last executing test programs:

14m8.096088103s ago: executing program 4 (id=5):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

14m5.517627601s ago: executing program 4 (id=20):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="9bc0"], 0x2c}}, 0x0)

14m2.004802939s ago: executing program 4 (id=25):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2})

14m1.262993989s ago: executing program 32 (id=25):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2})

6m8.47497311s ago: executing program 3 (id=808):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3)

6m8.032516858s ago: executing program 3 (id=809):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

6m7.527740834s ago: executing program 3 (id=810):
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r0 = getpid()
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2f, 0xc8}}}, 0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4008000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r8 = syz_pidfd_open(r0, 0x0)
setns(r8, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

6m5.538417816s ago: executing program 3 (id=811):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000100), 0x1, 0x60e, &(0x7f0000002600)="$eJzs3U1vXFcdB+DfndiTOIjUbZO2IBBWsgA1IvF42tQLJAJCyIsKVWLTTRdW4iRWxm5lu8itEDi8bvkGLULOmhULxCISrPkIWGLRBRJ774zunTvxJHadmcTJjMXzSGfOOXPuPefcf+4943sdawL831p4P5MPUmTh8rubZX1nu93Z2W6v9MpJTidpJBPdLMVqUkwm19NN+Vr5Zt1d8WXjfPDZO/NftO7f69Ym6lRt3zhqv8Fs1SkzSU7V+XH1d+MZ+zvdVy4DdqkXOBi1vQO2htn9Ga9bYBwU3c/NA6aTs0nO9D7H6tWh8WJnd/yGWuUAAADghHppN7vZzLlRzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOkvr7/4s6NXrlmRS97/9v1u+lLp9oD0Y9AQAAAAAAAAA4Bt/azW42c65X3yuq3/lfrCrnq9ev5OOsZylruZLNLGYjG1lLK8l0X0fNzcWNjbXWAHvOHbrn3HDzPvH/8QAAAAAAAAAAjtevsrD/+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHRXKqm1XpfK88ncZEkjNJmuV2W8nfeuWT7MGoJwAAAAAvwEu72c1mzvXqe0V1z/9add9/Jh9nNRtZzkY6WcrN6llA966/sVOW9/b29rbbKwf7/cF/h5pG1WO6zx4OH3m22uJC1f6nZrKQH+enuZyZvJe1LOdnWcxGljKTH1WlxRSZrp9eTO9st1f606ODX3+k9t6T5vpGNZOp3MpyNbcruZEP08nNNKpjqLY5esR7ZXSK79cGfIhys87LI/pDnb94W4e8N11FZPJhRGbr2JfRePnoSAx5njw+UiuNh8+gzg8T8wHHO1vnZax/N7KYH+bxSMz1nX2vHR2J5OK/v/mXO53Vu3durV8en0N6So9Hot0XidefcyR2j2H+x6dZR6O7ivZWy9KTV8uL1b7nspyf5MPczFLeznzezlzeyluZzXyu9cX1wpOvtdtJhrnWLn2nLkwl+X2dj4cyri/3xbV/pZuu2vrf6UXpl3lliBXp64NNZaK3XTnGr+t8PDweiVbf+fLq0ZH44175ut5Zvbt2Z/GjAcf7dp2Xl+1vx2ptLs+XV8p/rKr26NlRtr16aFurajv/sK1xoO3Cv75atz3pSm3WP8Md7Gmuanv90LZ21fZGX9thP+UAMPbOvnm2OfWfqX9OfT71m6k7U++e+eHp+dPfaGbyHxN/PfXnxv3G94o383l+sX//DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL31Tz69u9jpLK0pKJzYwkSSySTjMp/nU2gmeXGDjnplAp63qxsrH11d/+TT7y6vLN5eur202m63rs3NX5ufu3b11nJnabb7OuppAs/B/of+qGcCAAAAAAAAAAAADGr4PwzI0H9OMOpjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE62hfcz+SBFWrNXZsv6zna7U6ZeeX/LiSSNJMXPk+LvyfV0U6b7uiu+bJwPPntn/ovW/Xv7fU30tm8ctd9gtuqUmSSn6vy4+rvxzP0VD4+wDNilXuBg1P4XAAD///6hC0A=")
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000180)=0xc, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
chdir(&(0x7f0000000180)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0xfb)

6m3.270554839s ago: executing program 3 (id=813):
syz_usb_connect(0x2, 0x0, 0x0, 0x0)

56.011847766s ago: executing program 1 (id=1019):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x7, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0xfffe, 0xda, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108)
write(r2, &(0x7f0000000000)="5a000300010003", 0x7)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)

55.136333399s ago: executing program 1 (id=1020):
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

54.166498214s ago: executing program 1 (id=1021):
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/138, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffb6e})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000000)=0x6, 0x4)

51.725250312s ago: executing program 1 (id=1022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x101})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x88840, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fcntl$setstatus(r7, 0x4, 0x800)
read$char_usb(r7, &(0x7f00000002c0)=""/151, 0x97)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x202040, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000400)={0x1e0, 0x40, 0x786, 0x40, 0x508, 0x3, 0x4, 0x0, {0xfffffffa, 0x8, 0x1}, {0xbfd7, 0x6}, {0x29e, 0x8, 0x1}, {0x5, 0x80000001, 0x1}, 0x1, 0x80, 0xffffffff, 0x48f, 0x1, 0x5, 0xffff, 0x6, 0xa0000000, 0x7, 0x8, 0x0, 0x25, 0x0, 0x1, 0x2})
r9 = getpgid(0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_pidfd_open(r9, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
setns(0xffffffffffffffff, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

47.673342409s ago: executing program 1 (id=1023):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)

46.942970115s ago: executing program 1 (id=1024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000013c0)={0x0, 0x100})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c8880)={0x9, [], 0x1, "fb6ee1cd7eaf8e"})

46.643218651s ago: executing program 33 (id=1024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000013c0)={0x0, 0x100})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c8880)={0x9, [], 0x1, "fb6ee1cd7eaf8e"})

13.233243709s ago: executing program 2 (id=1027):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

12.24190169s ago: executing program 2 (id=1028):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
gettid()
close(r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r6 = syz_usb_connect_ath9k(0x3, 0xc4, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[])
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000002f00090027bd7000fddbdf2504000000a4001a80"], 0xb8}, 0x1, 0x0, 0x0, 0x42800}, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000)

9.028787091s ago: executing program 2 (id=1029):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x7, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0xfffe, 0xda, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108)
write(r2, &(0x7f0000000000)="5a000300010003", 0x7)

7.830937155s ago: executing program 2 (id=1030):
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/138, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffb6e})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000000)=0x6, 0x4)

3.617591411s ago: executing program 2 (id=1031):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="400127"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

596.549825ms ago: executing program 2 (id=1032):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

