last executing test programs:

4m11.52328441s ago: executing program 3 (id=4):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01030000000000001f000100000008000440000000000900010073797a30000000002a000380"], 0xe4}}, 0x0)

4m10.612999866s ago: executing program 3 (id=7):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6})

4m10.145737063s ago: executing program 3 (id=10):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0)
readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080)
socket(0x10, 0x3, 0x0)

4m6.080371192s ago: executing program 3 (id=17):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

4m5.304253551s ago: executing program 3 (id=21):
syz_emit_ethernet(0x3a, &(0x7f0000000dc0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)

4m4.553288661s ago: executing program 3 (id=23):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f00000001c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14)
socket$packet(0x11, 0x1, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000090)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a00000000000000000000000800120000"], 0x50}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x328}}, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x3}, 0x28)

3m48.224616685s ago: executing program 32 (id=23):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f00000001c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14)
socket$packet(0x11, 0x1, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000090)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a00000000000000000000000800120000"], 0x50}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x328}}, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x3}, 0x28)

2m38.247209119s ago: executing program 1 (id=169):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r1 = eventfd2(0x2, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@nodiscard}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m36.88463902s ago: executing program 1 (id=170):
syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
write$cgroup_freezer_state(r0, 0x0, 0x0)

2m34.689658341s ago: executing program 1 (id=173):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m32.365322245s ago: executing program 1 (id=176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0)

2m30.50592369s ago: executing program 1 (id=179):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r1 = eventfd2(0x2, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@nodiscard}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m25.994903927s ago: executing program 1 (id=183):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_voice_setting={{0x6a}, {0xf9, 0x4}}}}, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}})
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb)
io_destroy(0x0)

2m10.589276783s ago: executing program 33 (id=183):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_voice_setting={{0x6a}, {0xf9, 0x4}}}}, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}})
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb)
io_destroy(0x0)

15.284429302s ago: executing program 2 (id=368):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18)
sendmmsg$unix(r3, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x1, 0x1d3)

14.156532982s ago: executing program 5 (id=371):
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c})
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r4)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)

12.308307492s ago: executing program 2 (id=373):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
chdir(0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r4, 0x852dd6c070cd7e4d, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x44}, 0x4, 0x700000002000000, 0x0, 0x10}, 0x0)
r7 = open(0x0, 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r7, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lstat(0x0, 0x0)
sendfile(r1, r7, 0x0, 0x7f03)

12.196572973s ago: executing program 5 (id=374):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000000)=""/258, 0x102}, {&(0x7f00000033c0)=""/221, 0xdd}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}], 0x1, 0x2040, 0x0)

11.17029789s ago: executing program 4 (id=375):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000180)={0x20, 0x13, 0x2, "fa0e"}, 0x0, 0x0, 0x0, 0x0, 0x0})

11.076399928s ago: executing program 2 (id=377):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d0000f1ff0000000002000000000000060009"], 0x24}}, 0x0)

10.958043316s ago: executing program 6 (id=378):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000005500)={0x2020}, 0x2020)

10.952473259s ago: executing program 5 (id=379):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@nobh}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrquota}, {@user_xattr}]}, 0x3, 0x4e1, &(0x7f0000000a00)="$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")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00')
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')

10.272504845s ago: executing program 6 (id=381):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc)
sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x1150bdc9068b6e6, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b0", 0x1}], 0x1}, 0x4)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)

8.992210151s ago: executing program 5 (id=382):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202400000000009050302"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

8.655497757s ago: executing program 4 (id=384):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x4c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x4c}}, 0x8010)

8.096190159s ago: executing program 0 (id=385):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

8.040118758s ago: executing program 4 (id=386):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x34, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

7.765889889s ago: executing program 6 (id=387):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0xda, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x7, 0x88, 0x0, @empty, @mcast2, {[@srh], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"])

7.096435052s ago: executing program 0 (id=388):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)

6.911408453s ago: executing program 4 (id=389):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000000)=""/258, 0x102}, {&(0x7f00000033c0)=""/221, 0xdd}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}], 0x1, 0x2040, 0x0)

6.785627299s ago: executing program 2 (id=390):
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)

6.650309225s ago: executing program 0 (id=391):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000005500)={0x2020}, 0x2020)

6.564309936s ago: executing program 6 (id=392):
syz_emit_ethernet(0x0, 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0)

6.141343548s ago: executing program 2 (id=393):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)

6.118198297s ago: executing program 4 (id=394):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000180)={0x20, 0x13, 0x2, "fa0e"}, 0x0, 0x0, 0x0, 0x0, 0x0})

5.812101205s ago: executing program 5 (id=395):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x2000000, &(0x7f0000000100)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@compress_force}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x6b, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000008380)="$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")
chdir(0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0)

5.757487048s ago: executing program 0 (id=396):
syz_emit_ethernet(0x3b5, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a027450004000000000000000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

5.644592307s ago: executing program 6 (id=397):
syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000300)=ANY=[], 0xfd, 0x644, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x51a, &(0x7f0000000f00)="$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")
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

4.4053296s ago: executing program 0 (id=398):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e618a08580403701a7a010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000e020000"], 0x0, 0x0, 0x0, 0x0})

1.364632341s ago: executing program 4 (id=399):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0x4}], 0x1, 0x60000000, 0x0)

1.296257283s ago: executing program 6 (id=400):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x34, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

744.912949ms ago: executing program 5 (id=401):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)

117.616834ms ago: executing program 2 (id=402):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRES64=r0, @ANYRES8], 0x50)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0xa6, 0x29, 0x1, {0x2, [{{0x10, 0x0, 0x407}, 0x2, 0xff, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0x3800000000000, 0x4, 0x7, './file0'}, {{0x20, 0x3, 0x2}, 0x5, 0x2, 0x7, './file0'}, {{0x20, 0x3, 0x1}, 0x7ab, 0x6, 0x7, './file0'}, {{0x0, 0x1}, 0x8001, 0x4, 0x7, './file0'}]}}, 0xa6)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe28, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
r3 = inotify_init1(0x80800)
inotify_add_watch(r3, &(0x7f0000000280)='./file0\x00', 0x100019c)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf25010000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0202001000b13b2e15000000040000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x44880)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r6, 0x64e10, 0x16201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2)

