last executing test programs:

17.377389437s ago: executing program 2 (id=560):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

14.559882321s ago: executing program 0 (id=570):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}]}, 0x74}}, 0x0)

14.059293003s ago: executing program 0 (id=573):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29")
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

13.835892185s ago: executing program 0 (id=574):
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

13.131290936s ago: executing program 0 (id=577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000090001"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040))
write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\":/(\xa7'}, {0x20, '/dev/audio\x00\xbf\xd6.\xe9g;]\x85\x11\xf5\xdc\xa8\xcc\xac\x94\xda\xd0\x04!\xb2\x9f+4\x06\xf6\xad[\x02\xbc\xd1\xf1\xb4\xa3\xaf\x92\xe69:\xd6LC\x8fw\x7f\xe9\xed\xaeh\xf6%\xe3=\xaa\xa6\xfar0*\x96\x935\x878\xb1\f7\x81\v\xe3\xf3;?\xdf\x03\x83\xfa\xb1\xb4\x05UZ\x89\f/\xb4@\xfb\x0f\x8eZ\xa7v^\xa4\x1a\x89p\xba\f\xe3\xe0\xfc\xe1\x86\xa9I\x0e\xb1\xb8L\x16\xa3\x1eN\x12Nr\xf7\xe7\xc5\xc9n!f\xc5\x85Ou\xbc\xae&\xe4\x95s\x95\xb4\xde|c\xb4\x92\xfe\xf6\xcc\xc5\x98\xc6\xf2&}\xe9\xa9\xcb\xbfp\x9c\x8am\xb5q\xee\x94\xcf\xbd\x18T\xee\nZ\xbb\xd7\x84\x0f\xd5S$\x98'}], 0xa, "b7ef1c3e568656655c186e4e60a4215394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d5b8e7790cd94560779d1952b90e4d3ffc9e829494aa707b13b6cab38f20af5dc90d6ab615fecbdb3e432a6cd672f28a81d7a6ffc21b0bb34b4dc92fc"}, 0x139)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

11.953452725s ago: executing program 0 (id=580):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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")
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x588, 0x3c8, 0xf8, 0x0, 0x228, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {0x3000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ipv6={@remote, @dev, [], [], 'macvlan1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
munlockall()
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
creat(0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x7, 'vlan0\x00', {0x2}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESDEC=r4], 0x1, 0x182, &(0x7f0000000800)="$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")
getresgid(&(0x7f0000000140), &(0x7f0000000580), &(0x7f0000000180))
openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x109543, 0x0)
fsync(r2)

10.312920911s ago: executing program 0 (id=587):
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

7.280387776s ago: executing program 4 (id=598):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {0x60, 0x2}, @rumble})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f0000003000)=')', 0x1)
r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
write$hidraw(r1, 0x0, 0x39)

5.952877376s ago: executing program 1 (id=604):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r4, 0x301}, 0x14}, 0x1, 0x3000000}, 0x0)

4.836414246s ago: executing program 1 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0xb3)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000000)=@ax25={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="fe", 0x1}], 0x1, &(0x7f0000000180)=ANY=[], 0xb8}, 0x80)

4.594890231s ago: executing program 3 (id=608):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0})

4.500465224s ago: executing program 3 (id=609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

4.450258661s ago: executing program 3 (id=610):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x4000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000069000000850000000500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='ext4_es_remove_extent\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r4, &(0x7f0000000080)='a', 0x1, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
sendmmsg$inet(r4, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1}}], 0x1, 0x0)

4.160809673s ago: executing program 4 (id=611):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000f80)="10", 0x1}], 0x1}, 0x0)

3.998908097s ago: executing program 4 (id=612):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x40}}], 0x2, 0x0)

3.847521218s ago: executing program 4 (id=613):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=<r2=>0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1700000007"], 0xd)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x54, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0x0, 0xb}, {0x3, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x100}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x800}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x54}}, 0x20040800)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73b9e561c5"}, 0x14)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={<r6=>0xffffffffffffffff, 0x20000000000, 0x1c00})
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000000c0))
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x9, @fixed}, 0xe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x4}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'sit0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
unshare(0x28000600)
listen(0xffffffffffffffff, 0x0)
poll(&(0x7f0000000100)=[{}], 0x1, 0x0)

3.463841183s ago: executing program 3 (id=614):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x10, 0x0, 0x7, {[@rr={0x7, 0x3, 0xbf}, @noop]}}}], 0x10}}], 0x1, 0x0)

3.118060943s ago: executing program 3 (id=615):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220500000003393d3133d48cbbe1588e1745e4eef7850bffde902ff7040000000000000011f09b01138f686770c9aed2121a76874d3425566400072a448b6c1eb5b3020000000000000014e79fef6c1fa5d9083459991af2b5e7bc08f25d"], 0x0}, 0x0)

2.938470499s ago: executing program 4 (id=616):
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c000100030508000000000004fc000061b71808419bd7b9166299d65da957dfa518f797dc651316c182f93a2563ffb1ad684c557aef73142c3508ae9b84dfc88ea0bfcdc86d86eec53f9fdb9a001165a5b4c540d8e9862867f80f14551240c05a"], 0x15)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04310600eeff000000"], 0x9)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/25, 0x19}], 0x4, 0x337070cc, 0x9)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x2fb}, {0x3, [{@none, 0x9a, 0x4, "e670b5", 0x0, 0x7, "709d61a33823e2b6d7852bcc5976c4f4d1af24885cf83fe596c49e0755d164502460be03acd8cc7f7143b1ceb560b3f6cedf60c07a68e9b50a0b85fc16c1490a3d122c8026b67098fab2ec3778b0ff73745b4909023a11b9cdaee2e749bd2e5071cff25964124fb4e7ff9771bad77ccb9836a7cd2b2a07eddba6d1b532e7adcf9decaf71966bea908a5b69a10d905948161ee64e5981c3fe4f2ceb3ee2f8a30aa41b0028f9fbaaa8fd1c812f482eafd6e8e8ce2e2f95d77c4e7728e65458224f9a63ddd3cb629d0f908b867bfdf92f5a3e8b9edc9771acd88f0f384653d268ccee43b53c4da52a9a639c7810897ebfe9"}, {@none, 0x5, 0x1, "f8ba14", 0x3ff, 0x1, "b779576776e4805321e0d0cfa7bd3c1dae0196c78bbb274a8ae92e960ddfcb518a6be690064aa0e4728e31b31d05df18f497c402cb60c6aa405ab09887a13f61a84dbe86576de68171edaa68c3dcb987c18ff600389524df5c471d6625d4fccb4228ba92c1ab1ea394caaed4e8dce4be0026e18587e7cf889613941d3bb02cef50613dd2ce1161604c47a364ba3de44970abaff444f7b061691647c4c8a4f60e6456f995ef9b8e27e0b0abb8050f11bc5096b5b03cb41e5b161b2a1228f8bafed714db3bc659f3c9961fa4e099bcbd541a9e27daa4ac3194639f115dc783501a9c71fd0c8cbf47df4ffd634d26787a69"}, {@none, 0x6, 0x9, "8e515e", 0x0, 0x1, "d3f98d0977e822fd92992784613b8b1840819778c144adcaf0e5207567686efe974f41ab1930e9f73c274a3d5684f2bc932be27e34b82ff36e76fac07618570845d246af61be7a4f9d58f71876c139a1ad5870b47f5d30d4097620e624bcf7384defa2e7bd3e99779d15d87c7d8a4890db8ce086a200f0d08593a2999133fdfa362c628ebef88582f95aff34dbdd6b3c57becbf4b9f77e08692f17f92e0d85d3467f344952f902eb420fe0481c72dd8bdc54873e83dc67bc0b37bdeddf4410a58a9cc4c34dd232438354f28846ed2916056a3885753426702fe3908b4f40bf265abfb77125058869efdd6c7f93965528"}]}}}, 0x2fe)
r1 = socket(0xa, 0x6, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(0xffffffffffffffff, 0x0)
accept$inet6(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1b8, 0x0, 0x4, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x84, 0xc5, "bf72ebb928a61e707b9b713c4ab0dc24c0461b4512d21e4c5a67a2eff4779af3f750361ee18dde99ee534082ef25106d02dd35489551a820948406a2199f126add0c50deb5c038bd35775fc22ebfba37687d3b0098ffd6656dc1b0f8b5b26e028304a617cb334e722981cbee364671d5070c1f1d227bc3ce7bd4972ab3312ca8"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x166}, @NL80211_ATTR_VENDOR_DATA={0xf0, 0xc5, "2cf63e876057421211e5dea968676e1380e149becd172604d623eb0cb7c8821e91fb541f9e8fc38f31b1a50058f2036cf058667956e2e182a1e70a8e17849decf6b6cf3e5f510f5b2d7db664e6fd684a5f5ba41cad65dcfd904597b183305ca572e7c9a96f8f7c57626a52d786568609fc06a753ec050ba364bcf82c4a36b37a296e26ffefbd18e14a285b729b781a9104ae02200edcd26dba5c2872d87ddb08d57997f70cc2247fcc0e86e2fea9ea2eb36f0ebc1328bfc996661cbec24c6351e78201c694140b429ace4d6dd2532e4cd29845c3d4c452642c94f0e5d2fa46c21a511da11d62dba92e5d337c"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1f}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x400}, 0x4040014)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(0xffffffffffffffff)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000280))
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)

2.733719038s ago: executing program 1 (id=617):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
dup(r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0xfe26, 0x0, 0x230}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x8)
getpid()
read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5)
ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0)

1.769514356s ago: executing program 1 (id=618):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
listen(r3, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)

786.769777ms ago: executing program 1 (id=619):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0})

658.128996ms ago: executing program 4 (id=620):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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")
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x588, 0x3c8, 0xf8, 0x0, 0x228, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {0x3000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ipv6={@remote, @dev, [], [], 'macvlan1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
munlockall()
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
creat(0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x7, 'vlan0\x00', {0x2}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESDEC=r4], 0x1, 0x182, &(0x7f0000000800)="$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")
getresgid(&(0x7f0000000140), &(0x7f0000000580), &(0x7f0000000180))
openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x109543, 0x0)
fsync(r2)

632.230939ms ago: executing program 2 (id=597):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3"], 0x7)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x6, 0x1fe000)
unshare(0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5415, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4b3dd39ed30267}, 0x0)

617.005842ms ago: executing program 1 (id=621):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

486.061861ms ago: executing program 2 (id=622):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x40}}], 0x2, 0x0)

403.205363ms ago: executing program 2 (id=623):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

340.175791ms ago: executing program 2 (id=624):
socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
close(0xffffffffffffffff)
r2 = userfaultfd(0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})

7.379789ms ago: executing program 3 (id=626):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0xb3)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000000)=@ax25={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="fe", 0x1}], 0x1, &(0x7f0000000180)=ANY=[], 0xb8}, 0x80)

