last executing test programs:

7.244597161s ago: executing program 1 (id=726):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0)

6.565895741s ago: executing program 1 (id=733):
r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x96)

6.244294126s ago: executing program 1 (id=737):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90)

6.009349789s ago: executing program 1 (id=741):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000100)=ANY=[@ANYBLOB='errors=remount-ro,discard,dmask=00000000000000000000002,errors=continue,errors=remount-ro,keep_last_dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c0000640f51632569c476e867488d0cf29c7ce7dcece2", @ANYRESHEX=0xee01, @ANYBLOB=',errors=continue,fmask=00000000000000000000007,iocharset=iso8859-4,\x00'], 0x1, 0x152a, &(0x7f0000002900)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)

5.474077387s ago: executing program 1 (id=748):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000d80)={@loopback, @loopback, @mcast1, 0x7, 0xf000, 0x2, 0x180, 0xfff, 0x5040000})

4.723733049s ago: executing program 1 (id=756):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0xfc, 0x1ca, &(0x7f00000008c0)="$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")
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='security.#{--*1j'], 0x0, 0x0)

4.192619867s ago: executing program 32 (id=756):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0xfc, 0x1ca, &(0x7f00000008c0)="$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")
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='security.#{--*1j'], 0x0, 0x0)

1.586535106s ago: executing program 0 (id=786):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00')
preadv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/130, 0x82}], 0x1, 0x400001, 0xffffc)

1.535189136s ago: executing program 3 (id=787):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

1.394296249s ago: executing program 0 (id=788):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x46, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x0, 0x3, 0x8, 0x8008, 0x28000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000800, 0x1000001, 0x15b}})

1.30955628s ago: executing program 2 (id=789):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000003b0007010000000000000000037c00000400fc800c00018006"], 0x34}}, 0xc000)

1.123740143s ago: executing program 3 (id=790):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000100)=0x18)

1.096456123s ago: executing program 0 (id=791):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x20804c, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

978.052415ms ago: executing program 2 (id=792):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10)

904.462126ms ago: executing program 3 (id=793):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, 0x0, 0x0)

846.168287ms ago: executing program 0 (id=794):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0)
lseek(r0, 0x9864, 0x0)

690.545189ms ago: executing program 2 (id=795):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4}}, 0x24, 0x0)

676.853739ms ago: executing program 3 (id=796):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f000000050015000c0000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000)

553.260501ms ago: executing program 3 (id=797):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c80)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x5, 0x0, 0x7})

525.826032ms ago: executing program 2 (id=798):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)

483.527062ms ago: executing program 0 (id=799):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006380600800a0000080002"], 0x38}}, 0xc000)

379.912774ms ago: executing program 3 (id=800):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0x8800000)

240.126366ms ago: executing program 0 (id=801):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="2e070400000001cc12df"], 0x0, 0x0, 0x0, 0x0, 0x0})

163.739468ms ago: executing program 2 (id=802):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000))

