last executing test programs:

1m1.722371915s ago: executing program 4 (id=880):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
write$sndseq(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x1})

1m1.428364908s ago: executing program 4 (id=883):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)

1m0.362264213s ago: executing program 4 (id=890):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "1c51aa7b"}, @local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0)

57.903890336s ago: executing program 4 (id=898):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syzkaller0\x00', &(0x7f00000007c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x5, 0x7, 0xd, 0x4, 0xd, 0xfb1, 0xad3, 0xfff, 0x3, 0x6, 0x7da2, 0x7, 0x0, 0x0, 0xfffffff8, 0x9, 0x9, 0x7, 0x3, 0xd, 0x4a89, 0x6, 0xe4fa, 0x0, 0x0, 0x800, 0xc, 0x6, 0x7f, 0x5, 0x5c49, 0x8000, 0x53, 0x2, 0x8aca, 0x7d, 0x3, 0x7, 0x9, 0x76, 0xfffffffc, 0x8, 0x200, 0xa, 0xb4d9373, 0x6, 0x7, 0xc0000, 0x8, 0x0, 0x4, 0x6, 0x4, 0x3, 0x0, 0x9, 0x0, 0x9, 0x8, 0x0, 0x28, 0xfffeffff, 0x40, 0x5, 0x0, 0x3, 0xfffffffe, 0x0, 0x66, 0x3, 0x3, 0xf, 0x52, 0x0, 0x4, 0x4, 0x8, 0x7, 0x5, 0x9, 0x935, 0x40, 0x22, 0xa42, 0x7, 0x0, 0x7f, 0x3c9, 0x80000001, 0x6, 0x4, 0x4, 0x80000000, 0x1, 0x5, 0x81, 0x1, 0x6, 0x100, 0x1, 0x7, 0x4, 0x3, 0x0, 0xe88, 0x0, 0x3, 0x10000, 0xfffffff9, 0xce8e, 0x1, 0x3, 0x7fff, 0x3a4, 0x48f, 0x1, 0xdf, 0x0, 0x10001, 0x4, 0xffffffff, 0x7, 0x7ff, 0x3, 0x8, 0x8, 0x7fff, 0x2]}})
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

57.141792877s ago: executing program 4 (id=905):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8008004}, 0x4000100)

54.207919767s ago: executing program 4 (id=909):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0xa, "407f24ae"}, @global=@item_012={0x1, 0x1, 0x7, "8e"}, @global=@item_4={0x3, 0x1, 0x0, "a85bc600"}]}}, 0x0}, 0x0)

53.382772057s ago: executing program 32 (id=909):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0xa, "407f24ae"}, @global=@item_012={0x1, 0x1, 0x7, "8e"}, @global=@item_4={0x3, 0x1, 0x0, "a85bc600"}]}}, 0x0}, 0x0)

53.352050158s ago: executing program 3 (id=916):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x7}, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x40000)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

52.887133634s ago: executing program 3 (id=918):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48100)
dup(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)

52.259198893s ago: executing program 3 (id=920):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv4_delrule={0x4c, 0x21, 0xb12becd5a2b54ddf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

51.907232418s ago: executing program 3 (id=923):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x800f00, &(0x7f0000000200)={[{@usrjquota}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00')
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x800)

51.272732246s ago: executing program 3 (id=925):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x11, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x930, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe900, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
pselect6(0x40, &(0x7f0000000280)={0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff0}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

50.434727467s ago: executing program 3 (id=933):
dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000640)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffc, 0x0, 0xfffffffd, 0x3ff, 0x0, 0x0, 0x0, 0x85], [0x6]], '\x00', [{}, {}, {0x4}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0x7fff}, {0x1}], '\x00', 0x1000})

50.065414172s ago: executing program 33 (id=933):
dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000640)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffc, 0x0, 0xfffffffd, 0x3ff, 0x0, 0x0, 0x0, 0x85], [0x6]], '\x00', [{}, {}, {0x4}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0x7fff}, {0x1}], '\x00', 0x1000})

48.970221008s ago: executing program 2 (id=940):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x4})

48.77993634s ago: executing program 1 (id=942):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$eJzs3U1rY1UcB+B/pmmbduyLOo52QDzoRhHitAtXborMgFhQqh1QQbhjUy1Nm9KEQkScunIl+DFEXboTxC/QjRvXgiDSjctZiFfSpE7TpB2nNq0Mz7PJ5ZzzO+fce8qFW+7h7r3y5fraSr28kjXiUqEQxc3hKN5NkeJSDEXbTrxw6+dfnn7rnXdfn19YuLGY0s35t2dfTilNPvPDe598++yPjcu3vpv8fjR2p9/f+2Pu192ruzN7f30Tq/W0Wk8btUbK0u1arZHdrlbS8mp9rZzSm9VKVq+kUmeMe/Ur1drmZjNlG8sT45tblXo9ZRvNtFZppkYhNbaaKfswW91I5XI5TYwH/8XS13fzPI/I8+EYiTzP87EYj8vxSEzEZEzFdDwaj8XjcSWeiKvxZDwVM/utDvIjFzt9AAAAAAAAAAAAAAAAAAAAeEjcZ/9/oXf//+hFTxkAAAAAAAAAAAAAAAAAAAAeOkf3/xcjHuD7/wAAAAAAAAAAAAAAAAAAAMBZuM/3/4/s/3/R/n8AAAAAAAAAAAAAAAAAAAAYhFL7ZzGlUsT659tL20vt33b5/EqsRjUqcT2m4s/Y3/3f1j6++drCjetp33S8tH6nk7+zvTTUnZ8dnorpQt/8bDufuvOjMX44PxdTcaX/+HN986V4/rlW/rN2vhxT8dMHUYtqLEcUOme/n/90NqVX31gY685fa7U71tCAlwUAAADOUjn9o/f5fafTqG99u6rzfJ46LQsn/H/gyPN5Ma4VL+qsOVBvfryWVauVrVMejBzfz0h3yVin5anHKkRE1hWfHP9tsdXlaSd/ZgdD5zro8Mltjq7FTOnEDi8dWsEo/g8u5hkc/P7VoZJSDGqs4dafc0/VwQXNqq3757/rMHbyfKCXZaRf1ehJqePvGYUB3o84X/cW/aJnAgAAAAAAAAAAwIPo+/bfWET0vA/4UU/Jwevh3fHeno8f/YtzOEMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVQAAAP//kh3BBA==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
listxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

48.704432681s ago: executing program 2 (id=943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x44000)

47.562655886s ago: executing program 1 (id=948):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x2086, 0x0, 0x8, 0x4}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

47.203690901s ago: executing program 1 (id=950):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/187, 0xbb}, 0x10000}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

46.954050055s ago: executing program 1 (id=951):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@bh}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@data_err_ignore}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x800}}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a6)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4a342, 0x0)

46.291799233s ago: executing program 1 (id=952):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x700, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

44.994663511s ago: executing program 2 (id=954):
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x221081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

44.794961114s ago: executing program 1 (id=956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x4008080)

44.425654729s ago: executing program 34 (id=956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x4008080)

44.396746819s ago: executing program 2 (id=958):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000580)=ANY=[], 0xfd, 0x299, &(0x7f0000000280)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0xa6)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000780)={[{@nobh}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@quota}, {@grpjquota}, {@usrquota}, {@data_journal}]}, 0x3, 0x446, &(0x7f0000004380)="$eJzs3MtvG8UfAPDvruP019cvoZRHH0CgICIeSZMW6IELCCQOICHBoRxDklalboOaINEqgoBQ4YYqcUcckfgLOMEFASckrnBHlSqUSwsno7V3E8e10yTYcak/H2nbmd1xZr6eHXt2J5sA+tZI9k8SsScifouIoXp2bYGR+n83lhen/1penE6iWn3jz6RW7vry4nRRtHjd7jwzmkaknyRxqEW98xcvnZ2qVGYv5PnxhXPvjs9fvPT0mXNTp2dPz56fPHHi+LGJ556dfKYjcWZtun7wg7nDB15568pr0yevvP3TN0kRf1McHTKy3sHHqtUOV9dbexvSyUAPG8KmlCIi665ybfwPRSlWO28oXv64p40DuqparVZ3tz+8VAXuYElstOTZ/PMCuDMUX/TZ9W+xbdPU47Zw7YX6BVAW943lxc9iJf6BSPMy5abr204aiYiTS39/mW3RnfsQAABrfJfNf55qNf9L496Gcv/P14aGI+KuiNgXEXdHxP6IuCeiVva+iLh/k/U3L5LcPP9Jr24psA3K5n/P52tbxZbXWxQZLuW5vbX4y8mpM5XZo/l7MhrlHVl+Yp06vn/p18/bHWuc/2VbVn8xF8zbcXVgx9rXzEwtTP2bmBtd+yji4ECr+JOVlYAkIg5ExMEt1nHmia8PtzvWLv7yRn5wB9aZql9FPF7v/6Voir+QrL8+Of6/qMweHS/Oipv9/Mvl19vVf+v+766s/3e1PP9X4h9OGtdr5zdfx+XfP217TbPV838webOWHsz3vT+1sHBhImIwebXe6Mb9k6uvLfJF+Sz+0SOtx/++WH0nDkVEdhI/EBEPRsRDedsfjohHIuLIOvH/+OKj72w9/u7K4p/ZVP+vJgajeU/rROnsD9+uqXR4M/Fn/X+8lhrN92zk828j7dra2QwAAAD/PWlE7IkkHVtJp+nYWP335ffHrrQyN7/w5Km5987P1J8RGI5yWtzpGmq4HzqRX9YX+cmm/LH8vvEXpZ21/Nj0XGWm18FDn9vdZvxn/ij1unVA13leC/qX8Q/9y/iH/mX8Q/9qMf539qIdwPZr9f3/YQ/aAWy/pvFv2Q/6iOt/6F/GP/Qv4x/60vzOuPVD8h1IFH+nYTvqktiORKS3RTMkupTo8QcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAh/wTAAD//0oy3vc=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)

43.908588686s ago: executing program 2 (id=959):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xe3a, @remote, 0x4}, 0x1c)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

43.151779356s ago: executing program 2 (id=964):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB='\v\x003'], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800)

42.88445865s ago: executing program 35 (id=964):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB='\v\x003'], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800)

27.188047762s ago: executing program 0 (id=989):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
pidfd_send_signal(r1, 0x2, 0x0, 0x0)

26.536081021s ago: executing program 0 (id=992):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40d1}, 0x80)

26.132531316s ago: executing program 0 (id=994):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x10, 0x0, 0xb05, 0x0, 0x0, {0x7}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x31, 0x0, 0x0, @binary="86"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

25.824492851s ago: executing program 0 (id=996):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x10e, &(0x7f0000000b80)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@data_journal}, {@grpjquota}, {@data_err_abort}, {@noinit_itable}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@commit={'commit', 0x3d, 0x400009}}]}, 0x3, 0x467, &(0x7f0000001440)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

25.473606895s ago: executing program 0 (id=998):
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="01", 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb", 0x200000c1}], 0x1}, 0x0)
read$alg(r2, &(0x7f00000021c0)=""/4096, 0x34000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

24.551484658s ago: executing program 0 (id=1003):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000})

24.085189134s ago: executing program 36 (id=1003):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000})

9.934737606s ago: executing program 7 (id=1066):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.420186546s ago: executing program 7 (id=1071):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b45501821a554dff289df7725"], 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

5.139972161s ago: executing program 7 (id=1091):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400)

4.945448953s ago: executing program 6 (id=1093):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0)

4.290545292s ago: executing program 5 (id=1095):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac")

4.163999484s ago: executing program 7 (id=1096):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000200)={0x18, 0x0, 0x0, {0xb81e}}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
fdatasync(r3)

4.163638404s ago: executing program 8 (id=1097):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000001000)={0x1, 0x6})

4.144326624s ago: executing program 6 (id=1098):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

3.915989927s ago: executing program 6 (id=1099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newlinkprop={0x4c, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x16, 0x34, 0x0, 0x1, [{0xffffffffffffff75, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'wlan0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001d}, 0x0)

3.828092499s ago: executing program 7 (id=1100):
unshare(0x42000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r2 = getpgrp(0x0)
write$cgroup_pid(r1, &(0x7f0000000400)=r2, 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0)