0s ago: executing program 2 (id=627):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='jbd2_handle_stats\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301}, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$ndb(0x0, 0x0, 0x202001)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x1e401, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @private0, 0xff}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000380)="77e576b67b419c785bbe8e27619bfbaa46ac3a92f298c2e36447bd2524a3cb4427592cdac1de69d1323999abba9858b6cb4b11704dc2e934e26e536893fe351565e657231518a7ff4e3f7b9bbbbba5406ba0afd63998e2bff29a96787b66accb4deace412960cce04aaa767a59b836a22dfba197233c9a6319c3a156c54d85262be826c1a60bafc1ab0d394ccce0482d3805e1124e0a1391289bffb825fab78e7b13d560b7f47b4eb0f48087952208b8882362704c11905ea03f", 0xba}, {&(0x7f00000004c0)="334491b6bde497e30138937ded6187f0d3492d00c23663882ae42596f5fa97a5a8dd00763970e91b37f9bd733d6810c3c09bb0a421b9799c72d5cedb815ca3808b1ee394fc33ba605b92f1a8fa5a90113c7941f8dd9937e0849eeba1e29c56e7b0111ad8f7149e6a6695c4406303fc34cc1a0f9f1ca4e20324dffabb9c1b12c9c1adb85b2cf7c38e4ca71fdd91b01c07ca1044e02745f8ae7740be686b6a5f83d052ac032c6640b1ee5f3ddc021597a7aa50e300e3fad8ad70361478254bdb6980913e605dca07d6d59daaf331dda3039480a3dcd4bdaa7d8a8b594881d1a987800099a2e78976e200e49702c1", 0xed}, {&(0x7f00000005c0)="2e6489c3b6c5387c138ee72e1cfc104670915c778877e8231ef6781e1c5a8bb0fb0870a12620698f5b132f65b86bf42f25def5d66001cb1ecaa8060261132d5ca3aa807f9ac7aad1b968bd444cae7008b48a5ac9f6f6211e6dad09d73b90006a09281b7be888917e3b84da794c60a3ed8889d5745fb7d12638d97401304327d0bd9836fd2dae08ff7c7ec2243dc751caec8d53aff4cf03e4e824c4d0cfaed41924b5700c6a0b572266cca099652a1b02b184872957dec1394aef9c7cf693ccfb7e7b99583ebe59d873d2c38599273a3a72ee773c2cbdbcb61741694e11d00674c2365d8971ce17cabf0a7f18479971a2", 0xf0}, {&(0x7f00000006c0)="8a33f7d3c32589d998c31d8c642cc16b3a51bec30ec5bfd732993912669df9b27392f7ef9949f3d891a49655c87d13be5718209a25bd82103bc07220d935213458c8e7c6743e1dbe3d9f0537d5775316fbb8724fd6315cd1a1021a38281431259454fa7e9f4d0818b1c5d34492106d137e2b664232aecb4e48efbd7d34af9adfd860806c92b6ce02c8dad3517636b58a98abc240fb0a5e6f6afcc7e8cfadbe0f6f6e17ca40f93af2008d4e8b12659d3275686e6c75bab7ff452d722f5f3808496d3f256cb2b457749af3f63c587bf37c64c38ebe45d835907f194d7a7c0c", 0xde}, {&(0x7f0000000800)="2689965b0755818d93e00fc1e09611fd066a", 0x12}, {&(0x7f0000000840)}, {&(0x7f0000000880)="8981355d6371dfe711c864a13cb27d8a0cd02ca54b03e3f1450323a05db7d8c597a1926fb16d039cd94830e0bcb680fa956e6ba55fcf5e6cfddd8000d55abb731c2220f670c3687541196476b559d9fe0816736551ff9765400e488cb7d511f5fe852e5450bbc95e9238020a678c9df5db5a8d77922d343635add51ab4246de49bf5148a612927e96ba37a6e793c203c05", 0x91}, {&(0x7f0000000940)="c7a6e634ba33cf0276542c8cea9976", 0xf}, {&(0x7f0000000980)="1161d07d2a238c792e3ea93619e883a8b67f3faefd573f9cc066296b8a8cd923c38f3ad52edd3888538332f5d0a3a7378ed0c1fb97e3c4e15168dc1c94b5f71e4c37c1c3401e38144296813e76dca53f305d50edda614894a8318263e4f3a9045ae1cdb43e3dbe7c9287fc95d857c33011784d3be46652c039a7e1ea9166f03aa05fe8d8cf1e1fd950310356fa6ae38330883501826b53ab2dbd27532a21bca139ac7dce", 0xa4}], 0x9}}], 0x1, 0x890)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)

kernel console output (not intermixed with test programs):

