last executing test programs:

8.935828057s ago: executing program 4 (id=614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.807379037s ago: executing program 3 (id=619):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

5.573626805s ago: executing program 4 (id=621):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0xca02})
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

5.500066201s ago: executing program 3 (id=622):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x12, 0x6}}]}, 0x28}}, 0x0)

4.63504509s ago: executing program 0 (id=623):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x8000000005, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)

4.540324307s ago: executing program 1 (id=624):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x4, 0x70bd29, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000003780), 0x0, 0xffff, 0x0)
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000540)='pagemap\x00')

4.491899201s ago: executing program 2 (id=625):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x54, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x34c, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x338, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x66c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x9c, 0x7, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7d8, 0x1, 0x7f}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, {0x44, 0x6, "1e476c6baf0460eda959c4932bcedb8702daced83843a3ef2ce3d4d105ecdaaff5be06e1f2129573bb1e63ade4737050ecb86917e899baf3fff7f49043f5c2dc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x130, 0x3, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x101, 0x0, 0x4, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0x6, 0x8, 0xebc, 0xc}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc4, 0x6, "ca37b2138fed351b866e789e3ddc118505b01b51a4aed041ed7972a793e78a82ccafa0ac4130b4dfb5fb173302788da9394c7097097ab7a55a0765f39ba8d0b4db292754343d59db4bf9c240ace92ab73876ef9d09626435329ccf3e182cda8f18f03782b8a02b85025f28d71066e2645b7a8c44ad798366a76ee2451d0ea4642637f652800f3371f48aeffbc8423e009ee41cab1a9accab24914eaa51072813b0a5b94f00e5662b7cc34d8ef867d994dda1801ed864faf50f080309e81c47a8"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x108, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "a02d41bf811d9898d2e4f67314c7d7cbcb79fc17916c006262e13d129ee85ae9142b60821693cf9f394aa6cf75c3dac7c2471631fb5a518da27cb88848d7eec7d14e07edaa049bd759f03253d5f84e67f9ae89a961bc80bd8f6181c0954d464915325c72aee12c8e4618d8423f1da778757fd75258b1808d0db5f2475eebd57ebaa482dba9e01f11b6dfb87afa31f79fa7327a8f7748d35c1f368fbf25d1dc8f17fcf997ddd15b4d211b2af9305b3d49c99d41edf570d748dca93c53cd4e8226d40f4bc19d33af4ec46a4a725bc03c915b16700942"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.457403604s ago: executing program 3 (id=626):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xc0586300}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000001180)=[@in6={0xa, 0x4e21, 0x63c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}]}, 0x0)
close(r0)
listen(0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x5, 0x10009})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

3.466451443s ago: executing program 4 (id=627):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)=ANY=[@ANYBLOB="757466383d312c757466383d302c756e695f786c6174653d312c696f636861727365743d63703836352c757466383d302c757466383d312c757466383d30946572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c636f6465706167653d3835372c757466383d302c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',codepage=863,iocharset=iso8859-6,nonumtail=0,\x00'], 0x1, 0x36a, &(0x7f0000001840)="$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")
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)

3.405411678s ago: executing program 3 (id=628):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1)

3.404304338s ago: executing program 2 (id=629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x8, 0x401, 0x56595559, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2}})
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0x200000000c00003, 0x7]}, 0x0)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c61737400"], 0x140}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)

3.38137431s ago: executing program 1 (id=630):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
close(r0)

2.422191996s ago: executing program 1 (id=631):
r0 = socket$inet6(0xa, 0x3, 0x3c)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3ffc, 0x0, @remote, 0x5}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

2.313922295s ago: executing program 2 (id=632):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.261444469s ago: executing program 0 (id=633):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44042, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

2.188022285s ago: executing program 3 (id=634):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0f50000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)

2.154315168s ago: executing program 4 (id=635):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00'}, 0x10)
capget(&(0x7f00000000c0)={0x19980330}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9)
socket(0x10, 0x6, 0x5)
r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x40000000, '\x00', @p_u8=&(0x7f0000001040)=0x5}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000000280)={0xffffffffffffff4d, 0x0, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000)

2.021840038s ago: executing program 1 (id=636):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0xfa0)

1.74803374s ago: executing program 1 (id=637):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0xca02})
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

1.733838491s ago: executing program 3 (id=638):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c410cf8a0000000000010902240001000000000904000001030000000921000005012205000905810300000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "7fec6714"}]}}, 0x0}, 0x0)

1.570362724s ago: executing program 2 (id=639):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040fef97010408"], 0x3f)

1.334759623s ago: executing program 2 (id=640):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x4, 0x70bd29, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000003780), 0x0, 0xffff, 0x0)
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000540)='pagemap\x00')

1.306654445s ago: executing program 0 (id=641):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
close(r0)

929.863805ms ago: executing program 4 (id=642):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x8, 0x401, 0x56595559, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2}})
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0x200000000c00003, 0x7]}, 0x0)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c61737400"], 0x140}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)

830.358723ms ago: executing program 0 (id=643):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
creat(0x0, 0x0)

626.00262ms ago: executing program 1 (id=644):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$ppp(0xffffffffffffff9c, 0x0, 0x26080, 0x0)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)

375.96637ms ago: executing program 0 (id=645):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)=ANY=[@ANYBLOB="757466383d312c757466383d302c756e695f786c6174653d312c696f636861727365743d63703836352c757466383d302c757466383d312c757466383d30946572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c636f6465706167653d3835372c757466383d302c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',codepage=863,iocharset=iso8859-6,nonumtail=0,\x00'], 0x1, 0x36a, &(0x7f0000001840)="$eJzs3U9oY0UYAPAvfWnSXdD2JgpC9CZo2e5NL7ZIFxZ7UQn+OYjB7aokVWix2B62rQfFo+BRT94U9OBBPIqgiDcPXl1BVsWD7m3BxZHkvSSvSdrtLnal+PtBk+nMfDPf+0PyGl6mLyxG+8J0XLx69UrMzFSiuvjYYlyrxFxk0bcb42oT6gCAk+FaSvFnyo22zUwOqdyGtACAY9R7/38pIhoxl9e8+fVh/ZN3fwA48Yq//08d1ueAzwEiXjuWlACAYzb2+f/9+5prvZ9q/9dq6a4AAOCkeurZ5x5fWol4stGYiVh7e7O52YxHhu1LF+OV6MRqnInZuB6RXyh0Hyq9x3PnV5bPNBqNnfhlLpoRMVUENvMrhaWsF1+PhZiNuSK+uNpIKWXnPltZXmj0RMTuTm/+WKtsNqfjdDH/j6djdXjh0R+k9xRxfmX5bKMYoLnWj9+J2BveqNDNfz5m4/sXB8Ok1L+DcWX50kI/6WH8ZrMeFwZ74cBPQAAAAAAAAAAAAAAAAAAAAAAA4JbMNwbmBuvnpO5zvlLO/PyE9t76OHl8sT7QXr4+UKqnSOmPNx5qvpPFvvWBRtfn2bSQIAAAAAAAAAAAAAAAAAAAAAxsbNWi1emsrm9sbbfLhZ31ja2piOjWvPrtJ1+divE+NyhU8ynqEYMpGsW02+1WyvqdUxYxHp51J+/XfPT5IONyn/pgKyamUT+4qdO5476f3x/W3Jv1R/572CeLyRuYldJ4dGTktTvzlG5mRw0KZ8s19fHZL6eUSjVvlcMvPT8+YFQiqjd/4LbbU3Fwn9QtfHPl5bv7e7/1Zco98ODs05ff+/C3dqvTnTl6R7C2vnE9tVuVfucjzF4Ml3qHYHhuVCIvVMpnQvWwAff217SyH35/5p53vzvaTkjlmte75/NInyzfnE9Hw2t5oZvmSNOpYfh0sRGd1ekJJ/+NCrdwTO/64IuPU/rp1yNPMTQ19rJR+XdefQAAAAAAAAAAAAAAAAAAgLLSd8ULxZd9pw+LeviJ488MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6f4f//LxX2dmOk5iiFv3YmRNVX1zciav/1ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/3TwAAAP//D7VfEw==")
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)