3.827881688s ago: executing program 8 (id=1101):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @empty, 0xffffffff, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)

3.77758724s ago: executing program 5 (id=1102):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000880)=ANY=[], 0x4d0})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.68252021s ago: executing program 8 (id=1103):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0x10, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

2.527994716s ago: executing program 8 (id=1104):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000009c0)={{}, "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"})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.448526647s ago: executing program 5 (id=1105):
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x40, 0x78, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x36, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1ff, 0x1a3e, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xef, 0x9, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xcf, 0x58, 0xc}}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2})
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2.156941431s ago: executing program 8 (id=1106):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"])

1.855978885s ago: executing program 8 (id=1107):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1}, 0x40000000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)

1.798574526s ago: executing program 6 (id=1108):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x423c0458ee2f8775})

1.389798092s ago: executing program 6 (id=1109):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)={0x14, 0x16, 0x701, 0x0, 0x25dfdbfd, {0xa}}, 0x14}}, 0x0)

1.067974096s ago: executing program 6 (id=1110):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@nobh}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0x6, 0xc51f, 0xfffffffffffffffa})
sendfile(r0, r0, 0x0, 0x5c4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r1, r1, 0x0, 0x7fff)
sendmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048801)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

687.286591ms ago: executing program 5 (id=1111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6003}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x38}}, 0x0)

383.921005ms ago: executing program 5 (id=1112):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040))

286.106976ms ago: executing program 7 (id=1113):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)={0x4c, r1, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x24a}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "10c1"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x44)

0s ago: executing program 5 (id=1114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0xb01, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xfff2}, {0x9, 0x4}}}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