0s ago: executing program 0 (id=403):
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts.
[  172.000961][ T5776] cgroup: Unknown subsys name 'net'
[  172.115486][ T5776] cgroup: Unknown subsys name 'cpuset'
[  172.129330][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  215.484383][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  219.105822][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.114641][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.130165][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.214456][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.254142][   T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.274054][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.284474][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.293464][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  219.327224][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.335768][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  219.347179][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  219.356591][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.367749][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.377467][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  219.389638][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  219.416060][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  219.422868][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  219.724743][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  219.748035][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  219.757283][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  219.774277][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  219.783521][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  219.792725][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  219.805975][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  219.817000][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  219.850689][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  219.866202][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.424519][ T5797] chnl_net:caif_netlink_parms(): no params data found
[  220.932407][ T5801] chnl_net:caif_netlink_parms(): no params data found
[  221.300791][ T5804] chnl_net:caif_netlink_parms(): no params data found
[  221.418239][ T5806] Bluetooth: hci1: command tx timeout
[  221.424202][ T5806] Bluetooth: hci0: command tx timeout
[  221.497466][ T5810] chnl_net:caif_netlink_parms(): no params data found
[  221.552627][   T49] Bluetooth: hci2: command tx timeout
[  221.631264][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.641881][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.649836][ T5797] bridge_slave_0: entered allmulticast mode
[  221.659250][ T5797] bridge_slave_0: entered promiscuous mode
[  221.818632][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.826299][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.834913][ T5797] bridge_slave_1: entered allmulticast mode
[  221.844278][ T5797] bridge_slave_1: entered promiscuous mode
[  221.874952][   T49] Bluetooth: hci4: command tx timeout
[  221.953131][   T49] Bluetooth: hci3: command tx timeout
[  222.106336][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.114196][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.121805][ T5801] bridge_slave_0: entered allmulticast mode
[  222.131085][ T5801] bridge_slave_0: entered promiscuous mode
[  222.153746][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.164133][ T5813] chnl_net:caif_netlink_parms(): no params data found
[  222.182051][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.190403][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.199644][ T5804] bridge_slave_0: entered allmulticast mode
[  222.208834][ T5804] bridge_slave_0: entered promiscuous mode
[  222.239957][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.247662][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.255470][ T5801] bridge_slave_1: entered allmulticast mode
[  222.264674][ T5801] bridge_slave_1: entered promiscuous mode
[  222.341749][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.479412][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.487285][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.495090][ T5804] bridge_slave_1: entered allmulticast mode
[  222.504262][ T5804] bridge_slave_1: entered promiscuous mode
[  222.524986][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.580273][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.770951][ T5797] team0: Port device team_slave_0 added
[  222.833073][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.890126][ T5797] team0: Port device team_slave_1 added
[  222.937756][ T5801] team0: Port device team_slave_0 added
[  222.954502][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.965045][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.973212][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.980786][ T5810] bridge_slave_0: entered allmulticast mode
[  222.989262][ T5810] bridge_slave_0: entered promiscuous mode
[  223.138791][ T5801] team0: Port device team_slave_1 added
[  223.177078][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.184975][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.192977][ T5810] bridge_slave_1: entered allmulticast mode
[  223.201025][ T5810] bridge_slave_1: entered promiscuous mode
[  223.211951][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.219309][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.245801][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.259988][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.267629][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.275615][ T5813] bridge_slave_0: entered allmulticast mode
[  223.284644][ T5813] bridge_slave_0: entered promiscuous mode
[  223.354484][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.361668][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.389163][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.436896][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.444873][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.452460][ T5813] bridge_slave_1: entered allmulticast mode
[  223.461171][ T5813] bridge_slave_1: entered promiscuous mode
[  223.499029][   T49] Bluetooth: hci0: command tx timeout
[  223.503300][ T5806] Bluetooth: hci1: command tx timeout
[  223.522939][ T5804] team0: Port device team_slave_0 added
[  223.532050][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.539347][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.566565][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.597805][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.606434][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.632901][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.645349][ T5806] Bluetooth: hci2: command tx timeout
[  223.730053][ T5804] team0: Port device team_slave_1 added
[  223.786064][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.825501][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.877244][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.933541][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.952609][ T5806] Bluetooth: hci4: command tx timeout
[  223.986785][ T5813] team0: Port device team_slave_0 added
[  224.033720][ T5806] Bluetooth: hci3: command tx timeout
[  224.095386][ T5813] team0: Port device team_slave_1 added
[  224.133561][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.140705][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.167720][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.306283][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.314816][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.342288][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.367410][ T5797] hsr_slave_0: entered promiscuous mode
[  224.378008][ T5797] hsr_slave_1: entered promiscuous mode
[  224.394997][ T5810] team0: Port device team_slave_0 added
[  224.443052][ T5801] hsr_slave_0: entered promiscuous mode
[  224.451402][ T5801] hsr_slave_1: entered promiscuous mode
[  224.459842][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.467667][ T5801] Cannot create hsr debugfs directory
[  224.510102][ T5810] team0: Port device team_slave_1 added
[  224.519855][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.527197][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.553531][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.570239][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.577602][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.604529][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.815177][ T5804] hsr_slave_0: entered promiscuous mode
[  224.826805][ T5804] hsr_slave_1: entered promiscuous mode
[  224.834569][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.842499][ T5804] Cannot create hsr debugfs directory
[  224.893266][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.900439][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.927298][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.028805][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.036182][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.063016][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.345928][ T5813] hsr_slave_0: entered promiscuous mode
[  225.355270][ T5813] hsr_slave_1: entered promiscuous mode
[  225.363048][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.370773][ T5813] Cannot create hsr debugfs directory
[  225.447872][ T5810] hsr_slave_0: entered promiscuous mode
[  225.457828][ T5810] hsr_slave_1: entered promiscuous mode
[  225.466237][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.474106][ T5810] Cannot create hsr debugfs directory
[  225.552463][ T5806] Bluetooth: hci1: command tx timeout
[  225.558163][   T49] Bluetooth: hci0: command tx timeout
[  225.713137][   T49] Bluetooth: hci2: command tx timeout
[  226.032397][   T49] Bluetooth: hci4: command tx timeout
[  226.112446][   T49] Bluetooth: hci3: command tx timeout
[  226.556784][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  226.586727][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  226.608851][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  226.629669][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  226.840578][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  226.861469][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  226.897204][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  226.918257][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  226.938856][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  226.970056][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  226.990888][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  227.099845][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  227.175082][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  227.210331][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  227.298722][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  227.331719][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  227.556396][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  227.616826][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  227.637669][   T49] Bluetooth: hci0: command tx timeout
[  227.642662][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  227.648248][ T5806] Bluetooth: hci1: command tx timeout
[  227.722922][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  227.793798][ T5806] Bluetooth: hci2: command tx timeout
[  228.036176][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.124358][ T5806] Bluetooth: hci4: command tx timeout
[  228.193908][ T5806] Bluetooth: hci3: command tx timeout
[  228.276397][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.303113][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[  228.421478][ T5801] 8021q: adding VLAN 0 to HW filter on device team0
[  228.441666][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.449317][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.550810][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.558472][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.575303][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.582994][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.602250][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.609773][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.636705][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.668011][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.935789][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[  228.961806][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[  229.014021][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.074872][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.082494][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.166866][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.174502][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.286812][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.318452][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.326240][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.346678][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.354340][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.423797][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.677840][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[  229.699738][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.729945][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.904540][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.912079][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.022420][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.029940][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.041305][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.272556][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.474189][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.510843][ T5804] veth0_vlan: entered promiscuous mode
[  231.598730][ T5804] veth1_vlan: entered promiscuous mode
[  231.644856][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.849255][ T5801] veth0_vlan: entered promiscuous mode
[  232.025100][ T5804] veth0_macvtap: entered promiscuous mode
[  232.039049][ T5801] veth1_vlan: entered promiscuous mode
[  232.136996][ T5804] veth1_macvtap: entered promiscuous mode