0s ago: executing program 3 (id=813):
syz_usb_connect(0x2, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ing+0x15/0xb0
[  737.675476][ T5605]  do_syscall_64+0x33d/0x530
[  737.675507][ T5605]  ? irqentry_exit+0x10f/0x8f0
[  737.675534][ T5605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.675555][ T5605]  ? clear_bhb_loop+0x40/0x90
[  737.675582][ T5605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.675602][ T5605] RIP: 0033:0x7fc3a5e5f097
[  737.675623][ T5605] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  737.675641][ T5605] RSP: 002b:00007ffccfc6e448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  737.675664][ T5605] RAX: 0000000000000000 RBX: 00007fc3a5ef32ca RCX: 00007fc3a5e5f097
[  737.675678][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccfc6e500
[  737.675691][ T5605] RBP: 00007ffccfc6e500 R08: 00007ffccfc6f500 R09: 00000000ffffffff
[  737.675705][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc6f590
[  737.675719][ T5605] R13: 00007fc3a5ef32ca R14: 00000000000b3a3b R15: 00007ffccfc6f5d0
[  737.675755][ T5605]  </TASK>
[  737.694813][ T5605] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  737.872196][T10430] Bluetooth: hci4: command tx timeout
[  738.057070][T11046] team0: Port device team_slave_1 added
[  738.164321][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.164339][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.164365][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.238312][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.238324][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.238341][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.324023][T10940] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  738.395270][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  738.423559][T10825] 8021q: adding VLAN 0 to HW filter on device bond0
[  738.425485][T10940] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  738.455812][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  738.567652][T10940] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  738.615864][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  738.643720][T10940] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  738.737084][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  738.859662][T11046] hsr_slave_0: entered promiscuous mode
[  738.868000][T11046] hsr_slave_1: entered promiscuous mode
[  739.697000][T10825] 8021q: adding VLAN 0 to HW filter on device team0
[  739.968564][T10430] Bluetooth: hci4: command tx timeout
[  740.504359][T11100] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.504693][T11100] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.504868][T11100] bridge_slave_0: entered allmulticast mode
[  740.507027][T11100] bridge_slave_0: entered promiscuous mode
[  740.576571][T11100] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.577031][T11100] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.577354][T11100] bridge_slave_1: entered allmulticast mode
[  740.580918][T11100] bridge_slave_1: entered promiscuous mode
[  741.153529][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  741.274877][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  741.294544][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  741.318865][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  741.364140][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  741.626688][T11100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  741.679412][T11100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  741.918707][T11100] team0: Port device team_slave_0 added
[  741.940471][T11100] team0: Port device team_slave_1 added
[  742.413097][T11100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  742.413118][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.413148][T11100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  742.443988][T11100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  742.444006][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.444041][T11100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  742.708153][T11100] hsr_slave_0: entered promiscuous mode
[  742.709512][T11100] hsr_slave_1: entered promiscuous mode
[  742.710587][T11100] debugfs: 'hsr0' already exists in 'hsr'
[  742.710615][T11100] Cannot create hsr debugfs directory
[  742.753121][ T5605] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  742.753150][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  742.753169][ T5605] Tainted: [L]=SOFTLOCKUP
[  742.753174][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  742.753182][ T5605] Call Trace:
[  742.753188][ T5605]  <TASK>
[  742.753195][ T5605]  dump_stack_lvl+0xe8/0x150
[  742.753219][ T5605]  gfs2_assert_warn_i+0x18c/0x2c0
[  742.753238][ T5605]  gfs2_make_fs_ro+0x30d/0x320
[  742.753255][ T5605]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  742.753270][ T5605]  ? __pfx_autoremove_wake_function+0x10/0x10
[  742.753295][ T5605]  ? flush_work+0xd/0x30
[  742.753315][ T5605]  gfs2_put_super+0x235/0x870
[  742.753349][ T5605]  ? __pfx_gfs2_put_super+0x10/0x10
[  742.753364][ T5605]  generic_shutdown_super+0x13d/0x2d0
[  742.753383][ T5605]  kill_block_super+0x44/0xa0
[  742.753402][ T5605]  deactivate_locked_super+0xbc/0x110
[  742.753427][ T5605]  cleanup_mnt+0x3d3/0x460
[  742.753458][ T5605]  task_work_run+0x1d9/0x270
[  742.753473][ T5605]  ? __pfx_task_work_run+0x10/0x10
[  742.753493][ T5605]  exit_to_user_mode_loop+0x1fa/0x730
[  742.753507][ T5605]  ? rcu_is_watching+0x15/0xb0
[  742.753527][ T5605]  do_syscall_64+0x33d/0x530
[  742.753547][ T5605]  ? irqentry_exit+0x10f/0x8f0
[  742.753564][ T5605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.753577][ T5605]  ? clear_bhb_loop+0x40/0x90
[  742.753593][ T5605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.753606][ T5605] RIP: 0033:0x7fc3a5e5f097
[  742.753619][ T5605] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  742.753630][ T5605] RSP: 002b:00007ffccfc6e448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  742.753645][ T5605] RAX: 0000000000000000 RBX: 00007fc3a5ef32ca RCX: 00007fc3a5e5f097
[  742.753654][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccfc6e500
[  742.753662][ T5605] RBP: 00007ffccfc6e500 R08: 00007ffccfc6f500 R09: 00000000ffffffff
[  742.753671][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc6f590
[  742.753679][ T5605] R13: 00007fc3a5ef32ca R14: 00000000000b3a3b R15: 00007ffccfc6f5d0
[  742.753715][ T5605]  </TASK>
[  743.034221][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  743.126071][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  743.661342][   T60] Bluetooth: hci0: command tx timeout
[  745.164885][T11205] overlayfs: failed to resolve './file1': -2
[  746.172058][   T60] Bluetooth: hci0: command tx timeout
[  747.448550][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  747.448673][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  748.235312][   T60] Bluetooth: hci0: command tx timeout
[  748.615134][T10940] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.043663][T10940] 8021q: adding VLAN 0 to HW filter on device team0
[  749.099753][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.100194][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.817288][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.817506][ T8016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  750.292777][   T60] Bluetooth: hci0: command tx timeout
[  750.381240][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'.
[  750.381267][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'.
[  750.412075][  T153] bridge_slave_1: left allmulticast mode
[  750.412114][  T153] bridge_slave_1: left promiscuous mode
[  750.412447][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.574383][  T153] bridge_slave_0: left allmulticast mode
[  750.574422][  T153] bridge_slave_0: left promiscuous mode
[  750.574848][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.852324][  T153] bridge_slave_1: left allmulticast mode
[  750.852367][  T153] bridge_slave_1: left promiscuous mode
[  750.852736][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.975295][  T153] bridge_slave_0: left allmulticast mode
[  750.975332][  T153] bridge_slave_0: left promiscuous mode
[  750.975527][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.502573][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  751.582567][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  751.645515][  T153] bond0 (unregistering): Released all slaves
[  752.242679][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  752.323319][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  752.373155][  T153] bond0 (unregistering): Released all slaves
[  752.417330][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  752.992886][T11247] loop1: detected capacity change from 0 to 32768
[  753.125731][T11247] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  753.286797][T11247] XFS (loop1): Ending clean mount
[  753.618276][T11190] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.619313][T11190] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.619767][T11190] bridge_slave_0: entered allmulticast mode
[  753.625479][T11190] bridge_slave_0: entered promiscuous mode
[  753.643598][T11190] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.643988][T11190] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.644631][T11190] bridge_slave_1: entered allmulticast mode
[  753.648263][T11190] bridge_slave_1: entered promiscuous mode
[  754.476252][T11190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.567157][T11190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.931455][ T5605] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  755.287900][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  755.467439][  T153] hsr_slave_0: left promiscuous mode
[  755.541850][  T153] hsr_slave_1: left promiscuous mode
[  755.542967][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  755.616289][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  755.623978][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  755.944785][  T153] hsr_slave_0: left promiscuous mode
[  755.981795][  T153] hsr_slave_1: left promiscuous mode
[  755.983118][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.044813][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.151157][T11282] overlayfs: failed to resolve './file1': -2
[  759.642497][  T153] team0 (unregistering): Port device team_slave_1 removed
[  759.692846][  T153] team0 (unregistering): Port device team_slave_0 removed
[  759.731918][ T4928] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  759.906628][ T4928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  759.906668][ T4928] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  759.906711][ T4928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  759.906735][ T4928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.963573][T11290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  759.987508][ T4928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  760.616318][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.620605][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.659819][T11291] netlink: 160 bytes leftover after parsing attributes in process `syz.1.912'.
[  760.659867][T11291] netlink: 160 bytes leftover after parsing attributes in process `syz.1.912'.
[  760.699660][T11291] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  760.783998][  T153] team0 (unregistering): Port device team_slave_1 removed
[  760.892773][  T153] team0 (unregistering): Port device team_slave_0 removed
[  761.075689][ T5782] usb 2-1: USB disconnect, device number 30
[  761.208650][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6
[  761.756229][T11190] team0: Port device team_slave_0 added
[  761.772246][T11190] team0: Port device team_slave_1 added
[  761.916104][T11190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.916124][T11190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.916155][T11190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.997966][T11190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.997984][T11190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.998010][T11190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  763.662943][T11190] hsr_slave_0: entered promiscuous mode
[  763.665350][T11190] hsr_slave_1: entered promiscuous mode
[  763.667001][T11190] debugfs: 'hsr0' already exists in 'hsr'
[  763.667024][T11190] Cannot create hsr debugfs directory
[  764.924895][T11315] fuse: Bad value for 'rootmode'
[  765.157355][T10430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  765.202558][T10430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  765.216448][T10430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  765.237337][T10430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  765.285644][T10430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  767.141793][   T49] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  767.311892][   T49] usb 2-1: Using ep0 maxpacket: 8
[  767.325805][   T49] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  767.325865][   T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  767.325890][   T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  767.325915][   T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  767.325940][   T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  767.325963][   T49] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  767.326004][   T49] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  767.326026][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.552108][   T60] Bluetooth: hci2: command tx timeout
[  767.644338][   T49] usb 2-1: GET_CAPABILITIES returned 0
[  767.644394][   T49] usbtmc 2-1:16.0: can't read capabilities
[  767.706085][T11046] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  767.820668][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  767.868365][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.869083][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.889690][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.912796][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.971148][ T5831] usb 2-1: USB disconnect, device number 31
[  768.435447][T11046] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  768.456147][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  768.497829][T11046] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  768.576334][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  768.765444][T11046] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  768.953566][T11367] loop1: detected capacity change from 0 to 32768
[  768.967158][T11046] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  769.019310][T11367] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  769.019326][T11367] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  769.139115][T11367] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  769.143668][   T32] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  769.143690][   T32] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  769.233089][   T32] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 89ms
[  769.238216][   T32] gfs2: fsid=syz:syz.0: jid=0: Done
[  769.238323][T11367] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  769.543043][T11367] gfs2: fsid=syz:syz.0: found 1 quota changes
[  769.734404][   T60] Bluetooth: hci2: command tx timeout
[  769.918646][   T37] audit: type=1800 audit(1784202101.238:28): pid=11378 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.919" name="file1" dev="loop1" ino=2341 res=0 errno=0
[  770.591052][T11100] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  770.666727][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  770.793270][T11100] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  770.876128][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  771.089799][ T5605] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  771.089844][ T5605] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  771.089879][ T5605] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5605 [syz-executor] gfs2_quota_sync+0x353/0x450