129382][ T7723] RIP: 0033:0x7f3040b8e969
[  418.133856][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.153642][ T7723] RSP: 002b:00007f3041aa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.162065][ T7723] RAX: ffffffffffffffda RBX: 00007f3040db5fa0 RCX: 00007f3040b8e969
[  418.170060][ T7723] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000008
[  418.178036][ T7723] RBP: 00007f3041aa0090 R08: 0000000000000000 R09: 0000000000000000
[  418.186114][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.194092][ T7723] R13: 0000000000000000 R14: 00007f3040db5fa0 R15: 00007ffed52aa208
[  418.202082][ T7723]  </TASK>
[  418.273104][ T7725] bridge0: port 3(gretap0) entered blocking state
[  418.279747][ T7725] bridge0: port 3(gretap0) entered disabled state
[  418.349235][ T7725] device gretap0 entered promiscuous mode
[  418.446197][ T7725] bridge0: port 3(gretap0) entered blocking state
[  418.452792][ T7725] bridge0: port 3(gretap0) entered forwarding state
[  418.631691][ T7730] device gretap0 left promiscuous mode
[  418.672501][ T7730] bridge0: port 3(gretap0) entered disabled state
[  418.691970][ T7743] loop3: detected capacity change from 0 to 2048
[  418.721175][ T7746] netlink: 'syz.4.801': attribute type 12 has an invalid length.
[  418.785380][ T7743]  loop3: p1 < > p3
[  418.788231][ T7741] loop0: detected capacity change from 0 to 8192
[  418.801610][ T7743] loop3: p3 size 134217728 extends beyond EOD, truncated
[  418.855431][ T7741] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  418.988394][ T7741] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  419.044222][ T7741] REISERFS (device loop0): using ordered data mode
[  419.050788][ T7741] reiserfs: using flush barriers
[  419.086885][ T7741] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  419.119892][ T7749] kvm: emulating exchange as write
[  419.173655][ T7741] REISERFS (device loop0): checking transaction log (loop0)
[  419.294867][ T4412] udevd[4412]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  419.312355][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  419.606485][ T7741] REISERFS (device loop0): Using tea hash to sort names
[  419.623320][   T26] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  419.641658][ T7741] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  419.684649][ T7759] FAULT_INJECTION: forcing a failure.
[  419.684649][ T7759] name failslab, interval 1, probability 0, space 0, times 0
[  419.733243][ T7759] CPU: 0 PID: 7759 Comm: syz.4.805 Not tainted 6.1.138-syzkaller #0
[  419.741292][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  419.751379][ T7759] Call Trace:
[  419.754667][ T7759]  <TASK>
[  419.757603][ T7759]  dump_stack_lvl+0x168/0x22e
[  419.762307][ T7759]  ? show_regs_print_info+0x12/0x12
[  419.767515][ T7759]  ? load_image+0x3b0/0x3b0
[  419.772114][ T7759]  ? __might_sleep+0xd0/0xd0
[  419.776813][ T7759]  ? __lock_acquire+0x7c50/0x7c50
[  419.781852][ T7759]  should_fail_ex+0x399/0x4d0
[  419.786536][ T7759]  should_failslab+0x5/0x20
[  419.791045][ T7759]  slab_pre_alloc_hook+0x59/0x310
[  419.796082][ T7759]  kmem_cache_alloc_node+0x5a/0x320
[  419.801289][ T7759]  ? __alloc_skb+0xfc/0x7e0
[  419.805812][ T7759]  __alloc_skb+0xfc/0x7e0
[  419.810150][ T7759]  ? netlink_autobind+0xda/0x300
[  419.815105][ T7759]  netlink_sendmsg+0x645/0xbc0
[  419.819892][ T7759]  ? netlink_getsockopt+0x540/0x540
[  419.825108][ T7759]  ? aa_sock_msg_perm+0x94/0x150
[  419.831013][ T7759]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  419.836310][ T7759]  ? security_socket_sendmsg+0x7c/0xa0
[  419.841786][ T7759]  ? netlink_getsockopt+0x540/0x540
[  419.847000][ T7759]  ____sys_sendmsg+0x59b/0x970
[  419.851787][ T7759]  ? __sys_sendmsg_sock+0x30/0x30
[  419.856824][ T7759]  ? __import_iovec+0x315/0x500
[  419.861688][ T7759]  ? import_iovec+0x6f/0xa0
[  419.866202][ T7759]  ___sys_sendmsg+0x21c/0x290
[  419.870899][ T7759]  ? __sys_sendmsg+0x270/0x270
[  419.875690][ T7759]  ? __lock_acquire+0x7c50/0x7c50
[  419.880741][ T7759]  ? __fdget+0x17c/0x200
[  419.885005][ T7759]  __se_sys_sendmsg+0x19e/0x270
[  419.889911][ T7759]  ? __x64_sys_sendmsg+0x80/0x80
[  419.894876][ T7759]  ? lockdep_hardirqs_on+0x94/0x140
[  419.900096][ T7759]  do_syscall_64+0x4c/0xa0
[  419.904537][ T7759]  ? clear_bhb_loop+0x45/0xa0
[  419.909218][ T7759]  ? clear_bhb_loop+0x45/0xa0
[  419.913995][ T7759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  419.919905][ T7759] RIP: 0033:0x7f762738e969
[  419.924325][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.943964][ T7759] RSP: 002b:00007f76282a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.952390][ T7759] RAX: ffffffffffffffda RBX: 00007f76275b5fa0 RCX: 00007f762738e969
[  419.960372][ T7759] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000004
[  419.968348][ T7759] RBP: 00007f76282a4090 R08: 0000000000000000 R09: 0000000000000000
[  419.976324][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.984296][ T7759] R13: 0000000000000000 R14: 00007f76275b5fa0 R15: 00007fff2beaf6c8
[  419.992370][ T7759]  </TASK>
[  419.995405][    C0] vkms_vblank_simulate: vblank timer overrun
[  420.028895][   T26] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  420.059237][   T26] usb 2-1: config 0 has no interface number 0
[  420.076679][   T26] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  420.115442][   T26] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  420.152290][   T26] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  420.167677][ T7761] loop3: detected capacity change from 0 to 2048
[  420.202063][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.222455][ T7761] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  420.237545][   T26] usb 2-1: Product: syz
[  420.247632][   T26] usb 2-1: Manufacturer: syz
[  420.261018][   T26] usb 2-1: SerialNumber: syz
[  420.303703][   T26] usb 2-1: config 0 descriptor??
[  420.534313][   T26] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  420.541417][   T26] usbtouchscreen: probe of 2-1:0.214 failed with error -71
[  420.592495][   T26] usb 2-1: USB disconnect, device number 14
[  421.216401][ T7770] loop4: detected capacity change from 0 to 2048
[  421.342257][ T7770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.410842][ T7774] loop3: detected capacity change from 0 to 512
[  421.435118][ T7774] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  421.519252][ T7774] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  421.615881][ T7774] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  421.711202][ T7774] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  421.751239][ T7774] System zones: 0-2, 18-18, 34-35
[  421.823784][ T7774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  421.829372][ T7785] FAULT_INJECTION: forcing a failure.
[  421.829372][ T7785] name failslab, interval 1, probability 0, space 0, times 0
[  421.859800][ T7774] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  421.889146][ T7774] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  421.909612][ T7785] CPU: 0 PID: 7785 Comm: syz.1.813 Not tainted 6.1.138-syzkaller #0
[  421.917660][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  421.919065][ T7774] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  421.927808][ T7785] Call Trace:
[  421.927820][ T7785]  <TASK>
[  421.927830][ T7785]  dump_stack_lvl+0x168/0x22e
[  421.927867][ T7785]  ? show_regs_print_info+0x12/0x12
[  421.927896][ T7785]  ? load_image+0x3b0/0x3b0
[  421.927920][ T7785]  ? __might_sleep+0xd0/0xd0
[  421.927953][ T7785]  ? __lock_acquire+0x7c50/0x7c50
[  421.927986][ T7785]  should_fail_ex+0x399/0x4d0
[  421.928011][ T7785]  should_failslab+0x5/0x20
[  421.928031][ T7785]  slab_pre_alloc_hook+0x59/0x310
[  421.928061][ T7785]  kmem_cache_alloc_node+0x5a/0x320
[  421.928085][ T7785]  ? __alloc_skb+0xfc/0x7e0
[  421.928118][ T7785]  __alloc_skb+0xfc/0x7e0
[  421.928145][ T7785]  ? netlink_autobind+0xda/0x300
[  421.928182][ T7785]  netlink_sendmsg+0x645/0xbc0
[  421.928221][ T7785]  ? netlink_getsockopt+0x540/0x540
[  421.928256][ T7785]  ? aa_sock_msg_perm+0x94/0x150
[  421.928280][ T7785]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  421.928303][ T7785]  ? security_socket_sendmsg+0x7c/0xa0
[  421.928340][ T7785]  ? netlink_getsockopt+0x540/0x540
[  421.928370][ T7785]  ____sys_sendmsg+0x59b/0x970
[  421.928409][ T7785]  ? __sys_sendmsg_sock+0x30/0x30
[  421.928437][ T7785]  ? __import_iovec+0x315/0x500
[  421.928468][ T7785]  ? import_iovec+0x6f/0xa0
[  421.978305][ T7774] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  421.980848][ T7785]  ___sys_sendmsg+0x21c/0x290
[  421.980890][ T7785]  ? __sys_sendmsg+0x270/0x270
[  422.065396][ T7785]  ? __lock_acquire+0x7c50/0x7c50
[  422.070465][ T7785]  ? __fdget+0x17c/0x200
[  422.074731][ T7785]  __se_sys_sendmsg+0x19e/0x270
[  422.079590][ T7785]  ? __x64_sys_sendmsg+0x80/0x80
[  422.084561][ T7785]  ? lockdep_hardirqs_on+0x94/0x140
[  422.089777][ T7785]  do_syscall_64+0x4c/0xa0
[  422.094198][ T7785]  ? clear_bhb_loop+0x45/0xa0
[  422.098883][ T7785]  ? clear_bhb_loop+0x45/0xa0
[  422.103571][ T7785]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  422.109472][ T7785] RIP: 0033:0x7f3040b8e969
[  422.113975][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.133585][ T7785] RSP: 002b:00007f3041aa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.141996][ T7785] RAX: ffffffffffffffda RBX: 00007f3040db5fa0 RCX: 00007f3040b8e969
[  422.149974][ T7785] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003
[  422.157943][ T7785] RBP: 00007f3041aa0090 R08: 0000000000000000 R09: 0000000000000000
[  422.165909][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.173874][ T7785] R13: 0000000000000000 R14: 00007f3040db5fa0 R15: 00007ffed52aa208
[  422.181856][ T7785]  </TASK>
[  422.184961][    C0] vkms_vblank_simulate: vblank timer overrun
[  423.455434][ T7799] binder: 7798:7799 ioctl c00c620f 200000000980 returned -22
[  423.527306][ T7801] Bluetooth: MGMT ver 1.22
[  423.609140][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  423.809172][ T7804] loop2: detected capacity change from 0 to 2048
[  424.133848][ T7804]  loop2: p2 p3 < > p4 < p5 >
[  424.161204][ T7804] loop2: p2 start 55050756 is beyond EOD, truncated
[  424.229697][ T7804] loop2: p5 start 55050756 is beyond EOD, truncated
[  424.933299][ T4928] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  425.022019][ T7801] loop1: detected capacity change from 0 to 40427
[  425.042344][ T7819] FAULT_INJECTION: forcing a failure.
[  425.042344][ T7819] name failslab, interval 1, probability 0, space 0, times 0
[  425.067001][ T7801] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  425.082912][ T7801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  425.092423][ T7819] CPU: 0 PID: 7819 Comm: syz.4.824 Not tainted 6.1.138-syzkaller #0
[  425.100463][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  425.110552][ T7819] Call Trace:
[  425.113858][ T7819]  <TASK>
[  425.116806][ T7819]  dump_stack_lvl+0x168/0x22e
[  425.121531][ T7819]  ? show_regs_print_info+0x12/0x12
[  425.126763][ T7819]  ? load_image+0x3b0/0x3b0
[  425.131302][ T7819]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  425.137327][ T7819]  ? verify_lock_unused+0x140/0x140
[  425.142567][ T7819]  ? lock_chain_count+0x20/0x20
[  425.143012][ T4928] usb 1-1: Using ep0 maxpacket: 16
[  425.147446][ T7819]  should_fail_ex+0x399/0x4d0
[  425.157255][ T7819]  should_failslab+0x5/0x20
[  425.161787][ T7819]  slab_pre_alloc_hook+0x59/0x310
[  425.166854][ T7819]  kmem_cache_alloc_node+0x5a/0x320
[  425.172087][ T7819]  ? __alloc_skb+0xfc/0x7e0
[  425.176633][ T7819]  __alloc_skb+0xfc/0x7e0
[  425.181015][ T7819]  create_monitor_ctrl_open+0x153/0x880
[  425.186600][ T7819]  ? apparmor_capable+0x12c/0x190
[  425.191675][ T7819]  ? hci_sock_gen_cookie+0xf0/0xf0
[  425.192503][ T4928] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  425.196799][ T7819]  ? bpf_lsm_capable+0x5/0x10
[  425.196830][ T7819]  ? xfs_da3_node_lookup_int+0x192/0x1280
[  425.196864][ T7819]  hci_sock_ioctl+0x28b/0x840
[  425.196895][ T7819]  sock_do_ioctl+0xd3/0x2f0
[  425.196919][ T7819]  ? sock_show_fdinfo+0xb0/0xb0
[  425.196953][ T7819]  sock_ioctl+0x4ed/0x6e0
[  425.196989][ T7819]  ? sock_poll+0x3f0/0x3f0
[  425.197032][ T7819]  ? bpf_lsm_file_ioctl+0x5/0x10
[  425.245329][ T7819]  ? security_file_ioctl+0x7c/0xa0
[  425.250485][ T7819]  ? sock_poll+0x3f0/0x3f0
[  425.254944][ T7819]  __se_sys_ioctl+0xfa/0x170
[  425.259576][ T7819]  do_syscall_64+0x4c/0xa0
[  425.260271][ T4928] usb 1-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  425.264007][ T7819]  ? clear_bhb_loop+0x45/0xa0
[  425.264031][ T7819]  ? clear_bhb_loop+0x45/0xa0
[  425.264053][ T7819]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  425.264086][ T7819] RIP: 0033:0x7f762738e969
[  425.292792][ T7819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.312438][ T7819] RSP: 002b:00007f76282a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  425.320893][ T7819] RAX: ffffffffffffffda RBX: 00007f76275b5fa0 RCX: 00007f762738e969
[  425.327562][ T4928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.328873][ T7819] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000009
[  425.344854][ T7819] RBP: 00007f76282a4090 R08: 0000000000000000 R09: 0000000000000000
[  425.352854][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.360856][ T7819] R13: 0000000000000000 R14: 00007f76275b5fa0 R15: 00007fff2beaf6c8
[  425.368129][ T4928] usb 1-1: Product: syz
[  425.368851][ T7819]  </TASK>
[  425.376103][    C0] vkms_vblank_simulate: vblank timer overrun
[  425.398519][ T4928] usb 1-1: Manufacturer: syz
[  425.419114][ T7801] F2FS-fs (loop1): invalid crc value
[  425.422230][ T4928] usb 1-1: SerialNumber: syz
[  425.425301][ T7822] loop2: detected capacity change from 0 to 1024
[  425.453996][ T7801] F2FS-fs (loop1): Found nat_bits in checkpoint
[  425.482230][ T4928] go7007: probe of 1-1:16.0 failed with error -12
[  425.557041][ T7828] bridge0: port 3(gretap0) entered blocking state
[  425.563694][ T7828] bridge0: port 3(gretap0) entered disabled state
[  425.571378][ T7828] device gretap0 entered promiscuous mode
[  425.577682][ T7828] bridge0: port 3(gretap0) entered blocking state
[  425.584282][ T7828] bridge0: port 3(gretap0) entered forwarding state
[  425.595079][ T7828] device gretap0 left promiscuous mode
[  425.600830][ T7828] bridge0: port 3(gretap0) entered disabled state
[  425.618726][ T7822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  425.640338][ T7801] F2FS-fs (loop1): Start checkpoint disabled!
[  425.720111][ T7801] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  425.736593][ T7801] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  425.746242][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.769693][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.858317][ T4928] usb 1-1: USB disconnect, device number 3
[  425.898759][   T27] audit: type=1804 audit(1747051186.972:177): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.817" name="/newroot/153/file2/file0" dev="loop1" ino=14 res=1 errno=0
[  425.987681][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'.
[  426.010943][ T4251] EXT4-fs (loop2): unmounting filesystem.
[  426.546406][ T7846] netlink: 80 bytes leftover after parsing attributes in process `syz.0.830'.
[  426.774729][ T7851] netlink: 'syz.0.832': attribute type 6 has an invalid length.
[  426.790295][ T7851] netlink: 'syz.0.832': attribute type 7 has an invalid length.
[  426.818385][ T7851] netlink: 'syz.0.832': attribute type 8 has an invalid length.
[  427.091010][ T7858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.834'.
[  427.150684][ T7856] loop1: detected capacity change from 0 to 1024
[  427.241006][ T7856] hfsplus: request for non-existent node 16777216 in B*Tree
[  427.303055][ T7856] hfsplus: request for non-existent node 16777216 in B*Tree
[  427.569091][ T7865] loop2: detected capacity change from 0 to 2048
[  427.683859][ T7865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  427.728885][ T7865] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  427.755626][ T7865] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  427.833585][ T7871] input: syz0 as /devices/virtual/input/input9
[  427.840114][ T7865] EXT4-fs (loop2): This should not happen!! Data will be lost
[  427.840114][ T7865] 
[  427.856372][ T4300] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  427.871471][ T7865] EXT4-fs (loop2): Total free blocks count 0
[  427.884748][ T7865] EXT4-fs (loop2): Free/Dirty block details
[  427.940410][ T7865] EXT4-fs (loop2): free_blocks=2415919504
[  427.966752][ T7865] EXT4-fs (loop2): dirty_blocks=16
[  427.992753][ T7865] EXT4-fs (loop2): Block reservation details
[  428.018633][ T7865] EXT4-fs (loop2): i_reserved_data_blocks=1
[  428.075508][ T4300] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  428.267497][ T4300] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  428.618891][ T4300] usb 1-1: config 220 has no interface number 2
[  428.625536][ T4300] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  428.670610][ T4300] usb 1-1: config 220 interface 0 has no altsetting 0
[  428.704812][ T4300] usb 1-1: config 220 interface 76 has no altsetting 0
[  428.733223][ T4300] usb 1-1: config 220 interface 1 has no altsetting 0
[  428.766619][ T4300] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  428.778961][ T7881] loop3: detected capacity change from 0 to 1764
[  428.784226][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.794675][ T4300] usb 1-1: Product: syz
[  428.801392][ T4300] usb 1-1: Manufacturer: syz
[  428.807664][ T4300] usb 1-1: SerialNumber: syz
[  428.825784][ T4251] EXT4-fs (loop2): unmounting filesystem.
[  429.505972][ T4300] usb 1-1: selecting invalid altsetting 0
[  429.514805][ T4300] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  429.521215][ T4300] usb 1-1: No valid video chain found.
[  429.571210][ T4300] usb 1-1: selecting invalid altsetting 0
[  429.600404][ T4300] usbtest: probe of 1-1:220.1 failed with error -22
[  429.630283][ T4300] usb 1-1: USB disconnect, device number 4
[  429.748309][ T7881] loop3: detected capacity change from 0 to 40427
[  429.762543][ T7881] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  429.841804][ T7881] F2FS-fs (loop3): invalid crc value
[  429.870416][ T7881] F2FS-fs (loop3): Found nat_bits in checkpoint
[  429.950747][ T7881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  429.967487][ T7892] bridge0: port 3(gretap0) entered blocking state
[  429.989082][ T7892] bridge0: port 3(gretap0) entered disabled state
[  430.032453][ T7892] device gretap0 entered promiscuous mode
[  430.032550][ T4258] syz-executor: attempt to access beyond end of device
[  430.032550][ T4258] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  430.044477][ T7892] bridge0: port 3(gretap0) entered blocking state