es ready
[   69.450376][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.460646][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.494206][ T3555] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.508730][ T3563] 8021q: adding VLAN 0 to HW filter on device team0
[   69.519727][ T3561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.537605][ T3561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.554876][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.561785][ T3568] Bluetooth: hci2: command tx timeout
[   69.562741][ T3569] Bluetooth: hci3: command tx timeout
[   69.567539][ T3568] Bluetooth: hci4: command tx timeout
[   69.573068][ T3569] Bluetooth: hci1: command tx timeout
[   69.573109][ T3569] Bluetooth: hci0: command tx timeout
[   69.574422][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.598842][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.607551][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.616380][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.626678][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.635272][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.644031][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.651878][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.669233][ T3556] 8021q: adding VLAN 0 to HW filter on device team0
[   69.680560][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.691880][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.699682][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.711993][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.720717][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.729963][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.737113][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.747113][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.772860][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.807139][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.826248][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.833491][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.867363][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.915725][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.926941][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.937304][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.946449][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.955395][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.962572][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.971089][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.980367][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.989486][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.996643][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.004512][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.013798][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.024038][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.033107][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.043765][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.052391][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.061349][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.096476][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.105463][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.114112][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.125117][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.135338][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.150205][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.165456][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.175672][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.189420][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.198326][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.208288][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.217144][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.226360][ T3555] device veth0_vlan entered promiscuous mode
[   70.249567][ T3556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.263048][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.273070][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.285449][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.293247][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.304901][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.313458][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.322486][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.331226][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.346711][ T3565] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.354831][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.377967][ T3555] device veth1_vlan entered promiscuous mode
[   70.388593][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.403371][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.435287][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.446304][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.489308][ T3561] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.521172][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.530685][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.551270][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.559987][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.587391][ T3555] device veth0_macvtap entered promiscuous mode
[   70.617429][ T3555] device veth1_macvtap entered promiscuous mode
[   70.646675][ T3565] device veth0_vlan entered promiscuous mode
[   70.671356][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.679688][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.701715][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.710609][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.727804][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.741501][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.754609][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.766409][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.803163][ T3561] device veth0_vlan entered promiscuous mode
[   70.810369][ T3565] device veth1_vlan entered promiscuous mode
[   70.836702][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.845550][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.861718][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.875310][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.884129][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.893035][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.900566][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.910242][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.926615][ T3561] device veth1_vlan entered promiscuous mode
[   70.957524][ T3563] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.966860][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.976134][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.985550][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.993694][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.012682][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.021723][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.029208][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.039520][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.054063][ T3555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.063100][ T3555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.072117][ T3555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.081465][ T3555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.100395][ T3556] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.122632][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.131958][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.142947][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.152316][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.211693][ T3565] device veth0_macvtap entered promiscuous mode
[   71.220105][ T3561] device veth0_macvtap entered promiscuous mode
[   71.232696][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.244514][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.253781][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.270675][ T3561] device veth1_macvtap entered promiscuous mode
[   71.291399][ T3565] device veth1_macvtap entered promiscuous mode
[   71.305433][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.318617][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.327200][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[   71.333889][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
[   71.348516][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.358397][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.426620][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.438744][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.451694][ T3561] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.463485][ T3563] device veth0_vlan entered promiscuous mode
[   71.486862][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.507591][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.517522][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.526567][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.536227][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.544827][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.562051][ T3563] device veth1_vlan entered promiscuous mode
[   71.569300][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.583603][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.593556][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.604070][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.623380][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.641031][ T3568] Bluetooth: hci4: command tx timeout
[   71.644309][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.657362][ T3568] Bluetooth: hci0: command tx timeout
[   71.657406][ T3568] Bluetooth: hci1: command tx timeout
[   71.657434][ T3568] Bluetooth: hci3: command tx timeout
[   71.657462][ T3568] Bluetooth: hci2: command tx timeout
[   71.679887][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.692594][ T3561] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.720523][ T3561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.732719][ T3561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.742175][ T3561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.751385][ T3561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.762305][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.770439][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.778793][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.787590][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.796580][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.805699][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.817949][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.829060][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.839604][ T3565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.850195][ T3565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.861995][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.891172][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.900003][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.909377][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.918571][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.932696][ T3565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.945472][ T3565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.954650][ T3565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.964601][ T3565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.988471][ T3563] device veth0_macvtap entered promiscuous mode
[   72.003717][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.014213][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.040155][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.049062][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.057912][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.067148][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.117132][ T3563] device veth1_macvtap entered promiscuous mode
[   72.149855][ T3556] device veth0_vlan entered promiscuous mode
[   72.157394][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.167468][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.177215][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.186557][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.194889][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.211999][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.220030][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.259609][ T3556] device veth1_vlan entered promiscuous mode
[   72.268071][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.300558][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.302069][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.311704][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.330017][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.339983][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.350450][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.360597][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.374279][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.386648][ T3563] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.408686][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.426288][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.435258][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.458678][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.469642][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.481803][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.492503][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.502891][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.513397][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.526804][ T3563] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.553403][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.562909][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.574718][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.588350][ T3563] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.596957][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.608891][ T3563] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.624268][ T3563] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.635448][ T3563] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.678886][ T3556] device veth0_macvtap entered promiscuous mode
[   72.688638][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.698899][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.709305][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.715975][   T26] audit: type=1326 audit(1719541287.835:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3633 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x0
[   72.719457][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.780840][ T3556] device veth1_macvtap entered promiscuous mode
[   72.803064][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.814898][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.835449][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.845838][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.874761][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.884480][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.895130][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.907560][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.915590][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.928120][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.938104][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.948902][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.958975][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.969900][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.983694][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.999173][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.011809][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.023961][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.034793][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.044974][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.055722][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.065963][ T3556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.076567][ T3556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.088615][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.099822][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.112814][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.127725][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.137448][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.152657][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.191678][ T3556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.207157][ T3556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.233137][ T3556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.242645][ T3556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.270122][ T3640] loop0: detected capacity change from 0 to 512
[   73.281186][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.289229][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.361421][ T3640] EXT4-fs (loop0): orphan cleanup on readonly fs
[   73.371400][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.402284][ T3640] EXT4-fs error (device loop0): ext4_quota_enable:6968: inode #4: comm syz.0.6: iget: bogus i_mode (3600)
[   73.414321][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.452115][ T3640] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.6: Bad quota inode: 4, type: 1
