][T10855] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1150.391698][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1150.437690][T10855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1150.607886][ T3014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1150.646468][T10855] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1150.718318][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1150.768632][T10855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1150.977568][T10979] loop1: detected capacity change from 0 to 1024
[ 1151.026403][ T3014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.730092][T10855] hsr_slave_0: entered promiscuous mode
[ 1151.766644][T10855] hsr_slave_1: entered promiscuous mode
[ 1151.795749][T10855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1151.819605][ T5500] hfsplus: b-tree write err: -5, ino 4
[ 1151.853634][T10855] Cannot create hsr debugfs directory
[ 1152.063091][ T3014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.119670][T10647] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1152.141208][T10647] 8021q: adding VLAN 0 to HW filter on device team0
[ 1152.177587][T10994] netlink: 'syz.2.762': attribute type 2 has an invalid length.
[ 1152.190257][T10647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1152.203213][T10994] netlink: 'syz.2.762': attribute type 1 has an invalid length.
[ 1152.212378][T10647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1152.223533][T10994] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.762'.
[ 1152.296780][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1152.304046][ T5500] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1152.359081][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1152.366278][ T5500] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1152.478558][ T5287] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1152.728593][ T5287] usb 4-1: Using ep0 maxpacket: 8
[ 1152.813424][ T5287] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1152.964384][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.005469][ T5287] usb 4-1: Product: syz
[ 1153.036799][ T5287] usb 4-1: Manufacturer: syz
[ 1153.067294][ T5287] usb 4-1: SerialNumber: syz
[ 1153.399883][ T5287] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1153.452202][ T3014] bridge_slave_1: left allmulticast mode
[ 1153.476094][ T3014] bridge_slave_1: left promiscuous mode
[ 1153.482101][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.532902][ T3014] bridge_slave_0: left allmulticast mode
[ 1153.549028][ T3014] bridge_slave_0: left promiscuous mode
[ 1153.554797][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1153.603952][ T5324] usb 4-1: USB disconnect, device number 9
[ 1153.620796][ T5324] usblp0: removed
[ 1153.672473][T10999] loop2: detected capacity change from 0 to 32768
[ 1153.725572][T10999] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1153.925549][T10082] ocfs2: Unmounting device (7,2) on (node local)
[ 1154.548362][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1154.564019][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1154.577136][ T3014] bond0 (unregistering): Released all slaves
[ 1154.608741][T11009] netlink: 'syz.1.765': attribute type 29 has an invalid length.
[ 1154.804424][T10647] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1155.533082][T11025] loop3: detected capacity change from 0 to 1024
[ 1155.792769][ T5508] hfsplus: b-tree write err: -5, ino 4
[ 1155.810757][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'.
[ 1157.904494][T11056] loop2: detected capacity change from 0 to 16
[ 1157.950027][T11056] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1157.979348][T11056] ------------[ cut here ]------------
[ 1157.984972][T11056] WARNING: CPU: 0 PID: 11056 at fs/iomap/iter.c:51 iomap_iter+0x9db/0xf60
[ 1157.993783][T11056] Modules linked in:
[ 1157.997726][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.2.776 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0
[ 1158.008283][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1158.022637][T11056] RIP: 0010:iomap_iter+0x9db/0xf60
[ 1158.027828][T11056] Code: 0f 0b 90 e9 0a f9 ff ff e8 d2 10 62 ff 90 0f 0b 90 e9 42 fd ff ff e8 c4 10 62 ff 90 0f 0b 90 e9 71 fd ff ff e8 b6 10 62 ff 90 <0f> 0b 90 e9 d5 fd ff ff e8 a8 10 62 ff 90 0f 0b 90 43 80 3c 2e 00
[ 1158.047914][T11056] RSP: 0018:ffffc9000427f6e0 EFLAGS: 00010287
[ 1158.054112][T11056] RAX: ffffffff8232e26a RBX: 0000000000074726 RCX: 0000000000040000
[ 1158.062245][T11056] RDX: ffffc90012a9b000 RSI: 0000000000000477 RDI: 0000000000000478
[ 1158.070799][T11056] RBP: 0000000000079b03 R08: ffffffff8232e03a R09: 1ffffd4000172706
[ 1158.079223][T11056] R10: dffffc0000000000 R11: fffff94000172707 R12: 1ffff9200084ff05
[ 1158.087252][T11056] R13: dffffc0000000000 R14: 1ffff9200084ff04 R15: ffffc9000427f820
[ 1158.095541][T11056] FS:  00007f2e5f2a76c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1158.104718][T11056] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1158.111529][T11056] CR2: 000000110c3fd7b6 CR3: 0000000032ee8000 CR4: 00000000003526f0
[ 1158.119709][T11056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1158.127729][T11056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1158.135865][T11056] Call Trace:
[ 1158.139278][T11056]  <TASK>
[ 1158.142260][T11056]  ? __warn+0x168/0x4e0
[ 1158.146464][T11056]  ? iomap_iter+0x9db/0xf60
[ 1158.151141][T11056]  ? report_bug+0x2b3/0x500
[ 1158.155737][T11056]  ? iomap_iter+0x9db/0xf60
[ 1158.160415][T11056]  ? handle_bug+0x60/0x90
[ 1158.164789][T11056]  ? exc_invalid_op+0x1a/0x50
[ 1158.169605][T11056]  ? asm_exc_invalid_op+0x1a/0x20
[ 1158.174962][T11056]  ? iomap_iter+0x7aa/0xf60
[ 1158.180171][T11056]  ? iomap_iter+0x9da/0xf60
[ 1158.184740][T11056]  ? iomap_iter+0x9db/0xf60
[ 1158.189552][T11056]  iomap_fiemap+0x1d0/0x9b0
[ 1158.194118][T11056]  ? __pfx_iomap_fiemap+0x10/0x10
[ 1158.199411][T11056]  ? __might_fault+0xc6/0x120
[ 1158.204223][T11056]  ? __pfx_erofs_fiemap+0x10/0x10
[ 1158.209446][T11056]  do_vfs_ioctl+0x1bf8/0x2e40
[ 1158.214405][T11056]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1158.219923][T11056]  ? mark_lock+0x9a/0x360
[ 1158.224323][T11056]  ? tomoyo_path_number_perm+0x208/0x880
[ 1158.230112][T11056]  ? __pfx_lock_release+0x10/0x10
[ 1158.235180][T11056]  ? lockdep_hardirqs_on+0x99/0x150
[ 1158.240570][T11056]  ? kfree+0x1a0/0x460
[ 1158.244704][T11056]  ? tomoyo_path_number_perm+0x68d/0x880
[ 1158.250784][T11056]  ? tomoyo_path_number_perm+0x71a/0x880
[ 1158.256481][T11056]  ? __lock_acquire+0x1384/0x2050
[ 1158.261682][T11056]  ? tomoyo_path_number_perm+0x208/0x880
[ 1158.267448][T11056]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1158.273750][T11056]  ? __fget_files+0x28/0x430
[ 1158.278818][T11056]  ? __fget_files+0x28/0x430
[ 1158.283483][T11056]  __se_sys_ioctl+0x81/0x170
[ 1158.288638][T11056]  do_syscall_64+0xf3/0x230
[ 1158.293278][T11056]  ? clear_bhb_loop+0x35/0x90
[ 1158.298159][T11056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.304113][T11056] RIP: 0033:0x7f2e5e57dff9
[ 1158.308682][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1158.328469][T11056] RSP: 002b:00007f2e5f2a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1158.336954][T11056] RAX: ffffffffffffffda RBX: 00007f2e5e735f80 RCX: 00007f2e5e57dff9
[ 1158.345330][T11056] RDX: 0000000020000180 RSI: 00000000c020660b RDI: 0000000000000004
[ 1158.354990][T11056] RBP: 00007f2e5e5f0296 R08: 0000000000000000 R09: 0000000000000000
[ 1158.363279][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1158.371525][T11056] R13: 0000000000000000 R14: 00007f2e5e735f80 R15: 00007ffd9517e018
[ 1158.380171][T11056]  </TASK>
