last executing test programs:

1m37.790116398s ago: executing program 0 (id=110):
getuid()
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)

1m37.636959111s ago: executing program 0 (id=111):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
ppoll(&(0x7f0000001740)=[{r0, 0x1004}], 0x1, &(0x7f0000001780), 0x0, 0x0)

1m37.555339341s ago: executing program 0 (id=112):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0)

1m37.202809608s ago: executing program 0 (id=113):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@fat=@check_normal}, {@utf8}, {@shortname_win95}, {@utf8}, {@fat=@nfs}, {@utf8}, {@utf8}, {@fat=@discard}, {@rodir}, {@utf8no}, {@fat=@quiet}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2be, &(0x7f0000002880)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

1m37.193893644s ago: executing program 0 (id=114):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x5516, &(0x7f00000006c0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1m36.324836538s ago: executing program 0 (id=122):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
ioctl(r0, 0x8914, &(0x7f0000000300)='veth0:')

1m36.301165241s ago: executing program 32 (id=122):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
ioctl(r0, 0x8914, &(0x7f0000000300)='veth0:')

1m36.02236045s ago: executing program 2 (id=130):
socket$inet6(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
userfaultfd(0x80001)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x25a, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3ae, 0x1, 0x1000000, 0x318}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

1m35.937988674s ago: executing program 2 (id=131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000012c"], 0xa8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0)

1m35.867681827s ago: executing program 2 (id=132):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c)

1m35.691570838s ago: executing program 2 (id=134):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})
syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1m35.691380838s ago: executing program 2 (id=135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001c300000000fcffc75900000400", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000200000008001b00"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0xfffffffffffffc74, 0x0, 0x0)

1m34.880693481s ago: executing program 1 (id=136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e0ede80108000200e00000010c00028004000100"], 0x38}}, 0x0)

1m34.88051772s ago: executing program 1 (id=137):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x20048080)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x2, 0x8}, 0x20)
sendmmsg(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000005c0)="a7", 0x1}], 0x1}}], 0x1, 0x4054)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

1m34.783908908s ago: executing program 1 (id=138):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8)

1m34.783746642s ago: executing program 1 (id=139):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604"], 0x0)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1m34.41828048s ago: executing program 1 (id=140):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000000000))
acct(0x0)

1m34.418006435s ago: executing program 1 (id=141):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000009000000ffffffff000000000000000000000000000000000000000000000000000000000000819978cf7a35000008fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000"]}, 0x108)

1m28.027334571s ago: executing program 2 (id=142):
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0xffffff1f}])

46.107606408s ago: executing program 33 (id=141):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000009000000ffffffff000000000000000000000000000000000000000000000000000000000000819978cf7a35000008fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000"]}, 0x108)

0s ago: executing program 34 (id=142):
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0xffffff1f}])