[   73.476373][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.496265][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.508149][ T3640] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   73.520522][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.537893][ T3640] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   73.583548][ T3640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   73.601465][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.647240][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.671831][ T3646] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET)
[   73.693435][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.693638][ T3640] EXT4-fs error (device loop0): __ext4_remount:6425: comm syz.0.6: Abort forced by user
[   73.720307][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.725188][ T3572] Bluetooth: hci2: command tx timeout
[   73.731626][ T3568] Bluetooth: hci3: command tx timeout
[   73.733777][ T3572] Bluetooth: hci1: command tx timeout
[   73.739106][ T3568] Bluetooth: hci0: command tx timeout
[   73.739135][ T3568] Bluetooth: hci4: command tx timeout
[   73.749301][ T3640] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[   73.785618][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.946631][ T3561] EXT4-fs (loop0): unmounting filesystem.
[   73.975133][ T3657] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.053246][ T3659] loop3: detected capacity change from 0 to 512
[   74.131437][ T3659] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   74.163016][ T3659] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   74.208364][ T3659] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   74.230158][ T3659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   74.247303][ T3659] System zones: 0-2, 18-18, 34-34
[   74.304286][ T3659] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   74.356373][ T3659] EXT4-fs (loop3): 1 truncate cleaned up
[   74.380904][ T3659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   74.427059][ T3659] EXT4-fs warning (device loop3): ext4_group_extend:1870: can't shrink FS - resize aborted
[   74.516830][   T26] audit: type=1326 audit(1719541289.635:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.0.16" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a48375b29 code=0x0
[   74.556257][ T3565] EXT4-fs (loop3): unmounting filesystem.
[   74.685237][ T3683] loop0: detected capacity change from 0 to 7
[   74.718203][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.726979][ T3683] Dev loop0: unable to read RDB block 7
[   74.736212][ T3683]  loop0: unable to read partition table
[   74.743235][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.754718][ T3683] loop0: partition table beyond EOD, truncated
[   74.764661][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.772597][ T3683] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[   74.772597][ T3683] 
) failed (rc=-5)
[   74.793372][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.813622][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.829205][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.838631][ T3689] loop1: detected capacity change from 0 to 512
[   74.844959][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845014][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845039][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845063][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845086][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845109][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845131][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845154][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845177][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845200][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845222][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845244][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845266][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845289][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845312][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845336][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845359][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845382][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845405][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845428][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845451][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845475][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845498][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845522][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845545][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845569][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845591][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845614][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845637][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845660][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845682][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845705][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845727][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845750][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845773][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845796][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.845819][  T153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   74.875284][  T153] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   74.903774][ T3689] EXT4-fs (loop1): orphan cleanup on readonly fs
[   75.179383][ T3689] EXT4-fs error (device loop1): ext4_quota_enable:6968: inode #4: comm syz.1.21: iget: bogus i_mode (3600)
[   75.197973][ T3689] EXT4-fs error (device loop1): ext4_quota_enable:6971: comm syz.1.21: Bad quota inode: 4, type: 1
[   75.209872][ T3689] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   75.234638][ T3689] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   75.244914][ T3689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   75.320162][ T3689] EXT4-fs error (device loop1): __ext4_remount:6425: comm syz.1.21: Abort forced by user
[   75.360945][ T3689] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   75.449993][ T3555] EXT4-fs (loop1): unmounting filesystem.
[   75.840734][ T3709] loop3: detected capacity change from 0 to 2048
[   75.856607][ T3711] process 'syz.2.29' launched '/dev/fd/7/./file0' with NULL argv: empty string added
[   75.938539][ T3716] loop1: detected capacity change from 0 to 1024
[   75.959418][ T3709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   75.984935][ T3682] loop4: detected capacity change from 0 to 32768
[   75.993154][ T3682] =======================================================
[   75.993154][ T3682] WARNING: The mand mount option has been deprecated and
[   75.993154][ T3682]          and is ignored by this kernel. Remove the mand
[   75.993154][ T3682]          option from the mount to silence this warning.
[   75.993154][ T3682] =======================================================
[   76.159343][ T3682] XFS (loop4): Mounting V5 Filesystem
[   76.260010][ T3682] XFS (loop4): Ending clean mount
[   76.387432][ T3556] XFS (loop4): Unmounting Filesystem
[   76.805206][ T3565] EXT4-fs (loop3): unmounting filesystem.
[   76.875208][ T3714] loop0: detected capacity change from 0 to 32768
[   76.903125][ T3546] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.936664][ T3714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.31 (3714)
[   76.968782][   T26] audit: type=1326 audit(1719541292.085:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3733 comm="syz.3.36" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ec0575b29 code=0x0
[   77.061054][ T3714] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.073357][ T3635] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.111679][ T3714] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   77.126411][ T3714] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   77.146442][ T3714] BTRFS info (device loop0): use zstd compression, level 3
[   77.163393][ T3714] BTRFS info (device loop0): using free space tree
[   77.171260][ T3546] usb 2-1: Using ep0 maxpacket: 32
[   77.292105][ T3546] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.319257][ T3546] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.352028][ T3635] usb 3-1: Using ep0 maxpacket: 32
[   77.371737][  T155] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   77.397963][ T3714] BTRFS info (device loop0): enabling ssd optimizations
[   77.511155][ T3546] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.40
[   77.532959][ T3546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.554993][ T3546] usb 2-1: Product: syz
[   77.560098][ T3546] usb 2-1: Manufacturer: syz
[   77.580020][ T3546] usb 2-1: SerialNumber: syz
[   77.592526][ T3635] usb 3-1: config 1 interface 0 has no altsetting 0
[   77.620947][  T155] usb 5-1: Using ep0 maxpacket: 16
[   77.686032][ T3561] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.744707][  T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   77.759068][  T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   77.769714][  T155] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   77.772501][ T3635] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[   77.779829][  T155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.824462][ T3635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.838126][ T3635] usb 3-1: Product: syz
[   77.838369][  T155] usb 5-1: config 0 descriptor??
[   77.851835][ T3635] usb 3-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[   77.891437][ T3546] usbhid 2-1:1.0: can't add hid device: -22
[   77.897869][ T3546] usbhid: probe of 2-1:1.0 failed with error -22
[   77.917847][ T3635] usb 3-1: SerialNumber: syz
[   78.098002][ T3546] usb 2-1: USB disconnect, device number 2
[   78.118284][ T3738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.175723][ T3738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.416538][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.481951][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.565331][ T3738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.612926][ T3738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.750999][  T155] hid (null): bogus close delimiter
[   78.831905][  T155] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0
[   78.858714][  T155] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0
[   78.932050][  T155] hid-generic 0003:0158:0100.0002: bogus close delimiter
[   78.990101][  T155] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed
[   79.019677][  T155] hid-generic: probe of 0003:0158:0100.0002 failed with error -22
[   79.059350][ T3780] hpfs: bad mount options.
[   79.068008][  T155] usb 5-1: USB disconnect, device number 2
[   79.087590][ T3635] usbhid 3-1:1.0: can't add hid device: -71
[   79.093808][ T3635] usbhid: probe of 3-1:1.0 failed with error -71
[   79.138942][ T3635] usb 3-1: USB disconnect, device number 2
[   79.334002][ T3786] loop1: detected capacity change from 0 to 1024
[   79.480449][   T26] audit: type=1326 audit(1719541294.595:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3789 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa902175b29 code=0x7ffc0000
[   79.554561][   T26] audit: type=1326 audit(1719541294.635:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3789 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fa902175b29 code=0x7ffc0000
[   79.618020][ T3792] loop3: detected capacity change from 0 to 512
[   79.688699][   T26] audit: type=1326 audit(1719541294.635:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3789 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa902175b29 code=0x7ffc0000
[   79.688718][ T3792] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   79.771888][   T26] audit: type=1326 audit(1719541294.885:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3795 comm="syz.2.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa902175b29 code=0x0
[   79.797348][ T3792] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   79.839769][ T3792] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   79.888145][ T3792] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   79.938716][ T3792] System zones: 0-2, 18-18, 34-34
[   80.017558][ T3792] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   80.081178][ T3792] EXT4-fs (loop3): 1 truncate cleaned up
[   80.115253][ T3792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   80.747642][ T3792] EXT4-fs warning (device loop3): ext4_group_extend:1870: can't shrink FS - resize aborted
[   80.786797][ T3811] loop1: detected capacity change from 0 to 512
[   80.912852][ T3811] EXT4-fs (loop1): orphan cleanup on readonly fs
[   80.913801][ T3783] loop0: detected capacity change from 0 to 32768
[   80.960032][ T3565] EXT4-fs (loop3): unmounting filesystem.
[   80.989791][ T3783] XFS (loop0): Mounting V5 Filesystem
[   80.994671][ T3811] EXT4-fs (loop1): 1 orphan inode deleted
[   81.062974][ T3811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   81.087920][ T3783] XFS (loop0): Ending clean mount
[   81.113243][ T3783] XFS (loop0): Quotacheck needed: Please wait.
[   81.228484][ T3783] XFS (loop0): Quotacheck: Done.
[   81.266301][ T3555] EXT4-fs (loop1): unmounting filesystem.
[   81.405132][ T3827] loop4: detected capacity change from 0 to 2048
[   81.428516][ T3561] XFS (loop0): Unmounting Filesystem
[   81.519845][ T3834] loop1: detected capacity change from 0 to 1024
[   81.549745][ T3827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   81.566047][   T14] cfg80211: failed to load regulatory.db
[   82.253845][ T3556] EXT4-fs (loop4): unmounting filesystem.
[   82.516425][   T26] audit: type=1326 audit(1719541297.635:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3853 comm="syz.1.63" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x0
[   82.874727][ T3867] loop3: detected capacity change from 0 to 1024
[   82.942142][   T26] audit: type=1800 audit(1719541298.055:10): pid=3865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.68" name="bus" dev="sda1" ino=1970 res=0 errno=0
[   83.299038][ T3875] loop4: detected capacity change from 0 to 1024
[   83.406057][ T3875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   83.442614][ T3884] loop3: detected capacity change from 0 to 512
[   83.465523][ T3884] EXT4-fs: Ignoring removed oldalloc option
[   83.493132][ T3575] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   83.529288][ T3884] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.75: Parent and EA inode have the same ino 15
[   83.563322][ T3884] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   83.605619][ T3891] loop2: detected capacity change from 0 to 512
[   83.617959][ T3556] EXT4-fs (loop4): unmounting filesystem.
[   83.625361][ T3884] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.75: Parent and EA inode have the same ino 15
[   83.640541][ T3884] EXT4-fs (loop3): 1 orphan inode deleted
[   83.664717][ T3884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   83.666451][ T3891] EXT4-fs (loop2): orphan cleanup on readonly fs
[   83.698003][ T3891] EXT4-fs (loop2): 1 orphan inode deleted
[   83.741153][ T3891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   83.759603][ T3891] EXT4-fs (loop2): unmounting filesystem.
[   83.793366][ T3565] EXT4-fs (loop3): unmounting filesystem.
[   83.815046][ T3896] loop4: detected capacity change from 0 to 1024
[   83.876039][ T3575] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   83.929613][ T3575] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   83.952464][ T3575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.004258][ T3575] usb 1-1: config 0 descriptor??
[   84.029952][ T3902] loop3: detected capacity change from 0 to 256
[   84.073453][ T3575] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   84.100939][ T3635] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.504732][   T26] audit: type=1326 audit(1719541299.625:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3908 comm="syz.4.86" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x0
[   84.873288][ T3912] loop0: detected capacity change from 0 to 1024
[   84.937546][ T3912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   84.982415][ T3635] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34
[   85.009450][ T3635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.036794][ T3635] usb 2-1: Product: syz
[   85.050571][ T3635] usb 2-1: Manufacturer: syz
[   85.066977][ T3635] usb 2-1: SerialNumber: syz
[   85.089810][ T3635] usb 2-1: config 0 descriptor??
[   85.372749][   T14] usb 2-1: USB disconnect, device number 3
[   85.429641][   T26] audit: type=1804 audit(1719541300.545:12): pid=3928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.71" name="/root/syzkaller.zbaiVe/10/bus/file1" dev="loop0" ino=15 res=1 errno=0
[   85.440128][ T3928] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #15: comm syz.0.71: corrupted in-inode xattr
[   85.666469][ T3930] loop4: detected capacity change from 0 to 512
[   85.903910][ T3930] EXT4-fs: Ignoring removed oldalloc option
[   86.253481][ T3930] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.91: Parent and EA inode have the same ino 15
[   86.331071][ T3930] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.91: Parent and EA inode have the same ino 15
[   86.343753][ T3928] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.71: corrupted in-inode xattr
[   86.361949][ T3930] EXT4-fs (loop4): 1 orphan inode deleted
[   86.374759][ T3930] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   86.480506][ T3928] syz.0.71: attempt to access beyond end of device
[   86.480506][ T3928] loop0: rw=2049, sector=3606377190, nr_sectors = 2 limit=1024
[   86.499749][ T3556] EXT4-fs (loop4): unmounting filesystem.