[  430.059450][ T7892] bridge0: port 3(gretap0) entered forwarding state
[  430.261921][ T7896] device gretap0 left promiscuous mode
[  430.612076][ T7896] bridge0: port 3(gretap0) entered disabled state
[  430.901014][ T7905] loop4: detected capacity change from 0 to 512
[  430.958483][ T7905] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.849: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964)
[  430.985007][ T7905] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.849: couldn't read orphan inode 15 (err -117)
[  431.031924][ T7905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  431.124455][ T4928] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  431.323082][ T4928] usb 1-1: Using ep0 maxpacket: 8
[  431.332521][ T4928] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 73, changing to 10
[  431.346804][ T4928] usb 1-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  431.568446][ T4928] usb 1-1: config 1 interface 0 has no altsetting 0
[  431.750912][ T4928] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.40
[  431.949144][ T4928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.981325][ T4928] usb 1-1: Product: Ѝ
[  431.999305][ T4928] usb 1-1: Manufacturer: ч
[  432.005194][ T7920] loop2: detected capacity change from 0 to 512
[  432.011689][ T4928] usb 1-1: SerialNumber: 㐁
[  432.028178][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  432.105359][ T7920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  432.173043][ T4300] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  432.231513][ T7920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  432.250888][ T7920] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.263004][ T4928] usbhid 1-1:1.0: can't add hid device: -71
[  432.300139][ T4928] usbhid: probe of 1-1:1.0 failed with error -71
[  432.337180][ T4928] usb 1-1: USB disconnect, device number 5
[  432.362930][ T4300] usb 2-1: Using ep0 maxpacket: 16
[  432.372666][ T4300] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8
[  432.414709][ T4300] usb 2-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  432.470161][ T4300] usb 2-1: config 1 interface 0 has no altsetting 0
[  432.499766][ T4300] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  432.510023][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  432.523115][   T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  432.524273][ T4300] usb 2-1: SerialNumber: syz
[  432.547329][ T7909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  432.724746][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.738676][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.749500][   T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[  432.759186][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.778360][ T7909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  432.808571][   T26] usb 4-1: config 0 descriptor??
[  433.622541][ T4251] EXT4-fs (loop2): unmounting filesystem.
[  433.629135][   T26] hid-generic 0003:05AC:4262.0001: unbalanced delimiter at end of report description
[  433.640926][   T26] hid-generic: probe of 0003:05AC:4262.0001 failed with error -22
[  433.670230][ T4300] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[  433.779481][ T7945] loop2: detected capacity change from 0 to 512
[  433.814975][ T4300] usb 4-1: USB disconnect, device number 8
[  433.895496][ T7945] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  433.976868][ T7945] EXT4-fs (loop2): 1 truncate cleaned up
[  433.983761][ T7945] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  434.042667][ T4297] usb 2-1: USB disconnect, device number 15
[  434.068525][ T4297] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[  434.082428][   T27] audit: type=1800 audit(1747051195.152:178): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.859" name="file0" dev="loop2" ino=13 res=0 errno=0
[  434.140912][ T7956] loop4: detected capacity change from 0 to 256
[  434.170600][ T7956] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d)
[  434.241242][ T4251] EXT4-fs (loop2): unmounting filesystem.
[  434.276047][ T7956] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[  434.288715][ T7956] exFAT-fs (loop4): Filesystem has been set read-only
[  434.531932][ T7964] loop3: detected capacity change from 0 to 128
[  434.601195][ T7964] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  434.713077][ T4297] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  434.739403][ T7967] loop4: detected capacity change from 0 to 1024
[  434.781660][ T7964] FAT-fs (loop3): FAT read failed (blocknr 128)
[  434.843533][ T7967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  434.852133][ T7967] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  434.936645][ T4297] usb 3-1: Using ep0 maxpacket: 32
[  434.947689][ T4297] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  434.985246][ T7981] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  435.010810][ T4297] usb 3-1: config 0 has no interface number 0
[  435.047757][ T4297] usb 3-1: config 0 interface 184 has no altsetting 0
[  435.089429][ T4297] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  435.110963][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.143912][ T4297] usb 3-1: Product: syz
[  435.149348][ T4297] usb 3-1: Manufacturer: syz
[  435.161806][ T4297] usb 3-1: SerialNumber: syz
[  435.184856][ T4297] usb 3-1: config 0 descriptor??
[  435.203940][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  435.225417][ T4297] smsc75xx v1.0.0
[  435.737118][ T7997] loop1: detected capacity change from 0 to 1024
[  435.831949][ T8000] loop4: detected capacity change from 0 to 1764
[  435.849579][ T7997] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  435.925339][ T7997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a014e018, mo2=0140]
[  435.963272][ T7997] System zones: 0-1, 3-12
[  435.994347][ T7997] EXT4-fs (loop1): orphan cleanup on readonly fs
[  436.056574][ T7997] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.873: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  436.143109][ T7997] EXT4-fs error (device loop1): ext4_quota_enable:7013: comm syz.1.873: Bad quota inode: 3, type: 0
[  436.183583][ T7997] EXT4-fs warning (device loop1): ext4_enable_quotas:7054: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  436.241992][ T7997] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  436.271266][ T7997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  436.422709][ T4297] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  436.451282][ T4297] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  436.469780][ T8017] loop3: detected capacity change from 0 to 4096
[  436.480181][ T4297] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  436.500489][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  436.509669][ T4297] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  436.576224][ T4297] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  436.580478][ T8017] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  436.615020][ T4297] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  436.679812][ T4297] smsc75xx: probe of 3-1:0.184 failed with error -71
[  436.684984][   T27] audit: type=1800 audit(1747051197.762:179): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.881" name="bus" dev="loop3" ino=18 res=0 errno=0
[  436.737997][ T4297] usb 3-1: USB disconnect, device number 5
[  436.767237][ T8029] loop0: detected capacity change from 0 to 512
[  436.816959][ T8029] EXT4-fs: Ignoring removed nobh option
[  436.890868][ T8029] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.884: invalid indirect mapped block 256 (level 2)
[  436.931118][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  437.003153][ T8029] EXT4-fs (loop0): 2 truncates cleaned up
[  437.042748][ T8029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  437.191644][ T8043] loop1: detected capacity change from 0 to 512
[  437.233955][ T8043] ext4: Unknown parameter 'noacl'
[  437.336569][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  437.447055][ T8042] kvm [8038]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x60000dabf
[  437.472185][ T8042] kvm [8038]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x60000e0e5
[  437.514893][ T8042] kvm [8038]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x600008b45, nop
[  437.723567][ T8057] loop0: detected capacity change from 0 to 1024
[  437.862109][ T8059] syz.1.889 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  438.133232][ T4300] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  438.353420][ T4300] usb 5-1: Using ep0 maxpacket: 16
[  438.365935][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.613760][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.659649][ T4300] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  438.682933][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.736597][ T4300] usb 5-1: config 0 descriptor??
[  439.100441][ T8071] loop2: detected capacity change from 0 to 1024
[  439.121345][ T8071] EXT4-fs: Ignoring removed nomblk_io_submit option
[  439.150997][ T8071] EXT4-fs: Ignoring removed nomblk_io_submit option
[  439.181356][ T8071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  439.214954][ T4300] wacom 0003:056A:0084.0002: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.4-1/input0
[  439.228869][ T8071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  439.343032][ T4298] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  439.373522][ T8078] EXT4-fs error (device loop2): ext4_get_inode_usage:834: inode #2: comm syz.2.895: corrupted in-inode xattr
[  439.433148][ T4300] usb 5-1: USB disconnect, device number 2
[  439.450640][ T8078] EXT4-fs (loop2): Remounting filesystem read-only
[  439.529744][ T4298] usb 4-1: config 0 has an invalid interface number: 156 but max is 0
[  439.559579][ T4298] usb 4-1: config 0 has no interface number 0
[  439.571591][ T4298] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  439.613119][ T4298] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  439.622228][ T4251] EXT4-fs (loop2): unmounting filesystem.
[  439.654533][ T4298] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  439.708566][ T4298] usb 4-1: New USB device found, idVendor=0738, idProduct=0ad5, bcdDevice=2e.f6
[  439.748941][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.773552][ T8079] fido_id[8079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  439.796021][ T4298] usb 4-1: Product: syz
[  439.804848][ T4298] usb 4-1: Manufacturer: syz
[  439.809507][ T4298] usb 4-1: SerialNumber: syz
[  439.830203][ T4298] usb 4-1: config 0 descriptor??
[  439.864661][ T4298] xpad 4-1:0.156: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  439.907041][ T4298] xpad: probe of 4-1:0.156 failed with error -5
[  439.955920][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  439.962281][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  440.063322][ T4298] usb 4-1: USB disconnect, device number 9
[  440.124421][ T8085] loop4: detected capacity change from 0 to 128
[  440.146868][ T8085] EXT4-fs: Ignoring removed nobh option
[  440.195514][ T8085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  440.221065][ T8085] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  440.523095][ T8085] EXT4-fs (loop4): re-mounted. Quota mode: none.
[  440.792227][ T4252] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1)
[  441.210653][ T8021] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 251766687924216 in block_group 0
[  443.010580][ T4252] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[  443.072443][ T8102] loop0: detected capacity change from 0 to 2048
[  443.089835][ T8100] loop3: detected capacity change from 0 to 1024
[  443.134119][ T8100] hfsplus: unable to parse mount options
[  443.153947][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  443.295436][ T8102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  443.646412][ T8110] netlink: 'syz.3.908': attribute type 1 has an invalid length.
[  443.877735][   T27] audit: type=1800 audit(1747051204.952:180): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.903" name="file2" dev="loop0" ino=16 res=0 errno=0
[  443.989333][ T4451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.020646][ T8112] loop1: detected capacity change from 0 to 1024
[  444.117662][ T8112] EXT4-fs: Ignoring removed nobh option
[  444.160097][ T8112] EXT4-fs: Ignoring removed bh option
[  444.166294][ T8112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  444.248739][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  444.256999][ T8112] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  444.535529][ T4451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.807172][ T8119] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.910: Allocating blocks 497-513 which overlap fs metadata
[  444.976208][ T4451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.989257][ T8119] EXT4-fs (loop1): pa ffff8880554abe00: logic 564, phys. 321, len 12
[  444.998165][ T8119] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[  445.096512][ T4451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.153000][ T4300] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  445.250416][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  445.354700][ T4300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.396257][ T4300] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[  445.443023][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.490853][ T4300] usb 3-1: config 0 descriptor??
[  445.634458][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  445.645852][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  445.655772][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  445.664453][ T4264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  445.675451][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  445.691222][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  445.908994][ T8149] loop1: detected capacity change from 0 to 256
[  445.934042][ T4300] wacom 0003:056A:032C.0003: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.2-1/input0
[  445.964625][ T8149] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  446.013357][ T8149] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  446.116841][ T8149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x062de574, utbl_chksum : 0xe619d30d)
[  446.119331][ T6796] usb 3-1: USB disconnect, device number 6
[  446.228728][ T8159] loop3: detected capacity change from 0 to 512
[  446.318946][ T8154] fido_id[8154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  446.371233][ T8159] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.923: inode #15: comm syz.3.923: iget: illegal inode #
[  446.444182][ T8166] process 'syz.1.921' launched './file2' with NULL argv: empty string added
[  446.466168][ T8159] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.923: couldn't read orphan inode 15 (err -117)
[  446.501846][ T8159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  446.623574][ T8170] loop0: detected capacity change from 0 to 1024
[  446.674566][ T4258] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  446.764090][ T4258] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz-executor: inode #15: comm syz-executor: iget: illegal inode #
[  446.898722][ T4258] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz-executor: inode #15: comm syz-executor: iget: illegal inode #
[  447.005401][ T8170] hfsplus: request for non-existent node 62977 in B*Tree
[  447.026895][ T8170] hfsplus: request for non-existent node 62977 in B*Tree
[  447.217571][ T4636] hfsplus: b-tree write err: -5, ino 3
[  447.362719][ T8177] device syzkaller0 entered promiscuous mode
[  447.429799][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  447.519132][ T8188] loop1: detected capacity change from 0 to 8
[  447.716174][ T8188] SQUASHFS error: Unable to read directory block [629:46]
[  447.731495][ T8142] chnl_net:caif_netlink_parms(): no params data found
[  447.793120][ T4260] Bluetooth: hci2: command 0x0409 tx timeout
[  447.994459][ T8196] loop2: detected capacity change from 0 to 1024
[  448.111532][ T8196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  448.321902][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  448.333662][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  448.342680][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  448.352299][ T4264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  448.364907][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  448.374053][ T4264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  448.873385][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.889210][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.899876][ T8142] device bridge_slave_0 entered promiscuous mode
[  448.939922][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.950679][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.986328][ T4251] EXT4-fs (loop2): unmounting filesystem.
[  448.991334][ T8142] device bridge_slave_1 entered promiscuous mode
[  449.128641][ T4451] device hsr_slave_0 left promiscuous mode
[  449.165212][ T4451] device hsr_slave_1 left promiscuous mode
[  449.203486][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.211025][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.280794][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.300298][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.353307][ T4451] device bridge_slave_1 left promiscuous mode
[  449.362060][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.407182][ T8233] loop1: detected capacity change from 0 to 8192
[  449.421553][ T4451] device bridge_slave_0 left promiscuous mode
[  449.431693][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.552050][ T4451] device veth1_macvtap left promiscuous mode
[  449.569682][ T4451] device veth0_macvtap left promiscuous mode
[  449.589677][ T4451] device veth1_vlan left promiscuous mode
[  449.645876][ T4451] device veth0_vlan left promiscuous mode
[  449.873014][ T4264] Bluetooth: hci2: command 0x041b tx timeout
[  450.443226][ T4264] Bluetooth: hci3: command 0x0409 tx timeout
[  451.043738][ T8257] loop1: detected capacity change from 0 to 1024
[  451.064452][ T8257] EXT4-fs: Ignoring removed bh option
[  451.070735][ T8257] EXT4-fs: Ignoring removed bh option
[  451.076528][ T4297] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  451.153894][ T8257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  451.235765][   T27] audit: type=1800 audit(1747051212.312:181): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.951" name="file1" dev="loop1" ino=15 res=0 errno=0
[  451.314739][ T4297] usb 1-1: config index 0 descriptor too short (expected 3133, got 61)