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57178' (ED25519) to the list of known hosts.
syzkaller login: [   48.900535][ T5595] cgroup: Unknown subsys name 'net'
[   48.969182][ T5595] cgroup: Unknown subsys name 'cpuset'
[   48.974688][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.351927][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.398039][ T4997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.401770][ T4997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.406867][ T4997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.412615][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.416467][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.419776][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.424484][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.427020][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.428524][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.433510][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.471958][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.476788][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.480336][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.484897][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.489226][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.974780][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.977966][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.980984][ T5606] bridge_slave_0: entered allmulticast mode
[   54.984143][ T5606] bridge_slave_0: entered promiscuous mode
[   54.993433][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.996101][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.998443][ T5606] bridge_slave_1: entered allmulticast mode
[   55.001206][ T5606] bridge_slave_1: entered promiscuous mode
[   55.033161][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.038464][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.083469][ T5606] team0: Port device team_slave_0 added
[   55.096101][ T5606] team0: Port device team_slave_1 added
[   55.119309][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.123149][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.127050][ T5609] bridge_slave_0: entered allmulticast mode
[   55.129773][ T5609] bridge_slave_0: entered promiscuous mode
[   55.133127][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.135498][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.143317][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.148107][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.150468][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.158571][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.167754][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.170071][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.172334][ T5609] bridge_slave_1: entered allmulticast mode
[   55.174977][ T5609] bridge_slave_1: entered promiscuous mode
[   55.215555][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.243441][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.262346][ T5606] hsr_slave_0: entered promiscuous mode
[   55.265837][ T5606] hsr_slave_1: entered promiscuous mode
[   55.296275][ T5609] team0: Port device team_slave_0 added
[   55.306027][ T5609] team0: Port device team_slave_1 added
[   55.378647][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.381488][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.391773][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.397808][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.400738][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.410475][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.421652][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.425072][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.428110][ T5617] bridge_slave_0: entered allmulticast mode
[   55.431849][ T5617] bridge_slave_0: entered promiscuous mode
[   55.449386][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.452479][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.455433][ T5617] bridge_slave_1: entered allmulticast mode
[   55.458181][ T5617] bridge_slave_1: entered promiscuous mode
[   55.493727][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.498838][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.521118][ T5609] hsr_slave_0: entered promiscuous mode
[   55.523648][ T5609] hsr_slave_1: entered promiscuous mode
[   55.526238][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   55.528478][ T5609] Cannot create hsr debugfs directory
[   55.545164][ T5617] team0: Port device team_slave_0 added
[   55.556396][ T5617] team0: Port device team_slave_1 added
[   55.587466][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.594000][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.601999][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.607313][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.610071][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.619119][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.672219][ T5617] hsr_slave_0: entered promiscuous mode
[   55.675171][ T5617] hsr_slave_1: entered promiscuous mode
[   55.677756][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   55.679567][ T5617] Cannot create hsr debugfs directory