0s ago: executing program 2 (id=803):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000d0927bd7000ffdbdf2500000000", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts.
[   81.504688][ T5775] cgroup: Unknown subsys name 'net'
[   81.644153][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.342067][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.031886][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.045180][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.053920][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.076997][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.105341][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.120052][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.127740][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.135523][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.136727][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.143710][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.152324][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.158947][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.167218][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.173812][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.179398][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.187205][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.194576][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.200290][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.207670][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.213939][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.221015][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.235335][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.245491][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.265208][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.823508][ T5789] chnl_net:caif_netlink_parms(): no params data found
[   85.860553][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   86.002027][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.010214][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.018057][ T5789] bridge_slave_0: entered allmulticast mode
[   86.025529][ T5789] bridge_slave_0: entered promiscuous mode
[   86.033757][ T5790] chnl_net:caif_netlink_parms(): no params data found
[   86.051955][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   86.081080][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.089025][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.096353][ T5789] bridge_slave_1: entered allmulticast mode
[   86.103395][ T5789] bridge_slave_1: entered promiscuous mode
[   86.174643][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.182022][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.190454][ T5784] bridge_slave_0: entered allmulticast mode
[   86.197593][ T5784] bridge_slave_0: entered promiscuous mode
[   86.205833][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.212987][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.220245][ T5784] bridge_slave_1: entered allmulticast mode
[   86.227733][ T5784] bridge_slave_1: entered promiscuous mode
[   86.251249][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.297093][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.383248][ T5789] team0: Port device team_slave_0 added
[   86.389593][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.397451][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.404658][ T5790] bridge_slave_0: entered allmulticast mode
[   86.411876][ T5790] bridge_slave_0: entered promiscuous mode
[   86.421407][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.439078][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.451510][ T5789] team0: Port device team_slave_1 added
[   86.458017][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.465782][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.473038][ T5790] bridge_slave_1: entered allmulticast mode
[   86.480346][ T5790] bridge_slave_1: entered promiscuous mode
[   86.578862][ T5784] team0: Port device team_slave_0 added
[   86.602167][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.611908][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.619837][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.627790][ T5788] bridge_slave_0: entered allmulticast mode
[   86.634862][ T5788] bridge_slave_0: entered promiscuous mode
[   86.644692][ T5784] team0: Port device team_slave_1 added
[   86.651944][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.659688][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.685689][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.699782][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.706891][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.733266][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.747031][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.771365][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.778718][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.786615][ T5788] bridge_slave_1: entered allmulticast mode
[   86.793639][ T5788] bridge_slave_1: entered promiscuous mode
[   86.871451][ T5790] team0: Port device team_slave_0 added
[   86.891605][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.899974][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.927274][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.940158][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.947231][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.973724][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.987362][ T5790] team0: Port device team_slave_1 added
[   87.002449][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.040529][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.077222][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.084233][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.111136][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.165529][ T5789] hsr_slave_0: entered promiscuous mode
[   87.172168][ T5789] hsr_slave_1: entered promiscuous mode
[   87.180023][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.187965][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.213997][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.257802][ T5784] hsr_slave_0: entered promiscuous mode
[   87.269867][ T5784] hsr_slave_1: entered promiscuous mode
[   87.277535][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.290607][ T5784] Cannot create hsr debugfs directory
[   87.299638][ T5788] team0: Port device team_slave_0 added
[   87.305921][ T5787] Bluetooth: hci3: command tx timeout
[   87.311716][ T5787] Bluetooth: hci0: command tx timeout
[   87.317763][ T5799] Bluetooth: hci2: command tx timeout
[   87.318455][ T5788] team0: Port device team_slave_1 added
[   87.390256][ T5787] Bluetooth: hci1: command tx timeout
[   87.449203][ T5790] hsr_slave_0: entered promiscuous mode
[   87.455961][ T5790] hsr_slave_1: entered promiscuous mode
[   87.462319][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.470277][ T5790] Cannot create hsr debugfs directory
[   87.513827][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.521167][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.547420][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.615840][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.622861][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.649652][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.802327][ T5788] hsr_slave_0: entered promiscuous mode
[   87.809428][ T5788] hsr_slave_1: entered promiscuous mode
[   87.817779][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.825679][ T5788] Cannot create hsr debugfs directory
[   88.153452][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.173461][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.184686][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.205386][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.270563][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.281741][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.293911][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.311042][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.375906][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.390668][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.418663][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.430043][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.528316][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.540187][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.553586][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.571763][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.687940][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.751741][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[   88.771433][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.778874][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.829307][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.843044][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.850311][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.870721][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.897003][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.910047][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   88.936758][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.943922][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.964187][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   89.004571][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   89.013826][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.021042][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.078030][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.085217][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.094508][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.101782][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.116103][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.123266][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.139331][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.146910][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.385128][ T5787] Bluetooth: hci0: command tx timeout
[   89.385896][   T50] Bluetooth: hci2: command tx timeout
[   89.390601][ T5787] Bluetooth: hci3: command tx timeout
[   89.465020][ T5787] Bluetooth: hci1: command tx timeout
[   89.672954][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.772401][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.873457][ T5789] veth0_vlan: entered promiscuous mode
[   89.900856][ T5789] veth1_vlan: entered promiscuous mode
[   89.913309][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.971940][ T5788] veth0_vlan: entered promiscuous mode
[   90.017111][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.030876][ T5788] veth1_vlan: entered promiscuous mode
[   90.079933][ T5789] veth0_macvtap: entered promiscuous mode
[   90.098703][ T5784] veth0_vlan: entered promiscuous mode
[   90.113637][ T5784] veth1_vlan: entered promiscuous mode
[   90.140891][ T5789] veth1_macvtap: entered promiscuous mode
[   90.178128][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.193685][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.233244][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.242525][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.253284][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.263406][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.283641][ T5790] veth0_vlan: entered promiscuous mode
[   90.309291][ T5788] veth0_macvtap: entered promiscuous mode
[   90.361149][ T5788] veth1_macvtap: entered promiscuous mode
[   90.372388][ T5790] veth1_vlan: entered promiscuous mode
[   90.383522][ T5784] veth0_macvtap: entered promiscuous mode
[   90.429666][ T5784] veth1_macvtap: entered promiscuous mode
[   90.454236][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.466499][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.479715][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.497771][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.508999][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.521221][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.559411][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.571122][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.581129][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.591881][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.604245][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.620970][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.630097][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.639469][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.649464][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.678324][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.687694][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.693245][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.707327][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.719242][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.730041][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.741390][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.793030][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.815303][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.833503][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.842678][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.852305][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.862427][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.918071][ T5790] veth0_macvtap: entered promiscuous mode