[  771.089912][ T5605] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  771.089942][ T5605] CPU: 0 UID: 0 PID: 5605 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  771.089961][ T5605] Tainted: [L]=SOFTLOCKUP
[  771.089966][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  771.089973][ T5605] Call Trace:
[  771.089979][ T5605]  <TASK>
[  771.089985][ T5605]  dump_stack_lvl+0xe8/0x150
[  771.090005][ T5605]  gfs2_withdraw+0xc3/0x1b0
[  771.090020][ T5605]  inode_go_instantiate+0xbc7/0x12c0
[  771.090054][ T5605]  ? __pfx_inode_go_instantiate+0x10/0x10
[  771.090082][ T5605]  gfs2_instantiate+0x168/0x220
[  771.090096][ T5605]  gfs2_glock_wait+0x1d7/0x2a0
[  771.090112][ T5605]  do_sync+0x49c/0xbb0
[  771.090128][ T5605]  ? gfs2_quota_sync+0x353/0x450
[  771.090150][ T5605]  ? __pfx_do_sync+0x10/0x10
[  771.090172][ T5605]  ? gfs2_quota_sync+0x353/0x450
[  771.090192][ T5605]  ? rt_spin_unlock+0x163/0x200
[  771.090209][ T5605]  gfs2_quota_sync+0x353/0x450
[  771.090238][ T5605]  gfs2_sync_fs+0x4c/0xb0
[  771.090255][ T5605]  sync_filesystem+0xf0/0x250
[  771.090275][ T5605]  generic_shutdown_super+0x77/0x2d0
[  771.090294][ T5605]  kill_block_super+0x44/0xa0
[  771.090313][ T5605]  deactivate_locked_super+0xbc/0x110
[  771.090329][ T5605]  cleanup_mnt+0x3d3/0x460
[  771.090350][ T5605]  task_work_run+0x1d9/0x270
[  771.090366][ T5605]  ? __pfx_task_work_run+0x10/0x10
[  771.090386][ T5605]  exit_to_user_mode_loop+0x1fa/0x730
[  771.090400][ T5605]  ? rcu_is_watching+0x15/0xb0
[  771.090420][ T5605]  do_syscall_64+0x33d/0x530
[  771.090438][ T5605]  ? irqentry_exit+0x10f/0x8f0
[  771.090456][ T5605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.090469][ T5605]  ? clear_bhb_loop+0x40/0x90
[  771.090485][ T5605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.090497][ T5605] RIP: 0033:0x7fc3a5e5f097
[  771.090511][ T5605] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  771.090522][ T5605] RSP: 002b:00007ffccfc6e448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  771.090537][ T5605] RAX: 0000000000000000 RBX: 00007fc3a5ef32ca RCX: 00007fc3a5e5f097
[  771.090546][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccfc6e500
[  771.090553][ T5605] RBP: 00007ffccfc6e500 R08: 00007ffccfc6f500 R09: 00000000ffffffff
[  771.090562][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc6f590
[  771.090570][ T5605] R13: 00007fc3a5ef32ca R14: 00000000000bbebf R15: 00007ffccfc6f5d0
[  771.090589][ T5605]  </TASK>
[  771.090594][ T5605] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  771.282290][T11100] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  771.330603][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  771.649885][T11100] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  771.690905][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  771.804075][   T60] Bluetooth: hci2: command tx timeout
[  773.204717][T11321] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.205028][T11321] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.205305][T11321] bridge_slave_0: entered allmulticast mode
[  773.208644][T11321] bridge_slave_0: entered promiscuous mode
[  773.245535][T11321] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.245800][T11321] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.245972][T11321] bridge_slave_1: entered allmulticast mode
[  773.248239][T11321] bridge_slave_1: entered promiscuous mode
[  773.425923][T11321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  773.468857][T11321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  773.543115][T11046] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.744536][  T153] bridge_slave_1: left allmulticast mode
[  773.744581][  T153] bridge_slave_1: left promiscuous mode
[  773.744810][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.843045][  T153] bridge_slave_0: left allmulticast mode
[  773.843073][  T153] bridge_slave_0: left promiscuous mode
[  773.843273][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.881833][   T60] Bluetooth: hci2: command tx timeout
[  774.072027][  T153] bridge_slave_1: left allmulticast mode
[  774.072056][  T153] bridge_slave_1: left promiscuous mode
[  774.072253][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.173065][  T153] bridge_slave_0: left allmulticast mode
[  774.173094][  T153] bridge_slave_0: left promiscuous mode
[  774.173299][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.122454][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  775.183192][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  775.204119][  T153] bond0 (unregistering): Released all slaves
[  775.812629][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  775.933226][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  775.993700][  T153] bond0 (unregistering): Released all slaves
[  776.016671][T11321] team0: Port device team_slave_0 added
[  776.111917][ T5605] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  776.111958][ T5605] CPU: 0 UID: 0 PID: 5605 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  776.111986][ T5605] Tainted: [L]=SOFTLOCKUP
[  776.111993][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  776.112004][ T5605] Call Trace:
[  776.112011][ T5605]  <TASK>
[  776.112020][ T5605]  dump_stack_lvl+0xe8/0x150
[  776.112056][ T5605]  gfs2_assert_warn_i+0x18c/0x2c0
[  776.112083][ T5605]  gfs2_make_fs_ro+0x30d/0x320
[  776.112109][ T5605]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  776.112132][ T5605]  ? __pfx_autoremove_wake_function+0x10/0x10
[  776.112170][ T5605]  ? flush_work+0xd/0x30
[  776.112201][ T5605]  gfs2_put_super+0x235/0x870
[  776.112233][ T5605]  ? __pfx_gfs2_put_super+0x10/0x10
[  776.112259][ T5605]  generic_shutdown_super+0x13d/0x2d0
[  776.112289][ T5605]  kill_block_super+0x44/0xa0
[  776.112321][ T5605]  deactivate_locked_super+0xbc/0x110
[  776.112348][ T5605]  cleanup_mnt+0x3d3/0x460
[  776.112383][ T5605]  task_work_run+0x1d9/0x270
[  776.112409][ T5605]  ? __pfx_task_work_run+0x10/0x10
[  776.112443][ T5605]  exit_to_user_mode_loop+0x1fa/0x730
[  776.112467][ T5605]  ? rcu_is_watching+0x15/0xb0
[  776.112499][ T5605]  do_syscall_64+0x33d/0x530
[  776.112533][ T5605]  ? irqentry_exit+0x10f/0x8f0
[  776.112564][ T5605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.112591][ T5605]  ? clear_bhb_loop+0x40/0x90
[  776.112619][ T5605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.112641][ T5605] RIP: 0033:0x7fc3a5e5f097
[  776.112662][ T5605] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  776.112681][ T5605] RSP: 002b:00007ffccfc6e448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  776.112704][ T5605] RAX: 0000000000000000 RBX: 00007fc3a5ef32ca RCX: 00007fc3a5e5f097
[  776.112719][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccfc6e500
[  776.112732][ T5605] RBP: 00007ffccfc6e500 R08: 00007ffccfc6f500 R09: 00000000ffffffff
[  776.112745][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc6f590
[  776.112753][ T5605] R13: 00007fc3a5ef32ca R14: 00000000000bbebf R15: 00007ffccfc6f5d0
[  776.112774][ T5605]  </TASK>
[  776.472982][T11321] team0: Port device team_slave_1 added
[  776.631397][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  776.732213][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  776.810695][T11321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  776.810708][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  776.810732][T11321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  776.950458][T11321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  776.950472][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  776.950488][T11321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  778.101570][T11046] 8021q: adding VLAN 0 to HW filter on device team0
[  778.441958][  T153] hsr_slave_0: left promiscuous mode
[  778.612562][  T153] hsr_slave_1: left promiscuous mode
[  778.614013][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  778.653731][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  778.791817][  T153] hsr_slave_0: left promiscuous mode
[  778.811874][  T153] hsr_slave_1: left promiscuous mode
[  778.813125][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  778.853121][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.444229][  T153] team0 (unregistering): Port device team_slave_1 removed
[  779.525042][  T153] team0 (unregistering): Port device team_slave_0 removed
[  781.943743][  T153] team0 (unregistering): Port device team_slave_1 removed
[  782.002711][  T153] team0 (unregistering): Port device team_slave_0 removed
[  782.173194][T10430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  782.253160][T10430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  782.288100][T10430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  782.289588][T10430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  782.290529][T10430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  782.806999][T11100] 8021q: adding VLAN 0 to HW filter on device bond0
[  783.427648][T11321] hsr_slave_0: entered promiscuous mode
[  783.436099][T11321] hsr_slave_1: entered promiscuous mode
[  783.438006][T11321] debugfs: 'hsr0' already exists in 'hsr'
[  783.438032][T11321] Cannot create hsr debugfs directory
[  783.440387][T11190] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  783.718918][T11190] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  783.784121][T11190] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  783.893308][T11190] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  783.927157][T11190] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  784.008746][T11190] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  784.177441][T11190] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  784.405245][T11190] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  784.466857][   T60] Bluetooth: hci3: command tx timeout
[  784.471844][   T49] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  784.702268][   T49] usb 2-1: Using ep0 maxpacket: 8
[  784.704668][   T49] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  784.704730][   T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  784.704750][   T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  784.704765][   T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  784.704781][   T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  784.704795][   T49] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  784.704821][   T49] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  784.704836][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.927484][   T49] usb 2-1: GET_CAPABILITIES returned 0
[  784.927541][   T49] usbtmc 2-1:16.0: can't read capabilities
[  784.930289][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  785.075813][T11100] 8021q: adding VLAN 0 to HW filter on device team0
[  785.184648][T11436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  785.185392][T11436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  785.213652][T11436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  785.214317][T11436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  785.220664][   T49] usb 2-1: USB disconnect, device number 32
[  785.418000][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.418174][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  785.526581][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.526735][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.408989][T11458] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config
[  786.780425][   T60] Bluetooth: hci3: command tx timeout
[  788.480402][T11461] loop1: detected capacity change from 0 to 32768
[  788.640353][T11461] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #69: fs_generation is 148268225
[  788.640391][T11461] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  788.640406][T11461] OCFS2: File system is now read-only.
[  788.640418][T11461] (syz.1.929,11461,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  788.640560][T11461] (syz.1.929,11461,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  788.648952][T11461] (syz.1.929,11461,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  788.648991][T11461] (syz.1.929,11461,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  788.649017][T11461] (syz.1.929,11461,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  788.649039][T11461] (syz.1.929,11461,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  788.649145][T11461] (syz.1.929,11461,0):ocfs2_fill_super:1177 ERROR: status = -30
[  788.880702][T10975] Flush: task=udevd[10975] dev=loop1 state=2
[  788.952035][T10975] Teardown: task=udevd[10975] dev=loop1 state=2
[  789.244256][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6
[  790.323135][   T60] Bluetooth: hci3: command tx timeout
[  791.498017][T11490] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config
[  792.488417][   T60] Bluetooth: hci3: command tx timeout
[  792.879872][T10430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  792.938766][T10430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  792.940943][T10430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  793.079662][T11190] 8021q: adding VLAN 0 to HW filter on device bond0
[  793.134348][T10430] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  793.135294][T10430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  793.464700][T11500] loop1: detected capacity change from 0 to 8
[  794.899365][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  795.032598][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  795.157582][   T60] Bluetooth: hci5: command tx timeout
[  795.577669][   T32] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  795.793416][   T32] usb 2-1: Using ep0 maxpacket: 8
[  795.795389][   T32] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  795.795795][   T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  795.795814][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  795.795830][   T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  795.795846][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  795.795861][   T32] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  795.795888][   T32] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  795.795902][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.064189][   T32] usb 2-1: GET_CAPABILITIES returned 0
[  796.064262][   T32] usbtmc 2-1:16.0: can't read capabilities
[  796.287816][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  796.288505][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  796.387426][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  796.388149][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  796.419676][T10470] usb 2-1: USB disconnect, device number 33
[  796.607673][T11190] 8021q: adding VLAN 0 to HW filter on device team0
[  796.708319][T11411] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.708588][T11411] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.708807][T11411] bridge_slave_0: entered allmulticast mode
[  796.717399][T11411] bridge_slave_0: entered promiscuous mode
[  796.740893][T11411] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.741196][T11411] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.741477][T11411] bridge_slave_1: entered allmulticast mode
[  796.754111][T11411] bridge_slave_1: entered promiscuous mode
[  797.614265][T11543] netlink: 96 bytes leftover after parsing attributes in process `syz.1.937'.
[  798.619353][   T60] Bluetooth: hci5: command tx timeout
[  798.784947][  T105] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.785051][  T105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  798.846796][T11411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.861965][T10470] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  798.905928][T11411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.049815][T10470] usb 2-1: not running at top speed; connect to a high speed hub
[  799.051307][T10470] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  799.054567][T10470] usb 2-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice= 0.40
[  799.054596][T10470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.054616][T10470] usb 2-1: Product: Х
[  799.054629][T10470] usb 2-1: Manufacturer: ۃ