[   86.524518][ T3928] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1803188595)
[   86.538543][ T3928] Buffer I/O error on device loop0, logical block 1803188595
[   86.546800][ T3928] syz.0.71: attempt to access beyond end of device
[   86.546800][ T3928] loop0: rw=2049, sector=3403208898, nr_sectors = 2 limit=1024
[   86.561251][ T3928] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1701604449)
[   86.574120][ T3928] Buffer I/O error on device loop0, logical block 1701604449
[   86.581975][ T3928] syz.0.71: attempt to access beyond end of device
[   86.581975][ T3928] loop0: rw=2049, sector=59108, nr_sectors = 2 limit=1024
[   86.596025][ T3928] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 29554)
[   86.608214][ T3928] Buffer I/O error on device loop0, logical block 29554
[   87.287115][ T3975] loop4: detected capacity change from 0 to 512
[   87.509973][ T3975] EXT4-fs: Ignoring removed oldalloc option
[   87.578915][ T3975] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.107: Parent and EA inode have the same ino 15
[   87.598130][ T3975] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.107: Parent and EA inode have the same ino 15
[   87.617720][ T3975] EXT4-fs (loop4): 1 orphan inode deleted
[   87.624199][ T3975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   87.717576][ T3605] usb 1-1: USB disconnect, device number 2
[   87.745352][ T3561] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.zbaiVe/10/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   87.859730][ T3556] EXT4-fs (loop4): unmounting filesystem.
[   87.896856][ T3561] EXT4-fs (loop0): Inode 15 (ffff88805a43e450): i_reserved_data_blocks (1) not cleared!
[   87.930299][ T3561] EXT4-fs (loop0): unmounting filesystem.
[   88.410908][ T3605] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   88.456538][ T3767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.650965][ T3635] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   88.671147][ T3605] usb 2-1: Using ep0 maxpacket: 32
[   88.679563][ T3767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.793231][ T3605] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[   88.811370][ T3605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.851175][ T3605] usb 2-1: config 0 descriptor??
[   88.860569][ T3767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.899578][ T3605] gspca_main: sunplus-2.14.0 probing 0458:7006
[   88.910986][ T3635] usb 4-1: Using ep0 maxpacket: 32
[   88.951997][ T4010] netlink: 'syz.4.122': attribute type 10 has an invalid length.
[   89.004636][ T4010] device hsr0 entered promiscuous mode
[   89.115749][ T4010] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.184626][ T4013] input: syz1 as /devices/virtual/input/input5
[   89.194542][ T3635] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   89.209998][ T4010] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   89.210859][ T3635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.292049][ T4010] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   89.306400][ T3635] usb 4-1: Product: syz
[   89.307146][ T4010] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   89.310585][ T3635] usb 4-1: Manufacturer: syz
[   89.338224][ T3572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.347862][ T3572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.356838][ T3572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.364771][ T3572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.373872][ T3572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   89.382406][ T3572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.449262][ T3635] usb 4-1: SerialNumber: syz
[   89.486849][ T3635] usb 4-1: config 0 descriptor??
[   89.492990][ T3767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.510179][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'.
[   89.597658][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   89.606326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.620790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   89.629053][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   89.637309][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.645621][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.657298][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.665546][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.673762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.681951][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.818310][ T3635] cdc_ether: probe of 4-1:0.0 failed with error -22
[   89.871210][ T3635] usb 4-1: unsupported MDLM descriptors
[   90.306343][ T4025] loop2: detected capacity change from 0 to 512
[   90.347509][ T4014] chnl_net:caif_netlink_parms(): no params data found
[   90.399943][ T4025] EXT4-fs: Ignoring removed mblk_io_submit option
[   90.460577][ T4025] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.517081][ T4025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   90.596795][ T4025] EXT4-fs (loop2): 1 truncate cleaned up
[   90.642884][ T4025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   90.774312][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.789155][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.811265][ T4014] device bridge_slave_0 entered promiscuous mode
[   90.897381][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.901057][ T3605] gspca_sunplus: reg_r err -71
[   90.912965][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.929628][ T3605] sunplus: probe of 2-1:0.0 failed with error -71
[   90.944616][ T4014] device bridge_slave_1 entered promiscuous mode
[   90.980678][ T3605] usb 2-1: USB disconnect, device number 4
[   90.997708][ T3563] EXT4-fs (loop2): unmounting filesystem.
[   91.132280][ T4014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.154782][   T14] usb 4-1: USB disconnect, device number 2
[   91.223229][ T4014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.481237][ T3569] Bluetooth: hci2: command tx timeout
[   91.620456][ T4014] team0: Port device team_slave_0 added
[   92.437328][ T4014] team0: Port device team_slave_1 added
[   92.531546][ T4066] loop2: detected capacity change from 0 to 256
[   93.544714][ T4014] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.560893][ T3569] Bluetooth: hci2: command tx timeout
[   93.600646][ T4014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.697347][ T4014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.758839][ T4082] Zero length message leads to an empty skb
[   94.237914][ T4014] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.246687][ T4014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.272801][    C0] vkms_vblank_simulate: vblank timer overrun
[   94.318284][ T4014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.515371][ T4014] device hsr_slave_0 entered promiscuous mode
[   94.523080][ T3772] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.544738][ T4014] device hsr_slave_1 entered promiscuous mode
[   94.553366][ T4014] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.563404][ T4014] Cannot create hsr debugfs directory
[   94.780860][ T3772] usb 4-1: Using ep0 maxpacket: 32
[   94.973964][ T4101] loop1: detected capacity change from 0 to 512
[   95.237872][ T3767] device hsr_slave_0 left promiscuous mode
[   95.247553][ T3767] device hsr_slave_1 left promiscuous mode
[   95.253210][ T4101] EXT4-fs (loop1): orphan cleanup on readonly fs
[   95.254133][ T3772] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   95.271542][ T3772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.280315][ T3772] usb 4-1: Product: syz
[   95.331293][ T3772] usb 4-1: Manufacturer: syz
[   95.341581][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'.
[   95.358065][ T3772] usb 4-1: SerialNumber: syz
[   95.436988][ T4101] EXT4-fs error (device loop1): ext4_quota_enable:6968: inode #4: comm syz.1.142: iget: bogus i_mode (3600)
[   95.468152][ T3772] usb 4-1: config 0 descriptor??
[   95.585410][ T4101] EXT4-fs error (device loop1): ext4_quota_enable:6971: comm syz.1.142: Bad quota inode: 4, type: 1
[   95.614065][ T4101] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   95.628934][ T4101] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   95.636147][ T4101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   95.721357][ T3569] Bluetooth: hci2: command tx timeout
[   95.790880][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.022790][ T3772] cdc_ether: probe of 4-1:0.0 failed with error -22
[   96.030608][ T3772] usb 4-1: unsupported MDLM descriptors
[   96.075258][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.114378][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.144535][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.190324][ T3555] EXT4-fs (loop1): unmounting filesystem.
[   96.214138][ T3767] device bridge_slave_1 left promiscuous mode
[   96.266223][ T3767] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.340988][ T3767] device bridge_slave_0 left promiscuous mode
[   96.353965][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.478989][ T3767] device veth1_macvtap left promiscuous mode
[   96.493815][ T3767] device veth0_macvtap left promiscuous mode
[   96.509505][ T3767] device veth1_vlan left promiscuous mode
[   96.529816][ T3767] device veth0_vlan left promiscuous mode
[   96.651224][ T4113] loop1: detected capacity change from 0 to 4096
[   96.699391][ T4113] ntfs3: Invalid value for umask.
[   98.356364][ T3572] Bluetooth: hci2: command tx timeout
[   98.382622][ T3635] usb 4-1: USB disconnect, device number 3
[   98.878016][ T4149] loop3: detected capacity change from 0 to 512
[   98.960685][ T4149] EXT4-fs (loop3): orphan cleanup on readonly fs
[   98.980995][ T4149] EXT4-fs error (device loop3): ext4_quota_enable:6968: inode #4: comm syz.3.154: iget: bogus i_mode (3600)
[   99.039911][ T4129] loop1: detected capacity change from 0 to 32768
[   99.054960][ T4149] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz.3.154: Bad quota inode: 4, type: 1
[   99.083397][ T4149] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   99.098513][ T4149] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   99.105817][ T4149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   99.136387][ T4149] EXT4-fs error (device loop3): __ext4_remount:6425: comm syz.3.154: Abort forced by user
[   99.153893][ T4129] XFS (loop1): Mounting V5 Filesystem
[   99.158634][ T4149] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   99.225685][ T3565] EXT4-fs (loop3): unmounting filesystem.
[   99.306122][ T4129] XFS (loop1): Ending clean mount
[   99.501864][ T3555] XFS (loop1): Unmounting Filesystem
[  100.456835][ T3767] team0 (unregistering): Port device team_slave_1 removed
[  100.515303][ T4184] Illegal XDP return value 4294967262 on prog  (id 18) dev N/A, expect packet loss!
[  100.633937][ T3767] team0 (unregistering): Port device team_slave_0 removed
[  100.825780][ T3767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.890422][ T3767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.103827][ T3605] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.994326][ T4205] loop2: detected capacity change from 0 to 2048
[  102.080211][ T4205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  102.141808][ T3605] usb 4-1: Using ep0 maxpacket: 8
[  102.439005][ T3563] EXT4-fs (loop2): unmounting filesystem.
[  102.451037][ T3605] usb 4-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  102.467522][ T3605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.479251][ T3605] usb 4-1: Product: syz
[  102.507476][ T3605] usb 4-1: Manufacturer: syz
[  102.512200][ T3605] usb 4-1: SerialNumber: syz
[  102.566213][ T3605] usb 4-1: config 0 descriptor??
[  102.719377][ T3767] bond0 (unregistering): Released all slaves
[  103.570369][ T3605] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  104.665540][ T3605] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  104.674562][ T3605] dib0700: firmware download failed at 7 with -22
[  104.764955][ T3605] usb 4-1: USB disconnect, device number 4
[  104.845669][ T4242] syz.4.179 (4242): attempted to duplicate a private mapping with mremap.  This is not supported.
[  104.913431][ T3569] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  105.326565][ T4254] loop3: detected capacity change from 0 to 2048
[  105.433375][ T4254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  105.507359][ T4014] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.547795][ T4014] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.579590][ T4014] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.665034][ T4014] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.774143][ T3565] EXT4-fs (loop3): unmounting filesystem.
[  106.148436][ T4014] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.190103][ T4278] loop1: detected capacity change from 0 to 512
[  106.211980][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.219938][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.265244][ T4014] 8021q: adding VLAN 0 to HW filter on device team0
[  106.317334][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.338923][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.374702][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.381907][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.463365][ T3758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  106.504386][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.520270][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.567110][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.602320][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.609505][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.645790][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.692220][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.747798][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.758925][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.775883][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.798367][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.850887][ T3772] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  106.860902][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.877559][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.897552][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.921347][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.940499][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  106.961881][ T4014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.101106][ T3772] usb 5-1: Using ep0 maxpacket: 32
[  107.221195][ T3772] usb 5-1: config 0 has an invalid interface number: 115 but max is 0
[  107.401174][ T3772] usb 5-1: config 0 has no interface number 0
[  107.407498][ T3772] usb 5-1: config 0 interface 115 has no altsetting 0
[  108.190563][ T4272] loop3: detected capacity change from 0 to 32768
[  108.232991][ T4272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.187 (4272)
[  108.278116][ T4272] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  108.329397][ T4272] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  108.339004][ T3772] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  108.368623][ T3772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.377324][ T4272] BTRFS info (device loop3): turning off barriers
[  108.391114][ T4272] BTRFS info (device loop3): disabling tree log
[  108.396102][ T3772] usb 5-1: Product: syz
[  108.397522][ T4272] BTRFS info (device loop3): setting nodatasum
[  108.434891][ T3772] usb 5-1: Manufacturer: syz
[  108.439922][ T3772] usb 5-1: SerialNumber: syz
[  108.476869][ T4272] BTRFS info (device loop3): enabling tree log
[  108.501211][ T3772] usb 5-1: config 0 descriptor??
[  108.514719][ T4272] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  108.564403][ T4272] BTRFS info (device loop3): use lzo compression, level 0
[  108.564772][ T3772] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.115/input/input7
[  108.595907][ T4272] BTRFS info (device loop3): using free space tree
[  108.712067][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.728894][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.781572][ T4014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.803694][ T2988] bcm5974 5-1:0.115: could not read from device
[  108.821078][ T3764] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  108.839083][ T3772] usb 5-1: USB disconnect, device number 3
[  108.847132][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.856810][ T2988] bcm5974 5-1:0.115: could not read from device
[  108.864475][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.914456][ T4272] BTRFS info (device loop3): enabling ssd optimizations
[  108.954406][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.973417][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.994215][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.011810][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.044398][ T4014] device veth0_vlan entered promiscuous mode
[  109.105662][ T3565] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.120269][ T4014] device veth1_vlan entered promiscuous mode
[  109.181043][ T3764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.222051][ T3764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.240646][ T4014] device veth0_macvtap entered promiscuous mode
[  109.269198][ T3764] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  109.289020][ T4014] device veth1_macvtap entered promiscuous mode
[  109.297645][ T3764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.345472][ T3764] usb 2-1: config 0 descriptor??