[   90.961260][ T5790] veth1_macvtap: entered promiscuous mode
[   91.069760][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.104338][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.144444][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.162398][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.172630][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   91.185153][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.196172][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   91.203106][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.215786][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.229421][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.251479][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.325405][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.328049][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.351295][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.361180][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.369712][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.381705][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.392950][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.431270][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.452166][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.463748][ T5884] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6'.
[   91.465323][ T5787] Bluetooth: hci3: command tx timeout
[   91.473611][ T5799] Bluetooth: hci2: command tx timeout
[   91.479229][ T5787] Bluetooth: hci0: command tx timeout
[   91.549685][ T5787] Bluetooth: hci1: command tx timeout
[   91.573178][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.586441][   T27] audit: type=1326 audit(1751987391.325:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898e929 code=0x7ffc0000
[   91.588620][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.618183][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.633700][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.634517][   T27] audit: type=1326 audit(1751987391.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898e929 code=0x7ffc0000
[   91.643115][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.689129][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.728292][   T27] audit: type=1326 audit(1751987391.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f7ce898e929 code=0x7ffc0000
[   91.815122][   T27] audit: type=1326 audit(1751987391.345:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898e929 code=0x7ffc0000
[   91.857198][   T27] audit: type=1326 audit(1751987391.345:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898e929 code=0x7ffc0000
[   91.904174][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.913436][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.079940][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.115097][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.302361][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.331179][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.359040][   T55] cfg80211: failed to load regulatory.db
[   92.801763][ T5914] syz.0.18[5914]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   92.862179][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   92.894609][ T5914] loop0: detected capacity change from 0 to 2048
[   93.046449][ T5914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.220868][ T5914] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.18: inline data xattr refers to an external xattr inode
[   93.276930][ T5914] EXT4-fs (loop0): Remounting filesystem read-only
[   93.401268][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.548944][ T5787] Bluetooth: hci0: command tx timeout
[   93.549020][ T5799] Bluetooth: hci2: command tx timeout
[   93.554412][ T5787] Bluetooth: hci3: command tx timeout
[   93.625786][ T5787] Bluetooth: hci1: command tx timeout
[   93.757986][ T5939] Illegal XDP return value 3514726244 on prog  (id 3) dev N/A, expect packet loss!
[   93.983056][ T5946] loop1: detected capacity change from 0 to 64
[   94.251921][ T5954] xt_hashlimit: size too large, truncated to 1048576
[   94.285190][ T5954] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[   94.298118][ T5956] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   95.353576][ T5995] loop1: detected capacity change from 0 to 256
[   95.628698][ T6005] AppArmor: change_hat: Invalid input '0'
[   95.738715][ T6007] loop2: detected capacity change from 0 to 256
[   95.877101][ T6007] FAT-fs (loop2): Directory bread(block 64) failed
[   95.907199][ T6007] FAT-fs (loop2): Directory bread(block 65) failed
[   95.913941][ T6007] FAT-fs (loop2): Directory bread(block 66) failed
[   95.965305][ T6007] FAT-fs (loop2): Directory bread(block 67) failed
[   95.972099][ T6007] FAT-fs (loop2): Directory bread(block 68) failed
[   96.030922][ T6007] FAT-fs (loop2): Directory bread(block 69) failed
[   96.055389][ T6007] FAT-fs (loop2): Directory bread(block 70) failed
[   96.062003][ T6007] FAT-fs (loop2): Directory bread(block 71) failed
[   96.095166][ T6007] FAT-fs (loop2): Directory bread(block 72) failed
[   96.133321][ T6007] FAT-fs (loop2): Directory bread(block 73) failed
[   96.659439][ T6031] loop3: detected capacity change from 0 to 2048
[   96.728998][ T6031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.907134][ T6040] syz.2.77: attempt to access beyond end of device
[   96.907134][ T6040] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0
[   96.926354][ T6041] loop1: detected capacity change from 0 to 1024
[   96.952814][ T6040] syz.2.77: attempt to access beyond end of device
[   96.952814][ T6040] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0
[   97.012098][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.068801][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   97.112393][ T6040] syz.2.77: attempt to access beyond end of device
[   97.112393][ T6040] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0
[   97.166090][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   97.200942][ T6040] syz.2.77: attempt to access beyond end of device
[   97.200942][ T6040] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[   97.227151][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.241304][ T6040] syz.2.77: attempt to access beyond end of device
[   97.241304][ T6040] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[   97.255980][ T6049] loop0: detected capacity change from 0 to 1024
[   97.271746][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   97.282829][ T6040] syz.2.77: attempt to access beyond end of device
[   97.282829][ T6040] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[   97.297380][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   97.358114][ T6040] syz.2.77: attempt to access beyond end of device
[   97.358114][ T6040] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[   97.411385][ T6040] syz.2.77: attempt to access beyond end of device
[   97.411385][ T6040] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[   97.444333][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   97.506300][ T6040] syz.2.77: attempt to access beyond end of device
[   97.506300][ T6040] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[   97.542012][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   97.577662][ T2896] hfsplus: b-tree write err: -5, ino 4
[   97.596592][ T6040] syz.2.77: attempt to access beyond end of device
[   97.596592][ T6040] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[   97.645426][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   97.661135][ T6040] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   97.681169][ T6040] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[   97.786499][ T6059] loop1: detected capacity change from 0 to 256
[   98.029278][ T6063] loop0: detected capacity change from 0 to 2048
[   98.102824][ T6063] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   98.206326][ T6071] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.360455][ T6063] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1)
[   98.770188][ T6085] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.97'.
[   98.954785][   T27] audit: type=1326 audit(1751987398.685:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc398e929 code=0x7ffc0000
[   99.044902][   T27] audit: type=1326 audit(1751987398.685:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc398e929 code=0x7ffc0000
[   99.164966][   T27] audit: type=1326 audit(1751987398.735:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7ffbc398e929 code=0x7ffc0000
[   99.243867][   T27] audit: type=1326 audit(1751987398.735:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc398e929 code=0x7ffc0000
[   99.256043][ T6100] netlink: 'syz.3.106': attribute type 10 has an invalid length.
[   99.272352][   T27] audit: type=1326 audit(1751987398.735:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc398e929 code=0x7ffc0000
[   99.299771][ T6100] syz_tun: entered promiscuous mode
[   99.340356][ T6100] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   99.465298][  T971] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   99.524520][ T6073] loop1: detected capacity change from 0 to 40427
[   99.565294][ T6073] F2FS-fs (loop1): invalid crc value
[   99.599444][ T6073] F2FS-fs (loop1): Found nat_bits in checkpoint
[   99.670798][  T971] usb 1-1: Using ep0 maxpacket: 8
[   99.707195][  T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   99.758516][  T971] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[   99.802879][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.814499][ T6073] F2FS-fs (loop1): Start checkpoint disabled!
[   99.840665][  T971] usb 1-1: config 0 descriptor??
[   99.880374][ T6073] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   99.890048][  T971] hso 1-1:0.0: Can't find BULK IN endpoint
[  100.016230][ T6073] F2FS-fs (loop1): disabling checkpoint not compatible with read-only
[  100.139273][  T971] usb 1-1: USB disconnect, device number 2
[  100.423799][ T6127] netlink: 'syz.2.119': attribute type 21 has an invalid length.
[  100.433534][ T6127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.119'.
[  100.447659][ T6127] netlink: 'syz.2.119': attribute type 4 has an invalid length.
[  100.461553][ T6127] netlink: 3 bytes leftover after parsing attributes in process `syz.2.119'.
[  100.768803][ T6139] netlink: 'syz.2.122': attribute type 10 has an invalid length.
[  100.794918][ T6139] netlink: 156 bytes leftover after parsing attributes in process `syz.2.122'.
[  100.835700][ T6141] (null): rxe_set_mtu: Set mtu to 4096
[  100.848905][ T6141] lo speed is unknown, defaulting to 1000
[  100.878917][ T6141] lo speed is unknown, defaulting to 1000
[  100.930386][ T6141] lo speed is unknown, defaulting to 1000
[  101.255631][ T6151] openvswitch: netlink: Message has 8 unknown bytes.
[  101.448908][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'.
[  101.473025][ T6141] infiniband syz0: set active
[  101.482181][ T6141] infiniband syz0: added lo
[  101.491022][  T971] lo speed is unknown, defaulting to 1000
[  101.572400][ T6141] RDS/IB: syz0: added
[  101.580286][ T6141] smc: adding ib device syz0 with port count 1
[  101.587576][ T6141] smc:    ib device syz0 port 1 has pnetid 
[  101.595213][ T5856] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.606019][ T6162] vlan0: entered promiscuous mode
[  101.649397][ T6141] lo speed is unknown, defaulting to 1000
[  101.677481][   T28] lo speed is unknown, defaulting to 1000
[  101.808053][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  101.823315][ T5856] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  101.849305][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.869003][ T5856] usb 1-1: config 0 descriptor??
[  101.910226][ T5856] smsusb:smsusb_probe: board id=8, interface number 0
[  101.935031][ T5856] smsusb:smsusb_probe: Device initialized with return code -19
[  102.126644][ T6141] lo speed is unknown, defaulting to 1000
[  102.150080][ T5856] usb 1-1: USB disconnect, device number 3
[  102.447790][ T6141] lo speed is unknown, defaulting to 1000
[  102.454929][  T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  102.649277][  T788] usb 3-1: Using ep0 maxpacket: 8
[  102.662465][  T788] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  102.674801][  T788] usb 3-1: config 0 has no interface number 0
[  102.687943][  T788] usb 3-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f7.bd
[  102.703969][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.730654][  T788] usb 3-1: Product: syz
[  102.737360][  T788] usb 3-1: Manufacturer: syz
[  102.742025][  T788] usb 3-1: SerialNumber: syz
[  102.768956][  T788] usb 3-1: config 0 descriptor??
[  102.792579][ T6141] lo speed is unknown, defaulting to 1000
[  102.891068][ T6189] netlink: 14 bytes leftover after parsing attributes in process `syz.3.148'.
[  103.005465][  T788] usb 3-1: USB disconnect, device number 2
[  103.404244][ T6200] loop3: detected capacity change from 0 to 4096