344.032422ms ago: executing program 2 (id=646):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5ILhxKQckfkSgBomDVzOepG5iN1GT2FH8+UijeW/e1N/3ks579TeNXwBD63pE7EbEWETcjYjp7HouO+KT9pHc92zv4dL+3sOlXLRan/0rl7Yn16LjzySuZa9ZjIgffS/ip7njcRvbO2uL1WplM6vPNmsbs43tnVurtcWVykplvVxemF+Y++j2h+VzG+s7tbGs9NWnf9z91s+Tbk1lVzrHcZ7aQy8cxkmMRsQPLiLYAIxk4xkbdEd4JfmIeDMi3k2f/+kYSb+bAMBV1mpNR2u6sw4AXHX5NAeWy5eyXMBU5POlUjuH91ZM5qv1RvPmvfrW+nI7VzYThfy91WplLssVzkQhl9Tn0/LzevlI/XZEvBERvxyfSOulpXp1eZD/8AGAIXbtyPr/3/H2+g8AXHHFQXcAAOg76z8ADB/rPwAMH+s/AAyf9vo/MehuAAB95P0/AAwf6z8ADJUffvppcrT2s8+/Xr6/vbVWv39rudJYK9W2lkpL9c2N0kq9vpJ+Zk/tpNer1usb8x/E1oOZb280mrON7Z07tfrWevNO+rnedyqF9K7dPowMAOjljXee/CWXrMgfT6RHdOzlUBhoz4CLlh90B4CBGRl0B4CBsdsXDK8zvMeXHoArossWvS8odvsFoVar1bq4LgEX7MaX5P9hWHXk//0vYBgy8v8wvOT/YXi1WrnT7vkfp70RALjc5PiBHj//fzM7/y774cBPlo/e8fgiewUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACX28H+v6VsL/CpyOdLpYjXImImCrl7q9XKXES8HhF/Hi+MJ/X5AfcZADir/N9z2f5fN6bfn3qh6e1rh8WxiPjZrz/71YPFZnPzTxFjuX+PH1xvPs6ul/vfewDgZAfrdHrueCP/bO/h0sHRz/7847sRUWzH398bi/3D+KMxmp6LUYiIyf/ksnpbriN3cRa7jyLii93Gn4upNAfS3vn0aPwk9mt9jZ9/IX4+bWufk6/FF86hLzBsniTzzyfdnr98XE/P3Z//YjpDnV02/yUvtbSfzoHP4x/MfyM95r/rp43xwR++3y5NHG97FPHl0YiD2Psd889B/FyP+O+fMv5fv/L2u73aWr+JuBHd43fGmm3WNmYb2zu3VmuLK5WVynq5vDC/MPfR7Q/Ls2mOerb3avDPj2++3qstGf9kj/jFE8b/9Xbx+Bf1iN/+/+6Pv/aS+N98r1v8fLz1kvjJmviNkwJnFid/X+zVlsRf7jH+k77/N08Z/+nfdo5tGw4ADE5je2dtsVqtbCooXP5C8lf2EnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGeWTdgMvg8KGPiP8NujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKvr8wAAAP//j5zPLA==")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)

257.847229ms ago: executing program 4 (id=647):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