[  232.167544][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.177042][ T5797] veth0_vlan: entered promiscuous mode
[  232.251644][ T5797] veth1_vlan: entered promiscuous mode
[  232.364994][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.424447][ T5801] veth0_macvtap: entered promiscuous mode
[  232.456905][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.542882][ T5801] veth1_macvtap: entered promiscuous mode
[  232.589955][ T5804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.600171][ T5804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.609505][ T5804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.618682][ T5804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.768124][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.802086][ T5797] veth0_macvtap: entered promiscuous mode
[  232.882580][ T5797] veth1_macvtap: entered promiscuous mode
[  232.894254][ T5813] veth0_vlan: entered promiscuous mode
[  232.909974][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.999902][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.009312][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.018487][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.027742][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.060865][ T5813] veth1_vlan: entered promiscuous mode
[  233.169580][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.253370][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.350199][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.360334][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.369533][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.378657][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.427262][ T5813] veth0_macvtap: entered promiscuous mode
[  233.509383][ T5813] veth1_macvtap: entered promiscuous mode
[  233.775513][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.866633][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.946930][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.956292][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.965536][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.974656][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.219837][ T5810] veth0_vlan: entered promiscuous mode
[  234.305275][ T5810] veth1_vlan: entered promiscuous mode
[  234.631488][ T5810] veth0_macvtap: entered promiscuous mode
[  234.726720][ T5810] veth1_macvtap: entered promiscuous mode
[  234.850107][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.937332][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.988895][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.999662][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.008928][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.018076][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.988166][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.998301][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.151861][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.160257][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.373866][ T3899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.381839][ T3899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.566922][ T3899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.575695][ T3899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.673218][ T3988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.681302][ T3988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.691649][ T5804] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  240.017805][ T4038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.026152][ T4038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.122923][ T3988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.131091][ T3988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.333242][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.341346][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.894092][ T5854] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  241.071276][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  241.112936][ T5854] usb 2-1: Using ep0 maxpacket: 16
[  241.144580][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[  241.174253][ T5854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.184986][ T5854] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  241.188559][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[  241.205108][ T5983] gre0: entered promiscuous mode
[  241.210303][ T5983] gre0: entered allmulticast mode
[  241.215909][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  241.283937][ T5854] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 1.26
[  241.293692][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.301957][ T5854] usb 2-1: Product: syz
[  241.308019][ T5854] usb 2-1: Manufacturer: syz
[  241.313576][ T5854] usb 2-1: SerialNumber: syz
[  241.331141][ T5854] usb 2-1: config 0 descriptor??
[  241.594780][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.602972][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.719086][ T5854] usb 2-1: USB disconnect, device number 2
[  241.860200][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.868750][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.825423][ T6008] loop1: detected capacity change from 0 to 256
[  244.053721][ T6008] =======================================================
[  244.053721][ T6008] WARNING: The mand mount option has been deprecated and
[  244.053721][ T6008]          and is ignored by this kernel. Remove the mand
[  244.053721][ T6008]          option from the mount to silence this warning.
[  244.053721][ T6008] =======================================================
[  244.868316][ T6016] loop0: detected capacity change from 0 to 64
[  244.923481][ T6008] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d)
[  247.515327][ T6038] loop1: detected capacity change from 0 to 1024
[  247.742791][ T6041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22'.
[  248.615386][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  248.925873][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'.
[  249.024656][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  249.332741][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  249.434750][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  249.537209][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  252.860701][ T6057] serio: Serial port ptm0
[  254.983999][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  254.993949][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  255.064630][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  255.073368][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  256.923531][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'.
[  257.624691][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!!
[  259.778388][ T6085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.34'.
[  260.016571][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  260.226883][ T5854] usb 1-1: Using ep0 maxpacket: 32
[  260.283901][ T5854] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  260.299517][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.343449][ T5854] usb 1-1: config 0 descriptor??
[  262.493593][ T5854] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  262.580347][ T5854] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  262.590028][ T5854] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  262.877802][ T6102] use of bytesused == 0 is deprecated and will be removed in the future,
[  262.886871][ T6102] use the actual size instead.
[  263.600130][ T6100] loop1: detected capacity change from 0 to 64
[  263.668100][ T6100] hfs: Unknown parameter 'iocharsut'
[  265.632694][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  265.823521][    T9] usb 3-1: Using ep0 maxpacket: 32
[  265.893594][    T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  265.902494][    T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  265.911615][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.926777][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  265.937760][    T9] usb 3-1: config 1 has no interface number 0
[  265.944270][    T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  265.953840][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.449535][    T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  267.457055][ T6120] netlink: 64 bytes leftover after parsing attributes in process `syz.4.47'.
[  268.336049][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  268.372027][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  268.386085][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  268.443521][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  268.482674][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  270.602573][   T49] Bluetooth: hci5: command tx timeout
[  271.014051][    T9] snd_usb_pod 3-1:1.1: set_interface failed
[  271.020403][    T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  271.029638][    T9] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71
[  271.118309][    T9] usb 3-1: USB disconnect, device number 2
[  271.677669][ T6140] Bluetooth: MGMT ver 1.23
[  271.682516][ T6140] Bluetooth: hci0: service_discovery: too big uuid_count value 65062
[  271.715581][ T6142] loop0: detected capacity change from 0 to 64
[  271.744696][ T6142] hfs: Unknown parameter 'iocharsut'
[  272.672508][   T49] Bluetooth: hci5: command tx timeout
[  274.578702][ T6125] chnl_net:caif_netlink_parms(): no params data found
[  274.632433][ T6150] loop4: detected capacity change from 0 to 47
[  274.762415][   T49] Bluetooth: hci5: command tx timeout
[  274.984144][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'.
[  275.958508][ T6163] netlink: 64 bytes leftover after parsing attributes in process `syz.4.58'.
[  276.067176][ T6167] tmpfs: Unknown parameter 'usrquotauencer'
[  276.081063][ T6167] loop0: detected capacity change from 0 to 24
[  276.583151][ T6167] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  276.609031][ T6167] VFS: Lookup of 'file0' in romfs loop0 would have caused loop
[  277.763570][   T49] Bluetooth: hci5: command tx timeout
[  278.536726][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.544416][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.552433][ T6125] bridge_slave_0: entered allmulticast mode
[  278.560541][ T6125] bridge_slave_0: entered promiscuous mode
[  278.744314][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.751692][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.759823][ T6125] bridge_slave_1: entered allmulticast mode
[  278.768351][ T6125] bridge_slave_1: entered promiscuous mode
[  279.053685][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.074584][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.587323][ T6125] team0: Port device team_slave_0 added
[  279.692964][ T6125] team0: Port device team_slave_1 added
[  280.312899][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.320059][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.347115][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.733068][ T4301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.834200][ T6194] loop0: detected capacity change from 0 to 47
[  280.856040][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  280.862844][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  280.881198][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.888856][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.915667][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.041945][ T4301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.157348][ T4301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.417959][ T4301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.743080][ T6201] netlink: 64 bytes leftover after parsing attributes in process `syz.2.73'.
[  281.828285][ T6125] hsr_slave_0: entered promiscuous mode
[  281.838375][ T6125] hsr_slave_1: entered promiscuous mode
[  281.847326][ T6125] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.856364][ T6125] Cannot create hsr debugfs directory
[  283.457208][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[  283.846372][ T4301] bridge_slave_1: left allmulticast mode
[  283.852375][ T4301] bridge_slave_1: left promiscuous mode
[  283.859057][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.953653][ T4301] bridge_slave_0: left allmulticast mode
[  283.959674][ T4301] bridge_slave_0: left promiscuous mode
[  283.966499][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.118607][ T6225] loop0: detected capacity change from 0 to 47
[  285.461948][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.530830][ T6228] loop4: detected capacity change from 0 to 1024
[  285.596382][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.653279][ T4301] bond0 (unregistering): Released all slaves
[  285.719979][ T6228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.365714][ T6236] netlink: 64 bytes leftover after parsing attributes in process `syz.2.84'.
[  286.863351][ T6238] Zero length message leads to an empty skb
[  287.838562][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.206600][ T4301] hsr_slave_0: left promiscuous mode
[  289.285100][ T4301] hsr_slave_1: left promiscuous mode
[  289.293309][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.301195][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.426895][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.435115][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.657186][ T4301] veth1_macvtap: left promiscuous mode
[  289.663164][ T4301] veth0_macvtap: left promiscuous mode
[  289.669072][ T4301] veth1_vlan: left promiscuous mode
[  289.680679][ T4301] veth0_vlan: left promiscuous mode
[  291.361851][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  291.477340][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  292.197627][ T6263] warning: `syz.1.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  293.074616][ T6278] loop0: detected capacity change from 0 to 47
[  293.231283][ T6281] loop1: detected capacity change from 0 to 1024
[  293.387528][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.387955][ T6125] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  293.534896][ T6125] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  293.607786][ T6288] netlink: 64 bytes leftover after parsing attributes in process `syz.4.95'.