[  103.412113][ T6202] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffb,16)
[  103.445627][ T6200] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  103.718462][ T6200] ntfs3: loop3: ino=0, attr_set_size
[  103.853698][ T6215] capability: warning: `syz.0.160' uses deprecated v2 capabilities in a way that may be insecure
[  104.442257][ T6229] loop1: detected capacity change from 0 to 4096
[  104.461210][ T6229] =======================================================
[  104.461210][ T6229] WARNING: The mand mount option has been deprecated and
[  104.461210][ T6229]          and is ignored by this kernel. Remove the mand
[  104.461210][ T6229]          option from the mount to silence this warning.
[  104.461210][ T6229] =======================================================
[  104.526512][ T6229] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  104.702395][ T6229] ntfs3: loop1: failed to convert "c46c" to cp863
[  105.273397][ T6259] loop1: detected capacity change from 0 to 128
[  105.322128][ T6261] trusted_key: encrypted_key: keyword 'ne' not recognized
[  105.368612][ T5785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  105.560091][ T6269] lo: entered promiscuous mode
[  105.585023][ T6269] lo: entered allmulticast mode
[  105.609897][ T6269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.009267][ T6283] vlan0: entered promiscuous mode
[  106.125039][  T788] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  106.364390][  T788] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  106.374669][  T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.406059][  T788] usb 2-1: config 0 has no interface number 0
[  106.418942][  T788] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  106.444861][  T788] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  106.474563][ T6302] loop2: detected capacity change from 0 to 512
[  106.481408][  T788] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.521969][  T788] usb 2-1: config 0 interface 52 has no altsetting 0
[  106.526544][ T6302] EXT4-fs: Ignoring removed i_version option
[  106.549047][  T788] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  106.560879][ T6302] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  106.588000][  T788] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  106.602074][  T788] usb 2-1: Product: syz
[  106.612882][  T788] usb 2-1: Manufacturer: syz
[  106.626189][ T6302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  106.634317][ T6302] System zones: 1-12
[  106.645226][  T788] usb 2-1: SerialNumber: syz
[  106.649389][ T6302] EXT4-fs (loop2): orphan cleanup on readonly fs
[  106.653112][  T788] usb 2-1: config 0 descriptor??
[  106.671479][ T6302] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.203: invalid indirect mapped block 12 (level 1)
[  106.702065][ T6302] EXT4-fs (loop2): Remounting filesystem read-only
[  106.716199][ T6302] EXT4-fs (loop2): 1 truncate cleaned up
[  106.724567][ T6302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  106.837030][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  106.917180][  T788] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  106.961721][  T788] synaptics_usb: probe of 2-1:0.52 failed with error -5
[  107.077660][ T6315] IPv6: Can't replace route, no match found
[  107.166490][   T28] usb 2-1: USB disconnect, device number 2
[  107.261735][ T6323] loop3: detected capacity change from 0 to 1024
[  107.325209][ T6323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.347608][ T6325] netlink: 'syz.0.214': attribute type 2 has an invalid length.
[  107.375618][ T6323] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  107.407064][ T6323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.491410][ T6323] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  107.555918][ T6323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.213: missing EA_INODE flag
[  107.612437][ T6323] EXT4-fs (loop3): Remounting filesystem read-only
[  107.713662][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.859976][ T6338] loop2: detected capacity change from 0 to 4096
[  107.886665][ T6338] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  107.936556][ T6345] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0
[  108.368590][ T6358] netlink: 'syz.3.228': attribute type 1 has an invalid length.
[  108.384098][ T6358] netlink: 220 bytes leftover after parsing attributes in process `syz.3.228'.
[  108.511706][   T27] audit: type=1326 audit(1751987408.245:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48478e929 code=0x7ffc0000
[  108.582947][   T27] audit: type=1326 audit(1751987408.245:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48478e929 code=0x7ffc0000
[  108.605307][    C1] vkms_vblank_simulate: vblank timer overrun
[  108.649731][   T27] audit: type=1326 audit(1751987408.285:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff48478e929 code=0x7ffc0000
[  108.672044][    C1] vkms_vblank_simulate: vblank timer overrun
[  108.723326][   T27] audit: type=1326 audit(1751987408.285:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48478e929 code=0x7ffc0000
[  108.778045][   T27] audit: type=1326 audit(1751987408.285:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48478e929 code=0x7ffc0000
[  109.339179][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'.
[  109.682467][ T6393] loop0: detected capacity change from 0 to 4096
[  109.772992][ T6393] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  110.118138][ T6405] xt_hashlimit: invalid rate
[  110.637059][ T6415] loop1: detected capacity change from 0 to 512
[  110.668764][ T6415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  110.704829][ T6415] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.747288][ T6415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.862968][ T6415] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.250: Invalid block bitmap block 0 in block_group 0
[  110.957357][ T6415] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  110.991421][ T6415] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.250: attempt to clear invalid blocks 983261 len 1
[  111.036064][ T6415] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.250: Invalid inode table block 0 in block_group 0
[  111.060996][ T6415] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  111.106456][ T6415] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  111.120694][ T5828] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  111.175307][ T6415] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.250: Invalid inode table block 0 in block_group 0
[  111.210015][ T6415] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  111.232708][ T6407] loop3: detected capacity change from 0 to 32768
[  111.259181][ T6415] EXT4-fs error (device loop1): ext4_truncate:4288: inode #11: comm syz.1.250: mark_inode_dirty error
[  111.293677][ T6407] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.305352][ T6415] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  111.324555][ T6415] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.250: Invalid inode table block 0 in block_group 0
[  111.345203][ T5828] usb 3-1: Using ep0 maxpacket: 16
[  111.353066][ T6415] EXT4-fs (loop1): 1 truncate cleaned up
[  111.363757][ T5828] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  111.366513][ T6415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.392694][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.414990][ T5828] usb 3-1: Product: syz
[  111.419415][ T5828] usb 3-1: Manufacturer: syz
[  111.424109][ T5828] usb 3-1: SerialNumber: syz
[  111.448695][ T5828] r8152-cfgselector 3-1: config 0 descriptor??
[  111.504435][ T6415] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.250: Invalid inode bitmap blk 0 in block_group 0
[  111.586144][ T6407] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  111.624251][  T788] IPVS: starting estimator thread 0...
[  111.629990][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.648702][ T6407] XFS (loop3): Starting recovery (logdev: internal)
[  111.712230][ T6407] XFS (loop3): Ending recovery (logdev: internal)
[  111.720329][ T6445] IPVS: using max 17 ests per chain, 40800 per kthread
[  111.897247][ T5828] r8152-cfgselector 3-1: Unknown version 0x0000
[  111.917067][ T5828] r8152-cfgselector 3-1: USB disconnect, device number 3
[  111.951664][ T5790] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.453263][ T6461] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.564300][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'.
[  113.233719][ T6489] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  113.280464][ T6494] loop0: detected capacity change from 0 to 64
[  113.285348][ T6489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  113.748337][ T6508] sctp: [Deprecated]: syz.2.290 (pid 6508) Use of int in maxseg socket option.
[  113.748337][ T6508] Use struct sctp_assoc_value instead
[  114.260076][ T6529] netlink: 'syz.3.301': attribute type 3 has an invalid length.
[  114.422661][ T6536] loop3: detected capacity change from 0 to 64
[  114.545442][ T5828] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  114.762834][ T5828] usb 1-1: Using ep0 maxpacket: 8
[  114.791405][ T5828] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  114.825318][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.837724][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[  114.852201][ T5828] usb 1-1: config 0 has no interface number 0
[  114.904431][ T6550] xt_hashlimit: max too large, truncated to 1048576
[  114.907569][ T5828] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  114.926725][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.947645][ T5828] usb 1-1: Product: syz
[  114.952368][ T5828] usb 1-1: Manufacturer: syz
[  114.967637][ T5828] usb 1-1: SerialNumber: syz
[  114.982891][ T5828] usb 1-1: config 0 descriptor??
[  115.226415][ T5828] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  115.232956][ T5828] usb 1-1: No valid video chain found.
[  115.491192][   T55] usb 1-1: USB disconnect, device number 4
[  116.156489][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.333'.
[  116.543612][ T6607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.339'.
[  116.988151][ T6620] loop2: detected capacity change from 0 to 1024
[  117.097263][ T6620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.161212][ T6629] netlink: 56 bytes leftover after parsing attributes in process `syz.0.348'.
[  117.304636][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.402966][ T6633] overlayfs: missing 'lowerdir'
[  117.432102][ T6608] loop3: detected capacity change from 0 to 32768
[  117.527329][ T6608] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.615819][ T6647] loop2: detected capacity change from 0 to 128
[  117.815010][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[  117.846945][ T6608] XFS (loop3): Ending clean mount
[  117.928156][ T6608] XFS (loop3): Quotacheck needed: Please wait.
[  118.041628][ T6655] loop0: detected capacity change from 0 to 1024
[  118.046117][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.357'.
[  118.086437][ T6608] XFS (loop3): Quotacheck: Done.
[  118.287186][   T48] hfsplus: b-tree write err: -5, ino 4
[  118.330303][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.471420][ T6664] loop2: detected capacity change from 0 to 128
[  118.876424][ T6672] xt_connbytes: Forcing CT accounting to be enabled
[  119.191169][ T6659] loop1: detected capacity change from 0 to 32768
[  119.263280][ T6659] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  119.389275][ T6688] loop3: detected capacity change from 0 to 2048
[  119.481970][ T6688] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  119.508758][ T6688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.519526][ T6659] XFS (loop1): Ending clean mount
[  119.542817][ T6698] loop2: detected capacity change from 0 to 512
[  119.575305][ T6698] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.620382][ T6698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.703711][ T6698] EXT4-fs (loop2): 1 truncate cleaned up
[  119.743188][ T6698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.764988][  T971] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  119.814052][ T5784] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  119.858960][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.976551][  T971] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  120.000520][  T971] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  120.042150][  T971] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  120.061589][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'.
[  120.072605][  T971] usb 1-1: config 220 has no interface number 2
[  120.099250][  T971] usb 1-1: config 220 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  120.159305][  T971] usb 1-1: Duplicate descriptor for config 220 interface 1 altsetting 0, skipping
[  120.208654][  T971] usb 1-1: config 220 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  120.226195][  T971] usb 1-1: config 220 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  120.242765][  T971] usb 1-1: config 220 interface 0 has no altsetting 0
[  120.253261][  T971] usb 1-1: config 220 interface 76 has no altsetting 0