0s ago: executing program 0 (id=648):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts.
[   54.397428][ T4254] cgroup: Unknown subsys name 'net'
[   54.528171][ T4254] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   55.788438][ T4254] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   57.090669][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.099402][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.103374][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.108205][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   57.115160][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.122224][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   57.128712][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.136637][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.143394][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.149714][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   57.163433][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   57.165020][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.171127][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.177987][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   57.185374][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   57.193732][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.199719][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   57.206026][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.213006][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.219873][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   57.227795][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   57.234873][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   57.240959][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   57.247916][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   57.255419][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   57.261621][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   57.275883][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.283104][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.290666][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   57.307082][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.694093][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   57.785791][ T4269] chnl_net:caif_netlink_parms(): no params data found
[   57.818322][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   57.933396][ T4265] chnl_net:caif_netlink_parms(): no params data found
[   57.942733][ T4268] chnl_net:caif_netlink_parms(): no params data found
[   57.969300][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.978965][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.987003][ T4269] device bridge_slave_0 entered promiscuous mode
[   58.002927][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.010031][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.018277][ T4275] device bridge_slave_0 entered promiscuous mode
[   58.031777][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.038929][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.046983][ T4275] device bridge_slave_1 entered promiscuous mode
[   58.055196][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.062383][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.070708][ T4269] device bridge_slave_1 entered promiscuous mode
[   58.145132][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.152321][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.160213][ T4271] device bridge_slave_0 entered promiscuous mode
[   58.173706][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.184736][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.197442][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.209554][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.216940][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.227458][ T4271] device bridge_slave_1 entered promiscuous mode
[   58.239192][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.308692][ T4275] team0: Port device team_slave_0 added
[   58.329170][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.336477][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.347160][ T4265] device bridge_slave_0 entered promiscuous mode
[   58.356038][ T4269] team0: Port device team_slave_0 added
[   58.364093][ T4275] team0: Port device team_slave_1 added
[   58.370110][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.377425][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.385364][ T4265] device bridge_slave_1 entered promiscuous mode
[   58.394039][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.403300][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.410510][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.419213][ T4268] device bridge_slave_0 entered promiscuous mode
[   58.428652][ T4269] team0: Port device team_slave_1 added
[   58.450512][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.460142][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.467696][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.475845][ T4268] device bridge_slave_1 entered promiscuous mode
[   58.523474][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.530461][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.556507][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.583279][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.595724][ T4271] team0: Port device team_slave_0 added
[   58.603192][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.612778][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.620378][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.646954][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.658710][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.666054][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.692140][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.705362][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.715893][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.729408][ T4271] team0: Port device team_slave_1 added
[   58.745631][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.752628][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.779453][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.827319][ T4265] team0: Port device team_slave_0 added
[   58.855123][ T4265] team0: Port device team_slave_1 added
[   58.863465][ T4268] team0: Port device team_slave_0 added
[   58.884421][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.891401][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.917815][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.937147][ T4268] team0: Port device team_slave_1 added
[   58.949230][ T4275] device hsr_slave_0 entered promiscuous mode
[   58.960997][ T4275] device hsr_slave_1 entered promiscuous mode
[   58.974854][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.981834][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.008065][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.033883][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.040863][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.067737][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.081951][ T4269] device hsr_slave_0 entered promiscuous mode
[   59.089528][ T4269] device hsr_slave_1 entered promiscuous mode
[   59.096297][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.104236][ T4269] Cannot create hsr debugfs directory
[   59.128717][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.135978][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.162350][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.192523][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.199798][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.225991][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.256166][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.265213][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.291466][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.331426][ T4271] device hsr_slave_0 entered promiscuous mode
[   59.340371][ T4271] device hsr_slave_1 entered promiscuous mode
[   59.347294][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.355777][ T4274] Bluetooth: hci0: command 0x0409 tx timeout
[   59.355877][ T4271] Cannot create hsr debugfs directory
[   59.363540][ T4274] Bluetooth: hci3: command 0x0409 tx timeout
[   59.406245][ T4265] device hsr_slave_0 entered promiscuous mode
[   59.413450][ T4265] device hsr_slave_1 entered promiscuous mode
[   59.420681][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.428553][ T4265] Cannot create hsr debugfs directory
[   59.434579][ T4274] Bluetooth: hci4: command 0x0409 tx timeout
[   59.434697][ T4274] Bluetooth: hci1: command 0x0409 tx timeout
[   59.434785][ T4274] Bluetooth: hci2: command 0x0409 tx timeout
[   59.520616][ T4268] device hsr_slave_0 entered promiscuous mode
[   59.527979][ T4268] device hsr_slave_1 entered promiscuous mode
[   59.535144][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.542970][ T4268] Cannot create hsr debugfs directory
[   59.770908][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.786219][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.795590][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.810440][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.830824][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   59.858379][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   59.871076][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   59.897613][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   59.932135][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.953949][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.964289][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.981905][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.026502][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.035980][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.046032][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.055273][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.096623][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.135791][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   60.151191][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.161974][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.191000][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.204443][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.214621][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.222176][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.247951][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.255806][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.264656][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.274034][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.284157][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.291310][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.311836][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   60.321218][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   60.337204][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   60.355305][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   60.371594][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.385034][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.392742][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.401051][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.410345][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.419038][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.426184][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.434468][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.446559][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   60.460499][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.469917][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.478958][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.488613][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.495765][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.508719][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.519179][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.543705][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.551986][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.576037][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.605304][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.615700][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.624675][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.639062][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.649613][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.658807][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.667611][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.675493][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.697360][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.706183][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.722517][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.737234][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.751323][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   60.766860][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.777968][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.786674][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.798682][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.807948][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.817026][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.825371][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.869069][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   60.896907][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.907654][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.921061][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.928274][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.942163][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.951713][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.961479][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.968640][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.976960][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.986793][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.997149][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.005645][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.014854][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.024167][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.032526][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.039712][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.049488][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.057876][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.071445][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.086985][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.108153][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.120888][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.140795][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.151209][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.166653][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.179627][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.190417][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.197608][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.213812][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.236642][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.250078][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.261093][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.277012][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.289881][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.332328][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.359336][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.375370][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.384344][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.393748][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.402132][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.411749][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.420362][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.430881][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.439041][ T4266] Bluetooth: hci3: command 0x041b tx timeout