[  293.638841][ T6125] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  293.704405][ T6125] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  294.945415][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.352369][ T2956] wlan1: Trigger new scan to find an IBSS to join
[  297.843129][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.082702][ T6125] 8021q: adding VLAN 0 to HW filter on device team0
[  298.148906][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.156584][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.273958][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.281523][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.076428][ T6316] loop2: detected capacity change from 0 to 47
[  299.486383][ T6320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.106'.
[  299.733030][ T6325] serio: Serial port ptm0
[  300.470003][ T4083] wlan1: Trigger new scan to find an IBSS to join
[  301.953434][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.108'.
[  302.015046][ T4301] wlan1: Creating new IBSS network, BSSID 96:2f:9a:4b:c9:bb
[  303.143387][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.784222][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.376242][ T6375] loop2: detected capacity change from 0 to 47
[  310.029041][ T6387] loop0: detected capacity change from 0 to 64
[  310.094873][ T6387] hfs: Unknown parameter 'iocharsut'
[  310.697649][ T6125] veth0_vlan: entered promiscuous mode
[  310.817562][ T6125] veth1_vlan: entered promiscuous mode
[  311.316510][ T6125] veth0_macvtap: entered promiscuous mode
[  311.413309][ T6125] veth1_macvtap: entered promiscuous mode
[  311.490516][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.652945][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.723317][ T6125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.732632][ T6125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.741632][ T6125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.750877][ T6125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.858487][ T6407] loop0: detected capacity change from 0 to 64
[  315.683023][ T6424] loop0: detected capacity change from 0 to 1024
[  315.965407][ T6424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.016616][ T6429] loop4: detected capacity change from 0 to 47
[  317.030176][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.152563][ T6439] loop1: detected capacity change from 0 to 64
[  317.178826][ T6439] hfs: Unknown parameter 'iocharsut'
[  317.668805][ T6446] loop0: detected capacity change from 0 to 256
[  318.083423][ T6446] FAT-fs (loop0): Directory bread(block 64) failed
[  318.090445][ T6446] FAT-fs (loop0): Directory bread(block 65) failed
[  318.097604][ T6446] FAT-fs (loop0): Directory bread(block 66) failed
[  318.104640][ T6446] FAT-fs (loop0): Directory bread(block 67) failed
[  318.111576][ T6446] FAT-fs (loop0): Directory bread(block 68) failed
[  318.118500][ T6446] FAT-fs (loop0): Directory bread(block 69) failed
[  318.125610][ T6446] FAT-fs (loop0): Directory bread(block 70) failed
[  318.132558][ T6446] FAT-fs (loop0): Directory bread(block 71) failed
[  318.139491][ T6446] FAT-fs (loop0): Directory bread(block 72) failed
[  318.151551][ T6446] FAT-fs (loop0): Directory bread(block 73) failed
[  319.216213][ T6463] fuseblk: Bad value for 'fd'
[  319.877190][ T6470] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  319.877190][ T6470] The task syz.4.141 (6470) triggered the difference, watch for misbehavior.
[  319.986758][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'.
[  320.141416][ T6470] IPv6: NLM_F_CREATE should be specified when creating new route
[  322.730090][ T6488] loop4: detected capacity change from 0 to 256
[  322.739229][ T6488] tracefs: Unknown parameter 'iocharset'
[  323.380113][ T6490] loop2: detected capacity change from 0 to 1024
[  323.588743][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.819036][ T6497] loop1: detected capacity change from 0 to 64
[  323.894908][ T6497] hfs: Unknown parameter 'iocharsut'
[  324.313951][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.373959][ T6515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.150'.
[  325.979657][ T6513] loop1: detected capacity change from 0 to 4096
[  326.301678][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  326.327827][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  326.353610][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  326.375309][   T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  326.395046][   T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  326.406139][ T6513] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  326.423605][   T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  326.762254][   T42] usb 5-1: Using ep0 maxpacket: 16
[  326.786288][   T42] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  326.795941][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.804687][   T42] usb 5-1: Product: syz
[  326.809081][   T42] usb 5-1: Manufacturer: syz
[  326.814028][   T42] usb 5-1: SerialNumber: syz
[  326.934042][ T6513] ntfs3(loop1): Failed to load $Extend (-22).
[  326.940409][ T6513] ntfs3(loop1): Failed to initialize $Extend.
[  326.978738][ T5854] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  326.995420][ T5854] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  327.035198][   T42] usb 5-1: config 0 descriptor??
[  327.073555][ T5854] usb 1-1: USB disconnect, device number 2
[  327.115483][   T42] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  327.125892][   T42] usb 5-1: Detected FT-X
[  327.289521][ T6513] ntfs3(loop1): ino=1b, "file0" The size of extended attributes must not exceed 64KiB
[  327.516495][   T42] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  328.014999][   T42] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  328.058970][   T42] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  328.177213][   T42] usb 5-1: USB disconnect, device number 2
[  328.274687][   T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  328.288105][   T42] ftdi_sio 5-1:0.0: device disconnected
[  328.517175][   T49] Bluetooth: hci4: command tx timeout
[  328.883670][ T6526] chnl_net:caif_netlink_parms(): no params data found
[  328.972929][ T6545] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  328.979753][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  328.988328][ T6545] vhci_hcd vhci_hcd.0: Device attached
[  329.237231][ T6545] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11)
[  329.244134][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  329.252730][ T6545] vhci_hcd vhci_hcd.0: Device attached
[  329.262482][   T42] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  329.263616][ T6552] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  329.333068][ T6548] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12)
[  329.339982][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  329.348530][ T6548] vhci_hcd vhci_hcd.0: Device attached
[  329.449719][ T4984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.574623][ T6558] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14)
[  329.581524][ T6558] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  329.590258][ T6558] vhci_hcd vhci_hcd.0: Device attached
[  329.769259][ T4984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.786817][ T6548] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  329.838592][ T6552] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(23)
[  329.845491][ T6552] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  329.853849][ T6552] vhci_hcd vhci_hcd.0: Device attached
[  330.001989][ T6557] loop4: detected capacity change from 0 to 2048
[  330.085381][ T6558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  330.099385][ T4984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.218393][ T6557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.240483][ T4984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.269673][ T6545] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(26)
[  330.276566][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  330.285761][ T6545] vhci_hcd vhci_hcd.0: Device attached
[  330.435570][ T6567] vhci_hcd: connection closed
[  330.446347][ T6559] vhci_hcd: connection closed
[  330.468877][ T4083] vhci_hcd: stop threads
[  330.479748][ T4083] vhci_hcd: release socket
[  330.484512][ T4083] vhci_hcd: disconnect device
[  330.489484][ T6550] vhci_hcd: connection closed
[  330.491627][ T6563] vhci_hcd: connection closed
[  330.496171][ T6546] vhci_hcd: connection reset by peer
[  330.507446][ T6549] vhci_hcd: connection closed
[  330.593252][   T49] Bluetooth: hci4: command tx timeout
[  330.623692][ T4083] vhci_hcd: stop threads
[  330.628164][ T4083] vhci_hcd: release socket
[  330.635412][ T4083] vhci_hcd: disconnect device
[  330.641224][ T4083] vhci_hcd: stop threads
[  330.645877][ T4083] vhci_hcd: release socket
[  330.650570][ T4083] vhci_hcd: disconnect device
[  330.700179][ T4083] vhci_hcd: stop threads
[  330.705605][ T4083] vhci_hcd: release socket
[  330.710399][ T4083] vhci_hcd: disconnect device
[  330.753450][ T4083] vhci_hcd: stop threads
[  330.757939][ T4083] vhci_hcd: release socket
[  330.764023][ T4083] vhci_hcd: disconnect device
[  330.879312][ T4083] vhci_hcd: stop threads
[  330.887030][ T4083] vhci_hcd: release socket
[  330.891866][ T4083] vhci_hcd: disconnect device
[  331.133892][ T4984] bridge_slave_1: left allmulticast mode
[  331.139890][ T4984] bridge_slave_1: left promiscuous mode
[  331.153180][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.336910][ T4984] bridge_slave_0: left allmulticast mode
[  331.343006][ T4984] bridge_slave_0: left promiscuous mode
[  331.349659][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.605105][ T6579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.162'.
[  332.068944][ T3988] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  332.655192][ T4984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.673690][   T49] Bluetooth: hci4: command tx timeout
[  332.718937][ T4984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.740416][ T4984] bond0 (unregistering): Released all slaves
[  333.279684][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  333.443716][ T4984] hsr_slave_0: left promiscuous mode
[  333.477698][ T4984] hsr_slave_1: left promiscuous mode
[  333.486522][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.494538][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.512823][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.524245][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.534585][ T5875] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  333.544050][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.615386][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.623752][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.739262][ T5875] usb 3-1: config 0 descriptor??
[  333.763013][ T4984] veth1_macvtap: left promiscuous mode
[  333.768994][ T4984] veth0_macvtap: left promiscuous mode
[  333.777098][ T4984] veth1_vlan: left promiscuous mode
[  333.782965][ T4984] veth0_vlan: left promiscuous mode
[  334.388151][ T5875] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  334.462901][   T42] vhci_hcd: vhci_device speed not set
[  334.503050][ T5875] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  334.642447][ T6604] loop1: detected capacity change from 0 to 1024
[  334.702996][ T5875] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00
[  334.771117][   T49] Bluetooth: hci4: command tx timeout
[  334.916464][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.976586][ T5875] cp2112 0003:10C4:EA90.0001: error requesting SMBus config
[  334.989145][ T6609] Illegal XDP return value 4294967294 on prog  (id 15) dev N/A, expect packet loss!
[  334.990940][ T5875] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71
[  335.096060][ T5875] usb 3-1: USB disconnect, device number 3
[  335.573183][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.764216][ T4984] team0 (unregistering): Port device team_slave_1 removed
[  335.803744][ T4984] team0 (unregistering): Port device team_slave_0 removed
[  335.872781][ T5890] usb usb34-port1: attempt power cycle
[  336.391265][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.399670][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.408163][ T6526] bridge_slave_0: entered allmulticast mode
[  336.560727][ T5890] usb usb34-port1: unable to enumerate USB device
[  337.005314][ T6526] bridge_slave_0: entered promiscuous mode
[  337.141110][ T6616] loop2: detected capacity change from 0 to 1024
[  337.205417][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.213270][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.220968][ T6526] bridge_slave_1: entered allmulticast mode
[  337.288678][ T6526] bridge_slave_1: entered promiscuous mode
[  337.432310][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.707891][ T6616] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.172: bad entry in directory: inode out of bounds - offset=44, inode=196620, rec_len=16, size=1024 fake=0
[  337.788454][ T6616] EXT4-fs (loop2): Remounting filesystem read-only
[  338.052530][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.510332][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.162367][ T6619] fido_id[6619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  339.836676][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.909284][ T6526] team0: Port device team_slave_0 added
[  340.030285][ T6526] team0: Port device team_slave_1 added
[  340.745924][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.753337][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.781225][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.839916][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.847387][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.875124][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.921536][ T6630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'.
[  341.703427][ T6638] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  342.136215][ T6526] hsr_slave_0: entered promiscuous mode
[  342.146301][ T6526] hsr_slave_1: entered promiscuous mode
[  342.154964][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.163377][ T6526] Cannot create hsr debugfs directory