[  120.267162][  T971] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  120.284766][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.295010][  T971] usb 1-1: Product: syz
[  120.299238][  T971] usb 1-1: Manufacturer: syz
[  120.303879][  T971] usb 1-1: SerialNumber: syz
[  120.561990][ T6717] loop2: detected capacity change from 0 to 512
[  120.571977][  T971] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  120.590441][  T971] usb 1-1: No valid video chain found.
[  120.651486][  T971] usb 1-1: USB disconnect, device number 5
[  120.688388][ T6717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.743178][ T6717] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.952036][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.582824][ T6753] loop2: detected capacity change from 0 to 512
[  121.615382][ T6753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  121.651721][ T6757] loop3: detected capacity change from 0 to 128
[  121.662473][ T6757] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  121.682174][ T6753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.699340][ T6753] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.786521][ T6757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.859067][ T6753] EXT4-fs error (device loop2): ext4_xattr_block_find:1886: inode #15: comm syz.2.399: corrupted xattr block 32: bad e_name length
[  122.034461][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.378723][ T6782] bridge0: port 3(gretap0) entered blocking state
[  122.400655][ T6782] bridge0: port 3(gretap0) entered disabled state
[  122.437037][ T6782] gretap0: entered allmulticast mode
[  122.465254][ T6782] gretap0: entered promiscuous mode
[  122.477590][ T6782] bridge0: port 3(gretap0) entered blocking state
[  122.485259][ T6782] bridge0: port 3(gretap0) entered forwarding state
[  122.746760][ T6794] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  122.760793][ T6794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  123.871315][ T6800] loop0: detected capacity change from 0 to 40427
[  123.879313][ T6831] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[  123.897489][ T6800] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  123.914790][ T6800] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  123.957900][ T6800] F2FS-fs (loop0): invalid crc value
[  124.000243][ T6800] F2FS-fs (loop0): Found nat_bits in checkpoint
[  124.199927][ T6800] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  124.218152][ T6800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  124.481418][ T6852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.441'.
[  124.619030][ T6854] binder: 6853:6854 ioctl c018620c 0 returned -14
[  124.713600][ T6856] loop3: detected capacity change from 0 to 2048
[  124.760342][ T6856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.837777][ T6861] loop1: detected capacity change from 0 to 1024
[  124.898687][ T6861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.010588][ T6861] overlay: Unknown parameter 'subj_type'
[  125.311334][ T6871] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.872580][ T6889] sctp: [Deprecated]: syz.3.461 (pid 6889) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.872580][ T6889] Use struct sctp_sack_info instead
[  126.271890][ T6905] loop0: detected capacity change from 0 to 256
[  126.361753][ T6905] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d)
[  127.718859][ T6943] loop0: detected capacity change from 0 to 4096
[  127.744652][ T6929] loop1: detected capacity change from 0 to 32768
[  127.751137][ T6943] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  127.865317][ T6929] (syz.1.478,6929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.919371][ T6929] (syz.1.478,6929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.977813][ T6939] loop2: detected capacity change from 0 to 32768
[  128.009658][ T6929] JBD2: Ignoring recovery information on journal
[  128.030177][ T6931] loop3: detected capacity change from 0 to 40427
[  128.049012][ T6931] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  128.064848][ T6931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  128.097178][ T6931] F2FS-fs (loop3): invalid crc value
[  128.131225][ T6929] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  128.196730][ T6931] F2FS-fs (loop3): Found nat_bits in checkpoint
[  128.252026][ T6939] ialloc: diAlloc returned -5!
[  128.453161][ T6931] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  128.491051][ T6931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  128.604173][ T6953] loop2: detected capacity change from 0 to 1764
[  128.623955][ T6931] bio_check_eod: 3 callbacks suppressed
[  128.623974][ T6931] syz.3.481: attempt to access beyond end of device
[  128.623974][ T6931] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.656185][ T6950] loop0: detected capacity change from 0 to 8192
[  128.707684][ T5784] ocfs2: Unmounting device (7,1) on (node local)
[  128.755651][ T6953] iso9660: Corrupted directory entry in block 2 of inode 1920
[  128.768363][ T6950] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  129.357535][ T6963] loop2: detected capacity change from 0 to 4096
[  129.419434][ T6963] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  129.533855][ T6963] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  129.685091][ T6963] ntfs3: loop2: failed to convert "c46c" to cp874
[  130.280529][ T6989] loop1: detected capacity change from 0 to 256
[  130.325233][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'.
[  130.347941][ T6989] FAT-fs (loop1): Directory bread(block 64) failed
[  130.350690][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'.
[  130.386937][ T6989] FAT-fs (loop1): Directory bread(block 65) failed
[  130.406528][ T6989] FAT-fs (loop1): Directory bread(block 66) failed
[  130.413141][ T6989] FAT-fs (loop1): Directory bread(block 67) failed
[  130.444977][ T6989] FAT-fs (loop1): Directory bread(block 68) failed
[  130.471962][ T6989] FAT-fs (loop1): Directory bread(block 69) failed
[  130.519251][ T6989] FAT-fs (loop1): Directory bread(block 70) failed
[  130.542659][ T6989] FAT-fs (loop1): Directory bread(block 71) failed
[  130.566520][ T6989] FAT-fs (loop1): Directory bread(block 72) failed
[  130.573148][ T6989] FAT-fs (loop1): Directory bread(block 73) failed
[  130.847646][ T7003] loop3: detected capacity change from 0 to 2048
[  130.927853][ T7008] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.971775][ T7003] syz.3.514: attempt to access beyond end of device
[  130.971775][ T7003] loop3: rw=0, sector=2102, nr_sectors = 2 limit=2048
[  131.051962][ T7003] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=12)
[  131.084009][ T7003] syz.3.514: attempt to access beyond end of device
[  131.084009][ T7003] loop3: rw=0, sector=2102, nr_sectors = 2 limit=2048
[  131.137281][ T7003] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=12)
[  131.175143][ T7003] NILFS (loop3): error -5 truncating bmap (ino=16)
[  131.940972][ T7038] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[  132.120685][ T7016] loop0: detected capacity change from 0 to 32768
[  132.202202][ T7016] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.520 (7016)
[  132.365643][ T7016] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  132.405600][ T7016] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  132.431979][ T7016] BTRFS info (device loop0): force zlib compression, level 3
[  132.475454][ T7016] BTRFS info (device loop0): force clearing of disk cache
[  132.482716][ T7016] BTRFS info (device loop0): setting nodatasum
[  132.503784][ T7016] BTRFS info (device loop0): allowing degraded mounts
[  132.526695][ T7016] BTRFS info (device loop0): using free space tree
[  132.783693][ T7016] BTRFS info (device loop0): auto enabling async discard
[  132.851919][ T7016] BTRFS info (device loop0): rebuilding free space tree
[  133.253166][ T7016] BTRFS info (device loop0): balance: start -susage=34359738372,drange=7..526332,limit=3..6
[  133.315779][ T7016] BTRFS info (device loop0): balance: ended with status: 0
[  133.326281][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  133.333048][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  133.369523][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.548'.
[  133.587634][ T5789] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  134.083665][ T5785] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 12 /dev/loop0 scanned by udevd (5785)
[  134.478331][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.564'.
[  134.729091][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.571'.
[  134.891961][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.571'.
[  134.962850][ T7139] warning: `syz.3.573' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  135.037167][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.571'.
[  135.077430][ T7145] bond1: entered promiscuous mode
[  135.082760][ T7145] bond1: entered allmulticast mode
[  135.088893][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.442639][ T7156] syz.0.579: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  135.489566][ T7156] CPU: 1 PID: 7156 Comm: syz.0.579 Not tainted 6.6.96-syzkaller #0
[  135.497561][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.507699][ T7156] Call Trace:
[  135.511029][ T7156]  <TASK>
[  135.514003][ T7156]  dump_stack_lvl+0x16c/0x230
[  135.518759][ T7156]  ? show_regs_print_info+0x20/0x20
[  135.524018][ T7156]  ? load_image+0x3b0/0x3b0
[  135.528584][ T7156]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  135.535086][ T7156]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  135.541661][ T7156]  warn_alloc+0x210/0x300
[  135.546056][ T7156]  ? stack_trace_save+0x9c/0xe0
[  135.550973][ T7156]  ? zone_watermark_ok_safe+0x230/0x230
[  135.556585][ T7156]  ? kasan_set_track+0x5f/0x70
[  135.561418][ T7156]  ? kasan_set_track+0x4e/0x70
[  135.566326][ T7156]  ? __kasan_kmalloc+0x8f/0xa0
[  135.571150][ T7156]  ? xsk_init_queue+0xb0/0x110
[  135.575982][ T7156]  ? xsk_setsockopt+0x43c/0x6f0
[  135.580974][ T7156]  ? do_sock_setsockopt+0x254/0x3e0
[  135.586256][ T7156]  ? __x64_sys_setsockopt+0x1be/0x250
[  135.591698][ T7156]  __vmalloc_node_range+0x126/0x1320
[  135.597089][ T7156]  ? free_vm_area+0x50/0x50
[  135.601814][ T7156]  vmalloc_user+0x74/0x80
[  135.606203][ T7156]  ? xskq_create+0xbf/0x170
[  135.610740][ T7156]  xskq_create+0xbf/0x170
[  135.615104][ T7156]  xsk_init_queue+0xb0/0x110
[  135.619728][ T7156]  xsk_setsockopt+0x43c/0x6f0
[  135.624436][ T7156]  ? xsk_poll+0x670/0x670
[  135.628794][ T7156]  ? aa_sock_opt_perm+0x74/0x100
[  135.633763][ T7156]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  135.639344][ T7156]  ? security_socket_setsockopt+0x7e/0xa0
[  135.645092][ T7156]  ? xsk_poll+0x670/0x670
[  135.649453][ T7156]  do_sock_setsockopt+0x254/0x3e0
[  135.654516][ T7156]  ? __ia32_sys_recv+0xb0/0xb0
[  135.659323][ T7156]  ? __fdget+0x180/0x210
[  135.663618][ T7156]  __x64_sys_setsockopt+0x1be/0x250
[  135.668855][ T7156]  do_syscall_64+0x55/0xb0
[  135.673295][ T7156]  ? clear_bhb_loop+0x40/0x90
[  135.677996][ T7156]  ? clear_bhb_loop+0x40/0x90
[  135.682706][ T7156]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.688629][ T7156] RIP: 0033:0x7f7ce898e929
[  135.693082][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.712715][ T7156] RSP: 002b:00007f7ce987b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  135.721158][ T7156] RAX: ffffffffffffffda RBX: 00007f7ce8bb5fa0 RCX: 00007f7ce898e929
[  135.729208][ T7156] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  135.737200][ T7156] RBP: 00007f7ce8a10b39 R08: 0000000000000004 R09: 0000000000000000
[  135.745192][ T7156] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.753272][ T7156] R13: 0000000000000000 R14: 00007f7ce8bb5fa0 R15: 00007ffd5d672c48
[  135.761294][ T7156]  </TASK>
[  135.824930][ T7156] Mem-Info:
[  135.832826][ T7156] active_anon:5201 inactive_anon:0 isolated_anon:0
[  135.832826][ T7156]  active_file:1182 inactive_file:39848 isolated_file:0
[  135.832826][ T7156]  unevictable:768 dirty:289 writeback:0
[  135.832826][ T7156]  slab_reclaimable:10370 slab_unreclaimable:96837
[  135.832826][ T7156]  mapped:24629 shmem:1362 pagetables:557
[  135.832826][ T7156]  sec_pagetables:0 bounce:0
[  135.832826][ T7156]  kernel_misc_reclaimable:0
[  135.832826][ T7156]  free:1359253 free_pcp:10862 free_cma:0
[  135.902471][ T7156] Node 0 active_anon:20804kB inactive_anon:0kB active_file:4728kB inactive_file:159188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98516kB dirty:1156kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:2228kB sec_pagetables:0kB all_unreclaimable? no
[  135.939800][ T7156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  135.976110][ T7156] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.029430][ T7156] lowmem_reserve[]: 0 2525 2526 2526 2526
[  136.046277][ T7156] Node 0 DMA32 free:1525936kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20860kB inactive_anon:0kB active_file:4728kB inactive_file:157852kB unevictable:1536kB writepending:1156kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:18456kB local_pcp:17104kB free_cma:0kB
[  136.082823][ T7156] lowmem_reserve[]: 0 0 1 1 1
[  136.090090][ T7156] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.129603][ T7156] lowmem_reserve[]: 0 0 0 0 0