[  451.327314][ T8257] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  451.331264][   T27] audit: type=1800 audit(1747051212.402:182): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.951" name="file1" dev="loop1" ino=15 res=0 errno=0
[  451.360955][ T4297] usb 1-1: config 0 has an invalid interface number: 156 but max is 1
[  451.373475][ T8257] EXT4-fs (loop1): Remounting filesystem read-only
[  451.376497][ T4297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.380182][ T8257] EXT4-fs error (device loop1): ext4_setattr:5596: inode #15: comm syz.1.951: mark_inode_dirty error
[  451.419009][ T4297] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  451.429281][ T4297] usb 1-1: config 0 has no interface number 0
[  451.429837][ T8257] EXT4-fs (loop1): Remounting filesystem read-only
[  451.442371][ T4297] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  451.453422][ T4297] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  451.459326][ T8257] EXT4-fs error (device loop1) in ext4_setattr:5657: Corrupt filesystem
[  451.471530][ T4297] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  451.495521][ T4297] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  451.496161][ T8257] EXT4-fs (loop1): Remounting filesystem read-only
[  451.508823][ T4297] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  451.508854][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.542313][ T4297] usb 1-1: config 0 descriptor??
[  451.550880][ T4297] gspca_main: spca561-2.14.0 probing abcd:cdee
[  451.613789][ T4250] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[  451.643803][ T4250] EXT4-fs (loop1): Remounting filesystem read-only
[  451.701275][ T4250] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  451.725307][ T4250] EXT4-fs (loop1): Remounting filesystem read-only
[  451.732433][ T4250] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz-executor: mark_inode_dirty error
[  451.752153][ T4297] spca561: probe of 1-1:0.156 failed with error -22
[  451.759469][ T4250] EXT4-fs (loop1): Remounting filesystem read-only
[  451.776260][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  451.785566][ T4297] usb 1-1: MIDIStreaming interface descriptor not found
[  451.796494][ T4451] team0 (unregistering): Port device team_slave_1 removed
[  451.911985][ T4451] team0 (unregistering): Port device team_slave_0 removed
[  451.935066][ T4297] usb 1-1: USB disconnect, device number 6
[  451.952965][ T4264] Bluetooth: hci2: command 0x040f tx timeout
[  452.093302][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.156675][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.317000][ T4414] udevd[4414]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  452.523152][ T4264] Bluetooth: hci3: command 0x041b tx timeout
[  452.818165][ T4451] bond0 (unregistering): Released all slaves
[  452.996789][ T8265] loop2: detected capacity change from 0 to 512
[  453.087125][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.124970][ T8265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  453.170399][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.186808][ T8265] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  453.414767][ T8142] team0: Port device team_slave_0 added
[  453.451606][ T8142] team0: Port device team_slave_1 added
[  453.460355][ T4251] EXT4-fs (loop2): unmounting filesystem.
[  453.661633][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.675050][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.731918][ T8276] loop2: detected capacity change from 0 to 128
[  453.747148][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.828203][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.845222][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.920198][ T8142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.026573][ T4251] FAT-fs (loop2): error, invalid access to FAT (entry 0xdd78a446)
[  454.039323][ T4264] Bluetooth: hci2: command 0x0419 tx timeout
[  454.063121][ T4251] FAT-fs (loop2): Filesystem has been set read-only
[  454.126206][ T8142] device hsr_slave_0 entered promiscuous mode
[  454.143317][ T8142] device hsr_slave_1 entered promiscuous mode
[  454.154181][ T8142] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  454.182900][ T8142] Cannot create hsr debugfs directory
[  454.192609][ T8207] chnl_net:caif_netlink_parms(): no params data found
[  454.221849][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  454.233693][ T4260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  454.241904][ T4260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  454.257481][ T4260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  454.279597][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  454.287677][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  454.593563][ T4260] Bluetooth: hci3: command 0x040f tx timeout
[  454.802606][ T4451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.980020][ T4451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.025754][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.065681][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.105432][ T8207] device bridge_slave_0 entered promiscuous mode
[  455.188911][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.202768][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.224219][ T8207] device bridge_slave_1 entered promiscuous mode
[  455.337495][ T4451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.340224][ T8307] loop0: detected capacity change from 0 to 2048
[  455.367023][ T8307] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  455.386989][ T8307] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  455.402818][ T8307] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  455.421148][ T8307] UDF-fs: Scanning with blocksize 512 failed
[  455.440534][ T8307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  455.572163][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.598623][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.632741][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  455.660109][ T4260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  455.681749][ T4260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  455.689817][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  455.697700][ T4260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  455.707877][ T4451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.719165][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  455.800089][ T8207] team0: Port device team_slave_0 added
[  455.811501][ T8207] team0: Port device team_slave_1 added
[  455.822018][ T8142] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  455.865961][ T8283] chnl_net:caif_netlink_parms(): no params data found
[  455.899111][ T8142] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  456.009899][ T8142] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  456.033601][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.040605][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.069415][ T8207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.091853][ T8142] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  456.153087][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.160094][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.216475][ T8207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.353122][ T4260] Bluetooth: hci0: command 0x0409 tx timeout
[  456.437151][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.445512][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.454458][ T8283] device bridge_slave_0 entered promiscuous mode
[  456.488734][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.497245][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.506349][ T8283] device bridge_slave_1 entered promiscuous mode
[  456.528717][ T5151] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  456.551472][ T8207] device hsr_slave_0 entered promiscuous mode
[  456.559892][ T8207] device hsr_slave_1 entered promiscuous mode
[  456.574805][ T8207] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  456.582427][ T8207] Cannot create hsr debugfs directory
[  456.660249][ T8283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.673414][ T4260] Bluetooth: hci3: command 0x0419 tx timeout
[  456.690151][ T8283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.754022][ T5151] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  456.762182][ T5151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.798345][ T5151] usb 1-1: config 0 has no interface number 0
[  456.806027][ T5151] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  456.824215][ T5151] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  456.842609][ T5151] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  456.863009][ T5151] usb 1-1: config 0 interface 52 has no altsetting 0
[  456.873294][ T4451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.884276][ T5151] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  456.902169][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  456.910577][ T5151] usb 1-1: SerialNumber: syz
[  456.917336][ T8283] team0: Port device team_slave_0 added
[  456.935320][ T5151] usb 1-1: config 0 descriptor??
[  456.941446][ T8283] team0: Port device team_slave_1 added
[  457.031822][ T4451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.131131][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.141471][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  457.166868][ T5151] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  457.177478][ T8283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.188014][ T5151] synaptics_usb: probe of 1-1:0.52 failed with error -5
[  457.231192][ T4451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.266739][ T8309] chnl_net:caif_netlink_parms(): no params data found
[  457.277428][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  457.290365][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  457.316990][ T8283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.382280][ T5151] usb 1-1: USB disconnect, device number 7
[  457.391111][ T4451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.453111][ T8283] device hsr_slave_0 entered promiscuous mode
[  457.461027][ T8283] device hsr_slave_1 entered promiscuous mode
[  457.480974][ T8283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  457.488680][ T8283] Cannot create hsr debugfs directory
[  457.519628][ T8142] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.568178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  457.576389][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  457.634606][ T8142] 8021q: adding VLAN 0 to HW filter on device team0
[  457.679510][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.694261][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.702730][ T8309] device bridge_slave_0 entered promiscuous mode
[  457.768465][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  457.787916][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  457.796241][ T4260] Bluetooth: hci1: command 0x0409 tx timeout
[  457.814174][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.821399][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.832244][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  457.841534][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  457.850547][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.857739][ T4636] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.873381][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.881142][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.889869][ T8309] device bridge_slave_1 entered promiscuous mode
[  457.927124][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  457.943637][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  457.957420][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  458.069869][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  458.101763][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  458.146239][ T8309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.170892][ T8309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.201972][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  458.353163][ T4928] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  458.386219][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  458.399649][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  458.418511][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  458.427314][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  458.435228][ T4264] Bluetooth: hci0: command 0x041b tx timeout
[  458.465675][ T8309] team0: Port device team_slave_0 added
[  458.477352][ T8142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  458.499970][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  458.523180][ T8207] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  458.543057][ T4928] usb 1-1: Using ep0 maxpacket: 16
[  458.547314][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  458.550372][ T4928] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  458.557323][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  458.579384][ T8309] team0: Port device team_slave_1 added
[  458.595496][ T4928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  458.606046][ T8207] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  458.616468][ T4928] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  458.655572][ T4928] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  458.688283][ T4928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  458.707682][ T4928] usb 1-1: Product: syz
[  458.711916][ T4928] usb 1-1: Manufacturer: syz
[  458.727977][ T4928] usb 1-1: SerialNumber: syz
[  458.751432][ T4928] usb 1-1: config 0 descriptor??
[  458.919651][ T8207] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  458.933826][ T8207] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  459.029776][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.043704][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.069905][ T8309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.204571][ T4928] usb 1-1: USB disconnect, device number 8
[  459.255234][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.262257][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.291173][ T8309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.414146][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  459.443101][ T8283] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  459.457561][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.465504][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  459.474007][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  459.485341][ T8309] device hsr_slave_0 entered promiscuous mode
[  459.494257][ T8309] device hsr_slave_1 entered promiscuous mode
[  459.501108][ T8309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  459.510756][ T8309] Cannot create hsr debugfs directory
[  459.595030][ T8283] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  459.605646][ T8283] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  459.615873][ T8283] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  459.874756][ T4260] Bluetooth: hci1: command 0x041b tx timeout
[  460.251644][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.523067][ T4260] Bluetooth: hci0: command 0x040f tx timeout
[  460.621446][ T8207] 8021q: adding VLAN 0 to HW filter on device team0
[  460.649527][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  460.664739][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  460.697500][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  460.714163][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  460.727074][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.734288][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.853251][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.893209][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  460.901343][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  460.944579][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  460.963824][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.970982][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.084868][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  461.105363][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  461.123833][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  461.135894][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  461.145366][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  461.165970][ T8283] 8021q: adding VLAN 0 to HW filter on device team0
[  461.305283][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  461.351137][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  461.363946][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  461.372704][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  461.401645][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  461.412208][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  461.421442][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  461.431472][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.438841][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.447867][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  461.457269][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  461.466309][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.473481][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.481652][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  461.491635][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  461.500507][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  461.521805][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  461.531659][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  461.549088][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  461.561804][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  461.567555][ T8391] loop0: detected capacity change from 0 to 8192
[  461.614397][ T8142] device veth0_vlan entered promiscuous mode
[  461.639924][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  461.657188][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  461.670543][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  461.705571][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  461.714591][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  461.744844][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  461.757436][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  461.893911][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  461.920146][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  461.943736][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  461.954820][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  461.963027][ T4260] Bluetooth: hci1: command 0x040f tx timeout
[  461.968592][ T8142] device veth1_vlan entered promiscuous mode