[   61.439075][ T4266] Bluetooth: hci0: command 0x041b tx timeout
[   61.452247][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.460904][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.469661][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.478342][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.487094][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.494758][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.502293][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.513357][ T4274] Bluetooth: hci2: command 0x041b tx timeout
[   61.519708][ T4274] Bluetooth: hci1: command 0x041b tx timeout
[   61.523529][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.526172][ T4266] Bluetooth: hci4: command 0x041b tx timeout
[   61.548814][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.557700][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.579731][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.595809][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   61.619514][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.652123][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.682448][ T4269] device veth0_vlan entered promiscuous mode
[   61.738215][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.763729][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.792155][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.799364][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.813458][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.822335][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.837422][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.844628][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.858482][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.868340][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.878048][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.886812][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.894814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.914549][ T4269] device veth1_vlan entered promiscuous mode
[   61.922760][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.944339][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.963762][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.974236][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.993548][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.028610][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.040556][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.081808][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.113458][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.136808][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.144494][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.152256][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.162263][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.171303][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.180555][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.204590][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.221175][ T4269] device veth0_macvtap entered promiscuous mode
[   62.235188][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.245077][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.263651][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.283872][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.291414][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.300617][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.335983][ T4269] device veth1_macvtap entered promiscuous mode
[   62.361176][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.380533][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.396368][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.404451][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.438959][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.456855][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.475317][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.500823][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.518149][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.527429][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.566969][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.584298][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.620409][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.630140][ T4268] device veth0_vlan entered promiscuous mode
[   62.647581][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.657209][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.669834][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.680566][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.690684][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.701191][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.722164][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.732414][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.741571][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.757078][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.789334][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.807539][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.815978][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.828444][ T4268] device veth1_vlan entered promiscuous mode
[   62.869211][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   62.879007][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   62.888073][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.896842][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.936499][ T4265] device veth0_vlan entered promiscuous mode
[   62.944400][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.954588][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.965756][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.974397][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.982802][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.991495][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.000381][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.009480][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.025488][ T4268] device veth0_macvtap entered promiscuous mode
[   63.036425][ T4271] device veth0_vlan entered promiscuous mode
[   63.065215][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.076575][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.085650][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.094548][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.102439][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.111881][ T4268] device veth1_macvtap entered promiscuous mode
[   63.127421][ T4275] device veth0_vlan entered promiscuous mode
[   63.145502][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.156179][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.165717][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.174803][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.186569][ T4271] device veth1_vlan entered promiscuous mode
[   63.215223][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.228593][ T4265] device veth1_vlan entered promiscuous mode
[   63.235389][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.243447][ T4275] device veth1_vlan entered promiscuous mode
[   63.278808][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.288115][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.296859][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.305530][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.314697][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.329102][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.340534][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.352011][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.383082][ T4265] device veth0_macvtap entered promiscuous mode
[   63.390368][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.399871][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.411104][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.419861][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.428622][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.439854][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.440428][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.455502][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.459952][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.475460][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.498331][ T4265] device veth1_macvtap entered promiscuous mode
[   63.508659][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.513575][ T4266] Bluetooth: hci0: command 0x040f tx timeout
[   63.518612][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.523372][ T4276] Bluetooth: hci3: command 0x040f tx timeout
[   63.531629][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.545477][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.555018][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.564519][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.579599][ T4271] device veth0_macvtap entered promiscuous mode
[   63.589442][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.598464][ T4274] Bluetooth: hci4: command 0x040f tx timeout
[   63.598500][ T4274] Bluetooth: hci2: command 0x040f tx timeout
[   63.603415][ T4274] Bluetooth: hci1: command 0x040f tx timeout
[   63.606701][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.628349][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.637131][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.691667][ T4271] device veth1_macvtap entered promiscuous mode
[   63.712525][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.740968][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.755496][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.764187][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.778051][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.788756][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.799533][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.810599][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.822258][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.846638][ T4275] device veth0_macvtap entered promiscuous mode
[   63.857966][ T4275] device veth1_macvtap entered promiscuous mode
[   63.873776][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.882090][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.906650][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.917315][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.935594][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.947087][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.957287][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.971623][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.988928][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.041585][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.066514][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.083820][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.095582][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.113078][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.123382][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.130935][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.145210][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.156609][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.167440][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.179850][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.190747][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.202070][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.225858][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.255203][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.267458][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.298735][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.309801][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.322777][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.344631][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.373527][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.382268][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.392053][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.402510][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.423274][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.435948][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.446551][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.455969][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.460045][ T4388] process 'syz.2.10' launched './file0' with NULL argv: empty string added