[   55.749380][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.757836][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.761487][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.768703][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.783323][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.789777][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.821347][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.829136][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.900468][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.906373][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.913220][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.919053][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.926936][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.931560][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.945977][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.951087][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.005496][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.009961][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.013360][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.017885][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.020627][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.024645][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.027978][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.031585][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.105947][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.129477][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   56.142605][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.145216][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.155783][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.162249][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.165268][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.190934][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.201761][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   56.220184][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.223098][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.238935][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.241875][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.250115][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   56.264241][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.267110][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.282283][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.285258][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.438955][ T5612] Bluetooth: hci0: command tx timeout
[   56.515275][ T5612] Bluetooth: hci1: command tx timeout
[   56.517765][ T5612] Bluetooth: hci2: command tx timeout
[   56.546336][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.577317][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.599005][ T5606] veth0_vlan: entered promiscuous mode
[   56.607798][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.617466][ T5606] veth1_vlan: entered promiscuous mode
[   56.637751][ T5617] veth0_vlan: entered promiscuous mode
[   56.651957][ T5617] veth1_vlan: entered promiscuous mode
[   56.656069][ T5606] veth0_macvtap: entered promiscuous mode
[   56.660515][ T5606] veth1_macvtap: entered promiscuous mode
[   56.688722][ T5609] veth0_vlan: entered promiscuous mode
[   56.700631][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.708802][ T5609] veth1_vlan: entered promiscuous mode
[   56.712344][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.721249][ T5617] veth0_macvtap: entered promiscuous mode
[   56.746001][ T5617] veth1_macvtap: entered promiscuous mode
[   56.808558][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.818945][ T5609] veth0_macvtap: entered promiscuous mode
[   56.848313][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.852445][ T5609] veth1_macvtap: entered promiscuous mode
[   56.867088][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.878694][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.886773][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.910992][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.916607][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.930634][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.934519][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.960326][ T5649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.044539][ T5680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.068636][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.070873][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.080324][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.114187][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.118375][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.144023][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.147144][ T5649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.151906][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.154969][ T5649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.180506][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.184909][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.189532][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.194690][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.214553][ T5649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.222814][ T5649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.237406][ T5649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.264747][ T5649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.273283][ T5649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.288021][ T5723] loop2: detected capacity change from 0 to 256
[   57.302026][ T5723] exfat: Deprecated parameter 'utf8'
[   57.327203][ T5723] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   57.379200][ T5727] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.507370][ T5737] loop1: detected capacity change from 0 to 8
[   57.514128][ T5737] SQUASHFS error: zlib decompression failed, data probably corrupt
[   57.519920][ T5737] SQUASHFS error: Failed to read block 0x9b: -5
[   57.522141][ T5737] SQUASHFS error: Unable to read metadata cache entry [99]
[   57.524871][ T5737] SQUASHFS error: Unable to read inode 0x127
[   57.734818][ T5666] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   57.824652][ T5688] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   57.885297][ T5666] usb 3-1: Using ep0 maxpacket: 16
[   57.890108][ T5666] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.893672][ T5666] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   57.899425][ T5666] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   57.903005][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.906387][ T5666] usb 3-1: Product: syz
[   57.907760][ T5666] usb 3-1: Manufacturer: syz
[   57.909348][ T5666] usb 3-1: SerialNumber: syz
[   57.922922][ T5666] usb 3-1: 0:2 : does not exist