[  109.400115][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  109.429360][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  109.448260][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.468479][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.488102][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.508883][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.550886][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.586748][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.640816][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.660797][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.696508][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.732287][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.760835][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.799683][ T4014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.829883][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.842812][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  109.851946][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  109.862669][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'.
[  109.894607][ T3764] uclogic 0003:5543:0005.0003: unknown main item tag 0x0
[  109.902435][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.923316][ T3764] uclogic 0003:5543:0005.0003: No inputs registered, leaving
[  109.978542][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.990474][ T3764] uclogic 0003:5543:0005.0003: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0
[  110.021194][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.100900][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.115789][ T3764] usb 2-1: USB disconnect, device number 5
[  110.138813][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.187077][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.228659][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.268192][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.316062][ T4014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.352296][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  110.380092][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  110.446787][ T4014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.478533][ T4014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.507512][ T4014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.551267][ T4014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.906493][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.938409][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.012953][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.051941][ T3771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.073465][ T3771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.107232][ T4338] loop4: detected capacity change from 0 to 32768
[  111.131731][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.503782][ T4338] XFS (loop4): Mounting V5 Filesystem
[  111.680096][ T4338] XFS (loop4): Ending clean mount
[  111.905834][ T3556] XFS (loop4): Unmounting Filesystem
[  112.158170][ T4396] loop1: detected capacity change from 0 to 512
[  112.210480][ T4396] EXT4-fs (loop1): orphan cleanup on readonly fs
[  112.232053][ T4396] EXT4-fs error (device loop1): ext4_quota_enable:6968: inode #4: comm syz.1.204: iget: bogus i_mode (3600)
[  112.263869][ T4396] EXT4-fs error (device loop1): ext4_quota_enable:6971: comm syz.1.204: Bad quota inode: 4, type: 1
[  112.311294][ T4396] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  112.390857][ T4396] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  112.397630][ T4396] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  112.502289][ T4405] netlink: 'syz.2.206': attribute type 1 has an invalid length.
[  112.633388][ T3555] EXT4-fs (loop1): unmounting filesystem.
[  112.756026][ T4410] 8021q: adding VLAN 0 to HW filter on device batadv1
[  112.822128][ T4410] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  112.864563][ T4414] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.877210][ T3767] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  113.378512][ T4390] loop3: detected capacity change from 0 to 32768
[  113.506051][ T4417] bond1 (unregistering): (slave batadv1): Removing an active aggregator
[  113.517798][ T4417] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  113.542615][ T4417] bond1 (unregistering): Released all slaves
[  113.571098][ T4390] XFS (loop3): Mounting V5 Filesystem
[  113.750507][ T4390] XFS (loop3): Ending clean mount
[  113.770332][ T4390] XFS (loop3): Quotacheck needed: Please wait.
[  113.869343][ T4441] loop2: detected capacity change from 0 to 256
[  113.889386][ T4390] XFS (loop3): Quotacheck: Done.
[  114.143534][ T3565] XFS (loop3): Unmounting Filesystem
[  116.055874][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[  116.734703][ T4484] loop4: detected capacity change from 0 to 512
[  116.829755][ T4484] EXT4-fs (loop4): orphan cleanup on readonly fs
[  116.897578][ T4484] EXT4-fs error (device loop4): ext4_quota_enable:6968: inode #4: comm syz.4.219: iget: bogus i_mode (3600)
[  116.979501][ T4484] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.219: Bad quota inode: 4, type: 1
[  116.996606][ T4484] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  117.012679][ T4484] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  117.019433][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  117.250889][ T3572] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  117.261190][ T3556] EXT4-fs (loop4): unmounting filesystem.
[  118.103737][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'.
[  118.875566][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'.
[  119.002486][ T3572] Bluetooth: hci4: command tx timeout
[  119.874914][ T4525] loop2: detected capacity change from 0 to 512
[  119.984027][ T4525] EXT4-fs (loop2): orphan cleanup on readonly fs
[  120.005093][ T4525] EXT4-fs error (device loop2): ext4_quota_enable:6968: inode #4: comm syz.2.232: iget: bogus i_mode (3600)
[  120.697658][ T4525] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.232: Bad quota inode: 4, type: 1
[  120.746999][ T4525] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  120.805927][ T4525] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  120.869180][ T4525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  120.930317][ T4525] EXT4-fs error (device loop2): __ext4_remount:6425: comm syz.2.232: Abort forced by user
[  121.081947][ T3563] EXT4-fs (loop2): unmounting filesystem.
[  122.182940][ T3572] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  123.138880][ T3572] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  123.509583][ T4559] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  123.723669][ T4560] loop2: detected capacity change from 0 to 256
[  123.891198][ T3606] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  124.151177][ T3606] usb 2-1: Using ep0 maxpacket: 16
[  124.227235][   T26] audit: type=1326 audit(1719541339.345:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  124.316883][   T26] audit: type=1326 audit(1719541339.375:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  124.339761][ T3606] usb 2-1: unable to get BOS descriptor or descriptor too short
[  124.351506][ T3606] usb 2-1: no configurations
[  124.356145][ T3606] usb 2-1: can't read configurations, error -22
[  124.411060][   T26] audit: type=1326 audit(1719541339.375:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  124.468569][   T26] audit: type=1326 audit(1719541339.405:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  125.710889][ T3569] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  125.984017][ T4596] random: crng reseeded on system resumption
[  127.720940][ T3569] Bluetooth: hci2: command tx timeout
[  128.510959][ T3772] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  128.552152][ T4627] loop3: detected capacity change from 0 to 256
[  128.688397][ T4629] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  128.891506][ T3772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  129.060935][ T4345] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  129.071050][ T3772] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  129.085912][ T3772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.111858][ T3772] usb 5-1: Product: syz
[  129.122222][ T3772] usb 5-1: Manufacturer: syz
[  129.139431][ T3772] usb 5-1: SerialNumber: syz
[  129.179809][ T3772] usb 5-1: config 0 descriptor??
[  129.313157][ T4345] usb 2-1: Using ep0 maxpacket: 16
[  129.384124][   T26] audit: type=1326 audit(1719541344.505:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  129.447421][   T26] audit: type=1326 audit(1719541344.505:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  129.451067][ T4345] usb 2-1: unable to get BOS descriptor or descriptor too short
[  129.523171][ T3772] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  129.546823][   T26] audit: type=1326 audit(1719541344.505:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  129.548314][ T4345] usb 2-1: no configurations
[  129.602095][   T26] audit: type=1326 audit(1719541344.555:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  129.606759][ T3758] udevd[3758]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.649036][ T3772] usb 5-1: USB disconnect, device number 4
[  129.677048][ T4345] usb 2-1: can't read configurations, error -22
[  130.890116][   T26] audit: type=1326 audit(1719541346.005:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  130.912253][    C0] vkms_vblank_simulate: vblank timer overrun
[  130.986030][ T4660] loop3: detected capacity change from 0 to 1024
[  131.008122][   T26] audit: type=1326 audit(1719541346.045:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  131.099174][   T26] audit: type=1326 audit(1719541346.045:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  131.130017][   T26] audit: type=1326 audit(1719541346.045:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  131.182251][ T3569] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  131.200590][   T26] audit: type=1326 audit(1719541346.045:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  131.284963][ T4672] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  131.300026][   T26] audit: type=1326 audit(1719541346.045:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  131.735301][ T3772] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.641015][ T3772] usb 5-1: Using ep0 maxpacket: 16
[  132.764237][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[  132.770645][ T3772] usb 5-1: unable to get BOS descriptor or descriptor too short
[  132.790304][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
[  132.799804][ T3772] usb 5-1: no configurations
[  132.809928][ T3772] usb 5-1: can't read configurations, error -22
[  132.885357][ T4702] loop0: detected capacity change from 0 to 512
[  132.898162][ T4702] EXT4-fs (loop0): orphan cleanup on readonly fs
[  132.905666][ T4702] EXT4-fs error (device loop0): ext4_quota_enable:6968: inode #4: comm syz.0.285: iget: bogus i_mode (3600)
[  132.928071][ T4702] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz.0.285: Bad quota inode: 4, type: 1
[  133.091529][ T4702] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  133.143733][ T4702] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  133.167033][ T4702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.200590][ T4702] EXT4-fs error (device loop0): __ext4_remount:6425: comm syz.0.285: Abort forced by user
[  133.311871][ T4014] EXT4-fs (loop0): unmounting filesystem.
[  133.447260][ T4713] loop4: detected capacity change from 0 to 1024
[  133.834005][ T3569] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  134.255359][ T3569] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  136.070760][    C0] sched: RT throttling activated
[  136.327710][ T4750] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  136.620926][ T3772] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  136.795398][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'.
[  137.687949][ T4774] loop0: detected capacity change from 0 to 512
[  137.728573][ T4774] EXT4-fs: Ignoring removed oldalloc option
[  137.800878][ T3772] usb 2-1: Using ep0 maxpacket: 16
[  137.819512][ T4774] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.307: Parent and EA inode have the same ino 15
[  137.840187][ T4774] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.307: Parent and EA inode have the same ino 15
[  138.045909][ T4774] EXT4-fs (loop0): 1 orphan inode deleted
[  138.133438][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  138.167062][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  138.167097][   T26] audit: type=1326 audit(1719541353.285:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  138.351299][ T3772] usb 2-1: unable to get BOS descriptor or descriptor too short
[  138.387929][ T3772] usb 2-1: no configurations
[  138.562176][ T3772] usb 2-1: can't read configurations, error -22
[  138.590915][   T26] audit: type=1326 audit(1719541353.325:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  138.773958][ T4014] EXT4-fs (loop0): unmounting filesystem.
[  140.636913][ T4821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'.
[  141.258188][ T4823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.321'.
[  141.606697][ T4830] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  141.940966][ T3635] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  141.981477][ T4844] loop4: detected capacity change from 0 to 2048
[  142.191217][ T3635] usb 2-1: Using ep0 maxpacket: 16
[  142.218687][ T4844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  142.254463][   T26] audit: type=1326 audit(1719541357.375:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  142.315433][ T3635] usb 2-1: unable to get BOS descriptor or descriptor too short
[  142.421782][ T3635] usb 2-1: no configurations
[  142.593790][ T3635] usb 2-1: can't read configurations, error -22
[  142.857630][   T26] audit: type=1326 audit(1719541357.375:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  143.023507][   T26] audit: type=1326 audit(1719541357.375:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  143.042954][ T3556] EXT4-fs (loop4): unmounting filesystem.
[  143.065027][   T26] audit: type=1326 audit(1719541357.405:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  143.201987][ T3569] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[  143.653545][ T4871] loop4: detected capacity change from 0 to 8
[  143.688308][ T4873] loop0: detected capacity change from 0 to 16
[  143.695568][ T4873] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  143.723885][ T3758] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  144.767751][ T4889] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  144.923767][ T4893] loop4: detected capacity change from 0 to 2048
[  144.978855][ T4893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  145.070897][  T155] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  145.314944][  T155] usb 2-1: Using ep0 maxpacket: 16
[  145.323862][ T3556] EXT4-fs (loop4): unmounting filesystem.
[  145.373046][   T26] audit: type=1326 audit(1719541360.495:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  145.450987][  T155] usb 2-1: unable to get BOS descriptor or descriptor too short
[  145.461118][   T26] audit: type=1326 audit(1719541360.515:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  145.500242][  T155] usb 2-1: no configurations
[  145.528839][  T155] usb 2-1: can't read configurations, error -22
[  145.576420][   T26] audit: type=1326 audit(1719541360.515:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  145.660929][   T26] audit: type=1326 audit(1719541360.515:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eff75b29 code=0x7ffc0000
[  146.821412][ T3569] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260
[  147.040974][  T153] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  147.451121][  T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.481086][  T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.522431][  T153] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  147.560544][  T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.605871][  T153] usb 4-1: config 0 descriptor??
[  147.614186][ T4926] loop2: detected capacity change from 0 to 4096
[  147.626524][ T4933] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  147.644636][ T4926] ntfs3: Unknown parameter 'dask'
[  147.711752][ T3549] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  147.951095][ T3635] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  148.099074][  T153] uclogic 0003:5543:0005.0004: unknown main item tag 0x0
[  148.128598][  T153] uclogic 0003:5543:0005.0004: No inputs registered, leaving
[  148.160121][  T153] uclogic 0003:5543:0005.0004: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0
[  148.220977][ T3635] usb 1-1: Using ep0 maxpacket: 16
[  148.293517][   T26] audit: type=1326 audit(1719541363.415:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578b175b29 code=0x7ffc0000
[  148.334873][  T153] usb 4-1: USB disconnect, device number 5
[  148.370942][ T3635] usb 1-1: unable to get BOS descriptor or descriptor too short
[  148.398089][ T3635] usb 1-1: no configurations
[  148.415830][ T3635] usb 1-1: can't read configurations, error -22
[  148.518171][   T26] audit: type=1326 audit(1719541363.415:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f578b175b29 code=0x7ffc0000
[  148.600901][   T26] audit: type=1326 audit(1719541363.415:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578b175b29 code=0x7ffc0000
[  148.671148][   T26] audit: type=1326 audit(1719541363.435:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578b175b29 code=0x7ffc0000
[  149.531977][ T4966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.799888][ T4976] kvm: emulating exchange as write