[   64.465080][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.486278][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.503139][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.519707][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.530445][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.540909][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.551680][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.565059][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.574237][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.585898][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.596692][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.607539][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.617826][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.628778][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.639592][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.650770][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.663153][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.686887][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.695893][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.708749][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.719626][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.740817][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.751088][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.760309][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.769952][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.785703][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.795405][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.806387][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.815355][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.829338][ T4391] Zero length message leads to an empty skb
[   64.887360][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.905329][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.939536][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.075230][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.095026][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.133562][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.145464][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.179429][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.190598][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.192072][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.213356][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.223955][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.252370][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.491251][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.513607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   65.563963][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.593146][ T4276] Bluetooth: hci3: command 0x0419 tx timeout
[   65.593166][ T4274] Bluetooth: hci0: command 0x0419 tx timeout
[   65.666391][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.676297][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[   65.682907][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   65.691456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   65.699913][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   65.708274][ T4266] Bluetooth: hci2: command 0x0419 tx timeout
[   65.715510][ T4276] Bluetooth: hci4: command 0x0419 tx timeout
[   65.768027][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.871168][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.879729][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   65.888192][    T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!!
[   65.896714][    T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!!
[   66.121253][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.160301][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.160560][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.178457][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.302036][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.310953][ T4411] netlink: 108 bytes leftover after parsing attributes in process `syz.2.14'.
[   67.944232][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.477002][ T4459] netlink: 108 bytes leftover after parsing attributes in process `syz.0.25'.
[   71.357248][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[   71.364575][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[   72.990838][ T4486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'.
[   73.002376][ T4486] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   74.493003][ T4508] device syzkaller0 entered promiscuous mode
[   74.754055][ T4515] netlink: 108 bytes leftover after parsing attributes in process `syz.4.45'.
[   76.477662][   T14] cfg80211: failed to load regulatory.db
[   78.641610][ T4543] block nbd4: Attempted send on invalid socket
[   78.648228][ T4543] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   78.658188][ T4547] efs: cannot read volume header
[   79.575605][ T4557] device pim6reg1 entered promiscuous mode
[   80.293650][ T4556] device pim6reg1 entered promiscuous mode
[   83.220525][ T4603] device pim6reg1 entered promiscuous mode
[   83.229907][ T4607] capability: warning: `syz.1.79' uses 32-bit capabilities (legacy support in use)
[   83.739593][ T4609] device pim6reg1 entered promiscuous mode
[   85.019725][ T4630] binder: 4626:4630 ioctl c0306201 0 returned -14
[   86.033656][ T1042] block nbd0: Attempted send on invalid socket
[   86.039878][ T1042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   86.050997][ T4639] efs: cannot read volume header
[   88.210120][ T4671] binder: 4670:4671 ioctl c0306201 0 returned -14
[   91.803292][ T4720] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.086363][ T4740] tun0: tun_chr_ioctl cmd 35108
[   98.333072][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.601008][   T14] usb 2-1: Using ep0 maxpacket: 16
[   98.984345][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.995148][   T14] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   99.005449][   T14] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   99.014957][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.030498][   T14] usb 2-1: config 0 descriptor??
[  100.682725][ T4336] usb 2-1: USB disconnect, device number 2
[  101.063336][ T1042] block nbd4: Attempted send on invalid socket
[  101.070663][ T1042] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  101.079954][ T4849] efs: cannot read volume header
[  103.952974][ T4392] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.137874][ T4897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'.
[  104.153296][ T4392] usb 5-1: Using ep0 maxpacket: 16
[  104.161685][ T4392] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.202883][ T4897] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  104.229033][ T4392] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  104.250337][ T4392] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  104.264638][ T4392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.289613][ T4392] usb 5-1: config 0 descriptor??
[  105.832569][ T4543] block nbd1: Attempted send on invalid socket
[  105.839012][ T4543] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  105.848327][ T4918] efs: cannot read volume header
[  106.553993][   T14] usb 5-1: USB disconnect, device number 2
[  107.219489][ T4938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'.
[  107.243327][ T4938] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  108.752940][ T4346] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  108.956757][ T4346] usb 3-1: Using ep0 maxpacket: 16
[  109.079215][ T4346] usb 3-1: no configurations
[  109.090712][ T4346] usb 3-1: can't read configurations, error -22
[  110.035648][ T4346] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  110.304229][ T4346] usb 3-1: Using ep0 maxpacket: 16
[  110.320173][ T4346] usb 3-1: no configurations
[  110.339477][ T4346] usb 3-1: can't read configurations, error -22
[  110.387780][ T4346] usb usb3-port1: attempt power cycle
[  110.604428][    C0] hrtimer: interrupt took 764228 ns
[  110.628897][ T4985] loop1: detected capacity change from 0 to 512
[  110.756241][ T4985] EXT4-fs (loop1): orphan cleanup on readonly fs
[  110.782683][ T4985] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  110.811174][ T4985] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  110.831760][ T4985] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.209: attempt to clear invalid blocks 2 len 1
[  110.844971][ T4346] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  110.855386][ T4985] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.209: invalid indirect mapped block 1819239214 (level 0)
[  110.870113][ T4985] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.209: invalid indirect mapped block 1819239214 (level 1)
[  110.889271][ T4346] usb 3-1: Using ep0 maxpacket: 16
[  110.895215][ T4346] usb 3-1: no configurations
[  110.900603][ T4346] usb 3-1: can't read configurations, error -22
[  110.907227][ T4985] EXT4-fs (loop1): 1 truncate cleaned up
[  110.913776][ T4985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.954384][   T26] audit: type=1800 audit(1754369385.080:2): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.209" name="file2" dev="loop1" ino=16 res=0 errno=0
[  111.045873][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  111.083111][ T4346] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  111.183802][ T4346] usb 3-1: Using ep0 maxpacket: 16
[  111.189537][ T4346] usb 3-1: no configurations
[  111.215986][ T4346] usb 3-1: can't read configurations, error -22
[  111.251177][ T4346] usb usb3-port1: unable to enumerate USB device
[  111.280539][ T4992] loop3: detected capacity change from 0 to 64
[  111.302129][ T4991] loop1: detected capacity change from 0 to 1024
[  111.422737][   T26] audit: type=1800 audit(1754369385.540:3): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.212" name="bus" dev="loop3" ino=21 res=0 errno=0
[  111.523414][ T4995] device syzkaller0 entered promiscuous mode
[  113.173751][ T5014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.218'.
[  113.207238][ T5014] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  114.612919][   T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  115.495112][   T22] usb 2-1: Using ep0 maxpacket: 16
[  115.508069][   T22] usb 2-1: no configurations
[  115.525143][   T22] usb 2-1: can't read configurations, error -22
[  115.698017][   T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  115.837103][ T4571] hfsplus: b-tree write err: -5, ino 4
[  115.902874][   T22] usb 2-1: Using ep0 maxpacket: 16
[  115.909198][   T22] usb 2-1: no configurations
[  115.922197][   T22] usb 2-1: can't read configurations, error -22
[  115.941624][   T22] usb usb2-port1: attempt power cycle
[  116.117663][ T5050] loop2: detected capacity change from 0 to 8
[  116.199429][ T5050] SQUASHFS error: zlib decompression failed, data probably corrupt
[  116.212981][ T5050] SQUASHFS error: Failed to read block 0x9b: -5
[  116.234702][ T5050] SQUASHFS error: Unable to read metadata cache entry [99]
[  116.260277][ T5050] SQUASHFS error: Unable to read inode 0x127
[  116.435529][   T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  116.487183][   T22] usb 2-1: Using ep0 maxpacket: 16
[  116.500790][   T22] usb 2-1: no configurations
[  116.564330][   T22] usb 2-1: can't read configurations, error -22
[  116.713132][   T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  116.815721][   T22] usb 2-1: Using ep0 maxpacket: 16
[  116.825947][   T22] usb 2-1: no configurations
[  116.830744][   T22] usb 2-1: can't read configurations, error -22
[  116.982747][   T22] usb usb2-port1: unable to enumerate USB device
[  118.744916][ T5084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'.
[  118.815243][ T5084] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  119.683542][ T4392] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  120.053113][ T4392] usb 4-1: Using ep0 maxpacket: 16
[  120.074028][ T4392] usb 4-1: no configurations
[  120.193041][ T4392] usb 4-1: can't read configurations, error -22
[  120.553528][ T4392] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  120.783897][ T4392] usb 4-1: Using ep0 maxpacket: 16
[  120.796017][ T4392] usb 4-1: no configurations
[  120.859187][ T4392] usb 4-1: can't read configurations, error -22
[  120.870006][ T4392] usb usb4-port1: attempt power cycle
[  121.753423][ T4392] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  121.795589][ T4392] usb 4-1: Using ep0 maxpacket: 16
[  121.811264][ T4392] usb 4-1: no configurations
[  121.827304][ T4392] usb 4-1: can't read configurations, error -22
[  122.353156][ T4392] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  122.438997][ T4392] usb 4-1: device descriptor read/8, error -71
[  122.578976][ T4392] usb usb4-port1: unable to enumerate USB device
[  122.667076][ T5126] netlink: 108 bytes leftover after parsing attributes in process `syz.1.260'.
[  123.352461][ T5130] loop0: detected capacity change from 0 to 512
[  123.360100][ T5130] =======================================================
[  123.360100][ T5130] WARNING: The mand mount option has been deprecated and
[  123.360100][ T5130]          and is ignored by this kernel. Remove the mand
[  123.360100][ T5130]          option from the mount to silence this warning.
[  123.360100][ T5130] =======================================================
[  123.395002][    C1] vkms_vblank_simulate: vblank timer overrun
[  123.406115][ T5130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  123.417701][ T5130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.432657][ T5128] loop4: detected capacity change from 0 to 2048
[  123.557926][ T5130] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.264: invalid indirect mapped block 4294967295 (level 1)
[  123.658018][ T5130] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.264: invalid indirect mapped block 4294967295 (level 1)