[  799.054643][T10470] usb 2-1: SerialNumber: ӿ
[  799.234362][  T105] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.234620][  T105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.286041][T10470] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  799.286388][T10470] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  799.299333][T10470] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  799.301442][T10470] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  799.327331][T10470] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  799.479156][T10470] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  799.511571][T10470] usb 2-1: USB disconnect, device number 34
[  799.543457][T11411] team0: Port device team_slave_0 added
[  799.596257][T10975] udevd[10975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  799.679134][T11411] team0: Port device team_slave_1 added
[  799.773606][T11321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  799.917542][T11321] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  800.039669][T11321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  800.079627][T11321] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  800.084629][T11411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  800.084647][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.084682][T11411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  800.221120][T11321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  800.256303][T11321] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  800.259935][T11411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  800.259951][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.259983][T11411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  800.281119][T11321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  800.393078][T11321] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  800.681996][   T60] Bluetooth: hci5: command tx timeout
[  800.835120][T11411] hsr_slave_0: entered promiscuous mode
[  800.860346][T11411] hsr_slave_1: entered promiscuous mode
[  800.870130][T11411] debugfs: 'hsr0' already exists in 'hsr'
[  800.870155][T11411] Cannot create hsr debugfs directory
[  802.202212][  T153] bridge_slave_1: left allmulticast mode
[  802.202254][  T153] bridge_slave_1: left promiscuous mode
[  802.202594][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.752901][   T60] Bluetooth: hci5: command tx timeout
[  802.967322][  T153] bridge_slave_0: left allmulticast mode
[  802.967352][  T153] bridge_slave_0: left promiscuous mode
[  802.967601][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.191207][T10430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  803.278040][T10430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  803.292438][T10430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  803.329490][T10430] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  803.334347][T10430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  804.007228][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'.
[  804.656496][T11578] loop1: detected capacity change from 0 to 8
[  805.185411][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  805.272040][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  805.362359][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.442423][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.504703][  T153] bond0 (unregistering): Released all slaves
[  805.681768][   T60] Bluetooth: hci4: command tx timeout
[  806.631971][ T8857] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  806.781853][ T8857] usb 2-1: Using ep0 maxpacket: 8
[  806.783750][ T8857] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  806.783810][ T8857] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  806.783834][ T8857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  806.783850][ T8857] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  806.783866][ T8857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  806.783880][ T8857] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  806.783907][ T8857] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  806.783921][ T8857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.878430][  T153] hsr_slave_0: left promiscuous mode
[  806.911865][  T153] hsr_slave_1: left promiscuous mode
[  806.917310][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  806.932882][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  806.993174][ T8857] usb 2-1: GET_CAPABILITIES returned 0
[  806.993227][ T8857] usbtmc 2-1:16.0: can't read capabilities
[  807.208946][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.209641][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.229752][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.230645][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.260847][ T8857] usb 2-1: USB disconnect, device number 35
[  807.503086][  T153] team0 (unregistering): Port device team_slave_1 removed
[  807.552996][  T153] team0 (unregistering): Port device team_slave_0 removed
[  807.714996][   T60] Bluetooth: hci4: command tx timeout
[  808.870053][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  808.870173][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  809.830350][   T60] Bluetooth: hci4: command tx timeout
[  811.216636][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  811.305943][T11494] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.307283][T11494] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.308639][T11494] bridge_slave_0: entered allmulticast mode
[  811.325146][T11494] bridge_slave_0: entered promiscuous mode
[  811.479352][T11494] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.479918][T11494] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.480133][T11494] bridge_slave_1: entered allmulticast mode
[  811.505596][T11494] bridge_slave_1: entered promiscuous mode
[  811.871845][   T60] Bluetooth: hci4: command tx timeout
[  812.046045][T11494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.079758][T11494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  812.963568][T11494] team0: Port device team_slave_0 added
[  812.993304][T11494] team0: Port device team_slave_1 added
[  813.823848][T11634] loop1: detected capacity change from 0 to 8
[  814.405180][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  814.491988][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  814.717548][T11494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.717568][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.717609][T11494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  814.816012][T11494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  814.816031][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.816056][T11494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.896625][T11321] 8021q: adding VLAN 0 to HW filter on device bond0
[  815.958969][T11494] hsr_slave_0: entered promiscuous mode
[  815.960322][T11494] hsr_slave_1: entered promiscuous mode
[  816.142676][ T5619] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  816.185370][T11321] 8021q: adding VLAN 0 to HW filter on device team0
[  816.325132][ T5619] usb 2-1: Using ep0 maxpacket: 8
[  816.347815][ T5619] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  816.347881][ T5619] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  816.347911][ T5619] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  816.347938][ T5619] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  816.347967][ T5619] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  816.347992][ T5619] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  816.348041][ T5619] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  816.348066][ T5619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.599663][ T5619] usb 2-1: GET_CAPABILITIES returned 0
[  816.599699][ T5619] usbtmc 2-1:16.0: can't read capabilities
[  816.658902][  T105] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.659016][  T105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.807105][T11642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  816.840499][T11642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  816.858339][T11642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  816.858940][T11642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  816.880832][ T5619] usb 2-1: USB disconnect, device number 36
[  817.036468][  T105] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.036689][  T105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.085648][T11566] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.085842][T11566] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.086030][T11566] bridge_slave_0: entered allmulticast mode
[  817.089024][T11566] bridge_slave_0: entered promiscuous mode
[  817.218530][T11566] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.218760][T11566] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.219164][T11566] bridge_slave_1: entered allmulticast mode
[  817.221231][T11566] bridge_slave_1: entered promiscuous mode
[  817.247098][T11411] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  817.275863][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  817.314001][T11411] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  817.335881][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  817.689799][T11411] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  817.717700][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.737068][T11566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  818.576022][T11411] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  818.759989][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  818.768968][T11566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.901969][ T4928] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  820.093233][ T4928] usb 2-1: config index 0 descriptor too short (expected 56612, got 36)
[  820.093267][ T4928] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  820.093287][ T4928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  820.093324][ T4928] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  820.093405][ T4928] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11
[  820.093432][ T4928] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  820.093457][ T4928] usb 2-1: config 0 interface 0 has no altsetting 0
[  820.093490][ T4928] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  820.093512][ T4928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.120179][ T4928] usb 2-1: config 0 descriptor??
[  820.135253][T11566] team0: Port device team_slave_0 added
[  820.200376][T11566] team0: Port device team_slave_1 added
[  820.665614][T11566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.665631][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.665658][T11566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.733588][T11566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.733608][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.733717][T11566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  821.291771][T11566] hsr_slave_0: entered promiscuous mode
[  821.294010][T11566] hsr_slave_1: entered promiscuous mode
[  821.295721][T11566] debugfs: 'hsr0' already exists in 'hsr'
[  821.295744][T11566] Cannot create hsr debugfs directory
[  821.329743][ T4928] usbhid 2-1:0.0: can't add hid device: -71
[  821.329886][ T4928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  821.367859][ T4928] usb 2-1: USB disconnect, device number 37
[  821.469279][T11666] vivid-002: =================  START STATUS  =================
[  821.469303][T11666] vivid-002: RDS Tx I/O Mode: Controls
[  821.469328][T11666] vivid-002: RDS Program ID: 32904
[  821.469349][T11666] vivid-002: RDS Program Type: 3
[  821.469368][T11666] vivid-002: RDS PS Name: VIVID-TX
[  821.469387][T11666] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[  821.469408][T11666] vivid-002: RDS Stereo: true
[  821.469426][T11666] vivid-002: RDS Artificial Head: false
[  821.469444][T11666] vivid-002: RDS Compressed: false
[  821.469463][T11666] vivid-002: RDS Dynamic PTY: false
[  821.469482][T11666] vivid-002: RDS Traffic Announcement: false
[  821.469501][T11666] vivid-002: RDS Traffic Program: true
[  821.469520][T11666] vivid-002: RDS Music: true
[  821.469540][T11666] vivid-002: ==================  END STATUS  ==================
[  822.502741][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8
[  823.154513][  T153] bridge_slave_1: left allmulticast mode
[  823.154557][  T153] bridge_slave_1: left promiscuous mode
[  823.154900][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.242875][T11702] loop1: detected capacity change from 0 to 8
[  823.880306][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  823.934225][  T153] bridge_slave_0: left allmulticast mode
[  823.934254][  T153] bridge_slave_0: left promiscuous mode
[  823.934473][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.962800][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  824.192631][  T153] bridge_slave_1: left allmulticast mode
[  824.192675][  T153] bridge_slave_1: left promiscuous mode
[  824.193533][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.658836][  T153] bridge_slave_0: left allmulticast mode
[  824.659164][  T153] bridge_slave_0: left promiscuous mode
[  824.670366][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.465486][T10430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  827.477155][T10430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  827.486810][T10430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  827.488132][T10430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  827.488895][T10430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  828.232971][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  828.312862][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  828.334062][  T153] bond0 (unregistering): Released all slaves
[  828.922689][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  829.002874][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  829.023974][  T153] bond0 (unregistering): Released all slaves
[  829.847990][   T60] Bluetooth: hci0: command tx timeout
[  831.981464][   T60] Bluetooth: hci0: command tx timeout
[  832.095501][T11411] 8021q: adding VLAN 0 to HW filter on device bond0
[  832.572069][ T5831] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  832.641798][  T153] hsr_slave_0: left promiscuous mode
[  832.681860][  T153] hsr_slave_1: left promiscuous mode
[  832.682994][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.722489][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.739170][ T5831] usb 2-1: config index 0 descriptor too short (expected 56612, got 36)
[  832.739192][ T5831] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  832.739205][ T5831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  832.739227][ T5831] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  832.791117][ T5831] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11
[  832.791166][ T5831] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  832.791196][ T5831] usb 2-1: config 0 interface 0 has no altsetting 0
[  832.791234][ T5831] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  832.791259][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.851481][ T5831] usb 2-1: config 0 descriptor??
[  832.962034][  T153] hsr_slave_0: left promiscuous mode
[  832.982131][  T153] hsr_slave_1: left promiscuous mode
[  832.983880][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  833.023133][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  833.702778][  T153] team0 (unregistering): Port device team_slave_1 removed
[  833.752564][  T153] team0 (unregistering): Port device team_slave_0 removed
[  834.031880][   T60] Bluetooth: hci0: command tx timeout
[  834.423019][  T153] team0 (unregistering): Port device team_slave_1 removed
[  834.472672][  T153] team0 (unregistering): Port device team_slave_0 removed
[  835.297876][T11411] 8021q: adding VLAN 0 to HW filter on device team0
[  835.602803][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.603146][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  835.829693][ T5831] usbhid 2-1:0.0: can't add hid device: -71