[  342.370900][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  342.377856][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  343.611964][ T6645] loop1: detected capacity change from 0 to 1024
[  343.797014][ T6645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.434354][ T5803] Bluetooth: hci1: command 0x0406 tx timeout
[  344.440743][ T5803] Bluetooth: hci2: command 0x0406 tx timeout
[  344.450292][ T5803] Bluetooth: hci0: command 0x0406 tx timeout
[  344.456696][ T5803] Bluetooth: hci3: command 0x0406 tx timeout
[  345.661148][   T30] audit: type=1800 audit(1751411251.078:2): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.180" name="bus" dev="overlay" ino=283 res=0 errno=0
[  346.382424][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.751756][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  346.762767][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:5 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  346.762905][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  346.763024][ T5806] Workqueue: hci2 hci_rx_work
[  346.763184][ T5806] Call Trace:
[  346.763235][ T5806]  <TASK>
[  346.763282][ T5806]  __dump_stack+0x26/0x30
[  346.763439][ T5806]  dump_stack_lvl+0x1df/0x270
[  346.763606][ T5806]  dump_stack+0x1e/0x25
[  346.763743][ T5806]  sysfs_create_dir_ns+0x46c/0x540
[  346.763894][ T5806]  kobject_add_internal+0xeed/0x1840
[  346.764077][ T5806]  kobject_add+0x2c1/0x410
[  346.764247][ T5806]  ? kmsan_get_metadata+0xfb/0x160
[  346.764417][ T5806]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  346.764608][ T5806]  device_add+0xa70/0x1c10
[  346.764792][ T5806]  hci_conn_add_sysfs+0x15f/0x2f0
[  346.764965][ T5806]  le_conn_complete_evt+0x1b35/0x21b0
[  346.765148][ T5806]  hci_le_enh_conn_complete_evt+0x158/0x260
[  346.765313][ T5806]  hci_le_meta_evt+0x6eb/0x960
[  346.765443][ T5806]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  346.765616][ T5806]  hci_event_packet+0xce2/0x1e40
[  346.765784][ T5806]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  346.765954][ T5806]  hci_rx_work+0x9a8/0x12b0
[  346.766096][ T5806]  ? __pfx_hci_rx_work+0x10/0x10
[  346.766221][ T5806]  process_scheduled_works+0xb8e/0x1d80
[  346.766457][ T5806]  worker_thread+0xedf/0x1590
[  346.766674][ T5806]  kthread+0xd5c/0xf00
[  346.766795][ T5806]  ? __pfx_worker_thread+0x10/0x10
[  346.766990][ T5806]  ? __pfx_kthread+0x10/0x10
[  346.767117][ T5806]  ret_from_fork+0x1e0/0x310
[  346.767238][ T5806]  ? __pfx_kthread+0x10/0x10
[  346.767367][ T5806]  ret_from_fork_asm+0x1a/0x30
[  346.767558][ T5806]  </TASK>
[  346.767671][ T5806] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  346.956032][ T5806] Bluetooth: hci2: failed to register connection device
[  347.550480][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  347.758373][ T6526] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  348.076840][ T6526] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  348.286729][ T6526] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  348.429867][ T6526] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  352.131939][ T6682] loop0: detected capacity change from 0 to 256
[  352.334581][ T6682] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d)
[  352.398467][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.477536][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.190'.
[  352.689010][ T6526] 8021q: adding VLAN 0 to HW filter on device team0
[  352.770429][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.778048][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.971316][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.978987][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.123073][ T6689] loop2: detected capacity change from 0 to 64
[  353.132648][ T6689] hfs: Unknown parameter 'iocharsut'
[  353.871954][ T6692] loop0: detected capacity change from 0 to 1024
[  354.276819][ T6692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.884663][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.549585][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.095374][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.202'.
[  362.327074][ T6739] loop0: detected capacity change from 0 to 64
[  362.386657][ T6739] hfs: Unknown parameter 'iocharsut'
[  362.529145][ T6741] loop2: detected capacity change from 0 to 1024
[  362.914603][ T6741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.214082][ T3768] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  363.575056][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.592954][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.613915][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.631550][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.642027][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.728786][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.782663][   T49] Bluetooth: hci5: command tx timeout
[  366.075220][ T6526] veth0_vlan: entered promiscuous mode
[  366.226594][ T6526] veth1_vlan: entered promiscuous mode
[  366.908115][ T6762] netlink: 156 bytes leftover after parsing attributes in process `syz.4.208'.
[  366.918204][ T6763] loop2: detected capacity change from 0 to 32768
[  367.051340][ T6763] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  367.673348][ T6526] veth0_macvtap: entered promiscuous mode
[  367.794759][   T49] Bluetooth: hci5: command tx timeout
[  367.815857][ T6526] veth1_macvtap: entered promiscuous mode
[  367.905433][   T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  368.018615][ T6752] chnl_net:caif_netlink_parms(): no params data found
[  368.133024][   T42] usb 1-1: Using ep0 maxpacket: 16
[  368.144373][ T6763] XFS (loop2): Ending clean mount
[  368.161077][ T6763] XFS (loop2): Quotacheck needed: Please wait.
[  368.973196][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.984679][   T49] Bluetooth: hci5: command tx timeout
[  369.987525][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.019887][   T42] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  370.029572][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.038500][   T42] usb 1-1: Product: syz
[  370.043031][   T42] usb 1-1: Manufacturer: syz
[  370.047843][   T42] usb 1-1: SerialNumber: syz
[  370.174371][ T6763] XFS (loop2): Quotacheck: Done.
[  370.230358][   T42] usb 1-1: config 0 descriptor??
[  370.283587][   T42] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  370.293031][   T42] usb 1-1: Detected FT-X
[  370.402936][ T6526] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.412460][ T6526] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.421477][ T6526] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.430759][ T6526] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.462731][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  371.088980][   T42] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  371.167526][   T42] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  371.215516][   T42] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  371.304385][   T42] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  371.473691][   T42] usb 1-1: USB disconnect, device number 3
[  371.556116][   T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  371.568748][   T42] ftdi_sio 1-1:0.0: device disconnected
[  371.674882][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'.
[  372.033542][   T49] Bluetooth: hci5: command tx timeout
[  372.152786][ T6801] loop4: detected capacity change from 0 to 1024
[  372.288469][ T6801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.544867][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.558162][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.568066][ T6752] bridge_slave_0: entered allmulticast mode
[  374.578465][ T6752] bridge_slave_0: entered promiscuous mode
[  374.787128][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.794853][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.802976][ T6752] bridge_slave_1: entered allmulticast mode
[  374.812771][ T6752] bridge_slave_1: entered promiscuous mode
[  374.916478][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.594884][ T3801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.151052][ T6827] loop2: detected capacity change from 0 to 32768
[  376.160213][ T6827] btrfs: Deprecated parameter 'usebackuproot'
[  376.166690][ T6827] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  376.229205][ T6827] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.220 (6827)
[  376.250477][ T6827] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  376.261108][ T6827] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  376.271461][ T6827] BTRFS info (device loop2): using free-space-tree
[  376.473792][ T3801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.684913][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.712563][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.849402][ T6827] BTRFS info (device loop2): rebuilding free space tree
[  377.864661][ T3801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.762894][ T6849] BTRFS info (device loop2): space_info DATA+METADATA (sub-group id 0) has 159744 free, is not full
[  379.774444][ T6849] BTRFS info (device loop2): space_info total=3276800, used=53248, pinned=20480, reserved=1236992, may_use=1806336, readonly=0 zone_unusable=0
[  379.804658][ T6849] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792
[  379.814044][ T6849] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[  379.822021][ T6849] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[  379.830228][ T6849] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[  379.838487][ T6849] BTRFS info (device loop2): delayed_refs_rsv: size 65536 reserved 65536
[  380.314630][   T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  380.376684][ T6752] team0: Port device team_slave_0 added
[  380.441399][ T3801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.504501][   T42] usb 5-1: Using ep0 maxpacket: 16
[  380.556156][   T42] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  380.565802][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.574330][   T42] usb 5-1: Product: syz
[  380.578730][   T42] usb 5-1: Manufacturer: syz
[  380.583771][   T42] usb 5-1: SerialNumber: syz
[  380.664271][ T6752] team0: Port device team_slave_1 added
[  380.773140][   T42] usb 5-1: config 0 descriptor??
[  380.880936][   T42] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  380.891278][   T42] usb 5-1: Detected FT-X
[  381.043623][   T42] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  381.243252][ T5797] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  381.300889][   T42] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  381.350827][   T42] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  381.388140][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.395970][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.422663][ T6752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.462344][   T42] usb 5-1: USB disconnect, device number 3
[  381.498617][   T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  381.511121][   T42] ftdi_sio 5-1:0.0: device disconnected
[  381.610847][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.618214][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.646072][ T6752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.680516][ T3801] bridge_slave_1: left allmulticast mode
[  381.686654][ T3801] bridge_slave_1: left promiscuous mode
[  381.694234][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.811388][ T3801] bridge_slave_0: left allmulticast mode
[  381.817433][ T3801] bridge_slave_0: left promiscuous mode
[  381.824717][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.238637][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[  382.691632][ T6869] loop4: detected capacity change from 0 to 1024
[  382.714952][ T3801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.778958][ T3801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.807569][ T3801] bond0 (unregistering): Released all slaves
[  382.814182][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.306460][ T6752] hsr_slave_0: entered promiscuous mode
[  383.316985][ T6752] hsr_slave_1: entered promiscuous mode
[  383.325614][ T6752] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  383.333612][ T6752] Cannot create hsr debugfs directory
[  383.645293][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.744181][ T3801] hsr_slave_0: left promiscuous mode
[  383.783311][ T3801] hsr_slave_1: left promiscuous mode
[  383.791934][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.799891][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.869735][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.881350][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.064756][ T3801] veth1_macvtap: left promiscuous mode
[  384.070534][ T3801] veth0_macvtap: left promiscuous mode
[  384.076668][ T3801] veth1_vlan: left promiscuous mode
[  384.082315][ T3801] veth0_vlan: left promiscuous mode
[  386.130432][ T3801] team0 (unregistering): Port device team_slave_1 removed
[  386.309994][ T3801] team0 (unregistering): Port device team_slave_0 removed
[  390.492700][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  390.573143][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  390.594198][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  390.769639][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  390.781394][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  390.789036][ T6752] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  391.020830][ T6907] loop2: detected capacity change from 0 to 1024
[  391.037520][ T6752] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  391.239254][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'.
[  391.270524][ T6907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.318262][ T6752] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  391.491438][ T6752] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  391.925812][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.732461][   T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  392.923054][ T5806] Bluetooth: hci1: command tx timeout
[  392.938557][   T11] usb 5-1: unable to get BOS descriptor or descriptor too short