[  123.664018][ T5128] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  124.402117][ T5128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.414210][ T5130] EXT4-fs (loop0): 2 truncates cleaned up
[  124.419988][ T5130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  124.658010][ T5139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.263'.
[  125.088049][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  125.515599][ T5158] loop2: detected capacity change from 0 to 512
[  125.853963][ T5159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'.
[  125.895247][ T5159] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  126.170740][ T5158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  126.186412][ T5163] loop4: detected capacity change from 0 to 256
[  126.195381][ T5158] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.222204][ T5163] FAT-fs (loop4): Unrecognized mount option "utf8=0”errors=continue" or missing value
[  126.455813][ T5158] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.270: corrupted inode contents
[  126.562964][ T5158] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.270: mark_inode_dirty error
[  126.747045][ T5158] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.270: corrupted inode contents
[  126.771268][ T5169] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.270: corrupted inode contents
[  127.551788][ T5169] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.270: mark_inode_dirty error
[  127.582575][ T5169] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.270: corrupted inode contents
[  127.738259][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  127.930514][ T4546] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.687874][ T5189] netlink: 68 bytes leftover after parsing attributes in process `syz.4.280'.
[  128.812893][ T4546] usb 4-1: Using ep0 maxpacket: 16
[  128.827493][ T4546] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.839998][ T4546] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  128.872862][ T4546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.880951][ T4546] usb 4-1: Product: syz
[  128.893359][ T4546] usb 4-1: Manufacturer: syz
[  128.898006][ T4546] usb 4-1: SerialNumber: syz
[  128.929795][ T4546] usb 4-1: config 0 descriptor??
[  128.942160][ T5197] loop4: detected capacity change from 0 to 256
[  128.967602][ T5197] FAT-fs (loop4): Unrecognized mount option "utf8=0”errors=continue" or missing value
[  128.988930][ T4546] hub 4-1:0.0: bad descriptor, ignoring hub
[  129.050145][ T4546] hub: probe of 4-1:0.0 failed with error -5
[  129.284992][ T4546] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  129.436726][ T4546] usb 4-1: USB disconnect, device number 6
[  129.902063][ T5200] loop2: detected capacity change from 0 to 4096
[  130.216176][ T5200] ntfs3: Unknown parameter 'windows_names'
[  130.221675][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.642161][   T26] audit: type=1326 audit(1754369404.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  130.873986][   T26] audit: type=1326 audit(1754369404.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  131.408373][   T26] audit: type=1326 audit(1754369404.980:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  131.794285][   T26] audit: type=1326 audit(1754369404.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  131.826330][ T5235] loop3: detected capacity change from 0 to 256
[  131.869012][   T26] audit: type=1326 audit(1754369404.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  131.897795][ T5228] netlink: 68 bytes leftover after parsing attributes in process `syz.4.293'.
[  131.911225][ T5235] FAT-fs (loop3): Unrecognized mount option "utf8=0”errors=continue" or missing value
[  131.927888][   T26] audit: type=1326 audit(1754369404.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  131.972339][   T26] audit: type=1326 audit(1754369404.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  132.018686][   T26] audit: type=1326 audit(1754369404.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  132.197345][   T26] audit: type=1326 audit(1754369404.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  132.258205][   T26] audit: type=1326 audit(1754369404.980:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9038eb69 code=0x7ffc0000
[  132.366698][ T5241] binder: 5240:5241 ioctl c0306201 0 returned -14
[  132.956147][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  132.962500][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  133.731061][ T5255] IPv6: Can't replace route, no match found
[  133.835255][ T5255] loop0: detected capacity change from 0 to 512
[  134.744819][ T5255] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  134.907767][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  134.917053][ T5255] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.073938][ T5280] loop4: detected capacity change from 0 to 764
[  135.288511][ T5280] Symlink component flag not implemented
[  135.312280][ T5280] Symlink component flag not implemented
[  135.330647][ T5280] Symlink component flag not implemented (129)
[  135.405211][ T5280] Symlink component flag not implemented (6)
[  135.419486][ T5280] rock: directory entry would overflow storage
[  135.468386][ T5280] rock: sig=0x4f50, size=4, remaining=3
[  135.510165][ T5280] iso9660: Corrupted directory entry in block 6 of inode 1792
[  135.595109][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  135.760257][   T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  135.883571][ T5289] binder: 5288:5289 ioctl c0306201 0 returned -14
[  135.972991][   T22] usb 2-1: Using ep0 maxpacket: 16
[  135.998087][   T22] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  136.127382][   T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.148755][   T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  136.158949][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.203220][   T22] usb 2-1: Product: syz
[  136.208563][   T22] usb 2-1: Manufacturer: syz
[  136.243552][   T22] usb 2-1: SerialNumber: syz
[  136.533302][ T4381] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  136.667468][   T22] usb 2-1: 0:2 : does not exist
[  136.701747][   T22] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  136.758218][ T4381] usb 3-1: unable to get BOS descriptor or descriptor too short
[  136.792333][ T4381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.827869][ T4381] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  136.847482][   T22] usb 2-1: USB disconnect, device number 7
[  136.914944][ T4381] usb 3-1: config 1 interface 0 has no altsetting 0
[  136.938735][ T4381] usb 3-1: string descriptor 0 read error: -22
[  136.945565][ T4381] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  137.141979][ T4381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.189490][ T4381] usb 3-1: bad CDC descriptors
[  137.249505][ T5299] netlink: 108 bytes leftover after parsing attributes in process `syz.0.317'.
[  137.417896][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.758688][ T5306] binder: BINDER_SET_CONTEXT_MGR already set
[  137.910940][ T5306] binder: 5286:5306 ioctl 4018620d 200000000040 returned -16
[  138.907128][ T4381] usb 3-1: USB disconnect, device number 6
[  139.497667][ T5327] netlink: 108 bytes leftover after parsing attributes in process `syz.3.324'.
[  140.713186][ T4546] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  140.955939][ T5345] netlink: 108 bytes leftover after parsing attributes in process `syz.0.330'.
[  141.605588][ T4546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.652945][ T4546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.779876][ T4546] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  141.797133][ T4546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.833579][ T4546] usb 4-1: config 0 descriptor??
[  142.283031][ T4546] hid-led 0003:27B8:01ED.0001: item fetching failed at offset 3/5
[  142.308705][ T4546] hid-led: probe of 0003:27B8:01ED.0001 failed with error -22
[  142.703082][ T4546] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  142.842141][ T4323] usb 4-1: USB disconnect, device number 7
[  142.892902][ T4546] usb 5-1: Using ep0 maxpacket: 16
[  143.022850][ T4546] usb 5-1: unable to read config index 0 descriptor/start: -61
[  143.032275][ T4546] usb 5-1: can't read configurations, error -61
[  143.903052][ T4546] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  144.102870][ T4546] usb 5-1: Using ep0 maxpacket: 16
[  144.111389][ T4546] usb 5-1: unable to read config index 0 descriptor/start: -61
[  144.214690][ T4546] usb 5-1: can't read configurations, error -61
[  144.221356][ T4546] usb usb5-port1: attempt power cycle
[  144.690768][ T4546] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  144.743505][ T4546] usb 5-1: Using ep0 maxpacket: 16
[  144.794696][ T5373] netlink: 108 bytes leftover after parsing attributes in process `syz.3.338'.
[  145.533766][ T4546] usb 5-1: unable to read config index 0 descriptor/start: -71
[  145.569236][ T4546] usb 5-1: can't read configurations, error -71
[  145.738364][ T5382] netlink: 108 bytes leftover after parsing attributes in process `syz.3.342'.
[  145.954900][ T4323] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  146.652592][ T5388] IPv6: Can't replace route, no match found
[  147.121126][ T5388] loop4: detected capacity change from 0 to 512
[  147.124797][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short
[  147.183564][ T5388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  147.194104][ T4323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.226666][ T4323] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  147.280687][ T5388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  147.281338][ T4323] usb 3-1: config 1 interface 0 has no altsetting 0
[  147.307181][ T5388] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.312132][ T4323] usb 3-1: string descriptor 0 read error: -22
[  147.332373][ T4323] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.355719][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.389355][ T4323] usb 3-1: bad CDC descriptors
[  147.637754][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  147.686187][ T4381] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  147.707332][ T5403] netlink: 56 bytes leftover after parsing attributes in process `syz.0.350'.
[  147.764665][ T5405] binder: BINDER_SET_CONTEXT_MGR already set
[  147.787235][ T5405] binder: 5380:5405 ioctl 4018620d 200000000040 returned -16
[  147.872928][ T4381] usb 2-1: Using ep0 maxpacket: 8
[  147.883673][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.535797][ T5412] netlink: 108 bytes leftover after parsing attributes in process `syz.3.352'.
[  149.640689][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.651156][ T4381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.028698][ T4381] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  151.130366][ T5417] loop0: detected capacity change from 0 to 1024
[  151.158577][ T4381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.201695][ T4381] usb 2-1: config 0 descriptor??
[  151.243022][ T4381] usb 2-1: can't set config #0, error -71
[  151.297688][ T4381] usb 2-1: USB disconnect, device number 8
[  151.370558][ T4392] usb 3-1: USB disconnect, device number 7
[  151.414152][ T4417] hfsplus: b-tree write err: -5, ino 4
[  152.039934][ T4392] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  152.458854][ T4392] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  152.825651][ T4392] usb 5-1: config 0 has no interface number 0
[  152.842599][ T4392] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  153.044940][ T4392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.105685][ T4543] block nbd3: Attempted send on invalid socket
[  153.116438][ T4543] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  153.128900][ T5442] efs: cannot read volume header
[  153.711149][ T4392] usb 5-1: Product: syz
[  153.716555][ T4392] usb 5-1: Manufacturer: syz
[  153.729523][ T4392] usb 5-1: SerialNumber: syz
[  153.821019][ T4392] usb 5-1: config 0 descriptor??
[  154.043634][ T4392] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  154.069189][ T4392] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  154.081599][ T4392] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  154.090779][ T4392] usb 5-1: media controller created
[  154.109330][ T4392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  154.287214][   T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  154.326639][ T4392] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  154.530559][   T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  154.555140][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.564130][   T22] usb 1-1: Product: syz
[  154.568440][   T22] usb 1-1: Manufacturer: syz
[  154.575014][   T22] usb 1-1: SerialNumber: syz
[  154.612029][   T22] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  154.682082][   T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  154.943054][ T5459] netlink: 108 bytes leftover after parsing attributes in process `syz.2.367'.
[  155.696279][   T14] usb 1-1: USB disconnect, device number 2
[  155.754193][   T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  155.761987][   T22] ath9k_htc: Failed to initialize the device
[  155.772205][   T14] usb 1-1: ath9k_htc: USB layer deinitialized
[  155.813990][  T125] usb 5-1: USB disconnect, device number 7
[  157.312428][ T5469] loop0: detected capacity change from 0 to 256
[  157.451102][ T5469] FAT-fs (loop0): Directory bread(block 64) failed
[  157.519727][ T5469] FAT-fs (loop0): Directory bread(block 65) failed
[  157.561029][ T5469] FAT-fs (loop0): Directory bread(block 66) failed
[  157.573500][ T5469] FAT-fs (loop0): Directory bread(block 67) failed
[  157.581238][ T5469] FAT-fs (loop0): Directory bread(block 68) failed
[  157.590334][ T5469] FAT-fs (loop0): Directory bread(block 69) failed
[  157.598648][ T5469] FAT-fs (loop0): Directory bread(block 70) failed
[  157.846886][ T5469] FAT-fs (loop0): Directory bread(block 71) failed
[  157.863096][ T5469] FAT-fs (loop0): Directory bread(block 72) failed
[  157.895992][ T5469] FAT-fs (loop0): Directory bread(block 73) failed
[  158.075312][ T1042] block nbd3: Attempted send on invalid socket
[  158.085416][ T1042] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  158.177957][ T5484] efs: cannot read volume header