[  462.002133][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  462.030290][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  462.048855][ T8309] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  462.082158][ T8283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  462.104128][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  462.127346][ T8309] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  462.142457][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  462.164557][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  462.313027][ T5151] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  462.343037][ T8309] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  462.381641][ T8142] device veth0_macvtap entered promiscuous mode
[  462.405144][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  462.434714][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  462.460589][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  462.482030][ T8309] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  462.510085][ T8142] device veth1_macvtap entered promiscuous mode
[  462.523161][ T5151] usb 1-1: Using ep0 maxpacket: 32
[  462.531103][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.556208][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.575509][ T5151] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  462.590770][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.599091][ T4264] Bluetooth: hci0: command 0x0419 tx timeout
[  462.633676][ T5151] usb 1-1: config 0 descriptor??
[  462.687685][ T4451] device hsr_slave_0 left promiscuous mode
[  462.712299][ T4451] device hsr_slave_1 left promiscuous mode
[  462.721566][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.742518][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.754871][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.762583][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.791222][ T4451] device bridge_slave_1 left promiscuous mode
[  462.807019][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.826956][ T4451] device bridge_slave_0 left promiscuous mode
[  462.843540][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.882778][ T4451] device hsr_slave_0 left promiscuous mode
[  462.891861][ T4451] device hsr_slave_1 left promiscuous mode
[  462.905260][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.912744][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.928648][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.936307][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.945224][ T4451] device bridge_slave_1 left promiscuous mode
[  462.951476][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.966881][ T4451] device bridge_slave_0 left promiscuous mode
[  462.976414][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.067893][ T5151] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  463.117281][ T4451] device veth1_macvtap left promiscuous mode
[  463.143103][ T4451] device veth0_macvtap left promiscuous mode
[  463.149289][ T4451] device veth1_vlan left promiscuous mode
[  463.163150][ T4451] device veth0_vlan left promiscuous mode
[  463.188837][ T4451] device veth1_macvtap left promiscuous mode
[  463.203542][ T4451] device veth0_macvtap left promiscuous mode
[  463.209702][ T4451] device veth1_vlan left promiscuous mode
[  463.223287][ T4451] device veth0_vlan left promiscuous mode
[  463.336707][ T5151] usb 1-1: USB disconnect, device number 9
[  463.934290][ T8417] loop0: detected capacity change from 0 to 512
[  463.961123][ T8417] EXT4-fs: Ignoring removed i_version option
[  464.034232][ T8417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  464.041863][ T4264] Bluetooth: hci1: command 0x0419 tx timeout
[  464.045156][ T8417] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.322682][ T4451] team0 (unregistering): Port device team_slave_1 removed
[  464.380369][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  464.395598][ T4451] team0 (unregistering): Port device team_slave_0 removed
[  464.495164][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  464.495897][ T8423] loop0: detected capacity change from 0 to 128
[  464.528927][ T8423] EXT4-fs (loop0): Test dummy encryption mode enabled
[  464.566356][ T8423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  464.587988][ T8423] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  464.608581][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  464.834256][ T8423] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  464.979752][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  465.237058][ T8433] loop0: detected capacity change from 0 to 2048
[  465.262746][ T8433] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  465.274972][ T8433] UDF-fs: Scanning with blocksize 512 failed
[  465.305497][ T8433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  465.447824][ T8433] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134308390 lbcount: 134310912 extent 65+58368
[  465.561870][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.561870][   T75] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  465.584030][   T75] Buffer I/O error on dev loop0, logical block 1024, lost async page write
[  465.601927][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.601927][   T75] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  465.618365][   T75] Buffer I/O error on dev loop0, logical block 1024, lost async page write
[  465.629048][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.629048][   T75] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  465.642649][   T75] Buffer I/O error on dev loop0, logical block 1025, lost async page write
[  465.651924][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.651924][   T75] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  465.668760][   T75] Buffer I/O error on dev loop0, logical block 1025, lost async page write
[  465.678287][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.678287][   T75] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  465.692372][   T75] Buffer I/O error on dev loop0, logical block 1026, lost async page write
[  465.701461][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.701461][   T75] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  465.715501][   T75] Buffer I/O error on dev loop0, logical block 1026, lost async page write
[  465.724577][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.724577][   T75] loop0: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  465.738185][   T75] Buffer I/O error on dev loop0, logical block 1027, lost async page write
[  465.747120][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.747120][   T75] loop0: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  465.761167][   T75] Buffer I/O error on dev loop0, logical block 1027, lost async page write
[  465.769924][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.769924][   T75] loop0: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  465.783488][   T75] Buffer I/O error on dev loop0, logical block 1028, lost async page write
[  465.792256][   T75] kworker/u4:4: attempt to access beyond end of device
[  465.792256][   T75] loop0: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  465.806317][   T75] Buffer I/O error on dev loop0, logical block 1028, lost async page write
[  465.874792][ T4451] bond0 (unregistering): Released all slaves
[  466.212976][ T6796] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  466.417540][ T6796] usb 1-1: Using ep0 maxpacket: 8
[  466.425308][ T6796] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  466.436701][ T6796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.448050][ T6796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.463810][ T6796] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  466.479657][ T6796] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  466.489220][ T6796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.514168][ T6796] usb 1-1: config 0 descriptor??
[  466.581136][ T4451] team0 (unregistering): Port device team_slave_1 removed
[  466.649916][ T4451] team0 (unregistering): Port device team_slave_0 removed
[  466.726258][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.793430][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.960644][ T6796] sony 0003:054C:024B.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0
[  466.972622][ T6796] sony 0003:054C:024B.0005: failed to claim input
[  467.146759][ T6796] usb 1-1: USB disconnect, device number 10
[  467.598813][ T4451] bond0 (unregistering): Released all slaves
[  467.746562][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  467.828402][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.856725][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.873215][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.884401][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.896998][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.920805][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  467.953665][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  467.961209][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  467.984015][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  468.006215][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.056477][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.084751][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.110975][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.133058][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.178162][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.189018][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  468.218512][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  468.248298][ T8142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.272903][ T8142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.281655][ T8142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.301227][ T8142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.326846][ T8283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.359115][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  468.373402][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  468.639286][ T8309] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.775710][ T8309] 8021q: adding VLAN 0 to HW filter on device team0
[  468.806623][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  468.843418][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  468.864001][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.880765][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.065926][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  469.113434][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  469.144943][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.152109][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.439593][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  469.854829][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  469.864275][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  469.931150][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  469.949590][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.956912][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.972261][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  469.993037][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  470.037235][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.050496][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  470.063419][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.098252][ T8467] loop0: detected capacity change from 0 to 1024
[  470.123579][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  470.143641][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  470.173755][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  470.204296][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  470.230675][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  470.301403][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  470.353629][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  470.364236][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  470.373663][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  470.386516][ T8309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  470.449050][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  470.480235][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  470.621483][ T8207] device veth0_vlan entered promiscuous mode
[  470.644942][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  470.671516][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  470.695379][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  470.740371][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  470.811054][ T8207] device veth1_vlan entered promiscuous mode
[  470.870103][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  470.894211][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  470.911638][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  470.962093][ T8283] device veth0_vlan entered promiscuous mode
[  470.986104][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  471.008297][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  471.041766][ T8490] loop0: detected capacity change from 0 to 2048
[  471.051814][ T8207] device veth0_macvtap entered promiscuous mode
[  471.083561][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  471.091553][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  471.138126][ T8490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  471.148551][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  471.194080][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  471.227176][ T8207] device veth1_macvtap entered promiscuous mode
[  471.267801][ T8283] device veth1_vlan entered promiscuous mode
[  471.288285][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  471.307040][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  471.356782][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  471.455960][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.511406][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.542948][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.590901][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.620314][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.635101][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.648382][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.693140][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  471.701709][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  471.720277][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  471.730695][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  471.741326][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  471.756232][ T8283] device veth0_macvtap entered promiscuous mode
[  471.765279][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.777085][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.794679][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.814969][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.825432][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.837237][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.849867][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.867013][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  471.894934][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  471.914336][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  471.921939][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  471.932145][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  471.961193][ T8283] device veth1_macvtap entered promiscuous mode
[  471.996083][ T8207] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.007039][ T8207] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.016739][ T8207] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.025838][ T8207] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.044555][ T8309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.066954][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.077882][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.104652][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.141261][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.169200][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.214081][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.222508][ T8510] loop0: detected capacity change from 0 to 512
[  472.243044][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.259679][ T8510] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  472.264214][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.306478][ T8510] EXT4-fs (loop0): 1 orphan inode deleted
[  472.306815][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.322536][ T8510] EXT4-fs (loop0): 1 truncate cleaned up
[  472.328550][ T8510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  472.394344][ T8512] fuse: root generation should be zero
[  472.470753][ T4266] EXT4-fs error (device loop0): __ext4_iget:5076: inode #11: block 458766: comm syz-executor: invalid block
[  472.499458][ T4266] EXT4-fs (loop0): Remounting filesystem read-only
[  472.505969][ T4451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.519444][ T4266] EXT4-fs error (device loop0): __ext4_iget:5076: inode #11: block 458766: comm syz-executor: invalid block
[  472.531914][ T4266] EXT4-fs (loop0): Remounting filesystem read-only
[  472.541296][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  472.561804][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  472.611385][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.642941][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.661304][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.674850][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.685434][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.695988][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.733844][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.744561][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.747103][ T8521] loop5: detected capacity change from 0 to 128
[  472.767531][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.784254][ T7805] EXT4-fs (loop0): unmounting filesystem.