[  392.975150][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.049841][   T11] usb 5-1: config 6 has an invalid interface number: 200 but max is 0
[  393.058810][   T11] usb 5-1: config 6 has no interface number 0
[  393.065421][   T11] usb 5-1: config 6 interface 200 has no altsetting 0
[  393.092637][ T6903] chnl_net:caif_netlink_parms(): no params data found
[  393.189082][   T11] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  393.198838][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.210564][   T11] usb 5-1: Product: syz
[  393.216089][   T11] usb 5-1: Manufacturer: syz
[  393.220918][   T11] usb 5-1: SerialNumber: syz
[  393.272794][ T6752] 8021q: adding VLAN 0 to HW filter on device team0
[  393.630532][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.638209][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.744411][ T3667] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.862258][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.869913][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.002290][ T3667] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.067507][   T11] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  394.117887][   T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  394.149205][   T11] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  394.158889][   T11] usb 5-1: media controller created
[  394.217611][ T3667] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.280187][   T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  394.466711][ T3667] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.816197][   T11] dvb-usb: bulk message failed: -71 (6/0)
[  394.861168][   T11] dvb-usb: bulk message failed: -71 (6/0)
[  394.867744][   T11] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  395.006771][ T5806] Bluetooth: hci1: command tx timeout
[  395.357005][   T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  395.359204][ T6954] loop4: detected capacity change from 0 to 64
[  395.407369][   T11] dvb-usb: schedule remote query interval to 150 msecs.
[  395.414728][   T11] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  395.513994][   T11] usb 5-1: USB disconnect, device number 4
[  395.767573][ T6954] minix_free_block (loop4:4): bit already cleared
[  395.775632][ T6954] minix_free_block (loop4:3): bit already cleared
[  395.783238][ T6954] minix_free_block (loop4:2): bit already cleared
[  395.789890][ T6954] minix_free_block (loop4:1): bit already cleared
[  395.896603][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.904490][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.912359][ T6903] bridge_slave_0: entered allmulticast mode
[  395.921557][ T6903] bridge_slave_0: entered promiscuous mode
[  396.026070][   T11] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  396.044390][ T3667] bridge_slave_1: left allmulticast mode
[  396.050295][ T3667] bridge_slave_1: left promiscuous mode
[  396.058201][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.113937][ T3667] bridge_slave_0: left allmulticast mode
[  396.119832][ T3667] bridge_slave_0: left promiscuous mode
[  396.126742][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.034988][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.074036][ T5806] Bluetooth: hci1: command tx timeout
[  397.109099][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.133200][ T3667] bond0 (unregistering): Released all slaves
[  397.181694][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.194792][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.204945][ T6903] bridge_slave_1: entered allmulticast mode
[  397.216434][ T6903] bridge_slave_1: entered promiscuous mode
[  397.248965][ T6962] loop0: detected capacity change from 0 to 1024
[  397.344117][ T6962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.365296][   T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  397.565168][   T11] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  397.596145][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  397.608912][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  397.621280][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  397.683795][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.745106][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  397.755134][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  397.766476][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  397.776862][ T3667] hsr_slave_0: left promiscuous mode
[  397.820203][ T3667] hsr_slave_1: left promiscuous mode
[  397.829585][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.837617][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.880579][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  397.890997][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  397.902642][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  397.985213][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.994626][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.003436][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.016326][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.028660][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  398.104635][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.105266][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.124620][ T3667] veth1_macvtap: left promiscuous mode
[  398.129527][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.134021][ T3667] veth0_macvtap: left promiscuous mode
[  398.145027][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  398.151010][ T3667] veth1_vlan: left promiscuous mode
[  398.164885][ T3667] veth0_vlan: left promiscuous mode
[  398.193282][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.202865][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.214204][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  398.577364][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.586747][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.595112][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'.
[  398.600340][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  398.622743][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.637342][   T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.651089][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  398.695802][   T11] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  398.705329][   T11] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  398.714590][   T11] usb 5-1: Product: syz
[  398.719000][   T11] usb 5-1: Manufacturer: syz
[  398.723970][   T11] usb 5-1: SerialNumber: syz
[  398.748571][   T11] usb 5-1: config 0 descriptor??
[  398.812587][   T11] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  399.019914][   T11] usb 5-1: USB disconnect, device number 5
[  399.035173][   T11] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  399.173041][ T5806] Bluetooth: hci1: command tx timeout
[  399.490639][ T3667] team0 (unregistering): Port device team_slave_1 removed
[  399.604656][ T3667] team0 (unregistering): Port device team_slave_0 removed
[  400.207017][ T6989] loop4: detected capacity change from 0 to 512
[  400.229969][ T6989] EXT4-fs: Ignoring removed nobh option
[  400.524319][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.600047][ T6989] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.252: iget: bad i_size value: 38620345925642
[  400.631918][ T6989] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.252: couldn't read orphan inode 15 (err -117)
[  400.698527][ T6989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.990198][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.141098][ T6903] team0: Port device team_slave_0 added
[  401.247720][ T6903] team0: Port device team_slave_1 added
[  401.268968][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.658838][ T7002] smc: net device bond0 applied user defined pnetid SYZ2
[  401.726754][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.734819][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.761397][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.951557][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'.
[  402.308304][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.315717][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.342310][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.651424][ T6903] hsr_slave_0: entered promiscuous mode
[  402.663215][ T6903] hsr_slave_1: entered promiscuous mode
[  402.671765][ T6903] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.680972][ T6903] Cannot create hsr debugfs directory
[  403.399393][ T7011] loop0: detected capacity change from 0 to 1024
[  403.498976][ T7011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.741016][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  403.741254][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  404.222769][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.295314][ T6903] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  405.413532][ T6903] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  405.511100][ T6903] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  405.839626][ T6903] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  406.144080][ T6752] veth0_vlan: entered promiscuous mode
[  406.526790][ T6752] veth1_vlan: entered promiscuous mode
[  406.537738][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[  407.198952][ T6752] veth0_macvtap: entered promiscuous mode
[  407.320479][ T6752] veth1_macvtap: entered promiscuous mode
[  408.664257][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.442773][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.636988][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.834424][ T6752] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.844674][ T6752] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.854409][ T6752] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.863707][ T6752] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.007806][ T6903] 8021q: adding VLAN 0 to HW filter on device team0
[  410.154351][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.162291][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.321797][ T7056] binder: 7053:7056 ioctl 4018620d 0 returned -22
[  410.356653][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.364740][ T4083] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.665824][ T6903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  410.677090][ T6903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  413.345122][ T7079] loop2: detected capacity change from 0 to 512
[  413.562001][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.373669][ T7079] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.271: casefold flag without casefold feature
[  414.399052][ T7079] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.271: couldn't read orphan inode 15 (err -117)
[  414.894945][ T7079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.093165][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.274'.
[  418.609673][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.203710][ T7104] binder: 7103:7104 ioctl 4018620d 0 returned -22
[  421.587365][ T6903] veth0_vlan: entered promiscuous mode
[  421.764586][ T6903] veth1_vlan: entered promiscuous mode
[  422.268129][ T6903] veth0_macvtap: entered promiscuous mode
[  422.432911][ T6903] veth1_macvtap: entered promiscuous mode
[  422.653117][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.796826][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.012925][ T6903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.021997][ T6903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.031363][ T6903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.040497][ T6903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.811252][ T7161] bridge_slave_0: left allmulticast mode
[  426.817436][ T7161] bridge_slave_0: left promiscuous mode
[  426.824322][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.929235][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  426.963932][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  426.993149][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  427.070018][   T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  427.093063][   T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  427.256724][ T7161] bridge_slave_1: left allmulticast mode
[  427.265116][ T7161] bridge_slave_1: left promiscuous mode
[  427.271761][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.397610][ T7161] bond0: (slave bond_slave_0): Releasing backup interface
[  427.494389][ T7161] bond0: (slave bond_slave_1): Releasing backup interface
[  427.590676][ T7161] team0: Failed to send options change via netlink (err -105)
[  427.601092][ T7161] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  427.616092][ T7161] team0: Port device team_slave_0 removed
[  427.690596][ T7161] team0: Failed to send options change via netlink (err -105)
[  427.700558][ T7161] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  427.716602][ T7161] team0: Port device team_slave_1 removed
[  427.727599][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.735817][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.758539][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.767188][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.610287][ T7173] binder: 7171:7173 ioctl 4018620d 0 returned -22
[  429.153171][ T5806] Bluetooth: hci4: command tx timeout
[  429.641975][ T3580] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.998371][ T3580] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.250975][ T7163] chnl_net:caif_netlink_parms(): no params data found
[  430.320671][ T3580] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.488389][ T3580] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.247833][ T5806] Bluetooth: hci4: command tx timeout
[  432.302760][ T3580] bridge_slave_1: left allmulticast mode
[  432.308868][ T3580] bridge_slave_1: left promiscuous mode
[  432.315647][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.558891][ T3580] bridge_slave_0: left allmulticast mode
[  432.565165][ T3580] bridge_slave_0: left promiscuous mode
[  432.571720][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.312682][ T5806] Bluetooth: hci4: command tx timeout
[  433.869108][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.900796][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.926678][ T3580] bond0 (unregistering): Released all slaves