[  159.480966][ T5505] netlink: 108 bytes leftover after parsing attributes in process `syz.3.382'.
[  159.705331][ T3044] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  160.197311][ T3044] usb 2-1: Using ep0 maxpacket: 16
[  160.306230][ T3044] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  160.316051][ T5513] loop3: detected capacity change from 0 to 256
[  160.325625][ T5513] FAT-fs (loop3): Unrecognized mount option "utf8=0”errors=continue" or missing value
[  160.403245][ T3044] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.457417][ T3044] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.530448][ T3044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.561336][ T3044] usb 2-1: Product: syz
[  160.575776][ T3044] usb 2-1: Manufacturer: syz
[  160.588128][ T3044] usb 2-1: SerialNumber: syz
[  160.668941][ T5523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.388'.
[  160.678605][ T5523] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  160.844095][ T3044] usb 2-1: 0:2 : does not exist
[  160.864136][ T3044] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  160.931382][ T3044] usb 2-1: USB disconnect, device number 9
[  160.978537][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.176893][ T5533] IPv6: Can't replace route, no match found
[  161.302903][ T4543] block nbd0: Attempted send on invalid socket
[  161.310232][ T4543] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.320394][ T5536] efs: cannot read volume header
[  161.833008][  T125] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  162.023114][  T125] usb 3-1: Using ep0 maxpacket: 16
[  162.037159][  T125] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  162.062732][  T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.083165][  T125] usb 3-1: Product: syz
[  162.088192][  T125] usb 3-1: Manufacturer: syz
[  162.094605][  T125] usb 3-1: SerialNumber: syz
[  162.102240][  T125] r8152-cfgselector 3-1: config 0 descriptor??
[  162.270327][ T5555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'.
[  162.280903][ T5555] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  162.526944][  T125] r8152-cfgselector 3-1: Unknown version 0x0000
[  162.537171][  T125] r8152-cfgselector 3-1: bad CDC descriptors
[  162.587302][  T125] r8152-cfgselector 3-1: Unknown version 0x0000
[  162.652712][  T125] r8152-cfgselector 3-1: USB disconnect, device number 8
[  162.836756][ T5568] IPv6: Can't replace route, no match found
[  163.928005][ T5586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.412'.
[  163.937802][ T5586] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  164.960324][ T5593] loop3: detected capacity change from 0 to 64
[  166.907401][ T5611] loop3: detected capacity change from 0 to 1024
[  166.983807][ T5611] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  167.005629][ T5613] loop0: detected capacity change from 0 to 128
[  167.035452][ T4543] block nbd4: Attempted send on invalid socket
[  167.043252][ T4543] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.053834][ T5614] efs: cannot read volume header
[  167.200925][ T5613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  167.210537][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  167.237723][ T5613] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  167.314252][ T5611] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.421: missing EA_INODE flag
[  167.372578][ T5611] EXT4-fs (loop3): Remounting filesystem read-only
[  167.396131][ T5611] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.421: error while reading EA inode 11 err=-117
[  167.468049][ T5611] EXT4-fs (loop3): Remounting filesystem read-only
[  167.498764][ T5626] EXT4-fs (loop0): shut down requested (1)
[  167.513180][ T5611] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  167.758401][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  167.794926][ T5613] fscrypt: Error allocating hmac(sha512): -2
[  167.899205][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  168.251833][ T5641] IPv6: Can't replace route, no match found
[  168.270053][ T5641] loop2: detected capacity change from 0 to 512
[  168.301567][ T5641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  168.340529][ T4346] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  168.552975][ T4346] usb 4-1: Using ep0 maxpacket: 16
[  168.571489][ T4346] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  169.153046][ T5641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  169.167737][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.183093][ T5641] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.200912][ T4346] usb 4-1: Product: syz
[  169.217608][ T4346] usb 4-1: Manufacturer: syz
[  169.231172][ T4346] usb 4-1: SerialNumber: syz
[  169.277285][ T4346] usb 4-1: config 0 descriptor??
[  169.528083][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  169.695041][ T4346] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  169.724450][ T4346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  169.759905][ T4346] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  169.765530][ T5655] loop2: detected capacity change from 0 to 2048
[  169.783382][ T4346] usb 4-1: media controller created
[  169.813080][ T4392] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  169.814390][ T5655] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  169.849255][ T4346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.859624][ T5655] UDF-fs: Scanning with blocksize 512 failed
[  169.894701][ T5655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.898052][ T5636] dtv5100: wlen = 0, aborting.
[  169.970161][ T4346] zl10353_read_register: readreg error (reg=127, ret==0)
[  169.980833][ T4346] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  169.991291][ T4346] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  170.007163][ T4346] usb 4-1: USB disconnect, device number 8
[  170.038910][ T4392] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  170.076525][ T4392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.136490][ T4392] usb 2-1: Product: syz
[  170.142944][ T4392] usb 2-1: Manufacturer: syz
[  170.156436][ T4346] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  170.166086][ T4392] usb 2-1: SerialNumber: syz
[  170.167987][ T4392] r8152-cfgselector 2-1: config 0 descriptor??
[  170.429930][ T5669] bridge0: port 3(syz_tun) entered blocking state
[  170.440395][ T5669] bridge0: port 3(syz_tun) entered disabled state
[  170.456225][ T5669] device syz_tun entered promiscuous mode
[  170.466349][ T5669] bridge0: port 3(syz_tun) entered blocking state
[  170.474186][ T5669] bridge0: port 3(syz_tun) entered forwarding state
[  170.605590][ T4392] r8152-cfgselector 2-1: Unknown version 0x0000
[  170.625426][ T4392] r8152-cfgselector 2-1: bad CDC descriptors
[  170.659190][ T4392] r8152-cfgselector 2-1: Unknown version 0x0000
[  170.711185][ T4392] r8152-cfgselector 2-1: USB disconnect, device number 10
[  170.976148][ T5684] loop0: detected capacity change from 0 to 8
[  171.437351][ T5684] SQUASHFS error: zlib decompression failed, data probably corrupt
[  171.473019][ T5684] SQUASHFS error: Failed to read block 0x9b: -5
[  171.499736][ T5684] SQUASHFS error: Unable to read metadata cache entry [99]
[  171.553152][ T5684] SQUASHFS error: Unable to read inode 0x127
[  172.387825][ T1042] block nbd4: Attempted send on invalid socket
[  172.394639][ T1042] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.415661][ T5711] efs: cannot read volume header
[  174.493000][ T3044] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  174.827006][ T3044] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  174.846151][ T3044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.866991][ T3044] usb 4-1: Product: syz
[  174.878366][ T3044] usb 4-1: Manufacturer: syz
[  174.893177][ T3044] usb 4-1: SerialNumber: syz
[  174.963536][ T3044] usb 4-1: config 0 descriptor??
[  175.171760][ T5760] loop0: detected capacity change from 0 to 2048
[  175.366814][ T5760] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  176.001688][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  177.494561][ T3044] usb 4-1: USB disconnect, device number 9
[  177.536747][ T5801] netlink: 'syz.4.489': attribute type 4 has an invalid length.
[  177.723612][ T5809] netlink: 108 bytes leftover after parsing attributes in process `syz.1.488'.
[  178.199044][ T5801] netlink: 'syz.4.489': attribute type 4 has an invalid length.
[  178.466155][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'.
[  181.032868][ T4274] Bluetooth: hci1: command 0x0406 tx timeout
[  181.738460][ T4274] Bluetooth: hci0: command 0x0406 tx timeout
[  181.744689][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[  181.750791][ T4274] Bluetooth: hci4: command 0x0406 tx timeout
[  182.024672][ T5854] netlink: 108 bytes leftover after parsing attributes in process `syz.1.505'.
[  184.096974][ T5867] device syzkaller0 entered promiscuous mode
[  184.748857][ T5881] fuse: Bad value for 'fd'
[  184.796785][ T5883] loop3: detected capacity change from 0 to 2048
[  185.876065][ T5894] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.445896][ T5900] netlink: 108 bytes leftover after parsing attributes in process `syz.0.519'.
[  187.329421][ T5912] loop0: detected capacity change from 0 to 1024
[  187.763201][ T3044] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  187.984095][ T3044] usb 2-1: Using ep0 maxpacket: 8
[  188.203685][ T3044] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  188.235164][ T3044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.264977][ T3044] usb 2-1: Product: syz
[  188.269199][ T3044] usb 2-1: Manufacturer: syz
[  188.316145][ T3044] usb 2-1: SerialNumber: syz
[  188.357268][ T3044] usb 2-1: config 0 descriptor??
[  188.711307][ T3044] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  189.174140][ T5927] device syzkaller0 entered promiscuous mode
[  190.263186][ T5943] netlink: 108 bytes leftover after parsing attributes in process `syz.0.533'.
[  190.580202][ T3044] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  190.683163][ T3044] usb 2-1: USB disconnect, device number 11
[  190.960838][ T5949] netlink: 260 bytes leftover after parsing attributes in process `syz.2.536'.
[  190.969308][ T5951] netlink: 'syz.3.537': attribute type 13 has an invalid length.
[  190.990489][ T4392] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  191.252971][ T4392] usb 1-1: Using ep0 maxpacket: 16
[  191.289738][ T4392] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  191.440265][ T4392] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.480786][ T4392] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.738469][ T4392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.768692][ T4392] usb 1-1: Product: syz
[  191.780286][ T4392] usb 1-1: Manufacturer: syz
[  191.809153][ T4392] usb 1-1: SerialNumber: syz
[  192.058657][ T4392] usb 1-1: 0:2 : does not exist
[  192.075432][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.084733][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.087749][ T4392] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  192.213140][ T4392] usb 1-1: USB disconnect, device number 3
[  192.368461][ T5971] loop4: detected capacity change from 0 to 64
[  192.661516][ T4543] block nbd1: Attempted send on invalid socket
[  192.663342][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.668695][ T4543] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  192.696684][ T5974] efs: cannot read volume header
[  193.091524][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.176965][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.900382][ T5991] netlink: 108 bytes leftover after parsing attributes in process `syz.0.550'.
[  194.241782][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.248525][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.367991][ T5951] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.384145][ T5951] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.410123][ T5951] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.433986][ T5951] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.947213][ T5951] syz.3.537 (5951) used greatest stack depth: 20384 bytes left
[  195.587723][ T6013] netlink: 'syz.1.558': attribute type 4 has an invalid length.
[  196.662123][ T6020] loop3: detected capacity change from 0 to 4096
[  197.160095][ T6024] netlink: 108 bytes leftover after parsing attributes in process `syz.1.563'.
[  199.580312][ T6043] loop3: detected capacity change from 0 to 2048
[  199.657470][ T6043] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  199.863579][ T6043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.705870][ T6074] netlink: 108 bytes leftover after parsing attributes in process `syz.3.580'.
[  202.268666][ T6092] netlink: 108 bytes leftover after parsing attributes in process `syz.0.584'.
[  204.306031][ T6108] loop0: detected capacity change from 0 to 64
[  204.939283][ T6108] Trying to free block not in datazone
[  204.953044][ T6108] Trying to free block not in datazone
[  204.995534][ T6108] Trying to free block not in datazone
[  205.087461][ T6116] loop4: detected capacity change from 0 to 128
[  205.147232][ T6116] EXT4-fs: Ignoring removed nobh option
[  205.247121][ T6116] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  205.339942][ T6123] netlink: 108 bytes leftover after parsing attributes in process `syz.2.595'.
[  205.383083][ T6116] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  206.398688][ T6116] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[  207.652390][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  207.908756][ T4373] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  207.993026][  T125] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  208.149986][ T4373] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  208.166346][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.179380][ T4373] usb 4-1: Product: syz
[  208.189125][ T4373] usb 4-1: Manufacturer: syz
[  208.273339][  T125] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  208.282604][  T125] usb 3-1: config 0 has no interface number 0
[  208.482970][ T4373] usb 4-1: SerialNumber: syz
[  208.605594][ T4373] usb 4-1: config 0 descriptor??
[  208.619539][  T125] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  208.713917][ T4373] ch341 4-1:0.0: ch341-uart converter detected