[  151.068379][ T4989] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  151.390872][  T155] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  151.650843][  T155] usb 5-1: Using ep0 maxpacket: 16
[  151.730326][   T26] audit: type=1326 audit(1719541366.845:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  151.801123][  T155] usb 5-1: unable to get BOS descriptor or descriptor too short
[  151.826700][  T155] usb 5-1: no configurations
[  151.840370][   T26] audit: type=1326 audit(1719541366.845:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  151.910928][  T155] usb 5-1: can't read configurations, error -22
[  151.933333][   T26] audit: type=1326 audit(1719541366.845:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  152.011233][   T26] audit: type=1326 audit(1719541366.905:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x7ffc0000
[  153.103323][ T3569] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260
[  153.170866][  T155] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  153.460840][  T155] usb 5-1: Using ep0 maxpacket: 16
[  153.557847][ T5027] loop3: detected capacity change from 0 to 2048
[  153.643629][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  153.791073][  T155] usb 5-1: New USB device found, idVendor=0557, idProduct=4000, bcdDevice=53.e0
[  153.825423][  T155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.851134][  T155] usb 5-1: Product: syz
[  153.877606][  T155] usb 5-1: Manufacturer: syz
[  153.903913][  T155] usb 5-1: SerialNumber: syz
[  153.947166][  T155] usb 5-1: config 0 descriptor??
[  154.215302][ T3565] EXT4-fs (loop3): unmounting filesystem.
[  154.253938][  T155] kaweth 5-1:0.0: Firmware present in device.
[  154.571126][  T155] kaweth 5-1:0.0: Error reading configuration (-71), no net device created
[  154.579929][  T155] kaweth: probe of 5-1:0.0 failed with error -5
[  154.605472][  T155] usb 5-1: USB disconnect, device number 8
[  154.866445][ T5023] loop0: detected capacity change from 0 to 32768
[  154.969248][ T5023] XFS (loop0): Mounting V5 Filesystem
[  155.163233][ T5023] XFS (loop0): Ending clean mount
[  155.183933][ T5023] XFS (loop0): Quotacheck needed: Please wait.
[  155.266500][ T5049] Bluetooth: MGMT ver 1.22
[  155.272459][ T5023] XFS (loop0): Quotacheck: Done.
[  155.330999][ T3635] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  155.408447][ T4014] XFS (loop0): Unmounting Filesystem
[  155.704501][ T3635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  155.881290][ T3635] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  155.916385][ T3635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.933143][ T3635] usb 3-1: Product: syz
[  155.937655][ T3569] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  155.957693][ T3635] usb 3-1: Manufacturer: syz
[  155.964470][ T3635] usb 3-1: SerialNumber: syz
[  155.991610][ T3635] usb 3-1: config 0 descriptor??
[  156.031834][ T3572] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  156.308730][ T3635] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  156.347015][ T3635] usb 3-1: USB disconnect, device number 3
[  156.604269][ T3758] udevd[3758]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.563776][ T3572] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260
[  157.808600][   T26] audit: type=1326 audit(1719541372.925:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.4.414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43b3b75b29 code=0x0
[  159.183554][ T5120] loop2: detected capacity change from 0 to 16
[  159.191228][ T5120] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  159.539441][ T5121] loop4: detected capacity change from 0 to 256
[  161.174138][ T3575] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  161.591080][ T3575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.622558][ T3575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.661830][ T3575] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  161.698284][ T3575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.742310][ T3575] usb 1-1: config 0 descriptor??
[  161.910500][ T5155] loop1: detected capacity change from 0 to 2048
[  162.011680][ T5155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  162.078857][ T5163] loop2: detected capacity change from 0 to 256
[  162.311150][ T3575] usbhid 1-1:0.0: can't add hid device: -71
[  162.317322][ T3575] usbhid: probe of 1-1:0.0 failed with error -71
[  162.391676][ T3575] usb 1-1: USB disconnect, device number 5
[  162.714684][ T3572] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  162.812443][ T3555] EXT4-fs (loop1): unmounting filesystem.
[  162.833153][ T3572] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  162.930892][ T4347] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  163.361004][ T4347] usb 5-1: not running at top speed; connect to a high speed hub
[  163.451064][ T4347] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  163.463188][ T4347] usb 5-1: config 1 interface 0 has no altsetting 0
[  163.481006][ T3575] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  163.621279][ T4347] usb 5-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  163.640187][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.660348][ T4347] usb 5-1: Product: syz
[  163.691997][ T4347] usb 5-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  163.751054][ T3575] usb 1-1: Using ep0 maxpacket: 32
[  163.871488][ T4347] usb 5-1: SerialNumber: syz
[  163.893028][ T5169] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  164.131611][ T3575] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  164.163733][ T5200] loop3: detected capacity change from 0 to 16
[  164.175900][ T5200] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  164.937329][ T5169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.954074][ T5169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.956306][ T3575] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  164.990915][ T3575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.012501][ T3575] usb 1-1: config 0 descriptor??
[  165.062833][ T3575] hub 1-1:0.0: bad descriptor, ignoring hub
[  165.069777][ T3575] hub: probe of 1-1:0.0 failed with error -5
[  165.098779][ T3575] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  165.391027][ T4347] usbhid 5-1:1.0: can't add hid device: -71
[  165.398375][ T4347] usbhid: probe of 5-1:1.0 failed with error -71
[  165.428757][ T4347] usb 5-1: USB disconnect, device number 9
[  165.538512][ T5208] random: crng reseeded on system resumption
[  165.561185][ T3575] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  165.971586][ T3575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.997714][ T3575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.035099][ T3575] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  166.065028][ T3575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.089801][ T3575] usb 4-1: config 0 descriptor??
[  166.441311][ T3635] usb 1-1: USB disconnect, device number 6
[  166.644857][ T5218] loop0: detected capacity change from 0 to 256
[  166.681417][ T3575] usbhid 4-1:0.0: can't add hid device: -71
[  166.687647][ T3575] usbhid: probe of 4-1:0.0 failed with error -71
[  166.756645][ T3575] usb 4-1: USB disconnect, device number 6
[  167.258663][ T3572] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[  167.437408][ T5213] loop4: detected capacity change from 0 to 32768
[  167.596871][ T5213] XFS (loop4): Mounting V5 Filesystem
[  167.777755][ T5213] XFS (loop4): Ending clean mount
[  167.800133][ T5213] XFS (loop4): Quotacheck needed: Please wait.
[  167.889261][ T5213] XFS (loop4): Quotacheck: Done.
[  168.069323][ T3556] XFS (loop4): Unmounting Filesystem
[  168.861060][ T3764] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  169.262568][ T5262] loop2: detected capacity change from 0 to 16
[  169.274682][ T5262] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  169.611057][ T3606] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  169.991005][ T3764] usb 2-1: Using ep0 maxpacket: 32
[  170.041686][ T3606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.076746][ T3606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.110959][ T3764] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  170.124265][ T3764] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  170.126162][ T3606] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  170.145302][ T3764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.163559][ T3764] usb 2-1: config 0 descriptor??
[  170.216859][ T3606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.226362][ T3764] hub 2-1:0.0: bad descriptor, ignoring hub
[  170.232649][ T3764] hub: probe of 2-1:0.0 failed with error -5
[  170.265268][ T3606] usb 1-1: config 0 descriptor??
[  170.266464][ T3764] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  170.392122][ T5272] loop4: detected capacity change from 0 to 2048
[  170.469548][ T5272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  170.750683][ T5280] loop3: detected capacity change from 0 to 4096
[  170.782445][ T5280] ntfs3: Unknown parameter 'dask'
[  170.807609][ T3556] EXT4-fs (loop4): unmounting filesystem.
[  170.820906][ T3606] usbhid 1-1:0.0: can't add hid device: -71
[  170.834894][ T3606] usbhid: probe of 1-1:0.0 failed with error -71
[  170.872208][ T3606] usb 1-1: USB disconnect, device number 7
[  171.377241][ T5288] random: crng reseeded on system resumption
[  171.734592][ T3606] usb 2-1: USB disconnect, device number 16
[  172.168777][   T26] audit: type=1800 audit(1719541387.285:66): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.470" name="bus" dev="sda1" ino=1981 res=0 errno=0
[  172.427637][ T5305] loop2: detected capacity change from 0 to 64
[  172.503071][ T5305] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2
[  172.640425][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  173.311068][ T3606] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  173.760983][ T3606] usb 3-1: not running at top speed; connect to a high speed hub
[  173.794523][ T5324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.851014][ T3606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  174.051085][ T3606] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  174.072628][ T3606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.104640][ T3606] usb 3-1: Product: syz
[  174.125600][ T3606] usb 3-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  174.231854][ T3606] usb 3-1: SerialNumber: syz
[  174.297877][ T5314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  174.517717][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.553012][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.001683][ T3606] usbhid 3-1:1.0: can't add hid device: -71
[  175.008114][ T3606] usbhid: probe of 3-1:1.0 failed with error -71
[  175.048328][ T3606] usb 3-1: USB disconnect, device number 4
[  175.154634][ T5332] loop3: detected capacity change from 0 to 4096
[  175.212338][ T5332] ntfs3: Unknown parameter 'dask'
[  175.737341][ T5330] loop4: detected capacity change from 0 to 32768
[  175.905920][ T5330] XFS (loop4): Mounting V5 Filesystem
[  176.068565][ T5330] XFS (loop4): Ending clean mount
[  176.088991][ T5330] XFS (loop4): Quotacheck needed: Please wait.
[  176.134425][ T5330] XFS (loop4): Quotacheck: Done.
[  176.214397][ T3556] XFS (loop4): Unmounting Filesystem
[  176.841404][ T5367] random: crng reseeded on system resumption
[  176.846879][ T5336] loop0: detected capacity change from 0 to 40427
[  177.064215][ T5336] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  177.090953][ T5336] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  177.167717][ T5336] F2FS-fs (loop0): invalid crc value
[  177.236300][ T5336] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 152982424156046821)
[  177.428752][ T5379] loop4: detected capacity change from 0 to 256
[  177.595373][ T5336] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  177.648297][ T5336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  179.259845][ T5392] loop4: detected capacity change from 0 to 2048
[  179.368472][ T5392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  179.694588][ T3556] EXT4-fs (loop4): unmounting filesystem.
[  179.869047][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'.
[  180.494676][ T3572] Bluetooth: hci1: Malformed LE Event: 0x0b
[  180.712699][ T5404] loop0: detected capacity change from 0 to 64
[  180.772207][ T5404] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop0
[  180.898276][ T5391] loop2: detected capacity change from 0 to 32768
[  181.108771][ T5391] XFS (loop2): Mounting V5 Filesystem
[  181.310831][ T3758] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  181.371169][ T5391] XFS (loop2): Ending clean mount
[  181.400612][ T5391] XFS (loop2): Quotacheck needed: Please wait.
[  181.459329][ T5391] XFS (loop2): Quotacheck: Done.
[  181.586077][ T3563] XFS (loop2): Unmounting Filesystem
[  183.296730][ T3572] Bluetooth: hci3: Malformed LE Event: 0x0b
[  184.044010][   T26] audit: type=1800 audit(1719541399.165:67): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.521" name="bus" dev="sda1" ino=1977 res=0 errno=0
[  184.463196][ T5454] loop0: detected capacity change from 0 to 32768
[  184.585621][ T5454] XFS (loop0): Mounting V5 Filesystem
[  184.682842][ T5485] loop2: detected capacity change from 0 to 2048
[  184.754420][ T5454] XFS (loop0): Ending clean mount
[  184.786065][ T5454] XFS (loop0): Quotacheck needed: Please wait.
[  184.871871][ T5485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  184.986129][ T5454] XFS (loop0): Quotacheck: Done.
[  185.137144][ T4014] XFS (loop0): Unmounting Filesystem
[  185.524846][ T3563] EXT4-fs (loop2): unmounting filesystem.
[  185.922859][ T3572] Bluetooth: hci0: Malformed LE Event: 0x0b
[  185.987841][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'.
[  186.949894][ T3572] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[  187.351788][ T3575] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  187.558854][ T5535] loop1: detected capacity change from 0 to 4096
[  187.569908][ T5538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.578180][ T5535] ntfs3: Unknown parameter 'dask'
[  187.660907][ T3575] usb 1-1: Using ep0 maxpacket: 16
[  187.781100][ T3575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.814074][ T3575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.875442][ T3575] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  187.924313][ T3575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.035024][ T3575] usb 1-1: config 0 descriptor??
[  188.504506][ T3575] lenovo 0003:17EF:6009.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[  188.790864][ T3575] usb 1-1: USB disconnect, device number 8
[  189.017987][ T5543] loop2: detected capacity change from 0 to 32768
[  189.173767][ T5543] Cannot find del_set index 0 as target
[  189.358185][ T5557] random: crng reseeded on system resumption
[  189.397780][ T5558] find_entry called with index = 0
[  189.416698][ T5558] read_mapping_page failed!
[  189.441635][ T5558] ERROR: (device loop2): txCommit: 
[  189.441635][ T5558] 
[  189.458011][ T5558] ERROR: (device loop2): diFree: numfree > numinos
[  189.458011][ T5558] 
[  189.671473][ T3571] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  189.799776][ T3571] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  191.171852][ T3567] Bluetooth: hci3: command 0x0406 tx timeout
[  191.186096][ T3572] Bluetooth: hci0: command 0x0406 tx timeout
[  191.193124][ T3569] Bluetooth: hci4: command 0x0406 tx timeout
[  191.213659][ T5587] loop1: detected capacity change from 0 to 64
[  191.287010][ T5587] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1
[  191.930933][ T4347] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  192.169755][ T5600] loop4: detected capacity change from 0 to 16
[  192.170876][ T4347] usb 1-1: Using ep0 maxpacket: 16
[  192.217610][ T5600] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  192.311272][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.325274][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.345810][ T4347] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  192.366063][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.397175][ T4347] usb 1-1: config 0 descriptor??
[  192.833347][ T5605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.886141][ T4347] lenovo 0003:17EF:6009.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[  192.999468][ T3568] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[  193.065816][ T3568] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260
[  193.177345][ T3764] usb 1-1: USB disconnect, device number 9
[  194.207368][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[  194.213880][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
[  196.264534][ T3568] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  196.429198][ T3567] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  196.850466][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'.
[  197.830847][ T4345] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  197.992055][ T5660] loop0: detected capacity change from 0 to 32768
[  198.055909][ T5660] Cannot find del_set index 0 as target
[  198.201552][ T5661] find_entry called with index = 0
[  198.208539][ T5661] read_mapping_page failed!
[  198.214496][ T5661] ERROR: (device loop0): txCommit: 
[  198.214496][ T5661] 
[  198.227534][ T5661] ERROR: (device loop0): diFree: numfree > numinos
[  198.227534][ T5661] 
[  198.241655][ T4345] usb 2-1: not running at top speed; connect to a high speed hub
[  198.330979][ T4345] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  198.370044][ T4345] usb 2-1: config 1 interface 0 has no altsetting 0