[  434.990796][ T7227] binder: 7226:7227 ioctl c0306201 0 returned -14
[  435.410569][ T5806] Bluetooth: hci4: command tx timeout
[  435.768215][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.777470][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.785704][ T7163] bridge_slave_0: entered allmulticast mode
[  435.795099][ T7163] bridge_slave_0: entered promiscuous mode
[  435.900041][ T3580] hsr_slave_0: left promiscuous mode
[  435.972718][ T3580] hsr_slave_1: left promiscuous mode
[  435.980721][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.988930][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.139539][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.147766][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.382857][ T3580] veth1_macvtap: left promiscuous mode
[  436.388779][ T3580] veth0_macvtap: left promiscuous mode
[  436.395335][ T3580] veth1_vlan: left promiscuous mode
[  436.400919][ T3580] veth0_vlan: left promiscuous mode
[  437.680829][ T3580] team0 (unregistering): Port device team_slave_1 removed
[  438.086225][ T3580] team0 (unregistering): Port device team_slave_0 removed
[  438.421932][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.432796][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.441435][ T7163] bridge_slave_1: entered allmulticast mode
[  438.453833][ T7163] bridge_slave_1: entered promiscuous mode
[  439.273077][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.299911][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.559856][ T7163] team0: Port device team_slave_0 added
[  439.605266][ T7163] team0: Port device team_slave_1 added
[  439.874776][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.881960][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.909280][ T7260] binder: 7259:7260 ioctl c0306201 0 returned -14
[  439.916896][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.161131][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.168544][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.196654][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.668452][ T7265] bridge_slave_0: left allmulticast mode
[  440.674650][ T7265] bridge_slave_0: left promiscuous mode
[  440.681529][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.783022][ T7265] bridge_slave_1: left allmulticast mode
[  440.788928][ T7265] bridge_slave_1: left promiscuous mode
[  440.798148][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.036483][ T7265] bond0: (slave bond_slave_0): Releasing backup interface
[  441.152854][ T7265] bond0: (slave bond_slave_1): Releasing backup interface
[  441.256108][ T7265] team0: Failed to send options change via netlink (err -105)
[  441.266136][ T7265] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  441.277251][ T7265] team0: Port device team_slave_0 removed
[  441.384503][ T7265] team0: Failed to send options change via netlink (err -105)
[  441.394316][ T7265] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  441.405429][ T7265] team0: Port device team_slave_1 removed
[  441.416107][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.424060][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.607124][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.615003][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.089787][ T7163] hsr_slave_0: entered promiscuous mode
[  442.102244][ T7163] hsr_slave_1: entered promiscuous mode
[  442.110725][ T7163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  442.118712][ T7163] Cannot create hsr debugfs directory
[  442.280997][ T7275] loop4: detected capacity change from 0 to 128
[  442.488046][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.496607][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.502810][   T30] audit: type=1800 audit(1751411347.898:3): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.310" name="bus" dev="loop4" ino=1048603 res=0 errno=0
[  442.903257][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.911498][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.997952][ T7275] syz.4.310: attempt to access beyond end of device
[  442.997952][ T7275] loop4: rw=0, sector=121, nr_sectors = 904 limit=128
[  443.164085][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  443.174134][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:5 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  443.174277][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  443.174375][ T5806] Workqueue: hci2 hci_rx_work
[  443.174506][ T5806] Call Trace:
[  443.174556][ T5806]  <TASK>
[  443.174604][ T5806]  __dump_stack+0x26/0x30
[  443.174759][ T5806]  dump_stack_lvl+0x1df/0x270
[  443.174923][ T5806]  dump_stack+0x1e/0x25
[  443.175067][ T5806]  sysfs_create_dir_ns+0x46c/0x540
[  443.175242][ T5806]  kobject_add_internal+0xeed/0x1840
[  443.175426][ T5806]  kobject_add+0x2c1/0x410
[  443.175593][ T5806]  ? kmsan_get_metadata+0xfb/0x160
[  443.175771][ T5806]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  443.175951][ T5806]  device_add+0xa70/0x1c10
[  443.176137][ T5806]  hci_conn_add_sysfs+0x15f/0x2f0
[  443.176310][ T5806]  le_conn_complete_evt+0x1b35/0x21b0
[  443.176494][ T5806]  hci_le_enh_conn_complete_evt+0x158/0x260
[  443.176660][ T5806]  hci_le_meta_evt+0x6eb/0x960
[  443.176789][ T5806]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  443.176950][ T5806]  hci_event_packet+0xce2/0x1e40
[  443.177120][ T5806]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  443.177287][ T5806]  hci_rx_work+0x9a8/0x12b0
[  443.177427][ T5806]  ? __pfx_hci_rx_work+0x10/0x10
[  443.177552][ T5806]  process_scheduled_works+0xb8e/0x1d80
[  443.177789][ T5806]  worker_thread+0xedf/0x1590
[  443.177999][ T5806]  kthread+0xd5c/0xf00
[  443.178128][ T5806]  ? __pfx_worker_thread+0x10/0x10
[  443.178318][ T5806]  ? __pfx_kthread+0x10/0x10
[  443.178446][ T5806]  ret_from_fork+0x1e0/0x310
[  443.178568][ T5806]  ? __pfx_kthread+0x10/0x10
[  443.178700][ T5806]  ret_from_fork_asm+0x1a/0x30
[  443.178890][ T5806]  </TASK>
[  443.178993][ T5806] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  443.367824][ T5806] Bluetooth: hci2: failed to register connection device
[  444.880658][ T7163] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  445.084047][ T7163] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  445.134531][ T7163] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  445.158569][ T7301] loop2: detected capacity change from 0 to 64
[  445.169179][ T7298] binder: 7297:7298 ioctl c0306201 0 returned -14
[  445.220332][ T7163] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  445.270848][ T7301] hfs: Unknown parameter 'iocharsut'
[  449.813695][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  449.953303][ T5806] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  450.063317][    T9] usb 5-1: Using ep0 maxpacket: 16
[  450.149009][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.220608][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  450.230254][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.246338][    T9] usb 5-1: Product: syz
[  450.250788][    T9] usb 5-1: Manufacturer: syz
[  450.256006][    T9] usb 5-1: SerialNumber: syz
[  450.410873][ T7163] 8021q: adding VLAN 0 to HW filter on device team0
[  450.416897][    T9] usb 5-1: config 0 descriptor??
[  450.490999][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.498642][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.515074][    T9] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  450.659992][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.667707][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.991061][    T9] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  451.087041][ T7163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.395971][   T42] usb 5-1: USB disconnect, device number 6
[  451.506472][   T42] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  451.519150][   T42] visor 5-1:0.0: device disconnected
[  453.133983][ T7347] loop2: detected capacity change from 0 to 64
[  453.202971][ T7347] hfs: Unknown parameter 'iocharsut'
[  457.347553][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.688326][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  457.699557][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: kworker/u9:5 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  457.699697][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  457.699795][ T5806] Workqueue: hci3 hci_rx_work
[  457.699923][ T5806] Call Trace:
[  457.699969][ T5806]  <TASK>
[  457.700017][ T5806]  __dump_stack+0x26/0x30
[  457.700180][ T5806]  dump_stack_lvl+0x1df/0x270
[  457.700350][ T5806]  dump_stack+0x1e/0x25
[  457.700491][ T5806]  sysfs_create_dir_ns+0x46c/0x540
[  457.700645][ T5806]  kobject_add_internal+0xeed/0x1840
[  457.700833][ T5806]  kobject_add+0x2c1/0x410
[  457.701008][ T5806]  ? kmsan_get_metadata+0xfb/0x160
[  457.701189][ T5806]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  457.701380][ T5806]  device_add+0xa70/0x1c10
[  457.701559][ T5806]  hci_conn_add_sysfs+0x15f/0x2f0
[  457.701730][ T5806]  le_conn_complete_evt+0x1b35/0x21b0
[  457.701913][ T5806]  hci_le_enh_conn_complete_evt+0x158/0x260
[  457.702079][ T5806]  hci_le_meta_evt+0x6eb/0x960
[  457.702206][ T5806]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  457.702377][ T5806]  hci_event_packet+0xce2/0x1e40
[  457.702543][ T5806]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  457.702716][ T5806]  hci_rx_work+0x9a8/0x12b0
[  457.702858][ T5806]  ? __pfx_hci_rx_work+0x10/0x10
[  457.702984][ T5806]  process_scheduled_works+0xb8e/0x1d80
[  457.703220][ T5806]  worker_thread+0xedf/0x1590
[  457.703438][ T5806]  kthread+0xd5c/0xf00
[  457.703564][ T5806]  ? __pfx_worker_thread+0x10/0x10
[  457.703761][ T5806]  ? __pfx_kthread+0x10/0x10
[  457.703894][ T5806]  ret_from_fork+0x1e0/0x310
[  457.704023][ T5806]  ? __pfx_kthread+0x10/0x10
[  457.704154][ T5806]  ret_from_fork_asm+0x1a/0x30
[  457.704356][ T5806]  </TASK>
[  457.877556][ T5806] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  457.893506][ T5806] Bluetooth: hci3: failed to register connection device
[  459.283185][   T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  459.507295][   T42] usb 6-1: Using ep0 maxpacket: 16
[  459.573448][   T42] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  459.582890][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.591343][   T42] usb 6-1: Product: syz
[  459.595931][   T42] usb 6-1: Manufacturer: syz
[  459.600766][   T42] usb 6-1: SerialNumber: syz
[  459.752928][   T42] usb 6-1: config 0 descriptor??
[  459.778643][   T42] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  460.770987][   T42] usb 6-1: clie_3_5_startup: get interface number failed: -71
[  460.779511][   T42] visor 6-1:0.0: probe with driver visor failed with error -71
[  460.958483][   T42] usb 6-1: USB disconnect, device number 2
[  464.259704][ T7163] veth0_vlan: entered promiscuous mode
[  464.461083][ T7163] veth1_vlan: entered promiscuous mode
[  464.536274][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  464.838259][ T7163] veth0_macvtap: entered promiscuous mode
[  464.847986][    T9] usb 1-1: Using ep0 maxpacket: 16
[  464.962127][ T7163] veth1_macvtap: entered promiscuous mode
[  465.077975][    T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  465.094052][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.102705][    T9] usb 1-1: Product: syz
[  465.107285][    T9] usb 1-1: Manufacturer: syz
[  465.113306][    T9] usb 1-1: SerialNumber: syz
[  465.147275][    T9] usb 1-1: config 0 descriptor??
[  465.269292][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  465.276132][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  465.386074][    T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  465.401867][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.404165][    T9] usb 1-1: Detected FT-X
[  465.584615][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.739640][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  465.746426][ T7163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.755773][ T7163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.765041][ T7163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.774578][ T7163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.996783][    T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  466.089427][    T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  466.294851][    T9] usb 1-1: USB disconnect, device number 4
[  466.367744][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  466.379942][    T9] ftdi_sio 1-1:0.0: device disconnected
[  468.201750][   T49] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  468.663601][ T7433] bridge0: entered allmulticast mode
[  470.396688][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  470.672594][    T9] usb 3-1: Using ep0 maxpacket: 16
[  470.746078][    T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  470.757358][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.766486][    T9] usb 3-1: Product: syz
[  470.770872][    T9] usb 3-1: Manufacturer: syz
[  470.775832][    T9] usb 3-1: SerialNumber: syz
[  471.034734][    T9] usb 3-1: config 0 descriptor??
[  471.119702][    T9] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  473.181058][    T9] usb 3-1: clie_3_5_startup: get interface number failed: -71
[  473.189445][    T9] visor 3-1:0.0: probe with driver visor failed with error -71
[  473.217164][    T9] usb 3-1: USB disconnect, device number 4
[  473.899758][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  474.094069][ T5890] usb 6-1: Using ep0 maxpacket: 32
[  474.134442][ T5890] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  474.143990][ T5890] usb 6-1: config 0 has no interface number 0
[  474.150351][ T5890] usb 6-1: config 0 interface 12 has no altsetting 0
[  474.277773][ T5890] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  474.288170][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.296759][ T5890] usb 6-1: Product: syz
[  474.301169][ T5890] usb 6-1: Manufacturer: syz
[  474.306211][ T5890] usb 6-1: SerialNumber: syz
[  474.344772][ T5890] usb 6-1: config 0 descriptor??
[  474.411004][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  474.617953][    T9] usb 1-1: Using ep0 maxpacket: 16