[  472.787432][ T8521] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  472.805091][ T8283] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.840533][ T8283] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.842258][ T8521] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  472.886708][ T8283] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.902896][ T8283] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.003314][ T4451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.048289][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  473.101628][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  473.257385][ T4451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.475956][ T4451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.546233][ T4863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.577517][ T4863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.619692][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  473.886300][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.929681][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.930661][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  473.949962][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  473.993294][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  474.065993][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  474.131576][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  474.170511][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  474.192168][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  474.221281][ T8309] device veth0_vlan entered promiscuous mode
[  474.374075][ T8544] loop6: detected capacity change from 0 to 512
[  474.487226][ T8544] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  474.496877][ T8544] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.546323][ T8309] device veth1_vlan entered promiscuous mode
[  474.553703][   T27] audit: type=1800 audit(1747051235.632:183): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.934" name="file1" dev="loop6" ino=15 res=0 errno=0
[  474.574366][   T27] audit: type=1800 audit(1747051235.632:184): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.934" name="file2" dev="loop6" ino=16 res=0 errno=0
[  474.715550][ T8207] EXT4-fs (loop6): unmounting filesystem.
[  474.867036][ T4260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  474.883204][ T4260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  474.927634][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  474.941869][ T4260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  474.942804][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  474.965761][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  474.973750][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  474.981046][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  475.008133][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  475.018336][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  475.025806][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  475.036175][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  475.046130][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  475.053717][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  475.115040][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  475.154413][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  475.195850][ T8309] device veth0_macvtap entered promiscuous mode
[  475.219993][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.237183][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.262197][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  475.270565][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  475.296325][ T8309] device veth1_macvtap entered promiscuous mode
[  475.398009][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.408221][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.413671][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.437719][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.438225][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.476538][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.487238][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.520963][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.541623][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.554584][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.570656][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.594440][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.610804][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.648722][ T8559] loop6: detected capacity change from 0 to 8192
[  475.656718][ T8561] loop5: detected capacity change from 0 to 1024
[  475.684499][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  475.724308][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  475.748616][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  475.785516][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.816891][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.837331][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.849379][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.860943][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.898451][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.929097][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.953307][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.972941][ T8309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.993356][ T8309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.031176][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.104039][ T8561] EXT4-fs (loop5): Test dummy encryption mode enabled
[  476.139081][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  476.163066][ T8561] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  476.183902][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  476.258252][ T8309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.310950][ T8309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.359405][ T8309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.393180][ T8309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.537881][ T8578] loop7: detected capacity change from 0 to 512
[  476.574203][ T8142] EXT4-fs (loop5): unmounting filesystem.
[  476.653978][ T8578] EXT4-fs: Ignoring removed nobh option
[  476.750302][ T8578] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.957: invalid indirect mapped block 256 (level 2)
[  476.790878][ T8584] loop5: detected capacity change from 0 to 16
[  476.804775][ T8578] EXT4-fs (loop7): 2 truncates cleaned up
[  476.810869][ T8578] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  476.860492][ T8584] erofs: (device loop5): mounted with root inode @ nid 36.
[  476.866315][ T8580] loop6: detected capacity change from 0 to 4096
[  476.981992][ T8580] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  477.020890][   T27] audit: type=1800 audit(1747051238.092:185): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.957" name="file1" dev="loop7" ino=15 res=0 errno=0
[  477.073601][ T4264] Bluetooth: hci4: command 0x0409 tx timeout
[  477.225817][ T8283] EXT4-fs (loop7): unmounting filesystem.
[  477.519780][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.538861][   T27] audit: type=1800 audit(1747051238.612:186): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1013" name="file3" dev="loop6" ino=16 res=0 errno=0
[  477.555307][ T8597] loop7: detected capacity change from 0 to 764
[  477.596452][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.646707][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  477.703809][ T8597] rock: directory entry would overflow storage
[  477.711903][ T8597] rock: sig=0x4654, size=5, remaining=4
[  477.898280][ T8207] EXT4-fs (loop6): unmounting filesystem.
[  477.997890][ T8549] chnl_net:caif_netlink_parms(): no params data found
[  478.006266][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.036920][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.199268][ T4451] device hsr_slave_0 left promiscuous mode
[  478.214041][ T4451] device hsr_slave_1 left promiscuous mode
[  478.222662][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.266973][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.308525][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.326806][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.335741][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1020'.
[  478.353170][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1020'.
[  478.383296][ T4451] device bridge_slave_1 left promiscuous mode
[  478.389645][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.414962][ T4451] device bridge_slave_0 left promiscuous mode
[  478.421303][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.523650][ T4451] device veth1_macvtap left promiscuous mode
[  478.529780][ T4451] device veth0_macvtap left promiscuous mode
[  478.553136][ T4451] device veth1_vlan left promiscuous mode
[  479.154382][ T4268] Bluetooth: hci4: command 0x041b tx timeout
[  479.648275][ T8625] loop5: detected capacity change from 0 to 1024
[  479.663012][ T4408] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  479.758386][ T8625] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  479.771518][ T8625] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  479.781825][ T8625] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1025: Failed to acquire dquot type 0
[  479.812335][ T8625] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  479.843516][ T4408] usb 7-1: Using ep0 maxpacket: 16
[  479.850528][ T4408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.851664][ T8625] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.1025: corrupted inode contents
[  479.861927][ T4408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.884214][ T4408] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  479.893403][ T4408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.921197][ T8625] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #13: comm syz.5.1025: mark_inode_dirty error
[  479.921593][ T4408] usb 7-1: config 0 descriptor??
[  479.933342][ T8625] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.1025: corrupted inode contents
[  479.978103][ T8625] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.1025: mark_inode_dirty error
[  480.018194][ T8625] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.1025: corrupted inode contents
[  480.031320][ T8625] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  480.067816][ T8625] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.1025: corrupted inode contents
[  480.081483][ T8625] EXT4-fs error (device loop5): ext4_truncate:4312: inode #13: comm syz.5.1025: mark_inode_dirty error
[  480.119873][ T8625] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  480.161048][ T8625] EXT4-fs (loop5): 1 truncate cleaned up
[  480.166967][ T8625] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  480.189396][ T8625] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  480.241950][ T8625] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  480.251536][ T8625] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1025: Failed to acquire dquot type 0
[  480.366157][ T4408] cougar 0003:060B:500A.0006: item fetching failed at offset 6/7
[  480.370511][ T8142] EXT4-fs (loop5): unmounting filesystem.
[  480.375197][ T4408] cougar 0003:060B:500A.0006: parse failed
[  480.388579][ T4408] cougar: probe of 0003:060B:500A.0006 failed with error -22
[  480.472694][ T4451] team0 (unregistering): Port device team_slave_1 removed
[  480.566520][ T4408] usb 7-1: USB disconnect, device number 2
[  480.582181][ T4451] team0 (unregistering): Port device team_slave_0 removed
[  480.664473][ T8631] loop5: detected capacity change from 0 to 512
[  480.698852][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.739695][ T8631] EXT4-fs (loop5): orphan cleanup on readonly fs
[  480.747143][ T8631] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024).
[  480.765306][ T8631] EXT4-fs warning (device loop5): ext4_enable_quotas:7054: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  480.780879][ T8631] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  480.796325][ T8631] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1027: bg 0: block 67: padding at end of block bitmap is not set
[  480.824803][ T8631] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  480.836815][ T8631] EXT4-fs (loop5): 1 truncate cleaned up
[  480.842488][ T8631] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  480.852134][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  481.086574][ T8142] EXT4-fs (loop5): unmounting filesystem.
[  481.224078][ T8635] loop6: detected capacity change from 0 to 1024
[  481.233592][ T4268] Bluetooth: hci4: command 0x040f tx timeout
[  481.253076][ T8637] loop5: detected capacity change from 0 to 1024
[  481.672317][ T8640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18
[  482.064734][ T8650] loop5: detected capacity change from 0 to 4096
[  482.085485][ T8650] EXT4-fs: Ignoring removed mblk_io_submit option
[  482.106966][ T8650] EXT4-fs (loop5): Test dummy encryption mode enabled
[  482.149402][ T8650] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  482.178995][ T4451] bond0 (unregistering): Released all slaves
[  482.301614][ T8142] EXT4-fs (loop5): unmounting filesystem.
[  482.337157][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  482.652603][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.660216][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.669788][ T8549] device bridge_slave_0 entered promiscuous mode
[  482.688478][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.704879][ T8666] loop5: detected capacity change from 0 to 256
[  482.723603][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.749337][ T8665] loop7: detected capacity change from 0 to 1024
[  482.789108][ T8549] device bridge_slave_1 entered promiscuous mode
[  482.796929][ T8666] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  482.826986][ T8665] ext4: Unknown parameter 'seclabel'
[  482.883845][ T4371] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  482.980789][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.095044][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.177421][ T8674] loop7: detected capacity change from 0 to 512
[  483.203695][ T8674] EXT4-fs (loop7): unsupported inode size: 13184
[  483.211038][ T8674] EXT4-fs (loop7): blocksize: 4096
[  483.275958][ T8549] team0: Port device team_slave_0 added
[  483.303348][ T4298] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  483.313296][ T4268] Bluetooth: hci4: command 0x0419 tx timeout
[  483.341018][ T8549] team0: Port device team_slave_1 added
[  483.493137][ T4298] usb 7-1: Using ep0 maxpacket: 16
[  483.500253][ T4298] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  483.529775][ T4298] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.550488][ T4298] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  483.582334][ T4298] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  483.592621][ T4298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.601656][ T4298] usb 7-1: Product: syz
[  483.606207][ T4298] usb 7-1: Manufacturer: syz
[  483.610828][ T4298] usb 7-1: SerialNumber: syz
[  483.641358][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.679365][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.756531][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.785241][ T8691] loop7: detected capacity change from 0 to 164
[  483.816090][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.847943][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.996239][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.031920][ T4298] usb 7-1: 0:2 : does not exist
[  484.085059][ T8697] device syz_tun entered promiscuous mode
[  484.126320][ T8697] syz_tun: refused to change device tx_queue_len
[  484.282465][ T8549] device hsr_slave_0 entered promiscuous mode
[  484.321394][ T8549] device hsr_slave_1 entered promiscuous mode
[  484.638441][ T4451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.846519][ T4298] usb 7-1: 1:0: failed to get current value for ch 0 (-22)
[  484.867871][ T4451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.940157][ T4298] usb 7-1: USB disconnect, device number 3
[  485.081556][ T4451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.208040][ T4451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.228420][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  485.534140][ T8723] loop8: detected capacity change from 0 to 512
[  485.548972][ T8549] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  485.562708][ T8723] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  485.596912][ T8549] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  485.618547][ T8723] EXT4-fs (loop8): 1 truncate cleaned up
[  485.631406][ T8723] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  485.663183][ T8549] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  485.748956][ T8723] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.1051: corrupted in-inode xattr
[  485.749872][ T8549] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  485.904197][ T8723] EXT4-fs warning (device loop8): ext4_xattr_set_entry:1732: inode #15: comm syz.8.1051: unable to update i_inline_off
[  485.918862][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1054'.
[  485.958911][ T8731] EXT4-fs error (device loop8): ext4_xattr_ibody_get:603: inode #15: comm syz.8.1051: corrupted in-inode xattr
[  486.017923][ T8723] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.1051: corrupted in-inode xattr
[  486.269116][ T8309] EXT4-fs (loop8): unmounting filesystem.
[  486.448218][ T8750] loop5: detected capacity change from 0 to 512
[  486.494779][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.635031][ T4298] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  486.808101][ T8750] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1060: casefold flag without casefold feature
[  486.863449][ T4298] usb 7-1: Using ep0 maxpacket: 32
[  486.931328][ T4298] usb 7-1: unable to get BOS descriptor or descriptor too short
[  487.078187][ T8750] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1060: couldn't read orphan inode 15 (err -117)
[  487.137016][ T4298] usb 7-1: config 7 has an invalid interface number: 188 but max is 0
[  487.223967][ T8750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  487.241520][ T4298] usb 7-1: config 7 has no interface number 0
[  487.254339][ T8750] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #2: comm syz.5.1060: Directory hole found for htree leaf block 0
[  487.273040][ T4298] usb 7-1: config 7 interface 188 has no altsetting 0
[  487.307706][ T4298] usb 7-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=7b.26
[  487.329696][ T4298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.343212][ T4298] usb 7-1: Product: syz
[  487.361497][ T4298] usb 7-1: Manufacturer: syz
[  487.400763][ T4298] usb 7-1: SerialNumber: syz
[  487.424148][ T8142] EXT4-fs (loop5): unmounting filesystem.
[  487.517377][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  487.553713][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  487.579264][ T8763] loop5: detected capacity change from 0 to 16
[  487.624668][ T4298] usb-storage 7-1:7.188: USB Mass Storage device detected
[  487.633888][ T8763] erofs: (device loop5): mounted with root inode @ nid 36.