[  208.804219][  T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.877400][ T6161] netlink: 108 bytes leftover after parsing attributes in process `syz.1.609'.
[  209.623233][  T125] usb 3-1: Product: syz
[  209.628166][  T125] usb 3-1: Manufacturer: syz
[  209.633650][  T125] usb 3-1: SerialNumber: syz
[  209.642854][  T125] usb 3-1: config 0 descriptor??
[  209.823382][ T4373] usb 4-1: failed to send control message: -71
[  209.830558][ T4373] ch341-uart: probe of ttyUSB0 failed with error -71
[  209.865331][  T125] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  209.894038][ T4373] usb 4-1: USB disconnect, device number 10
[  209.897331][ T4336] kernel write not supported for file /dsp (pid: 4336 comm: kworker/1:4)
[  209.913235][  T125] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  209.926964][ T4373] ch341 4-1:0.0: device disconnected
[  209.940058][  T125] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  209.953103][  T125] usb 3-1: media controller created
[  210.000186][  T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  211.688064][ T6170] sched: RT throttling activated
[  212.844905][ T6174] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  212.877564][ T6178] loop0: detected capacity change from 0 to 256
[  212.896300][ T6174] device syzkaller0 entered promiscuous mode
[  213.064326][ T6180] netlink: 108 bytes leftover after parsing attributes in process `syz.3.617'.
[  213.076356][ T6178] FAT-fs (loop0): Directory bread(block 64) failed
[  213.103233][ T6178] FAT-fs (loop0): Directory bread(block 65) failed
[  213.130396][ T6178] FAT-fs (loop0): Directory bread(block 66) failed
[  213.150549][ T6178] FAT-fs (loop0): Directory bread(block 67) failed
[  213.217514][ T6178] FAT-fs (loop0): Directory bread(block 68) failed
[  213.244066][ T6178] FAT-fs (loop0): Directory bread(block 69) failed
[  213.266703][ T6178] FAT-fs (loop0): Directory bread(block 70) failed
[  213.309666][ T6178] FAT-fs (loop0): Directory bread(block 71) failed
[  213.364202][ T6178] FAT-fs (loop0): Directory bread(block 72) failed
[  213.370926][ T6178] FAT-fs (loop0): Directory bread(block 73) failed
[  213.647853][ T6191] netlink: 108 bytes leftover after parsing attributes in process `syz.1.620'.
[  213.764305][  T125] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  214.507622][  T125] usb 3-1: USB disconnect, device number 9
[  215.700472][ T6207] loop4: detected capacity change from 0 to 256
[  216.553668][ T6205] netlink: 108 bytes leftover after parsing attributes in process `syz.2.629'.
[  216.566980][ T6207] FAT-fs (loop4): Unrecognized mount option "utf8=0”errors=continue" or missing value
[  216.891269][ T6218] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  216.942404][ T6220] loop0: detected capacity change from 0 to 256
[  216.960661][ T6223] device syzkaller0 entered promiscuous mode
[  216.964994][ T6222] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in;
[  216.964994][ T6222]    program syz.3.634 not setting count and/or reply_len properly
[  217.194538][ T6220] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  217.228238][ T6220] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  217.344821][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  217.344836][   T26] audit: type=1800 audit(1754369491.470:25): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.633" name="file1" dev="loop0" ino=1048597 res=0 errno=0
[  217.410644][ T6220] syz.0.633: attempt to access beyond end of device
[  217.410644][ T6220] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256
[  217.477336][ T6220] syz.0.633: attempt to access beyond end of device
[  217.477336][ T6220] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256
[  217.526675][ T4266] Bluetooth: hci1: unexpected event 0x0f length: 60 > 4
[  217.538629][ T6234] syz.0.633: attempt to access beyond end of device
[  217.538629][ T6234] loop0: rw=34817, sector=184, nr_sectors = 120 limit=256
[  217.571846][ T6220] syz.0.633: attempt to access beyond end of device
[  217.571846][ T6220] loop0: rw=524288, sector=280, nr_sectors = 24 limit=256
[  217.589826][ T6220] syz.0.633: attempt to access beyond end of device
[  217.589826][ T6220] loop0: rw=0, sector=280, nr_sectors = 8 limit=256
[  217.608114][   T26] audit: type=1800 audit(1754369491.730:26): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.633" name="file1" dev="loop0" ino=1048597 res=0 errno=0
[  217.788220][ T4323] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  218.230115][ T6246] loop0: detected capacity change from 0 to 2048
[  218.255559][ T6246] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  218.270439][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  218.319675][ T6244] netlink: 108 bytes leftover after parsing attributes in process `syz.4.642'.
[  218.347861][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.402311][ T4323] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  218.433909][ T6246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.473112][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.552660][ T4323] usb 4-1: config 0 descriptor??
[  218.573697][ T6249] tipc: Started in network mode
[  218.578776][ T6249] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  218.590332][ T6249] tipc: Enabled bearer <eth:team0>, priority 0
[  218.789963][ T6251] loop0: detected capacity change from 0 to 256
[  218.812717][ T6251] FAT-fs (loop0): Unrecognized mount option "utf8=0”errors=continue" or missing value
[  218.854939][ T6253] loop2: detected capacity change from 0 to 512
[  218.878820][ T6253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  218.892965][ T5982] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  219.023272][ T6253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  219.036579][ T4323] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0
[  219.054641][ T4323] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised
[  219.064210][ T4323] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN
[  219.075955][ T4323] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af]
[  219.084481][ T4323] CPU: 0 PID: 4323 Comm: kworker/0:6 Not tainted 6.1.147-syzkaller #0
[  219.092633][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  219.102684][ T4323] Workqueue: usb_hub_wq hub_event
[  219.107732][ T4323] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0
[  219.113362][ T4323] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 ae 41 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 06 42 2d fa 48 8d 84 24 80 00 00 00
[  219.132977][ T4323] RSP: 0018:ffffc900044667c0 EFLAGS: 00010202
[  219.139042][ T4323] RAX: 0000000000000015 RBX: ffff888023912030 RCX: dffffc0000000000
[  219.147000][ T4323] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805600e969
[  219.154957][ T4323] RBP: ffffc90004466970 R08: 0000000000000001 R09: ffff88805600e92e
[  219.162941][ T4323] R10: ffffed100ac01d2d R11: 1ffff1100ac01d25 R12: 1ffff11004722406
[  219.170898][ T4323] R13: dffffc0000000000 R14: 1ffff11004722405 R15: 00000000000000a8
[  219.178873][ T4323] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  219.187796][ T4323] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.194365][ T4323] CR2: 0000001b2ea19ff8 CR3: 000000002ecc0000 CR4: 00000000003526f0
[  219.202327][ T4323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  219.210296][ T4323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  219.218263][ T4323] Call Trace:
[  219.221530][ T4323]  <TASK>
[  219.224465][ T4323]  ? rcu_is_watching+0x11/0xa0
[  219.229238][ T4323]  ? u2fzero_brightness_set+0x2c0/0x2c0
[  219.234786][ T4323]  ? mutex_lock_nested+0x10/0x10
[  219.239727][ T4323]  ? u2fzero_brightness_set+0x2c0/0x2c0
[  219.245271][ T4323]  add_early_randomness+0x7a/0x150
[  219.250378][ T4323]  hwrng_register+0x398/0x440
[  219.255067][ T4323]  devm_hwrng_register+0x43/0xb0
[  219.260023][ T4323]  u2fzero_probe+0x355/0x470
[  219.264759][ T4323]  ? twinhan_input_mapping+0x2210/0x2210
[  219.270395][ T4323]  hid_device_probe+0x25c/0x350
[  219.275259][ T4323]  ? hid_uevent+0x340/0x340
[  219.279766][ T4323]  really_probe+0x2aa/0xc70
[  219.284269][ T4323]  ? pm_runtime_barrier+0x147/0x1c0
[  219.289486][ T4323]  __driver_probe_device+0x18c/0x330
[  219.294791][ T4323]  driver_probe_device+0x4f/0x420
[  219.299832][ T4323]  __device_attach_driver+0x2c6/0x510
[  219.305211][ T4323]  ? coredump_store+0x90/0x90
[  219.309968][ T4323]  bus_for_each_drv+0x175/0x200
[  219.314841][ T4323]  ? _raw_spin_unlock+0x40/0x40
[  219.319685][ T4323]  ? subsys_find_device_by_id+0x350/0x350
[  219.325411][ T4323]  __device_attach+0x29b/0x460
[  219.330186][ T4323]  ? device_attach+0x20/0x20
[  219.334784][ T4323]  ? __kmem_cache_free+0xb6/0x1f0
[  219.339806][ T4323]  ? kobject_uevent_env+0x35f/0x8a0
[  219.345002][ T4323]  bus_probe_device+0xbc/0x1e0
[  219.349895][ T4323]  ? device_add+0x97c/0xfb0
[  219.354403][ T4323]  device_add+0xa00/0xfb0
[  219.358867][ T4323]  hid_add_device+0x389/0x530
[  219.363560][ T4323]  usbhid_probe+0xc09/0xfe0
[  219.368062][ T4323]  usb_probe_interface+0x5a0/0xaf0
[  219.373178][ T4323]  ? usb_register_driver+0x3d0/0x3d0
[  219.378451][ T4323]  really_probe+0x2aa/0xc70
[  219.382948][ T4323]  ? pm_runtime_barrier+0x147/0x1c0
[  219.388313][ T4323]  __driver_probe_device+0x18c/0x330
[  219.393773][ T4323]  driver_probe_device+0x4f/0x420
[  219.398792][ T4323]  __device_attach_driver+0x2c6/0x510
[  219.404170][ T4323]  ? coredump_store+0x90/0x90
[  219.408851][ T4323]  bus_for_each_drv+0x175/0x200
[  219.413704][ T4323]  ? _raw_spin_unlock+0x40/0x40
[  219.418548][ T4323]  ? subsys_find_device_by_id+0x350/0x350
[  219.424261][ T4323]  __device_attach+0x29b/0x460
[  219.429021][ T4323]  ? device_attach+0x20/0x20
[  219.433605][ T4323]  ? kobject_uevent_env+0x35f/0x8a0
[  219.438793][ T4323]  bus_probe_device+0xbc/0x1e0
[  219.443544][ T4323]  ? device_add+0x97c/0xfb0
[  219.448028][ T4323]  device_add+0xa00/0xfb0
[  219.452349][ T4323]  usb_set_configuration+0x1991/0x1fd0
[  219.457831][ T4323]  usb_generic_driver_probe+0x89/0x150
[  219.463290][ T4323]  usb_probe_device+0x139/0x270
[  219.468131][ T4323]  ? usb_register_device_driver+0x230/0x230
[  219.474021][ T4323]  really_probe+0x2aa/0xc70
[  219.478545][ T4323]  ? pm_runtime_barrier+0x147/0x1c0
[  219.483751][ T4323]  __driver_probe_device+0x18c/0x330
[  219.489204][ T4323]  driver_probe_device+0x4f/0x420
[  219.494226][ T4323]  __device_attach_driver+0x2c6/0x510
[  219.499609][ T4323]  ? coredump_store+0x90/0x90
[  219.504278][ T4323]  bus_for_each_drv+0x175/0x200
[  219.509123][ T4323]  ? _raw_spin_unlock+0x40/0x40
[  219.513962][ T4323]  ? subsys_find_device_by_id+0x350/0x350
[  219.519673][ T4323]  __device_attach+0x29b/0x460
[  219.524426][ T4323]  ? device_attach+0x20/0x20
[  219.529000][ T4323]  ? __kmem_cache_free+0xb6/0x1f0
[  219.534017][ T4323]  ? kobject_uevent_env+0x35f/0x8a0
[  219.539209][ T4323]  bus_probe_device+0xbc/0x1e0
[  219.543962][ T4323]  ? device_add+0x97c/0xfb0
[  219.548449][ T4323]  device_add+0xa00/0xfb0
[  219.552769][ T4323]  usb_new_device+0xd4d/0x1620
[  219.557526][ T4323]  ? lock_chain_count+0x20/0x20
[  219.562364][ T4323]  ? usb_disconnect+0x8a0/0x8a0
[  219.567200][ T4323]  ? _raw_spin_unlock_irq+0x1f/0x40
[  219.572384][ T4323]  ? lockdep_hardirqs_on+0x94/0x140
[  219.577569][ T4323]  hub_event+0x2d5e/0x54e0
[  219.581984][ T4323]  ? hub_post_resume+0x120/0x120
[  219.586905][ T4323]  ? read_lock_is_recursive+0x10/0x10
[  219.592260][ T4323]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  219.598140][ T4323]  ? _raw_spin_unlock+0x40/0x40
[  219.602975][ T4323]  ? _raw_spin_unlock_irq+0x1f/0x40
[  219.608163][ T4323]  ? process_one_work+0x7a1/0x1160
[  219.613262][ T4323]  process_one_work+0x898/0x1160
[  219.618185][ T4323]  ? worker_detach_from_pool+0x240/0x240
[  219.623807][ T4323]  ? _raw_spin_lock_irq+0xab/0xe0
[  219.628822][ T4323]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  219.634187][ T4323]  ? kthread_data+0x4b/0xc0
[  219.638679][ T4323]  worker_thread+0xaa2/0x1250
[  219.643349][ T4323]  ? __kthread_parkme+0x162/0x1c0
[  219.648359][ T4323]  kthread+0x29d/0x330
[  219.652416][ T4323]  ? worker_clr_flags+0x1a0/0x1a0
[  219.657422][ T4323]  ? kthread_blkcg+0xd0/0xd0
[  219.661997][ T4323]  ret_from_fork+0x1f/0x30
[  219.666405][ T4323]  </TASK>
[  219.669417][ T4323] Modules linked in:
[  219.675750][ T5983] tipc: Node number set to 11578026
[  219.685731][ T5982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  219.698967][ T6253] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.710489][ T5982] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  219.720501][ T5982] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.792168][ T5982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  219.801416][ T4323] ---[ end trace 0000000000000000 ]---
[  219.812941][ T4323] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0
[  219.815123][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  219.829910][ T5982] usb 2-1: Product: syz
[  219.835791][ T5982] usb 2-1: Manufacturer: syz
[  219.840547][ T5982] usb 2-1: SerialNumber: syz
[  219.848107][ T4323] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 ae 41 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 06 42 2d fa 48 8d 84 24 80 00 00 00
[  219.892663][ T4323] RSP: 0018:ffffc900044667c0 EFLAGS: 00010202
[  219.899258][ T4323] RAX: 0000000000000015 RBX: ffff888023912030 RCX: dffffc0000000000
[  219.908311][ T4323] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805600e969
[  219.917120][ T4323] RBP: ffffc90004466970 R08: 0000000000000001 R09: ffff88805600e92e
[  219.925566][ T4323] R10: ffffed100ac01d2d R11: 1ffff1100ac01d25 R12: 1ffff11004722406
[  219.934135][ T4323] R13: dffffc0000000000 R14: 1ffff11004722405 R15: 00000000000000a8
[  219.942515][ T4323] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  219.952047][ T4323] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.959067][ T4323] CR2: 00005555743f95c8 CR3: 000000002ecc0000 CR4: 00000000003526f0
[  219.967547][ T4323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  219.975978][ T4323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  219.985125][ T4323] Kernel panic - not syncing: Fatal exception
[  219.991452][ T4323] Kernel Offset: disabled
[  219.995772][ T4323] Rebooting in 86400 seconds..