[  474.706292][    T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  474.720731][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.730681][    T9] usb 1-1: Product: syz
[  474.735175][    T9] usb 1-1: Manufacturer: syz
[  474.739985][    T9] usb 1-1: SerialNumber: syz
[  474.947262][    T9] usb 1-1: config 0 descriptor??
[  475.075316][    T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  475.085805][    T9] usb 1-1: Detected FT-X
[  475.229747][ T5890] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 10 failed: -71
[  475.232747][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  475.238600][ T5890] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  475.254356][ T5890] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  475.262525][ T5890] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  475.488751][    T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  475.526787][    T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  475.561028][ T5890] usb 6-1: USB disconnect, device number 3
[  475.639180][    T9] usb 1-1: USB disconnect, device number 5
[  475.673872][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  475.686913][    T9] ftdi_sio 1-1:0.0: device disconnected
[  476.481957][ T7494] loop2: detected capacity change from 0 to 512
[  477.972538][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  477.986185][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.999985][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.207764][    T9] usb 5-1: Using ep0 maxpacket: 16
[  478.300915][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  478.311092][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.319543][    T9] usb 5-1: Product: syz
[  478.324080][    T9] usb 5-1: Manufacturer: syz
[  478.328884][    T9] usb 5-1: SerialNumber: syz
[  479.056558][    T9] usb 5-1: config 0 descriptor??
[  479.158244][    T9] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  479.365360][ T6848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.374077][ T6848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.643145][    T9] usb 5-1: clie_3_5_startup: get interface number failed: -71
[  479.651349][    T9] visor 5-1:0.0: probe with driver visor failed with error -71
[  479.819453][    T9] usb 5-1: USB disconnect, device number 7
[  481.662999][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  481.834536][ T7548] loop5: detected capacity change from 0 to 512
[  481.882954][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  481.917383][ T7548] EXT4-fs: Ignoring removed nobh option
[  481.958414][ T5890] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  481.967978][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.976601][ T5890] usb 5-1: Product: syz
[  481.981007][ T5890] usb 5-1: Manufacturer: syz
[  481.985949][ T5890] usb 5-1: SerialNumber: syz
[  482.104983][ T7548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002]
[  482.137960][ T7548] System zones: 0-2, 18-18, 34-34
[  482.152480][ T5890] usb 5-1: config 0 descriptor??
[  482.177458][ T5890] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  482.188085][ T5890] usb 5-1: Detected FT-X
[  482.229946][ T7548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.243890][ T7548] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  482.538359][ T5890] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  482.588089][ T7548] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  482.779264][ T5890] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  482.854315][ T5890] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  482.985118][ T5890] usb 5-1: USB disconnect, device number 8
[  483.062971][ T5890] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  483.076546][ T5890] ftdi_sio 5-1:0.0: device disconnected
[  483.355488][ T6903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.304648][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  484.503351][    T9] usb 6-1: Using ep0 maxpacket: 8
[  484.659403][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  484.670684][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  484.681698][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  484.692848][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  484.785497][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  484.795182][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.803645][    T9] usb 6-1: Product: syz
[  484.808032][    T9] usb 6-1: Manufacturer: syz
[  484.813430][    T9] usb 6-1: SerialNumber: syz
[  484.948654][ T7571] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  485.064062][    T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  485.077702][    T9] usbtest 6-1:1.0: Linux user mode ISO test driver
[  485.084717][    T9] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  485.335858][    T9] usb 6-1: USB disconnect, device number 4
[  486.864224][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  487.181750][    T9] usb 5-1: Using ep0 maxpacket: 16
[  487.359575][    T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  487.369843][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.378610][    T9] usb 5-1: Product: syz
[  487.384104][    T9] usb 5-1: Manufacturer: syz
[  487.388991][    T9] usb 5-1: SerialNumber: syz
[  487.803673][    T9] usb 5-1: config 0 descriptor??
[  487.842676][ T7600] loop6: detected capacity change from 0 to 1024
[  487.980592][    T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  487.993592][    T9] usb 5-1: Detected FT-X
[  488.244006][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  488.313100][ T7600] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  488.320535][ T7600] hfsplus: xattr searching failed
[  488.476336][    T9] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  488.708245][    T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  488.969870][    T9] usb 5-1: USB disconnect, device number 9
[  489.164681][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  489.177950][    T9] ftdi_sio 5-1:0.0: device disconnected
[  489.643324][   T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  489.947616][   T42] usb 1-1: Using ep0 maxpacket: 8
[  490.214734][   T42] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  490.224588][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.233142][   T42] usb 1-1: Product: syz
[  490.237543][   T42] usb 1-1: Manufacturer: syz
[  490.242620][   T42] usb 1-1: SerialNumber: syz
[  490.338001][   T42] usb 1-1: config 0 descriptor??
[  490.470329][   T42] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  490.977093][   T42] gspca_sn9c2028: read1 error -71
[  490.988898][   T42] gspca_sn9c2028: read1 error -71
[  490.994661][   T42] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71
[  491.009273][ T7163] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  491.012564][   T42] usb 1-1: USB disconnect, device number 6
[  491.016766][ T7163] hfsplus: xattr search failed
[  491.338812][ T7163] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  491.347017][ T7163] hfsplus: xattr search failed
[  491.353232][ T7163] syz-executor: attempt to access beyond end of device
[  491.353232][ T7163] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  491.367892][ T7163] Buffer I/O error on dev loop6, logical block 458752, async page read
[  491.377014][ T7163] hfsplus: unable to mark blocks free: error -5
[  491.383806][ T7163] hfsplus: can't free extent
[  491.547810][ T7163] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  491.554870][ T7163] hfsplus: xattr search failed
[  491.562650][ T7163] syz-executor: attempt to access beyond end of device
[  491.562650][ T7163] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  491.577016][ T7163] Buffer I/O error on dev loop6, logical block 458752, async page read
[  491.585724][ T7163] hfsplus: unable to mark blocks free: error -5
[  491.592298][ T7163] hfsplus: can't free extent
[  491.760203][ T7163] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  491.767826][ T7163] hfsplus: xattr search failed
[  492.186714][ T7163] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  492.193954][ T7163] hfsplus: xattr search failed
[  492.259533][ T7163] =====================================================
[  492.267240][ T7163] BUG: KMSAN: uninit-value in hfsplus_lookup+0x674/0xf70
[  492.274841][ T7163]  hfsplus_lookup+0x674/0xf70
[  492.279745][ T7163]  __lookup_slow+0x560/0x760
[  492.284805][ T7163]  lookup_slow+0x6a/0xd0
[  492.289226][ T7163]  walk_component+0x444/0x650
[  492.294218][ T7163]  path_lookupat+0x251/0x6b0
[  492.298991][ T7163]  filename_lookup+0x2bd/0x800
[  492.304164][ T7163]  user_path_at+0x91/0x3d0
[  492.308783][ T7163]  __x64_sys_umount+0x143/0x250
[  492.314034][ T7163]  x64_sys_call+0x320b/0x3db0
[  492.318922][ T7163]  do_syscall_64+0xd9/0x210
[  492.329961][ T7163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.337756][ T7163] 
[  492.340180][ T7163] Uninit was created at:
[  492.345378][ T7163]  __alloc_frozen_pages_noprof+0x689/0xf00
[  492.351418][ T7163]  alloc_pages_mpol+0x328/0x860
[  492.357729][ T7163]  alloc_frozen_pages_noprof+0xf7/0x200
[  492.363629][ T7163]  allocate_slab+0x24d/0x1220
[  492.368515][ T7163]  ___slab_alloc+0xfec/0x3480
[  492.373593][ T7163]  kmem_cache_alloc_lru_noprof+0x922/0xed0
[  492.379592][ T7163]  hfsplus_alloc_inode+0x5a/0xd0
[  492.384950][ T7163]  alloc_inode+0x87/0x4a0
[  492.389497][ T7163]  iget_locked+0x239/0x12d0
[  492.394377][ T7163]  hfsplus_iget+0x5c/0xb80
[  492.399159][ T7163]  hfsplus_btree_open+0x134/0x1d00
[  492.404768][ T7163]  hfsplus_fill_super+0x1161/0x2740
[  492.410146][ T7163]  get_tree_bdev_flags+0x6e6/0x920
[  492.415726][ T7163]  get_tree_bdev+0x38/0x50
[  492.420354][ T7163]  hfsplus_get_tree+0x35/0x40
[  492.431265][ T7163]  vfs_get_tree+0xb3/0x5c0
[  492.437625][ T7163]  do_new_mount+0x738/0x1610
[  492.443008][ T7163]  path_mount+0x6db/0x1e90
[  492.447649][ T7163]  __se_sys_mount+0x6eb/0x7d0
[  492.452848][ T7163]  __x64_sys_mount+0xe4/0x150
[  492.457747][ T7163]  x64_sys_call+0xfa7/0x3db0
[  492.462777][ T7163]  do_syscall_64+0xd9/0x210
[  492.467453][ T7163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.473946][ T7163] 
[  492.476416][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  492.489011][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  492.499368][ T7163] =====================================================
[  492.506684][ T7163] Disabling lock debugging due to kernel taint
[  492.513058][ T7163] Kernel panic - not syncing: kmsan.panic set ...
[  492.519656][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz-executor Tainted: G    B               6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  492.533687][ T7163] Tainted: [B]=BAD_PAGE
[  492.537958][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  492.548164][ T7163] Call Trace:
[  492.551541][ T7163]  <TASK>
[  492.554572][ T7163]  __dump_stack+0x26/0x30
[  492.559091][ T7163]  dump_stack_lvl+0x53/0x270
[  492.563878][ T7163]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  492.569912][ T7163]  dump_stack+0x1e/0x25
[  492.574235][ T7163]  panic+0x4bd/0xd50
[  492.578360][ T7163]  kmsan_report+0x31c/0x320
[  492.583058][ T7163]  ? __msan_warning+0x1b/0x30
[  492.587913][ T7163]  ? hfsplus_lookup+0x674/0xf70
[  492.592939][ T7163]  ? __lookup_slow+0x560/0x760
[  492.597868][ T7163]  ? lookup_slow+0x6a/0xd0
[  492.602535][ T7163]  ? walk_component+0x444/0x650
[  492.607544][ T7163]  ? path_lookupat+0x251/0x6b0
[  492.612475][ T7163]  ? filename_lookup+0x2bd/0x800
[  492.617584][ T7163]  ? user_path_at+0x91/0x3d0
[  492.622346][ T7163]  ? __x64_sys_umount+0x143/0x250
[  492.627585][ T7163]  ? x64_sys_call+0x320b/0x3db0
[  492.632665][ T7163]  ? do_syscall_64+0xd9/0x210
[  492.637523][ T7163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.643780][ T7163]  ? __hfsplus_brec_find+0x6d3/0x840
[  492.649272][ T7163]  ? kmsan_get_metadata+0xfb/0x160
[  492.654587][ T7163]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  492.661044][ T7163]  ? __msan_memcpy+0x108/0x1c0
[  492.665994][ T7163]  ? hfsplus_bnode_read+0x34b/0x3a0
[  492.671403][ T7163]  ? kmsan_get_metadata+0xfb/0x160
[  492.676743][ T7163]  __msan_warning+0x1b/0x30
[  492.681427][ T7163]  hfsplus_lookup+0x674/0xf70
[  492.686326][ T7163]  ? kmsan_get_metadata+0xfb/0x160
[  492.691693][ T7163]  ? filter_irq_stacks+0x49/0x190
[  492.696908][ T7163]  ? kmsan_get_metadata+0xfb/0x160
[  492.702215][ T7163]  ? __pfx_hfsplus_lookup+0x10/0x10
[  492.707593][ T7163]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  492.713625][ T7163]  ? __pfx_hfsplus_lookup+0x10/0x10
[  492.719005][ T7163]  __lookup_slow+0x560/0x760
[  492.723799][ T7163]  lookup_slow+0x6a/0xd0
[  492.728222][ T7163]  walk_component+0x444/0x650
[  492.733059][ T7163]  ? kmsan_get_metadata+0xfb/0x160
[  492.738382][ T7163]  path_lookupat+0x251/0x6b0
[  492.743156][ T7163]  filename_lookup+0x2bd/0x800
[  492.748090][ T7163]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  492.754193][ T7163]  ? strncpy_from_user+0x255/0x470
[  492.759550][ T7163]  ? kmsan_get_metadata+0xfb/0x160
[  492.764861][ T7163]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  492.770905][ T7163]  user_path_at+0x91/0x3d0
[  492.775507][ T7163]  __x64_sys_umount+0x143/0x250
[  492.780545][ T7163]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  492.787075][ T7163]  x64_sys_call+0x320b/0x3db0
[  492.791992][ T7163]  do_syscall_64+0xd9/0x210
[  492.796661][ T7163]  ? irqentry_exit+0x16/0x60
[  492.801445][ T7163]  ? clear_bhb_loop+0x40/0x90
[  492.806289][ T7163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.812368][ T7163] RIP: 0033:0x7f3f93f8fc57
[  492.816919][ T7163] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  492.836704][ T7163] RSP: 002b:00007ffdee0d0368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  492.845315][ T7163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f93f8fc57
[  492.853425][ T7163] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdee0d0420
[  492.861527][ T7163] RBP: 00007ffdee0d0420 R08: 0000000000000000 R09: 0000000000000000
[  492.869639][ T7163] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdee0d1510
[  492.877751][ T7163] R13: 00007f3f94010925 R14: 0000000000077718 R15: 00007ffdee0d25e0
[  492.885891][ T7163]  </TASK>
[  492.889275][ T7163] Kernel Offset: disabled
[  492.893696][ T7163] Rebooting in 86400 seconds..