[  835.829830][ T5831] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  835.845847][T11494] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  835.931123][ T5831] usb 2-1: USB disconnect, device number 38
[  835.993540][T11494] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  836.117400][   T60] Bluetooth: hci0: command tx timeout
[  837.217771][T11494] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  837.303134][T11494] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  837.323460][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.323732][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  838.580454][T11494] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  838.610400][T11494] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  838.631050][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  838.673305][T11494] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  838.717862][T11494] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  839.158347][T11782] loop1: detected capacity change from 0 to 32768
[  839.172337][T11782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.970 (11782)
[  839.177693][T11782] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  839.177731][T11782] BTRFS info (device loop1): using sha256 checksum algorithm
[  839.538125][T11782] BTRFS info (device loop1): enabling ssd optimizations
[  839.538157][T11782] BTRFS info (device loop1): turning on async discard
[  839.538175][T11782] BTRFS info (device loop1): enabling free space tree
[  839.755128][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  840.499234][T10975] Flush: task=udevd[10975] dev=loop1 state=2
[  841.635679][T10975] Teardown: task=udevd[10975] dev=loop1 state=2
[  843.108292][T11826] loop1: detected capacity change from 0 to 32768
[  843.149737][T11719] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.150233][T11719] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.150540][T11719] bridge_slave_0: entered allmulticast mode
[  843.175039][T11719] bridge_slave_0: entered promiscuous mode
[  843.238057][T11719] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.239331][T11719] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.239627][T11719] bridge_slave_1: entered allmulticast mode
[  843.266169][T11719] bridge_slave_1: entered promiscuous mode
[  843.887267][T10430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  843.962228][T10430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  843.965750][T10430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  843.983302][T10430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  843.985005][T10430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  844.490159][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  844.504264][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  844.632330][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  846.282184][T10430] Bluetooth: hci2: command tx timeout
[  847.371768][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.063581][T11719] team0: Port device team_slave_0 added
[  848.352016][T10430] Bluetooth: hci2: command tx timeout
[  848.442650][T11719] team0: Port device team_slave_1 added
[  849.401008][T11494] 8021q: adding VLAN 0 to HW filter on device bond0
[  850.209288][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  850.209403][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  850.209421][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  850.266336][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  850.266356][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  850.266386][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  850.478286][T10430] Bluetooth: hci2: command tx timeout
[  850.480783][T11891] loop1: detected capacity change from 0 to 32768
[  850.510671][T11891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.979 (11891)
[  850.593399][T11891] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  850.593440][T11891] BTRFS info (device loop1): using sha256 checksum algorithm
[  850.821001][T11566] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  850.889148][T11891] BTRFS info (device loop1): enabling ssd optimizations
[  850.889180][T11891] BTRFS info (device loop1): turning on async discard
[  850.889198][T11891] BTRFS info (device loop1): enabling free space tree
[  850.925115][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  850.988140][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  851.112669][T11566] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  851.160119][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  851.355847][T11566] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  851.397008][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  851.494730][T11719] hsr_slave_0: entered promiscuous mode
[  851.496891][T11719] hsr_slave_1: entered promiscuous mode
[  851.498488][T11719] debugfs: 'hsr0' already exists in 'hsr'
[  851.498511][T11719] Cannot create hsr debugfs directory
[  851.529528][T11494] 8021q: adding VLAN 0 to HW filter on device team0
[  851.558401][T11566] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  851.617619][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  851.762559][T10975] Flush: task=udevd[10975] dev=loop1 state=2
[  852.331785][T10975] Teardown: task=udevd[10975] dev=loop1 state=2
[  852.778924][T10430] Bluetooth: hci2: command tx timeout
[  853.145411][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  853.234490][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.234695][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  853.267518][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  853.341433][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  853.381190][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  853.467082][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  854.548523][T11921] loop1: detected capacity change from 0 to 32768
[  855.552725][   T60] Bluetooth: hci3: command tx timeout
[  855.665606][  T153] bridge_slave_1: left allmulticast mode
[  855.665644][  T153] bridge_slave_1: left promiscuous mode
[  855.665935][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.721153][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  855.793005][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  855.842909][  T153] bridge_slave_0: left allmulticast mode
[  855.842943][  T153] bridge_slave_0: left promiscuous mode
[  855.843129][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.639582][   T60] Bluetooth: hci3: command tx timeout
[  859.152738][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  859.234159][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  859.254073][  T153] bond0 (unregistering): Released all slaves
[  859.712157][   T60] Bluetooth: hci3: command tx timeout
[  861.791817][   T60] Bluetooth: hci3: command tx timeout
[  862.001285][T11836] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.001887][T11836] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.002183][T11836] bridge_slave_0: entered allmulticast mode
[  862.010185][T11836] bridge_slave_0: entered promiscuous mode
[  862.248243][  T153] hsr_slave_0: left promiscuous mode
[  862.307569][  T153] hsr_slave_1: left promiscuous mode
[  862.309462][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  862.342978][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  862.525481][T11973] loop1: detected capacity change from 0 to 32768
[  862.560137][T11973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.988 (11973)
[  862.599722][T11973] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  862.599817][T11973] BTRFS info (device loop1): using sha256 checksum algorithm
[  862.725437][T11973] BTRFS info (device loop1): enabling ssd optimizations
[  862.725467][T11973] BTRFS info (device loop1): turning on async discard
[  862.725486][T11973] BTRFS info (device loop1): enabling free space tree
[  862.812275][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  863.076925][T10975] Flush: task=udevd[10975] dev=loop1 state=2
[  863.250931][T10975] Teardown: task=udevd[10975] dev=loop1 state=2
[  863.362685][  T153] team0 (unregistering): Port device team_slave_1 removed
[  863.442791][  T153] team0 (unregistering): Port device team_slave_0 removed
[  863.844622][T11836] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.844985][T11836] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.845317][T11836] bridge_slave_1: entered allmulticast mode
[  863.849182][T11836] bridge_slave_1: entered promiscuous mode
[  863.995722][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  864.347869][T11836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  864.377848][T11992] loop1: detected capacity change from 0 to 32768
[  864.463102][T11992] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  864.513827][T11992] XFS (loop1): Ending clean mount
[  864.550645][T11836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  865.037154][T10430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  865.330494][T10430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  865.339834][T10430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  865.353162][T10430] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  865.354097][T10430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  865.915196][ T5605] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  866.226167][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  866.393314][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  866.857309][T11836] team0: Port device team_slave_0 added
[  867.152093][T12012] loop1: detected capacity change from 0 to 32768
[  867.459732][T11836] team0: Port device team_slave_1 added
[  867.675281][T10430] Bluetooth: hci5: command tx timeout
[  868.230669][T11836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.230687][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.230713][T11836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.343034][T11836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.343053][T11836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.343081][T11836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.727955][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  868.832932][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  868.982778][T11836] hsr_slave_0: entered promiscuous mode
[  868.985494][T11836] hsr_slave_1: entered promiscuous mode
[  868.987445][T11836] debugfs: 'hsr0' already exists in 'hsr'
[  868.987474][T11836] Cannot create hsr debugfs directory
[  869.711816][T10430] Bluetooth: hci5: command tx timeout
[  869.846099][T11917] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.848440][T11917] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.929338][T11917] bridge_slave_0: entered allmulticast mode
[  870.188827][T11917] bridge_slave_0: entered promiscuous mode
[  870.353610][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  870.355394][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  871.791848][T10430] Bluetooth: hci5: command tx timeout
[  872.287615][T11917] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.287946][T11917] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.288251][T11917] bridge_slave_1: entered allmulticast mode
[  872.295717][T11917] bridge_slave_1: entered promiscuous mode
[  872.990396][T11917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.446569][T11917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.786644][T11917] team0: Port device team_slave_0 added
[  873.835438][T11917] team0: Port device team_slave_1 added
[  874.016407][T10430] Bluetooth: hci5: command tx timeout
[  875.258807][T12050] loop1: detected capacity change from 0 to 32768
[  875.310185][T12050] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  875.310208][T12050] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  875.432648][T12050] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  875.435623][ T5619] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  875.435644][ T5619] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  875.554268][ T5619] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms
[  875.554502][ T5619] gfs2: fsid=syz:syz.0: jid=0: Done
[  875.557017][T12050] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  875.874616][T11719] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  875.935221][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  875.938076][T12050] gfs2: fsid=syz:syz.0: found 1 quota changes
[  876.154558][T11917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  876.154572][T11917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  876.154589][T11917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  876.414237][   T37] audit: type=1800 audit(1784202207.738:29): pid=12057 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.993" name="file1" dev="loop1" ino=2341 res=0 errno=0
[  876.876108][ T5605] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  876.876153][ T5605] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  876.876187][ T5605] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5605 [syz-executor] gfs2_quota_sync+0x353/0x450
[  876.876233][ T5605] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  876.876267][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  876.876297][ T5605] Tainted: [L]=SOFTLOCKUP
[  876.876305][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  876.876318][ T5605] Call Trace:
[  876.876327][ T5605]  <TASK>
[  876.876338][ T5605]  dump_stack_lvl+0xe8/0x150
[  876.876372][ T5605]  gfs2_withdraw+0xc3/0x1b0
[  876.876397][ T5605]  inode_go_instantiate+0xbc7/0x12c0
[  876.876443][ T5605]  ? __pfx_inode_go_instantiate+0x10/0x10
[  876.876492][ T5605]  gfs2_instantiate+0x168/0x220
[  876.876519][ T5605]  gfs2_glock_wait+0x1d7/0x2a0
[  876.876547][ T5605]  do_sync+0x49c/0xbb0
[  876.876574][ T5605]  ? gfs2_quota_sync+0x353/0x450
[  876.876611][ T5605]  ? __pfx_do_sync+0x10/0x10
[  876.876650][ T5605]  ? gfs2_quota_sync+0x353/0x450
[  876.876685][ T5605]  ? rt_spin_unlock+0x163/0x200
[  876.876715][ T5605]  gfs2_quota_sync+0x353/0x450
[  876.876766][ T5605]  gfs2_sync_fs+0x4c/0xb0
[  876.876794][ T5605]  sync_filesystem+0xf0/0x250
[  876.876829][ T5605]  generic_shutdown_super+0x77/0x2d0
[  876.876862][ T5605]  kill_block_super+0x44/0xa0
[  876.876893][ T5605]  deactivate_locked_super+0xbc/0x110
[  876.876919][ T5605]  cleanup_mnt+0x3d3/0x460
[  876.876955][ T5605]  task_work_run+0x1d9/0x270
[  876.876982][ T5605]  ? __pfx_task_work_run+0x10/0x10
[  876.877019][ T5605]  exit_to_user_mode_loop+0x1fa/0x730
[  876.877043][ T5605]  ? rcu_is_watching+0x15/0xb0
[  876.877077][ T5605]  do_syscall_64+0x33d/0x530
[  876.877108][ T5605]  ? irqentry_exit+0x10f/0x8f0
[  876.877137][ T5605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.877160][ T5605]  ? clear_bhb_loop+0x40/0x90
[  876.877188][ T5605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.877210][ T5605] RIP: 0033:0x7fc3a5e5f097
[  876.877231][ T5605] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  876.877249][ T5605] RSP: 002b:00007ffccfc6e448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  876.877271][ T5605] RAX: 0000000000000000 RBX: 00007fc3a5ef32ca RCX: 00007fc3a5e5f097
[  876.877287][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccfc6e500
[  876.877302][ T5605] RBP: 00007ffccfc6e500 R08: 00007ffccfc6f500 R09: 00000000ffffffff
[  876.877321][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc6f590
[  876.877336][ T5605] R13: 00007fc3a5ef32ca R14: 00000000000d5e35 R15: 00007ffccfc6f5d0
[  876.877375][ T5605]  </TASK>
[  876.877400][ T5605] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  876.962617][T11719] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  877.036080][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  877.068157][T11917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  877.068174][T11917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  877.068199][T11917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  877.099656][T11719] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  877.138634][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  877.194692][T11719] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  877.248783][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  877.744884][T11917] hsr_slave_0: entered promiscuous mode