[  487.691989][ T8763] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89
[  487.764600][ T4298] usb 7-1: USB disconnect, device number 4
[  487.788296][ T8549] 8021q: adding VLAN 0 to HW filter on device team0
[  487.794075][ T4268] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[8192]
[  487.808430][ T8763] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  487.905583][   T27] audit: type=1800 audit(1747051248.982:187): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1063" name="file2" dev="loop5" ino=89 res=0 errno=0
[  487.943802][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  487.963585][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  487.994467][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.001724][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.035754][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  488.174015][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  488.213350][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  488.213913][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.214032][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.214593][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  488.215536][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  488.241378][ T8782] loop8: detected capacity change from 0 to 1024
[  488.337516][ T8782] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  488.337638][ T8782] hfsplus: xattr searching failed
[  488.341086][ T8782] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  488.341185][ T8782] hfsplus: xattr searching failed
[  488.393830][ T8782] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  488.393859][ T8782] hfsplus: xattr searching failed
[  488.502709][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  488.504345][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  488.505148][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  488.510469][ T8787] loop6: detected capacity change from 0 to 512
[  488.548964][ T8787] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  488.851988][ T8787] EXT4-fs (loop6): invalid journal inode
[  488.852376][ T8787] EXT4-fs (loop6): can't get journal size
[  488.969356][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  488.981948][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  488.988995][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  488.992519][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  488.998408][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  489.001655][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  489.160736][ T8787] EXT4-fs (loop6): 1 truncate cleaned up
[  489.160769][ T8787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  489.183110][ T8549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  489.201582][ T8787] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 1986330625 (only 1 groups)
[  489.247661][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1070'.
[  489.596035][ T8780] tty tty4: ldisc open failed (-12), clearing slot 3
[  489.629194][ T8786] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  489.663420][ T8791] tty tty1: ldisc open failed (-12), clearing slot 0
[  489.850243][ T8207] EXT4-fs (loop6): unmounting filesystem.
[  490.526771][ T4451] device hsr_slave_0 left promiscuous mode
[  490.537178][ T4451] device hsr_slave_1 left promiscuous mode
[  490.581257][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.608665][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.622947][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.630829][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.651576][ T4451] device bridge_slave_1 left promiscuous mode
[  490.661055][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.674335][ T4451] device bridge_slave_0 left promiscuous mode
[  490.704574][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.752896][ T5151] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  490.830568][ T8834] loop5: detected capacity change from 0 to 512
[  490.841963][ T4451] device veth1_macvtap left promiscuous mode
[  490.859497][ T4451] device veth0_macvtap left promiscuous mode
[  490.878046][ T4451] device veth1_vlan left promiscuous mode
[  490.923462][ T4451] device veth0_vlan left promiscuous mode
[  490.935480][ T5151] usb 7-1: unable to get BOS descriptor or descriptor too short
[  490.949868][ T8834] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  490.954313][ T5151] usb 7-1: not running at top speed; connect to a high speed hub
[  490.978558][ T5151] usb 7-1: config 9 has an invalid interface number: 97 but max is 0
[  490.989504][ T5151] usb 7-1: config 9 has no interface number 0
[  490.995994][ T5151] usb 7-1: config 9 interface 97 has no altsetting 0
[  491.003940][ T8834] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  491.016422][ T5151] usb 7-1: New USB device found, idVendor=0525, idProduct=a140, bcdDevice= 1.00
[  491.036774][ T5151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.045533][ T5151] usb 7-1: Product: syz
[  491.049733][ T5151] usb 7-1: Manufacturer: syz
[  491.055044][ T5151] usb 7-1: SerialNumber: syz
[  491.267495][ T5151] usb-storage 7-1:9.97: USB Mass Storage device detected
[  491.302656][ T8142] EXT4-fs (loop5): unmounting filesystem.
[  491.323240][ T5151] usb-storage 7-1:9.97: Quirks match for vid 0525 pid a140: 8
[  491.444057][ T5151] usb 7-1: USB disconnect, device number 5
[  491.798555][   T27] audit: type=1804 audit(1747051252.872:188): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1086" name="/newroot/39/file1" dev="fuse" ino=1 res=1 errno=0
[  491.931840][ T8867] loop6: detected capacity change from 0 to 512
[  491.972616][ T8867] EXT4-fs: Ignoring removed mblk_io_submit option
[  491.998114][ T8867] EXT4-fs: Ignoring removed nomblk_io_submit option
[  492.009754][ T8867] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  492.041247][ T8867] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.1087: corrupted in-inode xattr
[  492.069374][ T8867] EXT4-fs (loop6): Remounting filesystem read-only
[  492.084216][ T8867] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1087: couldn't read orphan inode 15 (err -117)
[  492.105957][ T8867] EXT4-fs (loop6): Remounting filesystem read-only
[  492.112750][ T8867] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  492.250933][ T8867] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.1087: Logical block already allocated
[  492.291585][ T8867] EXT4-fs (loop6): Remounting filesystem read-only
[  492.424344][ T8207] EXT4-fs (loop6): unmounting filesystem.
[  492.535894][   T27] audit: type=1800 audit(1747051253.612:189): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1086" name="/" dev="fuse" ino=1 res=0 errno=0
[  492.829381][ T8879] loop7: detected capacity change from 0 to 512
[  492.847928][ T8879] EXT4-fs: Ignoring removed nobh option
[  492.880369][ T8879] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  492.901821][ T8881] xt_TCPMSS: Only works on TCP SYN packets
[  492.908026][ T4451] team0 (unregistering): Port device team_slave_1 removed
[  492.980938][ T8879] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1091: invalid indirect mapped block 256 (level 2)
[  493.019614][ T8879] EXT4-fs (loop7): 2 truncates cleaned up
[  493.026484][ T8879] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  493.039114][ T4451] team0 (unregistering): Port device team_slave_0 removed
[  493.053955][   T27] audit: type=1800 audit(1747051254.132:190): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1091" name="file1" dev="loop7" ino=16 res=0 errno=0
[  493.096885][ T8879] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1091: bg 0: block 5: invalid block bitmap
[  493.116325][ T8879] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 59 with error 28
[  493.182674][ T8879] EXT4-fs (loop7): This should not happen!! Data will be lost
[  493.182674][ T8879] 
[  493.238116][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.243347][ T8879] EXT4-fs (loop7): Total free blocks count 0
[  493.276290][ T8879] EXT4-fs (loop7): Free/Dirty block details
[  493.285180][ T8889] loop8: detected capacity change from 0 to 256
[  493.309074][ T8879] EXT4-fs (loop7): free_blocks=0
[  493.330952][ T8879] EXT4-fs (loop7): dirty_blocks=59
[  493.376368][ T8879] EXT4-fs (loop7): Block reservation details
[  493.413260][ T8879] EXT4-fs (loop7): i_reserved_data_blocks=59
[  493.421024][   T27] audit: type=1804 audit(1747051254.492:191): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1094" name="/newroot/19/file1/file0" dev="loop8" ino=1048629 res=1 errno=0
[  493.543276][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.550207][ T8889] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF
[  493.586514][ T8889] FAT-fs (loop8): Filesystem has been set read-only
[  493.757188][ T8283] EXT4-fs (loop7): unmounting filesystem.
[  495.858902][ T4451] bond0 (unregistering): Released all slaves
[  495.903153][ T4408] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  495.972568][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  495.980447][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  496.105803][ T4408] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  496.117197][ T4408] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  496.117489][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.132741][ T4408] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  496.188239][ T4408] usb 6-1: config 220 has no interface number 2
[  496.208470][ T4408] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  496.252304][ T4408] usb 6-1: config 220 interface 0 has no altsetting 0
[  496.263191][ T4408] usb 6-1: config 220 interface 76 has no altsetting 0
[  496.270373][ T4408] usb 6-1: config 220 interface 1 has no altsetting 0
[  496.298426][ T4408] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  496.328887][ T4408] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.339707][ T4408] usb 6-1: Product: syz
[  496.358044][ T4408] usb 6-1: Manufacturer: syz
[  496.373971][ T4408] usb 6-1: SerialNumber: syz
[  496.648232][ T4408] usb 6-1: selecting invalid altsetting 0
[  496.673341][ T4408] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  496.690220][ T4408] usb 6-1: No valid video chain found.
[  496.733136][ T4408] usb 6-1: selecting invalid altsetting 0
[  496.738988][ T4408] usbtest: probe of 6-1:220.1 failed with error -22
[  496.763162][ T4408] usb 6-1: USB disconnect, device number 2
[  497.018485][ T8947] loop6: detected capacity change from 0 to 512
[  497.066009][ T8947] EXT4-fs: Ignoring removed nobh option
[  497.125766][ T8947] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1110: invalid indirect mapped block 256 (level 2)
[  497.216951][ T8947] EXT4-fs (loop6): 2 truncates cleaned up
[  497.229315][ T8947] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  497.720300][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  497.736341][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  497.827764][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  497.883424][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  497.905152][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  497.913975][   T27] audit: type=1800 audit(1747051258.992:192): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1110" name="file3" dev="loop6" ino=15 res=0 errno=0
[  497.933529][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  497.952836][ T8549] device veth0_vlan entered promiscuous mode
[  497.959574][ T8964] 
[  497.962466][ T8964] =============================
[  497.967740][ T8964] WARNING: suspicious RCU usage
[  497.972665][ T8964] 6.1.138-syzkaller #0 Not tainted
[  497.977991][ T8964] -----------------------------
[  497.983007][ T8964] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage!
[  497.992138][ T8964] 
[  497.992138][ T8964] other info that might help us debug this:
[  497.992138][ T8964] 
[  497.994209][   T27] audit: type=1800 audit(1747051259.012:193): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1110" name="file3" dev="loop6" ino=15 res=0 errno=0
[  498.002536][ T8964] 
[  498.002536][ T8964] rcu_scheduler_active = 2, debug_locks = 1
[  498.031099][ T8964] 3 locks held by syz.7.1113/8964:
[  498.036387][ T8964]  #0: ffffffff8db93cf0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40
[  498.044704][ T8964]  #1: ffff88807c6107c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x27d/0x930
[  498.054669][ T8964]  #2: ffff8880565e4d40 (&wdev->mtx){+.+.}-{3:3}, at: nl80211_new_station+0x150b/0x1a00
[  498.064571][ T8964] 
[  498.064571][ T8964] stack backtrace:
[  498.070503][ T8964] CPU: 0 PID: 8964 Comm: syz.7.1113 Not tainted 6.1.138-syzkaller #0
[  498.078611][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  498.088706][ T8964] Call Trace:
[  498.092024][ T8964]  <TASK>
[  498.094987][ T8964]  dump_stack_lvl+0x168/0x22e
[  498.099712][ T8964]  ? show_regs_print_info+0x12/0x12
[  498.104949][ T8964]  ? load_image+0x3b0/0x3b0
[  498.109503][ T8964]  lockdep_rcu_suspicious+0x1dd/0x300
[  498.114925][ T8964]  sta_remove_link+0x356/0x4b0
[  498.119743][ T8964]  sta_info_free+0x50/0x670
[  498.124294][ T8964]  ? ieee80211_add_station+0x3ae/0x5d0
[  498.129810][ T8964]  ieee80211_add_station+0x3b9/0x5d0
[  498.135154][ T8964]  rdev_add_station+0x10c/0x2d0
[  498.140038][ T8964]  ? mutex_unlock+0x10/0x10
[  498.144581][ T8964]  nl80211_new_station+0x15ef/0x1a00
[  498.149930][ T8964]  ? nl80211_set_station+0x1700/0x1700
[  498.155442][ T8964]  ? netdev_run_todo+0xd1e/0xd80
[  498.160449][ T8964]  ? nl80211_pre_doit+0x4ed/0x930
[  498.165576][ T8964]  genl_family_rcv_msg_doit+0x22e/0x320
[  498.171268][ T8964]  ? end_current_label_crit_section+0x170/0x170
[  498.177560][ T8964]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  498.183508][ T8964]  ? bpf_lsm_capable+0x5/0x10
[  498.188226][ T8964]  ? security_capable+0x85/0xb0
[  498.193123][ T8964]  genl_rcv_msg+0x5f2/0x780
[  498.197843][ T8964]  ? genl_bind+0x350/0x350
[  498.202293][ T8964]  ? nl80211_set_station+0x1700/0x1700
[  498.207831][ T8964]  netlink_rcv_skb+0x1de/0x420
[  498.212642][ T8964]  ? genl_bind+0x350/0x350
[  498.217092][ T8964]  ? netlink_ack+0x1100/0x1100
[  498.221909][ T8964]  ? down_read+0x1a8/0x2d0
[  498.226381][ T8964]  genl_rcv+0x24/0x40
[  498.230396][ T8964]  netlink_unicast+0x74c/0x8c0
[  498.235229][ T8964]  netlink_sendmsg+0x89e/0xbc0
[  498.240066][ T8964]  ? netlink_getsockopt+0x540/0x540
[  498.245309][ T8964]  ? aa_sock_msg_perm+0x94/0x150
[  498.250314][ T8964]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  498.255640][ T8964]  ? security_socket_sendmsg+0x7c/0xa0
[  498.261152][ T8964]  ? netlink_getsockopt+0x540/0x540
[  498.266396][ T8964]  ____sys_sendmsg+0x59b/0x970
[  498.271222][ T8964]  ? __sys_sendmsg_sock+0x30/0x30
[  498.276290][ T8964]  ? __import_iovec+0x315/0x500
[  498.281195][ T8964]  ? import_iovec+0x6f/0xa0
[  498.285737][ T8964]  ___sys_sendmsg+0x21c/0x290
[  498.290461][ T8964]  ? __sys_sendmsg+0x270/0x270
[  498.295317][ T8964]  ? __fdget+0x17c/0x200
[  498.299625][ T8964]  __se_sys_sendmsg+0x19e/0x270
[  498.304522][ T8964]  ? __se_sys_futex+0x14a/0x440
[  498.309418][ T8964]  ? __x64_sys_sendmsg+0x80/0x80
[  498.314447][ T8964]  ? lockdep_hardirqs_on+0x94/0x140
[  498.319697][ T8964]  do_syscall_64+0x4c/0xa0
[  498.324151][ T8964]  ? clear_bhb_loop+0x45/0xa0
[  498.328856][ T8964]  ? clear_bhb_loop+0x45/0xa0
[  498.333560][ T8964]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  498.339542][ T8964] RIP: 0033:0x7feeba58e969
[  498.343991][ T8964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.363640][ T8964] RSP: 002b:00007feebb390038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  498.372107][ T8964] RAX: ffffffffffffffda RBX: 00007feeba7b5fa0 RCX: 00007feeba58e969
[  498.380118][ T8964] RDX: 0000000000000044 RSI: 0000200000001080 RDI: 0000000000000005
[  498.388131][ T8964] RBP: 00007feeba610ab1 R08: 0000000000000000 R09: 0000000000000000
[  498.396146][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.404157][ T8964] R13: 0000000000000000 R14: 00007feeba7b5fa0 R15: 00007fff34bca798
[  498.412186][ T8964]  </TASK>
[  498.440661][ T8549] device veth1_vlan entered promiscuous mode
[  498.460189][ T8207] EXT4-fs (loop6): unmounting filesystem.
[  498.568731][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  498.587699][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  498.635176][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  498.691168][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  498.711621][ T8549] device veth0_macvtap entered promiscuous mode
[  498.761340][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  498.793237][ T8549] device veth1_macvtap entered promiscuous mode
[  498.878414][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.905832][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.930200][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.956324][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.142997][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.181871][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.212379][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.444776][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.491768][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.521524][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.571237][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.586722][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.597514][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.607666][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.618407][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.628687][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.640022][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.651947][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.714274][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  499.732076][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  499.759227][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  499.792769][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  499.830141][ T8549] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.858786][ T8549] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.878384][ T8549] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.892892][ T8549] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.069237][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.113255][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.152532][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  500.176123][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.197581][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.234057][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  501.397921][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  501.404326][ T1276] ieee802154 phy1 wpan1: encryption failed: -22