[  136.134547][ T7156] Node 1 Normal free:3895712kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24772kB local_pcp:13600kB free_cma:0kB
[  136.165027][ T7156] lowmem_reserve[]: 0 0 0 0 0
[  136.169875][ T7156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  136.186824][ T7156] Node 0 DMA32: 464*4kB (UME) 1158*8kB (UME) 770*16kB (UME) 181*32kB (ME) 160*64kB (UME) 77*128kB (UME) 34*256kB (M) 15*512kB (ME) 4*1024kB (UM) 3*2048kB (ME) 354*4096kB (UM) = 1525936kB
[  136.194957][ T5828] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  136.220642][ T7156] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  136.252998][ T7156] Node 1 Normal: 254*4kB (UE) 61*8kB (UME) 56*16kB (UME) 50*32kB (UME) 18*64kB (UE) 7*128kB (UME) 0*256kB 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3895712kB
[  136.294942][ T7156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  136.304572][ T7156] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  136.381353][ T7156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  136.397956][ T7156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  136.404950][ T5828] usb 2-1: Using ep0 maxpacket: 32
[  136.410194][ T7156] 42382 total pagecache pages
[  136.423318][ T5828] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  136.423625][ T7156] 0 pages in swap cache
[  136.443973][ T5828] usb 2-1: config 0 has no interface number 0
[  136.452192][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  136.458467][ T5828] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7
[  136.468012][ T7156] Free swap  = 124996kB
[  136.476756][ T7156] Total swap = 124996kB
[  136.484809][ T7156] 2097051 pages RAM
[  136.488677][ T7156] 0 pages HighMem/MovableOnly
[  136.498802][ T5828] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024
[  136.503690][ T7156] 416138 pages reserved
[  136.528091][ T5828] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  136.533274][ T7156] 0 pages cma reserved
[  136.538372][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.555457][ T5828] usb 2-1: Product: syz
[  136.567968][ T5828] usb 2-1: Manufacturer: syz
[  136.593161][ T5828] usb 2-1: SerialNumber: syz
[  136.619619][ T5828] usb 2-1: config 0 descriptor??
[  136.695731][ T5828] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  136.731852][ T5828] em28xx 2-1:0.132: Video interface 132 found: isoc
[  136.965360][ T5828] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  137.077167][ T5828] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  137.100562][ T5828] em28xx 2-1:0.132: board has no eeprom
[  137.184828][ T5828] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  137.200363][ T5828] em28xx 2-1:0.132: analog set to isoc mode.
[  137.207926][   T55] em28xx 2-1:0.132: Registering V4L2 extension
[  137.236564][ T5828] usb 2-1: USB disconnect, device number 3
[  137.256261][ T5828] em28xx 2-1:0.132: Disconnecting em28xx
[  137.390282][ T7209] loop0: detected capacity change from 0 to 64
[  137.410274][ T7209] MINIX-fs: mounting file system with errors, running fsck is recommended
[  137.475456][ T5856] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  137.501914][ T7209] Trying to free block not in datazone
[  137.545068][ T7209] Trying to free block not in datazone
[  137.550617][ T7209] Trying to free block not in datazone
[  137.585304][ T7209] Trying to free block not in datazone
[  137.590844][ T7209] Trying to free block not in datazone
[  137.599770][   T55] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  137.613533][ T7209] Trying to free block not in datazone
[  137.623131][ T7209] Trying to free block not in datazone
[  137.628748][   T55] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  137.628805][   T55] em28xx 2-1:0.132: No AC97 audio processor
[  137.645520][ T7209] Trying to free block not in datazone
[  137.651508][ T7209] Trying to free block not in datazone
[  137.654594][   T55] usb 2-1: Decoder not found
[  137.667791][   T55] em28xx 2-1:0.132: failed to create media graph
[  137.674349][   T55] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  137.695402][ T5856] usb 4-1: Using ep0 maxpacket: 16
[  137.715027][   T55] em28xx 2-1:0.132: Remote control support is not available for this card.
[  137.735927][ T5856] usb 4-1: config 5 has an invalid interface number: 233 but max is 1
[  137.744192][ T5856] usb 4-1: config 5 has an invalid interface number: 33 but max is 1
[  137.764928][ T5828] em28xx 2-1:0.132: Closing input extension
[  137.787720][ T5856] usb 4-1: config 5 has no interface number 0
[  137.804836][ T5856] usb 4-1: config 5 has no interface number 1
[  137.842833][ T5856] usb 4-1: config 5 interface 233 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  137.876760][ T5856] usb 4-1: config 5 interface 233 has no altsetting 0
[  137.885046][ T5828] em28xx 2-1:0.132: Freeing device
[  137.914861][ T5856] usb 4-1: config 5 interface 33 has no altsetting 0
[  137.940776][ T5856] usb 4-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice=d1.10
[  137.982659][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.004232][ T5856] usb 4-1: Product: syz
[  138.024832][ T5856] usb 4-1: Manufacturer: syz
[  138.029519][ T5856] usb 4-1: SerialNumber: syz
[  138.300973][ T5856] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  138.326861][ T5856] snd-usb-audio: probe of 4-1:5.233 failed with error -2
[  138.352347][ T5856] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  138.420726][ T7227] loop0: detected capacity change from 0 to 4096
[  138.431399][ T5856] snd-usb-audio: probe of 4-1:5.33 failed with error -2
[  138.436681][ T7227] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  138.463903][ T5856] usb 4-1: USB disconnect, device number 2
[  138.522920][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.33/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.764145][ T7239] loop2: detected capacity change from 0 to 8
[  138.833618][ T7237] loop1: detected capacity change from 0 to 8192
[  138.905669][ T7237] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  138.940867][ T7237] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  138.952507][ T7237] REISERFS (device loop1): using ordered data mode
[  138.961405][ T7237] reiserfs: using flush barriers
[  139.002610][ T7237] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.035782][ T7237] REISERFS (device loop1): checking transaction log (loop1)
[  139.076270][ T7237] REISERFS (device loop1): Using rupasov hash to sort names
[  139.084465][ T7237] REISERFS (device loop1): using 3.5.x disk format
[  139.157330][ T7237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.243607][ T7237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.285680][ T7237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.309879][ T7248] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[  139.313957][ T7237] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  139.398238][ T7250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.621'.
[  139.904987][ T7266] netlink: 44 bytes leftover after parsing attributes in process `syz.1.624'.
[  139.935080][ T7266] netlink: 43 bytes leftover after parsing attributes in process `syz.1.624'.
[  139.944033][ T7266] netlink: 'syz.1.624': attribute type 5 has an invalid length.
[  139.993879][ T7266] netlink: 43 bytes leftover after parsing attributes in process `syz.1.624'.
[  140.691455][ T7295] loop1: detected capacity change from 0 to 1024
[  140.986744][ T2896] hfsplus: b-tree write err: -5, ino 4
[  141.089794][ T7308] comedi comedi0: dt2815: I/O port conflict (0x3,2)
[  141.188080][ T7312] netlink: 172 bytes leftover after parsing attributes in process `syz.1.650'.
[  141.225094][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  141.257818][ T7312] netlink: 172 bytes leftover after parsing attributes in process `syz.1.650'.
[  141.286873][ T7312] netlink: 100 bytes leftover after parsing attributes in process `syz.1.650'.
[  141.339406][ T7312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.650'.
[  141.778725][   T27] audit: type=1326 audit(1751987441.505:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea78e929 code=0x7ffc0000
[  141.828298][   T27] audit: type=1326 audit(1751987441.505:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea78e929 code=0x7ffc0000
[  141.850437][    C0] vkms_vblank_simulate: vblank timer overrun
[  141.878578][   T27] audit: type=1326 audit(1751987441.545:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff4ea78e929 code=0x7ffc0000
[  141.910606][   T27] audit: type=1326 audit(1751987441.545:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea78e929 code=0x7ffc0000
[  141.932811][    C0] vkms_vblank_simulate: vblank timer overrun
[  141.980483][   T27] audit: type=1326 audit(1751987441.545:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ea78e929 code=0x7ffc0000
[  142.025650][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.235129][ T5828] usb 1-1: Using ep0 maxpacket: 16
[  142.248397][ T5828] usb 1-1: config 5 has an invalid interface number: 233 but max is 1
[  142.257937][ T7353] loop2: detected capacity change from 0 to 128
[  142.273111][ T5828] usb 1-1: config 5 has an invalid interface number: 33 but max is 1
[  142.294888][ T5828] usb 1-1: config 5 has no interface number 0
[  142.306815][ T7353] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  142.314631][ T5828] usb 1-1: config 5 has no interface number 1
[  142.334627][ T5828] usb 1-1: config 5 interface 233 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  142.345473][ T7353] FAT-fs (loop2): Directory bread(block 148) failed
[  142.367617][ T7353] FAT-fs (loop2): Directory bread(block 149) failed
[  142.383564][ T7353] FAT-fs (loop2): Directory bread(block 150) failed
[  142.390260][ T5828] usb 1-1: config 5 interface 233 has no altsetting 0
[  142.390286][ T5828] usb 1-1: config 5 interface 33 has no altsetting 0
[  142.393571][ T5828] usb 1-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice=d1.10
[  142.427094][ T7353] FAT-fs (loop2): Directory bread(block 151) failed
[  142.434047][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.443783][ T5828] usb 1-1: Product: syz
[  142.453924][ T5828] usb 1-1: Manufacturer: syz
[  142.454510][ T7353] FAT-fs (loop2): Directory bread(block 152) failed
[  142.464121][ T5828] usb 1-1: SerialNumber: syz
[  142.493187][ T7353] FAT-fs (loop2): Directory bread(block 153) failed
[  142.523661][ T7353] FAT-fs (loop2): Directory bread(block 154) failed
[  142.535611][ T7353] FAT-fs (loop2): Directory bread(block 155) failed
[  142.543296][ T7357] loop1: detected capacity change from 0 to 2048
[  142.572547][ T7353] FAT-fs (loop2): Directory bread(block 148) failed
[  142.572686][ T7353] FAT-fs (loop2): Directory bread(block 149) failed
[  142.599923][ T7357] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  142.629885][ T7357] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  142.646542][   T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  142.661824][ T7357] UDF-fs: Scanning with blocksize 512 failed
[  142.674590][ T7357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.748140][ T5828] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  142.786355][ T5828] snd-usb-audio: probe of 1-1:5.233 failed with error -2
[  142.810435][ T5828] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  142.887724][ T5828] snd-usb-audio: probe of 1-1:5.33 failed with error -2
[  142.935267][ T5828] usb 1-1: USB disconnect, device number 6
[  143.014143][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.33/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.071172][ T7362] loop3: detected capacity change from 0 to 8192
[  143.089373][ T7362] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  143.690995][ T7388] loop0: detected capacity change from 0 to 256
[  143.779964][ T7390] syz.2.690 uses obsolete (PF_INET,SOCK_PACKET)
[  143.834920][  T971] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  144.049447][  T971] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  144.077662][  T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.105277][  T971] usb 4-1: Product: syz
[  144.112995][  T971] usb 4-1: Manufacturer: syz
[  144.123790][  T971] usb 4-1: SerialNumber: syz
[  144.145550][  T971] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  144.220357][    T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  144.535314][ T7404] loop0: detected capacity change from 0 to 8192
[  144.587647][ T7404] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  144.663376][ T7404] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  144.688452][ T7413] loop1: detected capacity change from 0 to 64
[  144.705457][ T7404] REISERFS (device loop0): using ordered data mode
[  144.712560][ T7404] reiserfs: using flush barriers
[  144.721428][ T7404] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  144.743979][ T7404] REISERFS (device loop0): checking transaction log (loop0)
[  144.774049][ T7404] REISERFS (device loop0): Using r5 hash to sort names
[  144.827530][  T971] usb 4-1: USB disconnect, device number 3
[  144.853684][ T7404] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  144.916970][ T7413] Trying to free block not in datazone
[  144.934184][ T7413] Trying to free block not in datazone