[   57.925236][ T5666] usb 3-1: unit 9 not found!
[   57.969642][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   57.985458][ T5688] usb 2-1: Using ep0 maxpacket: 32
[   57.989413][ T5688] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[   57.993134][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.001070][ T5688] usb 2-1: config 0 descriptor??
[   58.142612][   T10] usb 3-1: USB disconnect, device number 2
[   58.414939][ T5745] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   58.423334][ T5688] logitech 0003:046D:C623.0001: unknown main item tag 0x6
[   58.426006][ T5688] logitech 0003:046D:C623.0001: unknown main item tag 0x7
[   58.428730][ T5688] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[   58.430996][ T5688] logitech 0003:046D:C623.0001: unknown global tag 0xe
[   58.433111][ T5688] logitech 0003:046D:C623.0001: item 0 0 1 14 parsing failed
[   58.436878][ T5688] logitech 0003:046D:C623.0001: parse failed
[   58.438903][ T5688] logitech 0003:046D:C623.0001: probe with driver logitech failed with error -22
[   58.515673][ T5608] Bluetooth: hci0: command tx timeout
[   58.584533][ T5745] usb 1-1: Using ep0 maxpacket: 32
[   58.588511][ T5745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   58.593490][ T5745] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   58.596431][ T5608] Bluetooth: hci2: command tx timeout
[   58.596986][ T5612] Bluetooth: hci1: command tx timeout
[   58.600161][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.604181][ T5745] usb 1-1: Product: syz
[   58.606219][ T5745] usb 1-1: Manufacturer: syz
[   58.608099][ T5745] usb 1-1: SerialNumber: syz
[   58.611671][ T5745] usb 1-1: config 0 descriptor??
[   58.617252][ T5745] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[   58.630293][ T5667] usb 2-1: USB disconnect, device number 2
[   58.805085][ T5755] loop2: detected capacity change from 0 to 256
[   58.808413][ T5755] =======================================================
[   58.808413][ T5755] WARNING: The mand mount option has been deprecated and
[   58.808413][ T5755]          and is ignored by this kernel. Remove the mand
[   58.808413][ T5755]          option from the mount to silence this warning.
[   58.808413][ T5755] =======================================================
[   58.822369][ T5745] usb 1-1: qt2_attach - failed to power on unit: -71
[   58.832118][ T5755] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   58.839286][ T5745] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71
[   58.840040][ T5755] FAT-fs (loop2): Filesystem has been set read-only
[   58.846844][ T5745] usb 1-1: USB disconnect, device number 2
[   59.007528][ T5757] loop2: detected capacity change from 0 to 32768
[   59.011936][ T5757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.18 (5757)
[   59.025030][ T5757] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.028527][ T5757] BTRFS info (device loop2): using sha256 checksum algorithm
[   59.131371][ T5757] BTRFS info (device loop2): enabling ssd optimizations
[   59.133796][ T5757] BTRFS info (device loop2): turning on async discard
[   59.136430][ T5757] BTRFS info (device loop2): enabling free space tree
[   59.482697][   T33] audit: type=1800 audit(1786083057.331:2): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18" name="file1" dev="loop2" ino=260 res=0 errno=0
[   59.500872][ T5774] Zero length message leads to an empty skb
[   59.869633][ T5606] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.596572][ T5612] Bluetooth: hci0: command tx timeout
[   60.669668][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'.
[   60.713113][ T5819] kernel profiling enabled (shift: 5)
[   60.779760][ T5612] Bluetooth: hci1: command tx timeout
[   60.782433][ T5612] Bluetooth: hci2: command tx timeout
[   60.882961][ T5822] netlink: 'syz.0.29': attribute type 14 has an invalid length.
[   60.886297][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   60.901950][ T5822] netlink: 'syz.0.29': attribute type 14 has an invalid length.
[   60.906540][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   60.914603][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.917729][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.920605][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.923427][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.991953][ T5827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.31'.
[   61.124030][ T5831] loop0: detected capacity change from 0 to 256
[   61.265717][ T5835] gre1: entered promiscuous mode
[   61.267938][ T5835] gre1: entered allmulticast mode
[   61.491318][   T33] audit: type=1800 audit(1786083059.451:3): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.39" name="out_ports" dev="configfs" ino=7399 res=0 errno=0
[   61.572923][ T5854] loop0: detected capacity change from 0 to 256
[   61.599795][ T5854] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[   61.624789][ T5854] exFAT-fs (loop0): valid_size(150994954) is greater than size(10)
[   61.634244][   T33] audit: type=1800 audit(1786083059.591:4): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="file1" dev="loop0" ino=1048595 res=0 errno=0
[   61.648410][ T5858] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET)
[   62.078047][ T5890] Bluetooth: MGMT ver 1.23
[   62.364789][ T5745] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   62.544553][ T5745] usb 1-1: Using ep0 maxpacket: 16
[   62.547824][ T5745] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[   62.552228][ T5745] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   62.554509][ T5667] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   62.555133][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.555147][ T5745] usb 1-1: Product: syz
[   62.555157][ T5745] usb 1-1: Manufacturer: syz
[   62.555165][ T5745] usb 1-1: SerialNumber: syz
[   62.558709][ T5745] usb 1-1: config 0 descriptor??
[   62.573411][ T5745] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   62.577037][ T5745] usb 1-1: Detected FT232R
[   62.674668][ T5608] Bluetooth: hci0: command tx timeout
[   62.714724][ T5667] usb 3-1: Using ep0 maxpacket: 16