[ 1158.383232][T11056] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1158.390662][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.2.776 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0
[ 1158.400864][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1158.410972][T11056] Call Trace:
[ 1158.414287][T11056]  <TASK>
[ 1158.417250][T11056]  dump_stack_lvl+0x241/0x360
[ 1158.421987][T11056]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1158.427243][T11056]  ? __pfx__printk+0x10/0x10
[ 1158.431893][T11056]  ? vscnprintf+0x5d/0x90
[ 1158.436263][T11056]  panic+0x349/0x880
[ 1158.440209][T11056]  ? __warn+0x177/0x4e0
[ 1158.444414][T11056]  ? __pfx_panic+0x10/0x10
[ 1158.448930][T11056]  __warn+0x34b/0x4e0
[ 1158.452958][T11056]  ? iomap_iter+0x9db/0xf60
[ 1158.457514][T11056]  report_bug+0x2b3/0x500
[ 1158.461890][T11056]  ? iomap_iter+0x9db/0xf60
[ 1158.466532][T11056]  handle_bug+0x60/0x90
[ 1158.470726][T11056]  exc_invalid_op+0x1a/0x50
[ 1158.475268][T11056]  asm_exc_invalid_op+0x1a/0x20
[ 1158.480259][T11056] RIP: 0010:iomap_iter+0x9db/0xf60
[ 1158.485423][T11056] Code: 0f 0b 90 e9 0a f9 ff ff e8 d2 10 62 ff 90 0f 0b 90 e9 42 fd ff ff e8 c4 10 62 ff 90 0f 0b 90 e9 71 fd ff ff e8 b6 10 62 ff 90 <0f> 0b 90 e9 d5 fd ff ff e8 a8 10 62 ff 90 0f 0b 90 43 80 3c 2e 00
[ 1158.505083][T11056] RSP: 0018:ffffc9000427f6e0 EFLAGS: 00010287
[ 1158.511202][T11056] RAX: ffffffff8232e26a RBX: 0000000000074726 RCX: 0000000000040000
[ 1158.519331][T11056] RDX: ffffc90012a9b000 RSI: 0000000000000477 RDI: 0000000000000478
[ 1158.527340][T11056] RBP: 0000000000079b03 R08: ffffffff8232e03a R09: 1ffffd4000172706
[ 1158.535368][T11056] R10: dffffc0000000000 R11: fffff94000172707 R12: 1ffff9200084ff05
[ 1158.543383][T11056] R13: dffffc0000000000 R14: 1ffff9200084ff04 R15: ffffc9000427f820
[ 1158.551409][T11056]  ? iomap_iter+0x7aa/0xf60
[ 1158.555964][T11056]  ? iomap_iter+0x9da/0xf60
[ 1158.560540][T11056]  iomap_fiemap+0x1d0/0x9b0
[ 1158.565102][T11056]  ? __pfx_iomap_fiemap+0x10/0x10
[ 1158.570192][T11056]  ? __might_fault+0xc6/0x120
[ 1158.574917][T11056]  ? __pfx_erofs_fiemap+0x10/0x10
[ 1158.579989][T11056]  do_vfs_ioctl+0x1bf8/0x2e40
[ 1158.584716][T11056]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1158.589785][T11056]  ? mark_lock+0x9a/0x360
[ 1158.594177][T11056]  ? tomoyo_path_number_perm+0x208/0x880
[ 1158.599956][T11056]  ? __pfx_lock_release+0x10/0x10
[ 1158.605022][T11056]  ? lockdep_hardirqs_on+0x99/0x150
[ 1158.610273][T11056]  ? kfree+0x1a0/0x460
[ 1158.614384][T11056]  ? tomoyo_path_number_perm+0x68d/0x880
[ 1158.620067][T11056]  ? tomoyo_path_number_perm+0x71a/0x880
[ 1158.625751][T11056]  ? __lock_acquire+0x1384/0x2050
[ 1158.630816][T11056]  ? tomoyo_path_number_perm+0x208/0x880
[ 1158.636502][T11056]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1158.642572][T11056]  ? __fget_files+0x28/0x430
[ 1158.647218][T11056]  ? __fget_files+0x28/0x430
[ 1158.651881][T11056]  __se_sys_ioctl+0x81/0x170
[ 1158.656514][T11056]  do_syscall_64+0xf3/0x230
[ 1158.661069][T11056]  ? clear_bhb_loop+0x35/0x90
[ 1158.665793][T11056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.671744][T11056] RIP: 0033:0x7f2e5e57dff9
[ 1158.676237][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1158.695887][T11056] RSP: 002b:00007f2e5f2a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1158.704355][T11056] RAX: ffffffffffffffda RBX: 00007f2e5e735f80 RCX: 00007f2e5e57dff9
[ 1158.712384][T11056] RDX: 0000000020000180 RSI: 00000000c020660b RDI: 0000000000000004
[ 1158.720397][T11056] RBP: 00007f2e5e5f0296 R08: 0000000000000000 R09: 0000000000000000
[ 1158.728960][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1158.736970][T11056] R13: 0000000000000000 R14: 00007f2e5e735f80 R15: 00007ffd9517e018
[ 1158.745001][T11056]  </TASK>
[ 1158.748415][T11056] Kernel Offset: disabled
[ 1158.752776][T11056] Rebooting in 86400 seconds..