[  144.981176][ T7413] Trying to free block not in datazone
[  145.202477][ T7406] loop2: detected capacity change from 0 to 32768
[  145.235729][ T7406] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  145.295944][ T7406] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  145.317021][    T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  145.369588][    T8] ath9k_htc: Failed to initialize the device
[  145.394627][  T971] usb 4-1: ath9k_htc: USB layer deinitialized
[  145.521734][ T7406] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 2
[  145.584853][ T7406] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  145.614979][ T7406] OCFS2: File system is now read-only.
[  145.620533][ T7406] (syz.2.698,7406,0):ocfs2_search_chain:1761 ERROR: status = -30
[  145.641826][ T7429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'.
[  145.693833][ T7406] (syz.2.698,7406,1):ocfs2_search_chain:1871 ERROR: status = -30
[  145.712150][ T7406] (syz.2.698,7406,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  145.721992][ T7406] (syz.2.698,7406,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  145.730893][ T7406] (syz.2.698,7406,1):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  145.753820][ T7406] (syz.2.698,7406,1):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  145.767061][ T7406] (syz.2.698,7406,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  145.777181][ T7406] (syz.2.698,7406,1):ocfs2_symlink:1944 ERROR: status = -30
[  145.812013][ T7406] (syz.2.698,7406,1):ocfs2_symlink:2068 ERROR: status = -30
[  145.876425][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.711'.
[  145.883924][ T7406] syz.2.698 (7406) used greatest stack depth: 19504 bytes left
[  145.914295][ T7437] loop3: detected capacity change from 0 to 256
[  145.935128][ T5788] ocfs2: Unmounting device (7,2) on (node local)
[  145.968834][ T7432] loop0: detected capacity change from 0 to 4096
[  146.026494][ T7437] FAT-fs (loop3): Directory bread(block 64) failed
[  146.033191][ T7437] FAT-fs (loop3): Directory bread(block 65) failed
[  146.040088][ T7432] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  146.088194][ T7437] FAT-fs (loop3): Directory bread(block 66) failed
[  146.098286][ T7437] FAT-fs (loop3): Directory bread(block 67) failed
[  146.106748][ T7437] FAT-fs (loop3): Directory bread(block 68) failed
[  146.119883][ T7432] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  146.131244][ T7437] FAT-fs (loop3): Directory bread(block 69) failed
[  146.150184][ T7437] FAT-fs (loop3): Directory bread(block 70) failed
[  146.162106][ T7437] FAT-fs (loop3): Directory bread(block 71) failed
[  146.170106][ T7437] FAT-fs (loop3): Directory bread(block 72) failed
[  146.195076][ T7437] FAT-fs (loop3): Directory bread(block 73) failed
[  147.029081][ T7459] netlink: 'syz.2.723': attribute type 2 has an invalid length.
[  147.054790][   T55] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  147.181911][ T7443] loop1: detected capacity change from 0 to 32768
[  147.247810][   T55] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  147.256973][   T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.274222][   T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  147.293656][   T55] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.316178][   T55] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.347328][   T55] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  147.359621][   T55] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  147.375085][   T55] usb 1-1: Product: syz
[  147.386134][   T55] usb 1-1: Manufacturer: syz
[  147.400041][   T55] cdc_wdm 1-1:1.0: skipping garbage
[  147.412427][   T55] cdc_wdm 1-1:1.0: skipping garbage
[  147.471851][   T55] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  147.494272][   T55] cdc_wdm 1-1:1.0: Unknown control protocol
[  147.583020][ T7457] loop3: detected capacity change from 0 to 32768
[  147.689695][ T7453] cdc_wdm 1-1:1.0: Error submitting int urb - -90
[  147.719407][ T5856] usb 1-1: USB disconnect, device number 7
[  148.284979][ T7477] loop2: detected capacity change from 0 to 4096
[  148.834588][ T7494] loop1: detected capacity change from 0 to 256
[  148.923290][ T7494] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  149.286682][ T7506] loop2: detected capacity change from 0 to 16
[  149.315435][ T7506] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  149.867635][ T7520] loop3: detected capacity change from 0 to 64
[  150.003100][ T7520] hfs: request for non-existent node 16777216 in B*Tree
[  150.032697][ T7520] hfs: request for non-existent node 16777216 in B*Tree
[  150.084379][ T7520] hfs: request for non-existent node 16777216 in B*Tree
[  150.140264][ T7520] hfs: request for non-existent node 16777216 in B*Tree
[  150.179548][ T2896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.181702][ T7520] hfs: request for non-existent node 16777216 in B*Tree
[  150.234900][ T7520] hfs: request for non-existent node 16777216 in B*Tree
[  150.404556][ T2896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.551141][ T7526] loop0: detected capacity change from 0 to 512
[  150.556681][ T2896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.635644][ T7530] IPv6: Can't replace route, no match found
[  150.692998][ T7526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.781796][ T7526] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  150.861475][ T2896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.939810][ T7526] EXT4-fs error (device loop0): ext4_xattr_block_find:1886: inode #15: comm syz.0.759: corrupted xattr block 33: invalid ea_ino
[  150.985398][ T7526] EXT4-fs (loop0): Remounting filesystem read-only
[  151.091775][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.135693][ T1005] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.166559][ T1005] Quota error (device loop0): write_blk: dquota write failed
[  151.174020][ T1005] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  151.227993][ T1005] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.294966][ T1005] Quota error (device loop0): write_blk: dquota write failed
[  151.302422][ T1005] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  151.358483][ T1005] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  151.428814][ T1005] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  151.585676][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.596986][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.606389][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.614833][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.636355][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  151.642899][ T7551] [U] �ɢ&�1�1��Q^�*�������L9Dk�_O�k��\9�
[  151.651439][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.693489][ T7558] loop3: detected capacity change from 0 to 256
[  152.210511][ T7550] lo speed is unknown, defaulting to 1000
[  152.404637][ T7579] netlink: 'syz.3.778': attribute type 11 has an invalid length.
[  152.633227][ T7586] loop2: detected capacity change from 0 to 256
[  152.698076][ T7586] exfat: Deprecated parameter 'utf8'
[  152.703465][ T7586] exfat: Deprecated parameter 'utf8'
[  152.777742][ T7586] exfat: Deprecated parameter 'utf8'
[  152.836889][ T7586] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  152.911743][ T7586] UBIFS error (pid: 7586): cannot open "utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=0x0000000000000000,utf8,allow_utime=000000000000000001,allow_utime=00000000000000000003777,", error -22
[  153.453444][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'.
[  153.529584][ T7608] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  153.656124][ T7616] loop0: detected capacity change from 0 to 64
[  153.705015][ T5787] Bluetooth: hci0: command tx timeout
[  154.293426][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'.
[  154.315882][ T7638] openvswitch: netlink: Message has 8 unknown bytes.
[  154.435025][ T7644] loop3: detected capacity change from 0 to 64
[  154.651156][ T7550] chnl_net:caif_netlink_parms(): no params data found
[  154.800443][ T7644] 
[  154.802845][ T7644] ======================================================
[  154.809908][ T7644] WARNING: possible circular locking dependency detected
[  154.816961][ T7644] 6.6.96-syzkaller #0 Not tainted
[  154.822035][ T7644] ------------------------------------------------------
[  154.829084][ T7644] syz.3.800/7644 is trying to acquire lock:
[  154.835010][ T7644] ffff88807cdd9478 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  154.845848][ T7644] 
[  154.845848][ T7644] but task is already holding lock:
[  154.853583][ T7644] ffff88805d7120b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  154.862911][ T7644] 
[  154.862911][ T7644] which lock already depends on the new lock.
[  154.862911][ T7644] 
[  154.873343][ T7644] 
[  154.873343][ T7644] the existing dependency chain (in reverse order) is:
[  154.874801][   T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  154.882355][ T7644] 
[  154.882355][ T7644] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}:
[  154.882411][ T7644]        __mutex_lock+0x129/0xcc0
[  154.902797][ T7644]        hfs_find_init+0x15f/0x1d0
[  154.907931][ T7644]        hfs_extend_file+0x2ef/0x1220
[  154.913334][ T7644]        hfs_bmap_reserve+0x107/0x430
[  154.918714][ T7644]        hfs_cat_move+0x18d/0x930
[  154.923744][ T7644]        hfs_rename+0x1dc/0x2c0
[  154.928612][ T7644]        vfs_rename+0xb96/0xec0
[  154.933487][ T7644]        do_renameat2+0x8a1/0xc70
[  154.938516][ T7644]        __x64_sys_rename+0x86/0x90
[  154.943725][ T7644]        do_syscall_64+0x55/0xb0
[  154.948673][ T7644]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.955111][ T7644] 
[  154.955111][ T7644] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  154.964360][ T7644]        __lock_acquire+0x2ddb/0x7c80
[  154.969748][ T7644]        lock_acquire+0x197/0x410
[  154.974786][ T7644]        __mutex_lock+0x129/0xcc0
[  154.979848][ T7644]        hfs_extend_file+0xdb/0x1220
[  154.985155][ T7644]        hfs_bmap_reserve+0x107/0x430
[  154.990553][ T7644]        __hfs_ext_write_extent+0x1fa/0x470
[  154.996473][ T7644]        __hfs_ext_cache_extent+0x6b/0x9b0
[  155.002287][ T7644]        hfs_extend_file+0x317/0x1220
[  155.007665][ T7644]        hfs_get_block+0x3d8/0xbd0
[  155.012783][ T7644]        __block_write_begin_int+0x566/0x1ad0
[  155.018857][ T7644]        block_write_begin+0x9a/0x1e0
[  155.024236][ T7644]        cont_write_begin+0x5c8/0x7e0
[  155.029629][ T7644]        hfs_write_begin+0x8b/0xd0
[  155.034779][ T7644]        cont_write_begin+0x2ad/0x7e0
[  155.040175][ T7644]        hfs_write_begin+0x8b/0xd0
[  155.045308][ T7644]        hfs_file_truncate+0x191/0x9b0
[  155.050798][ T7644]        hfs_inode_setattr+0x4af/0x6e0
[  155.056281][ T7644]        notify_change+0xb0d/0xe10
[  155.061405][ T7644]        do_truncate+0x19b/0x220
[  155.066399][ T7644]        vfs_truncate+0x266/0x300
[  155.071468][ T7644]        do_sys_truncate+0xe0/0x1a0
[  155.072007][   T55] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  155.076688][ T7644]        do_syscall_64+0x55/0xb0
[  155.076718][ T7644]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.076740][ T7644] 
[  155.076740][ T7644] other info that might help us debug this:
[  155.076740][ T7644] 
[  155.076746][ T7644]  Possible unsafe locking scenario:
[  155.076746][ T7644] 
[  155.076752][ T7644]        CPU0                    CPU1
[  155.076757][ T7644]        ----                    ----
[  155.076762][ T7644]   lock(
[  155.088236][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.090738][ T7644] &tree->tree_lock/1);
[  155.090759][ T7644]                                lock(&HFS_I(tree->inode)->extents_lock
[  155.101616][   T55] usb 1-1: Product: syz
[  155.107411][ T7644] );
[  155.107420][ T7644]                                lock(&tree->tree_lock/1);
[  155.107443][ T7644]   lock(&HFS_I(tree->inode)->extents_lock);
[  155.107456][ T7644] 
[  155.107456][ T7644]  *** DEADLOCK ***
[  155.107456][ T7644] 
[  155.107461][ T7644] 4 locks held by syz.3.800/7644:
[  155.107472][ T7644]  #0: ffff88805d714418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  155.107530][ T7644]  #1: ffff88807cdda9b8 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: do_truncate+0x187/0x220
[  155.107589][ T7644]  #2: ffff88807cdda7f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  155.107641][ T7644]  #3: 
[  155.118549][   T55] usb 1-1: Manufacturer: syz
[  155.120462][ T7644] ffff88805d7120b0 (&tree->tree_lock/1
[  155.126353][   T55] usb 1-1: SerialNumber: syz
[  155.128791][ T7644] ){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  155.146596][   T55] r8152-cfgselector 1-1: config 0 descriptor??
[  155.149181][ T7644] 
[  155.149181][ T7644] stack backtrace:
[  155.149191][ T7644] CPU: 0 PID: 7644 Comm: syz.3.800 Not tainted 6.6.96-syzkaller #0
[  155.149212][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  155.266135][ T7644] Call Trace:
[  155.269461][ T7644]  <TASK>
[  155.272398][ T7644]  dump_stack_lvl+0x16c/0x230
[  155.277111][ T7644]  ? load_image+0x3b0/0x3b0
[  155.281658][ T7644]  ? show_regs_print_info+0x20/0x20
[  155.286893][ T7644]  ? print_circular_bug+0x12b/0x1a0
[  155.292137][ T7644]  check_noncircular+0x2bd/0x3c0