[   62.719664][ T5667] usb 3-1: config 254 has an invalid interface number: 235 but max is 0
[   62.722441][ T5667] usb 3-1: config 254 has no interface number 0
[   62.724599][ T5667] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86
[   62.728404][ T5667] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32
[   62.731534][ T5667] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   62.736034][ T5667] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   62.739481][ T5667] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0
[   62.744290][ T5667] usb 3-1: config 254 interface 235 has no altsetting 0
[   62.751467][ T5667] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[   62.757567][ T5667] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[   62.760231][ T5667] usb 3-1: Product: syz
[   62.761609][ T5667] usb 3-1: Manufacturer: syz
[   62.763741][ T5667] usb 3-1: SerialNumber: syz
[   62.769073][ T5906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   62.778928][ T5910] loop1: detected capacity change from 0 to 256
[   62.781410][ T5745] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   62.844542][ T5608] Bluetooth: hci2: command tx timeout
[   62.846339][ T5612] Bluetooth: hci1: command tx timeout
[   62.851410][ T5912] i2c i2c-0: new_device: Can't parse I2C address
[   62.976358][ T5667] usbtest 3-1:254.235: couldn't get endpoints, -71
[   62.979414][ T5667] usbtest 3-1:254.235: probe with driver usbtest failed with error -71
[   62.984134][ T5667] usb 3-1: USB disconnect, device number 3
[   63.009718][ T5745] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   63.077555][ T5918] netlink: 'syz.1.74': attribute type 15 has an invalid length.
[   63.198643][ T5745] usb 1-1: USB disconnect, device number 3
[   63.216089][ T5745] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   63.219357][ T5745] ftdi_sio 1-1:0.0: device disconnected
[   63.353135][ T5934] evm: overlay not supported
[   63.693824][ T5946] loop2: detected capacity change from 0 to 32768
[   63.696990][ T5946] BTRFS error: failed to parse compression option 'no:nobarrier'
[   63.850392][ T5957] loop4: detected capacity change from 0 to 7
[   63.860115][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   63.864222][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.870226][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   63.873934][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.879882][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   63.883091][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.889104][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   63.892782][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.895971][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   63.899551][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.902992][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   63.906007][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.910535][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   63.914063][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.919670][ T5957] ldm_validate_partition_table(): Disk read failed.
[   63.945533][ T5957] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.951337][ T5957] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.963400][ T5957] Buffer I/O error on dev loop4, logical block 0, async page read
[   63.974672][ T5957] Dev loop4: unable to read RDB block 0
[   63.985149][ T5957]  loop4: unable to read partition table
[   63.994934][ T5957] loop4: partition table beyond EOD, truncated
[   63.997832][ T5957] loop_reread_partitions: partition scan of loop4 (Cj̖P=	) failed (rc=-5)
[   64.185172][ T5974] loop2: detected capacity change from 0 to 512
[   64.196881][ T5976] loop0: detected capacity change from 0 to 1764
[   64.200642][ T5974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   64.238969][ T5974] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   64.254632][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   64.257538][    C1] EXT4-fs (loop2): initial error at time 1786083062: mb_free_blocks:2049: inode 11: block 64
[   64.260514][    C1] EXT4-fs (loop2): last error at time 1786083062: mb_free_blocks:2049: inode 11: block 64
[   64.268784][ T5974] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #11: comm syz.2.99: corrupted inode contents
[   64.273499][ T5974] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.276506][ T5974] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #11: comm syz.2.99: mark_inode_dirty error
[   64.283703][ T5974] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.284332][ T5974] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.99: invalid indirect mapped block 1 (level 1)
[   64.293030][ T5974] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.293382][ T5974] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #11: comm syz.2.99: corrupted inode contents
[   64.303788][ T5974] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.305922][ T5974] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   64.313107][ T5974] loop2: lost filesystem error report for type 5 error -117
[   64.313468][ T5974] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #11: comm syz.2.99: corrupted inode contents
[   64.323245][ T5974] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.323942][ T5974] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.99: mark_inode_dirty error
[   64.324643][    C0] clocksource: Watchdog remote CPU 1 read timed out
[   64.327630][ T5974] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.335851][ T5974] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   64.342864][ T5974] loop2: lost filesystem error report for type 5 error -117
[   64.344484][ T5974] EXT4-fs (loop2): 1 truncate cleaned up
[   64.363166][ T5974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.401327][ T5974] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.99: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[   64.433974][ T5986] input: syz1 as /devices/virtual/input/input4