[  877.748676][T11917] hsr_slave_1: entered promiscuous mode
[  877.767654][T11917] debugfs: 'hsr0' already exists in 'hsr'
[  877.767681][T11917] Cannot create hsr debugfs directory
[  879.605967][T12002] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.606413][T12002] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.606718][T12002] bridge_slave_0: entered allmulticast mode
[  879.610830][T12002] bridge_slave_0: entered promiscuous mode
[  879.672235][T12002] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.672623][T12002] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.672942][T12002] bridge_slave_1: entered allmulticast mode
[  879.676839][T12002] bridge_slave_1: entered promiscuous mode
[  880.319979][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.589815][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.972906][T12002] team0: Port device team_slave_0 added
[  880.980803][T12002] team0: Port device team_slave_1 added
[  881.100906][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  881.100926][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.100954][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  881.109644][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  881.109660][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.109686][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  881.378526][T12002] hsr_slave_0: entered promiscuous mode
[  881.380937][T12002] hsr_slave_1: entered promiscuous mode
[  881.393034][T12002] debugfs: 'hsr0' already exists in 'hsr'
[  881.393064][T12002] Cannot create hsr debugfs directory
[  881.876949][ T5605] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  881.876992][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  881.877022][ T5605] Tainted: [L]=SOFTLOCKUP
[  881.877030][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  881.877043][ T5605] Call Trace:
[  881.877053][ T5605]  <TASK>
[  881.877062][ T5605]  dump_stack_lvl+0xe8/0x150
[  881.877101][ T5605]  gfs2_assert_warn_i+0x18c/0x2c0
[  881.877132][ T5605]  gfs2_make_fs_ro+0x30d/0x320
[  881.877161][ T5605]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  881.877187][ T5605]  ? __pfx_autoremove_wake_function+0x10/0x10
[  881.877229][ T5605]  ? flush_work+0xd/0x30
[  881.877265][ T5605]  gfs2_put_super+0x235/0x870
[  881.877299][ T5605]  ? __pfx_gfs2_put_super+0x10/0x10
[  881.877325][ T5605]  generic_shutdown_super+0x13d/0x2d0
[  881.877356][ T5605]  kill_block_super+0x44/0xa0
[  881.877387][ T5605]  deactivate_locked_super+0xbc/0x110
[  881.877418][ T5605]  cleanup_mnt+0x3d3/0x460
[  881.877456][ T5605]  task_work_run+0x1d9/0x270
[  881.877484][ T5605]  ? __pfx_task_work_run+0x10/0x10
[  881.877521][ T5605]  exit_to_user_mode_loop+0x1fa/0x730
[  881.877546][ T5605]  ? rcu_is_watching+0x15/0xb0
[  881.877582][ T5605]  do_syscall_64+0x33d/0x530
[  881.877616][ T5605]  ? irqentry_exit+0x10f/0x8f0
[  881.877647][ T5605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.877671][ T5605]  ? clear_bhb_loop+0x40/0x90
[  881.877700][ T5605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.877722][ T5605] RIP: 0033:0x7fc3a5e5f097
[  881.877744][ T5605] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  881.877764][ T5605] RSP: 002b:00007ffccfc6e448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  881.877797][ T5605] RAX: 0000000000000000 RBX: 00007fc3a5ef32ca RCX: 00007fc3a5e5f097
[  881.877813][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccfc6e500
[  881.877827][ T5605] RBP: 00007ffccfc6e500 R08: 00007ffccfc6f500 R09: 00000000ffffffff
[  881.877843][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc6f590
[  881.877857][ T5605] R13: 00007fc3a5ef32ca R14: 00000000000d5e35 R15: 00007ffccfc6f5d0
[  881.877893][ T5605]  </TASK>
[  881.944260][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  882.227188][ T5605] Flush: task=syz-executor[5605] dev=loop1 state=2
[  882.311875][ T5605] Teardown: task=syz-executor[5605] dev=loop1 state=2
[  883.550197][T11719] 8021q: adding VLAN 0 to HW filter on device bond0
[  883.913262][T11719] 8021q: adding VLAN 0 to HW filter on device team0
[  884.015759][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.017734][ T9189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  884.089599][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.089893][ T9189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.288292][T12145] loop1: detected capacity change from 0 to 32768
[  885.312885][T12145] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.997 (12145)
[  885.419089][T12145] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  885.419126][T12145] BTRFS info (device loop1): using sha256 checksum algorithm
[  885.632436][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6
[  885.896702][T12145] BTRFS info (device loop1): enabling ssd optimizations
[  885.896745][T12145] BTRFS info (device loop1): turning on async discard
[  885.896765][T12145] BTRFS info (device loop1): enabling free space tree
[  885.974783][  T153] bridge_slave_1: left allmulticast mode
[  885.974822][  T153] bridge_slave_1: left promiscuous mode
[  885.975164][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.063088][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  886.203556][  T153] bridge_slave_0: left allmulticast mode
[  886.203596][  T153] bridge_slave_0: left promiscuous mode
[  886.203944][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  886.651999][  T153] bridge_slave_1: left allmulticast mode
[  886.652039][  T153] bridge_slave_1: left promiscuous mode
[  886.652394][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.845940][T12053] Flush: task=udevd[12053] dev=loop1 state=2
[  886.933452][  T153] bridge_slave_0: left allmulticast mode
[  886.933491][  T153] bridge_slave_0: left promiscuous mode
[  886.933794][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.002029][T12053] Teardown: task=udevd[12053] dev=loop1 state=2
[  887.372135][  T153] bridge_slave_1: left allmulticast mode
[  887.372164][  T153] bridge_slave_1: left promiscuous mode
[  887.372382][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.494093][  T153] bridge_slave_0: left allmulticast mode
[  887.494122][  T153] bridge_slave_0: left promiscuous mode
[  887.494361][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  888.242748][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  888.322599][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  888.404595][  T153] bond0 (unregistering): Released all slaves
[  888.924875][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  888.929522][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  888.952064][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  889.004457][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  889.012660][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  889.352516][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  889.432933][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  889.513746][  T153] bond0 (unregistering): Released all slaves
[  890.092421][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.172525][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.194052][  T153] bond0 (unregistering): Released all slaves
[  891.107317][   T60] Bluetooth: hci4: command tx timeout
[  893.164805][   T60] Bluetooth: hci4: command tx timeout
[  893.165463][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7
[  895.234186][   T60] Bluetooth: hci4: command tx timeout
[  897.313165][   T60] Bluetooth: hci4: command tx timeout
[  897.410201][  T153] hsr_slave_0: left promiscuous mode
[  897.446984][  T153] hsr_slave_1: left promiscuous mode
[  897.450429][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  897.486751][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  897.706175][  T153] hsr_slave_0: left promiscuous mode
[  897.743151][  T153] hsr_slave_1: left promiscuous mode
[  897.746391][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  897.792818][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  897.951779][  T153] hsr_slave_0: left promiscuous mode
[  897.971747][  T153] hsr_slave_1: left promiscuous mode
[  897.973801][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  898.002554][T12240] loop1: detected capacity change from 0 to 32768
[  898.004690][T12240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1006 (12240)
[  898.009555][T12240] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  898.009590][T12240] BTRFS info (device loop1): using sha256 checksum algorithm
[  898.051237][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  898.176371][T12240] BTRFS info (device loop1): enabling ssd optimizations
[  898.176402][T12240] BTRFS info (device loop1): turning on async discard
[  898.176419][T12240] BTRFS info (device loop1): enabling free space tree
[  898.342534][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  898.627453][T12053] Flush: task=udevd[12053] dev=loop1 state=2
[  898.793808][T12053] Teardown: task=udevd[12053] dev=loop1 state=2
[  899.340809][  T153] team0 (unregistering): Port device team_slave_1 removed
[  899.414424][  T153] team0 (unregistering): Port device team_slave_0 removed
[  899.440278][T12256] loop1: detected capacity change from 0 to 32768
[  899.536037][T12256] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #69: fs_generation is 148268225
[  899.536073][T12256] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  899.536089][T12256] OCFS2: File system is now read-only.
[  899.536101][T12256] (syz.1.1007,12256,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  899.536264][T12256] (syz.1.1007,12256,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  899.536600][T12256] (syz.1.1007,12256,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  899.536628][T12256] (syz.1.1007,12256,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  899.536653][T12256] (syz.1.1007,12256,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  899.536677][T12256] (syz.1.1007,12256,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  899.536842][T12256] (syz.1.1007,12256,0):ocfs2_fill_super:1177 ERROR: status = -30
[  899.689467][T12053] Flush: task=udevd[12053] dev=loop1 state=2
[  899.755687][T12053] Teardown: task=udevd[12053] dev=loop1 state=2
[  900.282361][  T153] team0 (unregistering): Port device team_slave_1 removed
[  900.332552][  T153] team0 (unregistering): Port device team_slave_0 removed
[  900.822932][  T153] team0 (unregistering): Port device team_slave_1 removed
[  900.873207][  T153] team0 (unregistering): Port device team_slave_0 removed
[  901.075241][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8
[  904.376586][T12178] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.376903][T12178] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.377210][T12178] bridge_slave_0: entered allmulticast mode
[  904.432601][T12178] bridge_slave_0: entered promiscuous mode
[  904.459704][T12178] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.460902][T12178] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.461185][T12178] bridge_slave_1: entered allmulticast mode
[  904.474162][T10430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  904.542409][T12178] bridge_slave_1: entered promiscuous mode
[  904.621910][T10430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  904.627377][T10430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  904.657624][T10430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  904.661285][T10430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  905.403743][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.470591][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  906.949984][T10430] Bluetooth: hci0: command tx timeout
[  907.213942][T12178] team0: Port device team_slave_0 added
[  907.276135][T12178] team0: Port device team_slave_1 added
[  907.395843][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  907.395864][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  907.395894][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  907.400593][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  907.400610][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  907.400638][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  907.662038][T12178] hsr_slave_0: entered promiscuous mode
[  907.665751][T12178] hsr_slave_1: entered promiscuous mode
[  908.288886][T12309] loop1: detected capacity change from 0 to 32768
[  908.317620][T12309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1015 (12309)
[  908.336300][T12309] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  908.336338][T12309] BTRFS info (device loop1): using sha256 checksum algorithm
[  908.729688][T12309] BTRFS info (device loop1): enabling ssd optimizations
[  908.729718][T12309] BTRFS info (device loop1): turning on async discard
[  908.729737][T12309] BTRFS info (device loop1): enabling free space tree
[  908.923013][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  909.098953][T10430] Bluetooth: hci0: command tx timeout
[  909.637290][T11836] netdevsim netdevsim2: probe with driver netdevsim failed with error -12
[  909.883090][T12053] Flush: task=udevd[12053] dev=loop1 state=2
[  910.258123][T12053] Teardown: task=udevd[12053] dev=loop1 state=2
[  911.216338][T10430] Bluetooth: hci0: command tx timeout
[  913.231742][T10430] Bluetooth: hci0: command tx timeout
[  914.300418][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  914.390586][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  914.400503][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  914.426689][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  914.442669][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  915.920055][T12280] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.920537][T12280] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.920849][T12280] bridge_slave_0: entered allmulticast mode
[  915.929178][T12280] bridge_slave_0: entered promiscuous mode
[  915.937266][T12280] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.939161][T12280] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.939443][T12280] bridge_slave_1: entered allmulticast mode
[  915.948240][T12280] bridge_slave_1: entered promiscuous mode
[  916.612465][T10430] Bluetooth: hci2: command tx timeout
[  917.049114][T12280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  917.585493][T12421] Bluetooth: MGMT ver 1.23
[  918.936048][T10430] Bluetooth: hci2: command tx timeout
[  919.205675][T12280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.646922][T12280] team0: Port device team_slave_0 added
[  919.701268][T12280] team0: Port device team_slave_1 added
[  920.876714][T12280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  920.876734][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.876763][T12280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  920.920661][T12280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  920.920678][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.920711][T12280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  920.992828][T10430] Bluetooth: hci2: command tx timeout
[  921.424073][T12280] hsr_slave_0: entered promiscuous mode
[  921.426493][T12280] hsr_slave_1: entered promiscuous mode
[  921.428452][T12280] debugfs: 'hsr0' already exists in 'hsr'
[  921.428479][T12280] Cannot create hsr debugfs directory
[  921.991792][   T32] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  922.141921][   T32] usb 2-1: Using ep0 maxpacket: 8
[  922.151226][   T32] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  922.151259][   T32] usb 2-1: config 0 has no interface number 0
[  922.151306][   T32] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  922.151333][   T32] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  922.151360][   T32] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  922.151388][   T32] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  922.151432][   T32] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  922.151457][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.267444][   T32] usb 2-1: config 0 descriptor??