[  155.297119][ T7644]  ? look_up_lock_class+0x75/0x140
[  155.302279][ T7644]  ? print_deadlock_bug+0x5d0/0x5d0
[  155.307506][ T7644]  ? lockdep_lock+0xe0/0x220
[  155.312120][ T7644]  ? check_noncircular+0x175/0x3c0
[  155.317266][ T7644]  ? _find_first_zero_bit+0xd3/0x100
[  155.322587][ T7644]  __lock_acquire+0x2ddb/0x7c80
[  155.327477][ T7644]  ? hlock_conflict+0x5d/0x1f0
[  155.332272][ T7644]  ? verify_lock_unused+0x140/0x140
[  155.337516][ T7644]  ? __bfs+0x2a3/0x5c0
[  155.341624][ T7644]  ? check_path+0x40/0x40
[  155.345996][ T7644]  ? check_path+0x21/0x40
[  155.350445][ T7644]  ? check_noncircular+0x175/0x3c0
[  155.355597][ T7644]  ? look_up_lock_class+0x75/0x140
[  155.360755][ T7644]  lock_acquire+0x197/0x410
[  155.363051][   T55] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  155.365287][ T7644]  ? hfs_extend_file+0xdb/0x1220
[  155.365321][ T7644]  ? __might_sleep+0xe0/0xe0
[  155.365344][ T7644]  ? __lock_acquire+0x2b6b/0x7c80
[  155.365366][ T7644]  ? read_lock_is_recursive+0x20/0x20
[  155.392564][ T7644]  __mutex_lock+0x129/0xcc0
[  155.397110][ T7644]  ? hfs_extend_file+0xdb/0x1220
[  155.402094][ T7644]  ? lock_chain_count+0x20/0x20
[  155.406960][ T7644]  ? hfs_extend_file+0xdb/0x1220
[  155.411912][ T7644]  ? verify_lock_unused+0x140/0x140
[  155.417122][ T7644]  ? mutex_lock_nested+0x20/0x20
[  155.422119][ T7644]  hfs_extend_file+0xdb/0x1220
[  155.426933][ T7644]  ? hfs_get_block+0xbd0/0xbd0
[  155.431717][ T7644]  ? __mutex_trylock_common+0x153/0x250
[  155.437306][ T7644]  ? trace_raw_output_contention_end+0xd0/0xd0
[  155.443500][ T7644]  ? rcu_is_watching+0x15/0xb0
[  155.448297][ T7644]  ? hfs_brec_find+0x18f/0x500
[  155.453117][ T7644]  ? __mutex_lock+0x304/0xcc0
[  155.457827][ T7644]  hfs_bmap_reserve+0x107/0x430
[  155.462710][ T7644]  __hfs_ext_write_extent+0x1fa/0x470
[  155.468149][ T7644]  __hfs_ext_cache_extent+0x6b/0x9b0
[  155.473472][ T7644]  ? hfs_find_init+0x15f/0x1d0
[  155.478251][ T7644]  hfs_extend_file+0x317/0x1220
[  155.483120][ T7644]  ? hfs_get_block+0xbd0/0xbd0
[  155.487919][ T7644]  ? __might_sleep+0xe0/0xe0
[  155.492526][ T7644]  ? mlock_drain_local+0x28d/0x490
[  155.497665][ T7644]  ? clean_bdev_aliases+0x566/0x630
[  155.502889][ T7644]  hfs_get_block+0x3d8/0xbd0
[  155.507497][ T7644]  ? hfs_free_extents+0x430/0x430
[  155.512537][ T7644]  ? _raw_spin_unlock+0x28/0x40
[  155.517417][ T7644]  ? folio_add_lru+0x320/0xd50
[  155.522200][ T7644]  __block_write_begin_int+0x566/0x1ad0
[  155.527784][ T7644]  ? hfs_free_extents+0x430/0x430
[  155.532829][ T7644]  ? folio_zero_new_buffers+0x550/0x550
[  155.538398][ T7644]  ? hfs_free_extents+0x430/0x430
[  155.543455][ T7644]  block_write_begin+0x9a/0x1e0
[  155.548324][ T7644]  ? hfs_free_extents+0x430/0x430
[  155.553360][ T7644]  cont_write_begin+0x5c8/0x7e0
[  155.558234][ T7644]  ? generic_cont_expand_simple+0x200/0x200
[  155.564155][ T7644]  ? __block_commit_write+0x23f/0x350
[  155.569689][ T7644]  ? put_page+0xea/0x270
[  155.573006][   T55] usb 1-1: USB disconnect, device number 8
[  155.573955][ T7644]  hfs_write_begin+0x8b/0xd0
[  155.584444][ T7644]  ? hfs_free_extents+0x430/0x430
[  155.589522][ T7644]  cont_write_begin+0x2ad/0x7e0
[  155.594431][ T7644]  ? generic_cont_expand_simple+0x200/0x200
[  155.600388][ T7644]  hfs_write_begin+0x8b/0xd0
[  155.605030][ T7644]  ? hfs_free_extents+0x430/0x430
[  155.610125][ T7644]  hfs_file_truncate+0x191/0x9b0
[  155.615129][ T7644]  ? __up_read+0x280/0x670
[  155.619580][ T7644]  ? up_read+0x20/0x20
[  155.623656][ T7644]  ? up_read+0x20/0x20
[  155.627734][ T7644]  ? hfs_extend_file+0x1220/0x1220
[  155.632861][ T7644]  ? unmap_mapping_range+0xdf/0x170
[  155.638075][ T7644]  ? unmap_mapping_pages+0x150/0x150
[  155.643369][ T7644]  ? pagecache_isize_extended+0x1cd/0x580
[  155.649115][ T7644]  hfs_inode_setattr+0x4af/0x6e0
[  155.654070][ T7644]  ? bpf_lsm_inode_setattr+0x9/0x10
[  155.659282][ T7644]  ? try_break_deleg+0x79/0x120
[  155.664170][ T7644]  ? hfs_evict_inode+0x110/0x110
[  155.669122][ T7644]  notify_change+0xb0d/0xe10
[  155.673737][ T7644]  do_truncate+0x19b/0x220
[  155.678172][ T7644]  ? put_page_bootmem+0x2c0/0x2c0
[  155.683238][ T7644]  ? bpf_lsm_path_truncate+0x9/0x10
[  155.688453][ T7644]  vfs_truncate+0x266/0x300
[  155.692973][ T7644]  do_sys_truncate+0xe0/0x1a0
[  155.697696][ T7644]  ? break_lease+0xd0/0xd0
[  155.702134][ T7644]  ? lockdep_hardirqs_on+0x98/0x150
[  155.707365][ T7644]  do_syscall_64+0x55/0xb0
[  155.711830][ T7644]  ? clear_bhb_loop+0x40/0x90
[  155.716542][ T7644]  ? clear_bhb_loop+0x40/0x90
[  155.721251][ T7644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.727161][ T7644] RIP: 0033:0x7ffbc398e929
[  155.731584][ T7644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.751209][ T7644] RSP: 002b:00007ffbc487f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  155.759649][ T7644] RAX: ffffffffffffffda RBX: 00007ffbc3bb5fa0 RCX: 00007ffbc398e929
[  155.767650][ T7644] RDX: 0000000000000000 RSI: 0000000008800000 RDI: 0000200000000040
[  155.775641][ T7644] RBP: 00007ffbc3a10b39 R08: 0000000000000000 R09: 0000000000000000
[  155.783634][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.784897][ T5787] Bluetooth: hci0: command tx timeout
[  155.791603][ T7644] R13: 0000000000000000 R14: 00007ffbc3bb5fa0 R15: 00007ffe7d37c868
[  155.791629][ T7644]  </TASK>
[  155.816535][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'.
[  155.833760][ T2896] hsr_slave_0: left promiscuous mode
[  155.858304][  T145] kworker/u4:5: attempt to access beyond end of device
[  155.858304][  T145] loop3: rw=1, sector=412, nr_sectors = 1 limit=64
[  155.871817][  T145] Buffer I/O error on dev loop3, logical block 412, lost async page write
[  155.871822][ T2896] hsr_slave_1: left promiscuous mode
[  155.871871][  T145] kworker/u4:5: attempt to access beyond end of device
[  155.871871][  T145] loop3: rw=1, sector=413, nr_sectors = 1 limit=64
[  155.900589][  T145] Buffer I/O error on dev loop3, logical block 413, lost async page write
[  155.905859][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.909259][  T145] kworker/u4:5: attempt to access beyond end of device
[  155.909259][  T145] loop3: rw=1, sector=414, nr_sectors = 1 limit=64
[  155.930106][  T145] Buffer I/O error on dev loop3, logical block 414, lost async page write
[  155.936470][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.938760][  T145] kworker/u4:5: attempt to access beyond end of device
[  155.938760][  T145] loop3: rw=1, sector=415, nr_sectors = 1 limit=64
[  155.960718][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.962899][  T145] Buffer I/O error on dev loop3, logical block 415, lost async page write
[  155.972301][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.977017][  T145] kworker/u4:5: attempt to access beyond end of device
[  155.977017][  T145] loop3: rw=1, sector=416, nr_sectors = 1 limit=64
[  155.997227][  T145] Buffer I/O error on dev loop3, logical block 416, lost async page write
[  155.998025][ T2896] bridge_slave_1: left allmulticast mode
[  156.008427][  T145] kworker/u4:5: attempt to access beyond end of device
[  156.008427][  T145] loop3: rw=1, sector=417, nr_sectors = 1 limit=64
[  156.011934][ T2896] bridge_slave_1: left promiscuous mode
[  156.029745][  T145] Buffer I/O error on dev loop3, logical block 417, lost async page write
[  156.031298][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.039681][  T145] kworker/u4:5: attempt to access beyond end of device
[  156.039681][  T145] loop3: rw=1, sector=420, nr_sectors = 1 limit=64
[  156.060469][  T145] Buffer I/O error on dev loop3, logical block 420, lost async page write
[  156.069163][  T145] kworker/u4:5: attempt to access beyond end of device
[  156.069163][  T145] loop3: rw=1, sector=421, nr_sectors = 1 limit=64
[  156.070352][ T2896] bridge_slave_0: left allmulticast mode
[  156.082683][  T145] Buffer I/O error on dev loop3, logical block 421, lost async page write
[  156.097596][  T145] kworker/u4:5: attempt to access beyond end of device
[  156.097596][  T145] loop3: rw=1, sector=422, nr_sectors = 16 limit=64
[  156.097677][ T2896] bridge_slave_0: left promiscuous mode
[  156.112890][  T145] kworker/u4:5: attempt to access beyond end of device
[  156.112890][  T145] loop3: rw=1, sector=438, nr_sectors = 1 limit=64
[  156.117739][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.132636][  T145] Buffer I/O error on dev loop3, logical block 438, lost async page write
[  156.152552][ T2896] veth1_macvtap: left promiscuous mode
[  156.158959][ T2896] veth0_macvtap: left promiscuous mode
[  156.164814][ T2896] veth1_vlan: left promiscuous mode
[  156.165814][  T145] Buffer I/O error on dev loop3, logical block 439, lost async page write
[  156.183308][ T2896] veth0_vlan: left promiscuous mode
[  156.320922][ T2896] infiniband syz0: set down
[  156.484212][ T2896] team0 (unregistering): Port device team_slave_1 removed
[  156.511287][ T2896] team0 (unregistering): Port device team_slave_0 removed
[  156.542568][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.573797][ T2896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.683973][ T2896] bond0 (unregistering): Released all slaves
[  156.760658][   T11] smc: removing ib device syz0
[  156.789517][  T788] lo speed is unknown, defaulting to 1000
[  156.921466][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.964921][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.972185][ T7550] bridge_slave_0: entered allmulticast mode
[  156.982244][ T7550] bridge_slave_0: entered promiscuous mode
[  156.995540][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.003544][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.011484][ T7550] bridge_slave_1: entered allmulticast mode
[  157.045960][ T7550] bridge_slave_1: entered promiscuous mode
[  157.269791][ T7550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.340589][ T7550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.557676][ T7550] team0: Port device team_slave_0 added
[  157.570521][ T7550] team0: Port device team_slave_1 added
[  157.606412][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.613425][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.641937][ T7550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.666100][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.673113][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.701999][ T7550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.773950][ T7550] hsr_slave_0: entered promiscuous mode
[  157.780456][ T7550] hsr_slave_1: entered promiscuous mode
[  157.787266][ T7550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.796397][ T7550] Cannot create hsr debugfs directory
[  157.865204][ T5787] Bluetooth: hci0: command tx timeout
[  157.970246][ T7550] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  157.981388][ T7550] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  157.994280][ T7550] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  158.007285][ T7550] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  158.122199][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.147618][ T7550] 8021q: adding VLAN 0 to HW filter on device team0
[  158.162662][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.169902][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.192205][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.199445][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.429350][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.711674][ T7550] veth0_vlan: entered promiscuous mode
[  158.728431][ T7550] veth1_vlan: entered promiscuous mode
[  158.771313][ T7550] veth0_macvtap: entered promiscuous mode
[  158.783238][ T7550] veth1_macvtap: entered promiscuous mode
[  158.810379][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.822336][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.836298][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.847690][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.859192][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.869953][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.881397][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.898093][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.911093][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.921883][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.932827][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.942877][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.953416][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.966461][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.987925][ T7550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.997951][ T7550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.007106][ T7550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.016975][ T7550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.073319][ T7550] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
[  159.112406][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.124345][ T7550] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  159.140338][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.180382][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.189586][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.945894][ T5787] Bluetooth: hci0: command tx timeout