[  198.551512][ T4345] usb 2-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  198.569348][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.619064][ T4345] usb 2-1: Product: syz
[  198.623868][ T4345] usb 2-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  198.709807][ T4345] usb 2-1: SerialNumber: syz
[  198.743636][ T5657] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  198.900941][ T3575] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  198.972691][ T5657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.988591][ T5657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.141019][  T155] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  199.185023][ T3575] usb 5-1: Using ep0 maxpacket: 32
[  199.326991][ T3575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.338374][ T3575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.357444][ T3575] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  199.367582][ T3575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.387031][ T3575] usb 5-1: config 0 descriptor??
[  199.400909][  T155] usb 4-1: Using ep0 maxpacket: 8
[  199.400909][ T4345] usbhid 2-1:1.0: can't add hid device: -71
[  199.412105][ T4345] usbhid: probe of 2-1:1.0 failed with error -71
[  199.420683][ T4345] usb 2-1: USB disconnect, device number 17
[  199.442512][ T3575] hub 5-1:0.0: USB hub found
[  199.701067][ T3575] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  199.709926][  T155] usb 4-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  199.740185][  T155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.749560][  T155] usb 4-1: Product: syz
[  199.761928][  T155] usb 4-1: Manufacturer: syz
[  199.766594][  T155] usb 4-1: SerialNumber: syz
[  199.779658][  T155] usb 4-1: config 0 descriptor??
[  199.850996][ T3575] usbhid 5-1:0.0: can't add hid device: -71
[  199.857045][ T3575] usbhid: probe of 5-1:0.0 failed with error -71
[  199.931539][ T3575] usb 5-1: USB disconnect, device number 10
[  200.050930][  T155] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  200.071797][  T155] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  200.080021][  T155] dib0700: firmware download failed at 7 with -22
[  200.101465][  T155] usb 4-1: USB disconnect, device number 7
[  200.166029][ T5680] loop1: detected capacity change from 0 to 32768
[  200.266563][ T5680] XFS (loop1): Mounting V5 Filesystem
[  200.333861][ T5680] XFS (loop1): Ending clean mount
[  200.346718][ T5680] XFS (loop1): Quotacheck needed: Please wait.
[  200.408769][ T5680] XFS (loop1): Quotacheck: Done.
[  200.449751][ T3555] XFS (loop1): Unmounting Filesystem
[  200.517912][ T5692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'.
[  201.328096][ T5696] loop4: detected capacity change from 0 to 2048
[  201.368878][ T5698] loop3: detected capacity change from 0 to 256
[  201.411497][ T5696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  201.909492][ T3556] EXT4-fs (loop4): unmounting filesystem.
[  202.582121][  T155] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  202.654301][ T3568] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  202.706538][ T3568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  202.716100][ T3568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  202.725550][ T3568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  202.737105][ T3568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  202.746686][ T3568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  202.831034][  T155] usb 5-1: Using ep0 maxpacket: 16
[  202.962838][  T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.994246][  T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.045420][  T155] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  203.075308][  T155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.147828][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'.
[  203.888279][  T155] usb 5-1: config 0 descriptor??
[  204.122454][ T5722] chnl_net:caif_netlink_parms(): no params data found
[  204.180858][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'.
[  204.260519][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.278713][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.291936][ T5722] device bridge_slave_0 entered promiscuous mode
[  204.309405][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.318182][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.337379][ T5722] device bridge_slave_1 entered promiscuous mode
[  204.401175][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.413463][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.438660][  T155] lenovo 0003:17EF:6009.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0
[  204.483127][ T5722] team0: Port device team_slave_0 added
[  204.499915][ T5722] team0: Port device team_slave_1 added
[  204.527206][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.534377][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.561586][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.574787][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.582124][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.618608][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.724140][  T155] usb 5-1: USB disconnect, device number 11
[  204.737599][ T5722] device hsr_slave_0 entered promiscuous mode
[  204.793178][ T5722] device hsr_slave_1 entered promiscuous mode
[  204.812966][ T5722] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.833573][ T5722] Cannot create hsr debugfs directory
[  204.853809][ T3568] Bluetooth: hci5: command tx timeout
[  205.185254][ T5722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.337535][ T5722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.487798][ T5722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.627355][ T5722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.863122][ T5722] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  205.885221][ T5722] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  205.902860][ T5722] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  205.926127][ T5722] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  206.089212][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.119414][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  206.129500][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  206.141920][ T5722] 8021q: adding VLAN 0 to HW filter on device team0
[  206.155399][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  206.165279][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  206.174917][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.182210][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.204799][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  206.213835][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  206.223745][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  206.234267][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.241459][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.249870][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  206.259510][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  206.290343][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  206.300571][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  206.310101][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  206.328567][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  206.347798][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  206.356677][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  206.375541][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  206.389907][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  206.403956][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  206.422977][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  206.624126][ T3567] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[  206.740965][ T3599] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  206.900640][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.917921][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.931131][ T3567] Bluetooth: hci5: command tx timeout
[  206.935709][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.002714][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  207.023124][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  207.070334][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  207.079899][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  207.094802][ T5722] device veth0_vlan entered promiscuous mode
[  207.118939][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  207.135003][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  207.158453][ T5722] device veth1_vlan entered promiscuous mode
[  207.201066][ T3599] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  207.241303][ T3599] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  207.270939][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.276824][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  207.293069][ T3599] usb 4-1: config 0 descriptor??
[  207.308864][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  207.324822][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  207.339088][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  207.353813][ T3599] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  207.359094][ T5722] device veth0_macvtap entered promiscuous mode
[  207.397105][ T5722] device veth1_macvtap entered promiscuous mode
[  207.455552][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.474581][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.486542][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.497517][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.508073][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.519575][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.536492][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.547802][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.558062][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.569660][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.592515][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.602060][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  207.615124][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  207.635231][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  207.655928][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  207.674046][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.693291][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.703865][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.715283][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.740912][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.779416][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.816430][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.841766][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.007144][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.017952][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.036627][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.046186][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  208.308568][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  208.341675][ T5722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.350682][ T5722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.365861][ T5722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.377181][ T5722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.607117][ T3771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.617376][ T3771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.679487][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  208.762654][ T4742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.776910][ T4742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.824943][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  209.257045][  T155] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  209.517337][ T3575] usb 4-1: USB disconnect, device number 8
[  209.620490][ T5792] loop4: detected capacity change from 0 to 32768
[  209.725258][ T5792] Cannot find del_set index 0 as target
[  209.836106][  T155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.847241][  T155] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  209.858175][  T155] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  210.020955][  T155] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.045151][  T155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.074838][  T155] usb 2-1: Product: syz
[  210.081624][  T155] usb 2-1: Manufacturer: syz
[  210.089863][  T155] usb 2-1: SerialNumber: syz
[  210.115637][ T5808] find_entry called with index = 0
[  210.155121][ T5808] read_mapping_page failed!
[  210.187824][ T5808] BUG at fs/jfs/jfs_txnmgr.c:2795 assert(mp->nohomeok)
[  210.230121][ T5808] ------------[ cut here ]------------
[  210.235853][ T5808] kernel BUG at fs/jfs/jfs_txnmgr.c:2795!
[  210.251921][ T5808] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  210.258050][ T5808] CPU: 0 PID: 5808 Comm: syz.4.620 Not tainted 6.1.96-syzkaller #0
[  210.265969][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  210.276029][ T5808] RIP: 0010:txAbort+0x5d3/0x5e0
[  210.280887][ T5808] Code: 33 a7 7e 07 0f 0b e8 9c 24 80 fe 48 c7 c7 00 e1 24 8b 48 c7 c6 f9 dc 24 8b ba eb 0a 00 00 48 c7 c1 e0 f4 24 8b e8 0d a7 7e 07 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54
[  210.300518][ T5808] RSP: 0018:ffffc900054573d0 EFLAGS: 00010246
[  210.306604][ T5808] RAX: 0000000000000034 RBX: 000000000000001b RCX: efc09a75b58e1d00
[  210.314584][ T5808] RDX: ffffc9000a54b000 RSI: 0000000000007808 RDI: 0000000000007809
[  210.322561][ T5808] RBP: 0000000000000000 R08: ffffffff816e30dc R09: fffff52000a8ae19
[  210.330540][ T5808] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002842000
[  210.338517][ T5808] R13: ffff888021beb0f8 R14: dffffc0000000000 R15: 0000000000000003
[  210.346490][ T5808] FS:  00007f43b49f26c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  210.355427][ T5808] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  210.362008][ T5808] CR2: 0000000000000002 CR3: 0000000065537000 CR4: 00000000003506f0
[  210.369982][ T5808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  210.377951][ T5808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  210.385932][ T5808] Call Trace:
[  210.389225][ T5808]  <TASK>
[  210.392157][ T5808]  ? __die_body+0x5e/0xa0
[  210.396503][ T5808]  ? die+0x83/0xb0
[  210.400234][ T5808]  ? do_trap+0x11e/0x350
[  210.404487][ T5808]  ? txAbort+0x5d3/0x5e0
[  210.408726][ T5808]  ? txAbort+0x5d3/0x5e0
[  210.412968][ T5808]  ? do_error_trap+0x13d/0x1e0
[  210.417739][ T5808]  ? txAbort+0x5d3/0x5e0
[  210.421984][ T5808]  ? do_int3+0x30/0x30
[  210.426055][ T5808]  ? rcu_is_watching+0x11/0xb0
[  210.430838][ T5808]  ? handle_invalid_op+0x2c/0x40
[  210.435776][ T5808]  ? txAbort+0x5d3/0x5e0
[  210.440017][ T5808]  ? exc_invalid_op+0x2f/0x40
[  210.444699][ T5808]  ? asm_exc_invalid_op+0x16/0x20
[  210.449830][ T5808]  ? __wake_up_klogd+0xcc/0x100
[  210.454680][ T5808]  ? txAbort+0x5d3/0x5e0
[  210.458942][ T5808]  txCommit+0x5d4d/0x6ba0
[  210.463275][ T5808]  ? print_irqtrace_events+0x210/0x210
[  210.468741][ T5808]  ? ktime_get_coarse_real_ts64+0x36/0x120
[  210.474555][ T5808]  ? lockdep_hardirqs_on+0x94/0x130
[  210.479755][ T5808]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  210.486096][ T5808]  ? preempt_schedule_common+0xa6/0xd0
[  210.491611][ T5808]  ? ktime_get_coarse_real_ts64+0x107/0x120
[  210.497514][ T5808]  ? txLinelock+0x160/0x160
[  210.502019][ T5808]  ? rcu_is_watching+0x11/0xb0
[  210.506784][ T5808]  ? __mark_inode_dirty+0x430/0xf80
[  210.511994][ T5808]  jfs_create+0x98a/0xbb0
[  210.516333][ T5808]  ? jfs_lookup+0x400/0x400
[  210.520838][ T5808]  ? jfs_get_parent+0xa0/0xa0
[  210.525523][ T5808]  ? make_kgid+0x6f0/0x6f0
[  210.529942][ T5808]  ? generic_permission+0x21c/0x4f0
[  210.535234][ T5808]  ? inode_permission+0xf7/0x450
[  210.540235][ T5808]  ? bpf_lsm_inode_create+0x5/0x10
[  210.545342][ T5808]  ? security_inode_create+0xb4/0x100
[  210.550773][ T5808]  ? jfs_lookup+0x400/0x400
[  210.555288][ T5808]  path_openat+0x12f1/0x2e60
[  210.559896][ T5808]  ? do_filp_open+0x480/0x480
[  210.564672][ T5808]  do_filp_open+0x230/0x480
[  210.569179][ T5808]  ? vfs_tmpfile+0x4a0/0x4a0
[  210.573784][ T5808]  ? _raw_spin_unlock+0x24/0x40
[  210.578642][ T5808]  ? alloc_fd+0x59c/0x640
[  210.582980][ T5808]  do_sys_openat2+0x13b/0x500
[  210.587683][ T5808]  ? do_sys_open+0x220/0x220
[  210.592279][ T5808]  ? xfd_validate_state+0x6a/0x140
[  210.597397][ T5808]  ? restore_fpregs_from_fpstate+0xfc/0x230
[  210.603304][ T5808]  __x64_sys_openat+0x243/0x290
[  210.608188][ T5808]  ? __ia32_sys_open+0x270/0x270
[  210.613139][ T5808]  ? syscall_enter_from_user_mode+0x2e/0x230
[  210.619121][ T5808]  ? lockdep_hardirqs_on+0x94/0x130
[  210.624845][ T5808]  ? syscall_enter_from_user_mode+0x2e/0x230
[  210.630838][ T5808]  do_syscall_64+0x3b/0xb0
[  210.635265][ T5808]  ? clear_bhb_loop+0x45/0xa0
[  210.639950][ T5808]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  210.645853][ T5808] RIP: 0033:0x7f43b3b75b29
[  210.650280][ T5808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.669973][ T5808] RSP: 002b:00007f43b49f2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[  210.678404][ T5808] RAX: ffffffffffffffda RBX: 00007f43b3d04070 RCX: 00007f43b3b75b29
[  210.686383][ T5808] RDX: 0000000000109543 RSI: 0000000020000100 RDI: ffffffffffffff9c
[  210.694358][ T5808] RBP: 00007f43b3bf6756 R08: 0000000000000000 R09: 0000000000000000
[  210.702343][ T5808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.710339][ T5808] R13: 000000000000006e R14: 00007f43b3d04070 R15: 00007ffe02dc46f8
[  210.718421][ T5808]  </TASK>
[  210.721551][ T5808] Modules linked in:
[