[  922.320889][   T32] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  923.072128][T10430] Bluetooth: hci2: command tx timeout
[  923.804626][  T153] bridge_slave_1: left allmulticast mode
[  923.804669][  T153] bridge_slave_1: left promiscuous mode
[  923.809078][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.003575][  T153] bridge_slave_0: left allmulticast mode
[  924.003617][  T153] bridge_slave_0: left promiscuous mode
[  924.003913][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.700897][ T5782] usb 2-1: USB disconnect, device number 39
[  924.707171][ T5782] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  924.798069][ T5605] do_umount: task=syz-executor[5605] propagate_mount_busy()!=0
[  924.798345][ T5605] do_umount: task=syz-executor[5605] propagate_mount_busy()!=0
[  925.182960][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  925.242386][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  925.283934][  T153] bond0 (unregistering): Released all slaves
[  925.778798][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  925.985134][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  926.001324][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  926.043798][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  926.057901][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  926.451830][  T153] hsr_slave_0: left promiscuous mode
[  926.497478][  T153] hsr_slave_1: left promiscuous mode
[  926.512182][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  926.573766][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  927.034874][T10430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  927.078960][T10430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  927.137304][T10430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  927.141007][T10430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  927.172935][T10430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  927.952572][  T153] team0 (unregistering): Port device team_slave_1 removed
[  928.053616][  T153] team0 (unregistering): Port device team_slave_0 removed
[  928.273973][T10430] Bluetooth: hci1: command tx timeout
[  928.883385][T12370] bridge0: port 1(bridge_slave_0) entered blocking state
[  928.883828][T12370] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.884136][T12370] bridge_slave_0: entered allmulticast mode
[  928.916717][T12370] bridge_slave_0: entered promiscuous mode
[  929.088464][T12370] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.088888][T12370] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.089224][T12370] bridge_slave_1: entered allmulticast mode
[  929.169822][T12370] bridge_slave_1: entered promiscuous mode
[  929.312316][T10430] Bluetooth: hci3: command tx timeout
[  929.353676][T12370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  929.528858][T12370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  929.819744][T12370] team0: Port device team_slave_0 added
[  929.843936][T12370] team0: Port device team_slave_1 added
[  930.083699][T12370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.083713][T12370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.083730][T12370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.145344][T12370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.145356][T12370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.145374][T12370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.351789][T10430] Bluetooth: hci1: command tx timeout
[  930.368705][T12370] hsr_slave_0: entered promiscuous mode
[  930.371465][T12370] hsr_slave_1: entered promiscuous mode
[  930.417786][T12370] debugfs: 'hsr0' already exists in 'hsr'
[  930.417815][T12370] Cannot create hsr debugfs directory
[  931.391824][T10430] Bluetooth: hci3: command tx timeout
[  931.732610][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  931.732710][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  932.442365][T10430] Bluetooth: hci1: command tx timeout
[  932.779259][T12501] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.781132][T12501] bridge0: port 1(bridge_slave_0) entered disabled state
[  932.781417][T12501] bridge_slave_0: entered allmulticast mode
[  932.793843][T12501] bridge_slave_0: entered promiscuous mode
[  932.839990][T12501] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.840339][T12501] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.840540][T12501] bridge_slave_1: entered allmulticast mode
[  932.844493][T12501] bridge_slave_1: entered promiscuous mode
[  933.164297][T12501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  933.191282][T12519] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.191535][T12519] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.192672][T12519] bridge_slave_0: entered allmulticast mode
[  933.196146][T12519] bridge_slave_0: entered promiscuous mode
[  933.234543][T12501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  933.235693][T12519] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.236041][T12519] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.236361][T12519] bridge_slave_1: entered allmulticast mode
[  933.239464][T12519] bridge_slave_1: entered promiscuous mode
[  933.371312][T12178] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  933.396584][T12178] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  933.444388][T12178] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  933.471969][T10430] Bluetooth: hci3: command tx timeout
[  933.482702][T12178] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  933.575998][T12501] team0: Port device team_slave_0 added
[  933.603064][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  933.603181][T12178] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  933.640502][T12178] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  933.893036][T12501] team0: Port device team_slave_1 added
[  933.896972][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  933.897992][T12178] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  933.926209][T12178] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  934.293858][  T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.390243][T12501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.390256][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.390273][T12501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.512219][T10430] Bluetooth: hci1: command tx timeout
[  934.536208][T12519] team0: Port device team_slave_0 added
[  934.541128][T12501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.541145][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.541162][T12501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  934.629480][T12519] team0: Port device team_slave_1 added
[  934.847522][  T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.935540][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.935553][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.935569][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.027758][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.027771][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.027788][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.130109][T12280] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  935.155821][T12280] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  935.171426][T12501] hsr_slave_0: entered promiscuous mode
[  935.174664][T12501] hsr_slave_1: entered promiscuous mode
[  935.176282][T12501] debugfs: 'hsr0' already exists in 'hsr'
[  935.176305][T12501] Cannot create hsr debugfs directory
[  935.189652][T12280] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  935.226102][T12280] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  935.384668][  T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.552405][T10430] Bluetooth: hci3: command tx timeout
[  935.569259][T12280] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  935.605650][T12280] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  935.715740][T12280] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  935.761447][T12280] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  936.176150][  T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.300596][T12519] hsr_slave_0: entered promiscuous mode
[  936.304404][T12519] hsr_slave_1: entered promiscuous mode
[  936.306211][T12519] debugfs: 'hsr0' already exists in 'hsr'
[  936.306235][T12519] Cannot create hsr debugfs directory
[  936.448784][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  937.621962][  T153] bridge_slave_1: left allmulticast mode
[  937.621990][  T153] bridge_slave_1: left promiscuous mode
[  937.622245][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.742792][  T153] bridge_slave_0: left allmulticast mode
[  937.742830][  T153] bridge_slave_0: left promiscuous mode
[  937.743060][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.943374][  T153] bridge_slave_1: left allmulticast mode
[  937.943404][  T153] bridge_slave_1: left promiscuous mode
[  937.943601][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.043739][  T153] bridge_slave_0: left allmulticast mode
[  938.043767][  T153] bridge_slave_0: left promiscuous mode
[  938.043978][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.281895][  T153] bridge_slave_1: left allmulticast mode
[  938.281924][  T153] bridge_slave_1: left promiscuous mode
[  938.282141][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.382860][  T153] bridge_slave_0: left allmulticast mode
[  938.382888][  T153] bridge_slave_0: left promiscuous mode
[  938.383081][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.952762][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  939.052374][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  939.113432][  T153] bond0 (unregistering): Released all slaves
[  939.382353][  T153] bond0 (unregistering): (slave ip6gretap1): Releasing active interface
[  939.879200][  T153] bond0 (unregistering): Released all slaves
[  939.898564][  T153] bond1 (unregistering): Released all slaves
[  939.918552][  T153] bond2 (unregistering): Released all slaves
[  940.168023][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  940.242510][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  940.323555][  T153] bond0 (unregistering): Released all slaves
[  941.036299][T12178] 8021q: adding VLAN 0 to HW filter on device bond0
[  941.259805][T12280] 8021q: adding VLAN 0 to HW filter on device bond0
[  941.267360][T12178] 8021q: adding VLAN 0 to HW filter on device team0
[  941.613815][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.614102][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  941.694699][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.695081][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  942.001394][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6
[  942.020920][T12280] 8021q: adding VLAN 0 to HW filter on device team0
[  942.279395][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.279560][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  942.333996][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  942.334126][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  943.203190][  T153] hsr_slave_0: left promiscuous mode
[  943.241830][  T153] hsr_slave_1: left promiscuous mode
[  943.243909][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  943.289949][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  943.482763][  T153] hsr_slave_0: left promiscuous mode
[  943.521848][  T153] hsr_slave_1: left promiscuous mode
[  943.522981][  T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  943.522999][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  943.681764][  T153] hsr_slave_0: left promiscuous mode
[  943.701879][  T153] hsr_slave_1: left promiscuous mode
[  943.703671][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  943.742594][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  943.803453][  T153] veth1_macvtap: left promiscuous mode
[  943.803533][  T153] veth0_macvtap: left promiscuous mode
[  943.803719][  T153] veth1_vlan: left promiscuous mode
[  943.803772][  T153] veth0_vlan: left promiscuous mode
[  944.462699][  T153] team0 (unregistering): Port device team_slave_1 removed
[  944.512732][  T153] team0 (unregistering): Port device team_slave_0 removed
[  945.262335][  T153] team0 (unregistering): Port device team_slave_1 removed
[  945.302325][  T153] team0 (unregistering): Port device team_slave_0 removed
[  945.843163][  T153] team0 (unregistering): Port device team_slave_1 removed
[  945.883145][  T153] team0 (unregistering): Port device team_slave_0 removed
[  946.063828][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7
[  947.679987][T12178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.684674][T12370] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  947.782087][T12370] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  947.790318][T12370] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  947.942241][T12370] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  947.964825][T12370] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  947.989225][T12370] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  948.099193][T12370] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  948.138985][T12370] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  948.317827][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8
[  948.639051][T12280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  949.179833][T12178] veth0_vlan: entered promiscuous mode
[  949.487200][T12501] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  949.624951][T12501] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  949.719849][T12501] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  949.763437][T12501] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  949.770681][T12280] veth0_vlan: entered promiscuous mode
[  949.810065][T12501] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  950.044269][T12501] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  950.240165][T12501] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  950.287752][T12501] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  951.188991][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  951.281172][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  951.290392][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  951.298963][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  951.304911][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  951.798360][T12280] veth1_vlan: entered promiscuous mode
[  952.223140][T12519] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  952.257063][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  952.290055][T12519] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  952.316263][  T153] IPVS: stop unused estimator thread 0...
[  952.405195][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  952.429864][T12519] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  952.526185][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  952.566635][T12519] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  952.618912][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  952.712605][T12370] 8021q: adding VLAN 0 to HW filter on device bond0
[  953.053663][T12280] veth0_macvtap: entered promiscuous mode
[  953.180553][T12370] 8021q: adding VLAN 0 to HW filter on device team0
[  953.247797][T12280] veth1_macvtap: entered promiscuous mode
[  953.373688][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.373847][ T9185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  953.392459][T10430] Bluetooth: hci4: command tx timeout
[  953.720240][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.720531][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state
[  953.823154][T12280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  954.099406][T12280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  954.239873][ T1402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  954.258528][ T1402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  954.305064][ T1402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  954.714116][T12501] 8021q: adding VLAN 0 to HW filter on device bond0