[   64.492050][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.601251][ T6010] loop0: detected capacity change from 0 to 128
[   65.646484][ T5617] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000)
[   65.649521][ T5617] FAT-fs (loop0): Filesystem has been set read-only
[   65.688237][ T5617] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   65.697383][ T5617] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   66.608113][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   66.612033][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.652002][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.656110][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.660179][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.664500][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.667202][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.776062][ T6046] xt_TCPMSS: Only works on TCP SYN packets
[   66.827659][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   66.837839][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.016354][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.020470][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.229362][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.232853][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.323441][ T6066] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.530290][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.532925][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.535491][ T6034] bridge_slave_0: entered allmulticast mode
[   67.538340][ T6034] bridge_slave_0: entered promiscuous mode
[   67.543652][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.545926][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.548470][ T6034] bridge_slave_1: entered allmulticast mode
[   67.552029][ T6034] bridge_slave_1: entered promiscuous mode
[   67.572017][ T6034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.579144][ T6034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.607367][ T6034] team0: Port device team_slave_0 added
[   67.611526][ T6034] team0: Port device team_slave_1 added
[   67.634367][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.636827][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.646397][ T6034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.653511][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.656848][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.666002][ T6034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.697697][ T6034] hsr_slave_0: entered promiscuous mode
[   67.700329][ T6034] hsr_slave_1: entered promiscuous mode
[   67.708534][ T6034] debugfs: 'hsr0' already exists in 'hsr'
[   67.710462][ T6034] Cannot create hsr debugfs directory
[   67.849851][ T6034] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   67.915017][ T6034] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.917651][ T6034] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   67.958446][ T6077] netlink: 'syz.1.136': attribute type 1 has an invalid length.
[   68.006421][ T6034] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.018653][ T6034] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.117078][  T797] cfg80211: failed to load regulatory.db
[   68.209568][ T6034] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.224543][ T6034] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.716295][ T5608] Bluetooth: hci2: command tx timeout
[   70.819045][ T5608] Bluetooth: hci2: command tx timeout
[   70.820853][ T5608] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   70.829784][ T5608] Bluetooth: hci0: Injecting HCI hardware error event
[   70.834017][ T5608] Bluetooth: hci0: hardware error 0x00
[   71.439745][    C0] sched: DL replenish lagged too much
[   71.909829][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   71.918262][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   73.135536][ T5612] Bluetooth: hci2: command tx timeout
[   75.416451][ T5612] Bluetooth: hci2: command tx timeout
[   78.024895][ T5608] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  128.910860][ T6034] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  138.044841][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.056218][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  202.120842][ T5608] Bluetooth: hci2: command 0x0406 tx timeout
[  205.694720][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  205.705459][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  271.893050][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  271.903855][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  320.406484][   T34] INFO: task kworker/u8:1:13 blocked for more than 148 seconds.
[  320.408823][   T34]       Not tainted syzkaller #0
[  320.416895][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  320.419508][   T34] task:kworker/u8:1    state:D stack:26784 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00080000
[  323.155344][   T34] Workqueue: ipv6_addrconf addrconf_dad_work
[  323.157602][   T34] Call Trace:
[  323.158903][   T34]  <TASK>
[  323.159928][   T34]  __schedule+0x17d9/0x56c0
[  323.166795][   T34]  ? __lock_acquire+0x683/0x2cf0
[  323.168597][   T34]  ? __lock_acquire+0x683/0x2cf0
[  323.170343][   T34]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  323.172301][   T34]  ? __pfx___schedule+0x10/0x10
[  328.272578][   T34]  ? schedule+0x90/0x2b0
[  328.274046][   T34]  schedule+0x164/0x2b0
[  328.275419][   T34]  schedule_preempt_disabled+0x13/0x30
[  328.277057][   T34]  __mutex_lock+0x7bf/0x1550
[  328.278430][   T34]  ? __mutex_lock+0x5d4/0x1550
[  329.657824][   T34]  ? addrconf_dad_work+0x116/0x15c0
[  329.659494][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  329.661054][   T34]  addrconf_dad_work+0x116/0x15c0
[  329.662619][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  329.664263][   T34]  ? __pfx_addrconf_dad_work+0x10/0x10
[  329.671037][   T34]  ? process_scheduled_works+0xa20/0x14e0
[  329.672792][   T34]  ? rcu_is_watching+0x15/0xb0
[  329.674262][   T34]  ? process_scheduled_works+0xa20/0x14e0
[  329.676024][   T34]  process_scheduled_works+0xa8e/0x14e0