[  954.714579][ T1402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  954.924901][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  955.384368][T12501] 8021q: adding VLAN 0 to HW filter on device team0
[  955.489501][T10430] Bluetooth: hci4: command tx timeout
[  955.962312][T12519] 8021q: adding VLAN 0 to HW filter on device bond0
[  955.999606][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.999888][ T9185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  956.242249][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.242441][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  956.302827][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  956.302850][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.385023][T12708] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.385224][T12708] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.385417][T12708] bridge_slave_0: entered allmulticast mode
[  956.389705][T12708] bridge_slave_0: entered promiscuous mode
[  956.535717][T12708] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.536053][T12708] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.536734][T12708] bridge_slave_1: entered allmulticast mode
[  956.538821][T12708] bridge_slave_1: entered promiscuous mode
[  956.743068][T12519] 8021q: adding VLAN 0 to HW filter on device team0
[  956.753439][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  956.948244][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  956.976222][ T9185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  956.976244][ T9185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  957.152062][  T153] bridge_slave_1: left allmulticast mode
[  957.152106][  T153] bridge_slave_1: left promiscuous mode
[  957.152488][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.303040][  T153] bridge_slave_0: left allmulticast mode
[  957.303069][  T153] bridge_slave_0: left promiscuous mode
[  957.303336][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.501833][  T153] bridge_slave_1: left allmulticast mode
[  957.501875][  T153] bridge_slave_1: left promiscuous mode
[  957.502164][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.552164][T10430] Bluetooth: hci4: command tx timeout
[  957.622725][  T153] bridge_slave_0: left allmulticast mode
[  957.622752][  T153] bridge_slave_0: left promiscuous mode
[  957.622938][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.482380][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  958.542401][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  958.567182][  T153] bond0 (unregistering): Released all slaves
[  958.802499][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  958.902815][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  958.965081][  T153] bond0 (unregistering): Released all slaves
[  959.009024][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.009136][ T9189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  959.037198][T12708] team0: Port device team_slave_0 added
[  959.193790][T12708] team0: Port device team_slave_1 added
[  959.324024][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.324161][ T9189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  959.432993][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  959.433007][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.433023][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  959.446388][T12370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  959.496861][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  959.496878][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.496906][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  959.668924][T10430] Bluetooth: hci4: command tx timeout
[  959.955245][T12708] hsr_slave_0: entered promiscuous mode
[  959.958521][T12708] hsr_slave_1: entered promiscuous mode
[  959.960436][T12708] debugfs: 'hsr0' already exists in 'hsr'
[  959.960462][T12708] Cannot create hsr debugfs directory
[  960.039184][T12795] loop2: detected capacity change from 0 to 512
[  960.054263][T12795] EXT4-fs (loop2): Test dummy encryption mode enabled
[  960.073457][T12795] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1027: inode has both inline data and extents flags
[  960.073482][T12795] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  960.073850][T12795] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1027: couldn't read orphan inode 15 (err -117)
[  960.073871][T12795] loop2: lost filesystem error report for type 5 error -117
[  960.077469][T12795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  960.169682][T12795] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  960.461876][  T153] hsr_slave_0: left promiscuous mode
[  960.473942][T12798] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  960.571151][  T153] hsr_slave_1: left promiscuous mode
[  960.593608][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.622611][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.791817][  T153] hsr_slave_0: left promiscuous mode
[  960.831813][  T153] hsr_slave_1: left promiscuous mode
[  960.833599][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.857254][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.944540][T12280] do_umount: task=syz-executor[12280] propagate_mount_busy()!=0
[  960.947197][T12280] do_umount: task=syz-executor[12280] propagate_mount_busy()!=0
[  961.017960][  T153] veth0_vlan: left promiscuous mode
[  961.368997][T12280] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.442665][T12280] Flush: task=syz-executor[12280] dev=loop2 state=2
[  961.535497][T12280] Teardown: task=syz-executor[12280] dev=loop2 state=2
[  961.702846][  T153] team0 (unregistering): Port device team_slave_1 removed
[  961.743808][  T153] team0 (unregistering): Port device team_slave_0 removed
[  961.845464][ T5711] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  962.006445][ T5711] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  962.006479][ T5711] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  962.006520][ T5711] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  962.006535][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.043332][T12800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  962.050072][ T5711] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  962.472771][  T153] team0 (unregistering): Port device team_slave_1 removed
[  962.557952][  T153] team0 (unregistering): Port device team_slave_0 removed
[  962.657735][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.692927][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.696359][T12803] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1028'.
[  962.696473][T12803] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1028'.
[  963.307526][ T5619] usb 3-1: USB disconnect, device number 33
[  963.965829][T12370] veth0_vlan: entered promiscuous mode
[  964.456009][T12819] Bluetooth: MGMT ver 1.23
[  966.519335][T12370] veth1_vlan: entered promiscuous mode
[  967.441338][T12370] veth0_macvtap: entered promiscuous mode
[  967.539141][T12370] veth1_macvtap: entered promiscuous mode
[  967.752542][T12501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.965240][T12370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  968.488680][T12370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  968.584357][ T8012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  968.588043][ T8012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  968.621200][ T8012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  968.714000][ T8012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  969.563921][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  970.371826][T10470] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  970.652655][T10470] usb 3-1: Using ep0 maxpacket: 32
[  970.659376][T10470] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  970.659406][T10470] usb 3-1: config 0 has no interface number 0
[  970.659452][T10470] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  970.686955][T10470] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  970.686986][T10470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.687005][T10470] usb 3-1: Product: syz
[  970.687019][T10470] usb 3-1: Manufacturer: syz
[  970.687033][T10470] usb 3-1: SerialNumber: syz
[  970.717081][T10470] usb 3-1: config 0 descriptor??
[  970.745294][T10470] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  970.745330][T10470] em28xx 3-1:0.132: Video interface 132 found:
[  971.217469][T10470] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  971.379621][  T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.379644][  T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.884796][T10470] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  971.884834][T10470] em28xx 3-1:0.132: failed to read eeprom (err=-5)
[  971.884884][T10470] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  971.962766][T10470] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  971.962892][T10470] em28xx 3-1:0.132: analog set to bulk mode.
[  971.968046][ T4928] em28xx 3-1:0.132: Registering V4L2 extension
[  972.173143][T10470] usb 3-1: USB disconnect, device number 34
[  972.185382][T10470] em28xx 3-1:0.132: Disconnecting em28xx
[  972.335929][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.335951][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.559918][ T4928] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  972.559993][ T4928] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  972.560010][ T4928] em28xx 3-1:0.132: No AC97 audio processor
[  973.154677][ T4928] usb 3-1: Decoder not found
[  973.154702][ T4928] em28xx 3-1:0.132: failed to create media graph
[  973.154851][ T4928] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  973.285499][ T4928] INFO: trying to register non-static key.
[  973.285516][ T4928] The code is fine but needs lockdep annota[  973.285516][ T4928] The code is fine but needs lockdep annotation, or maybe
[  973.285527][ T4928] you didn't initialize this object before use?
[  973.285535][ T4928] turning off the locking correctness validator.
[  973.285552][ T4928] CPU: 0 UID: 0 PID: 4928 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  973.285584][ T4928] Tainted: [L]=SOFTLOCKUP
[  973.285592][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  973.285611][ T4928] Workqueue: events request_module_async
[  973.285646][ T4928] Call Trace:
[  973.285655][ T4928]  <TASK>
[  973.285663][ T4928]  dump_stack_lvl+0xe8/0x150
[  973.285695][ T4928]  assign_lock_key+0x133/0x150
[  973.285724][ T4928]  register_lock_class+0xcc/0x2e0
[  973.285749][ T4928]  __lock_acquire+0xaf/0x2e40
[  973.285776][ T4928]  ? ret_from_fork_asm+0x1a/0x30
[  973.285798][ T4928]  ? stack_trace_save+0xa9/0x100
[  973.285820][ T4928]  ? __pfx_stack_trace_save+0x10/0x10
[  973.285855][ T4928]  lock_acquire+0x115/0x350
[  973.285877][ T4928]  ? __wake_up_common_lock+0x2f/0x1f0
[  973.285902][ T4928]  rt_spin_lock+0x83/0x400
[  973.285925][ T4928]  ? __wake_up_common_lock+0x2f/0x1f0
[  973.285947][ T4928]  ? __pfx_rt_spin_lock+0x10/0x10
[  973.285975][ T4928]  __wake_up_common_lock+0x2f/0x1f0
[  973.285999][ T4928]  __vb2_queue_cancel+0x2de/0xdc0
[  973.286026][ T4928]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  973.286056][ T4928]  ? lockdep_hardirqs_on+0x7a/0x110
[  973.286086][ T4928]  ? __vb2_cleanup_fileio+0x134/0x1f0
[  973.286117][ T4928]  vb2_core_queue_release+0x2f/0x150
[  973.286147][ T4928]  vb2_video_unregister_device+0x15b/0x200
[  973.286178][ T4928]  em28xx_v4l2_init+0x1c60/0x3140
[  973.286216][ T4928]  em28xx_init_extension+0x120/0x1d0
[  973.286246][ T4928]  ? process_one_work+0x7fd/0x1480
[  973.286271][ T4928]  process_one_work+0xaaf/0x1480
[  973.286305][ T4928]  ? __pfx_process_one_work+0x10/0x10
[  973.286328][ T4928]  ? do_raw_spin_lock+0x12b/0x2f0
[  973.286349][ T4928]  ? assign_work+0x3cf/0x5d0
[  973.286374][ T4928]  worker_thread+0xb05/0x10d0
[  973.286412][ T4928]  kthread+0x388/0x470
[  973.286441][ T4928]  ? __pfx_worker_thread+0x10/0x10
[  973.286462][ T4928]  ? __pfx_kthread+0x10/0x10
[  973.286494][ T4928]  ret_from_fork+0x514/0xb70
[  973.286527][ T4928]  ? __pfx_ret_from_fork+0x10/0x10
[  973.286558][ T4928]  ? __switch_to+0xc89/0x1420
[  973.286586][ T4928]  ? __pfx_kthread+0x10/0x10
[  973.286615][ T4928]  ret_from_fork_asm+0x1a/0x30
[  973.286640][ T4928]  </TASK>
[  973.289535][T12501] veth0_vlan: entered promiscuous mode
[  973.301915][ T4928] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  973.301939][ T4928] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  973.301962][ T4928] CPU: 0 UID: 0 PID: 4928 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  973.301989][ T4928] Tainted: [L]=SOFTLOCKUP
[  973.301997][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  973.302009][ T4928] Workqueue: events request_module_async
[  973.302041][ T4928] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0
[  973.302062][ T4928] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc
[  973.302080][ T4928] RSP: 0018:ffffc90011617908 EFLAGS: 00010246
[  973.302096][ T4928] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  973.302109][ T4928] RDX: dffffc0000000000 RSI: ffffffff8bca9460 RDI: 00000000ffffffff
[  973.302125][ T4928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  973.302137][ T4928] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: ffff888055dd5b14
[  973.302152][ T4928] R13: ffff888055dd5c28 R14: 0000000000000000 R15: 0000000000000000
[  973.302164][ T4928] FS:  0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000
[  973.302180][ T4928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  973.302194][ T4928] CR2: 00007f27c45ba473 CR3: 0000000037e96000 CR4: 00000000003526f0
[  973.302213][ T4928] Call Trace:
[  973.302221][ T4928]  <TASK>
[  973.302232][ T4928]  __vb2_queue_cancel+0x2de/0xdc0
[  973.302257][ T4928]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  973.302290][ T4928]  ? lockdep_hardirqs_on+0x7a/0x110
[  973.302317][ T4928]  ? __vb2_cleanup_fileio+0x134/0x1f0
[  973.302344][ T4928]  vb2_core_queue_release+0x2f/0x150
[  973.302370][ T4928]  vb2_video_unregister_device+0x15b/0x200
[  973.302398][ T4928]  em28xx_v4l2_init+0x1c60/0x3140
[  973.302433][ T4928]  em28xx_init_extension+0x120/0x1d0
[  973.302460][ T4928]  ? process_one_work+0x7fd/0x1480
[  973.302483][ T4928]  process_one_work+0xaaf/0x1480
[  973.302511][ T4928]  ? __pfx_process_one_work+0x10/0x10
[  973.302533][ T4928]  ? do_raw_spin_lock+0x12b/0x2f0
[  973.302554][ T4928]  ? assign_work+0x3cf/0x5d0
[  973.302577][ T4928]  worker_thread+0xb05/0x10d0
[  973.302609][ T4928]  kthread+0x388/0x470
[  973.302636][ T4928]  ? __pfx_worker_thread+0x10/0x10
[  973.302659][ T4928]  ? __pfx_kthread+0x10/0x10
[  973.302686][ T4928]  ret_from_fork+0x514/0xb70
[  973.302717][ T4928]  ? __pfx_ret_from_fork+0x10/0x10
[  973.302745][ T4928]  ? __switch_to+0xc89/0x1420
[  973.302770][ T4928]  ? __pfx_kthread+0x10/0x10
[  973.302797][ T4928]  ret_from_fork_asm+0x1a/0x30
[  973.302821][ T4928]  </TASK>
[  973.302829][ T4928] Modules linked in:
[  973.302866][ T4928] ---[ end trace 0000000000000000 ]---
[  973.302877][ T4928] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0
[  973.302897][ T4928] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc
[  973.302914][ T4928] RSP: 0018:ffffc90011617908 EFLAGS: 00010246
[  973.302930][ T4928] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  973.302942][ T4928] RDX: dffffc0000000000 RSI: ffffffff8bca9460 RDI: 00000000ffffffff
[  973.302956][ T4928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  973.302968][ T4928] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: ffff888055dd5b14
[  973.302982][ T4928] R13: ffff888055dd5c28 R14: 0000000000000000 R15: 0000000000000000
[  973.302995][ T4928] FS:  0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000
[  973.303012][ T4928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  973.303026][ T4928] CR2: 00007f27c45ba473 CR3: 0000000037e96000 CR4: 00000000003526f0
[  973.303046][ T4928] Kernel panic - not syncing: Fatal exception
[  973.303201][ T4928] Kernel Offset: disabled