last executing test programs:

1m24.0197515s ago: executing program 2 (id=292):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0)

1m23.91324132s ago: executing program 2 (id=297):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x19c, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)

1m23.597138331s ago: executing program 2 (id=310):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000})
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)

1m23.352851081s ago: executing program 2 (id=316):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a901a, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)

1m23.352720441s ago: executing program 2 (id=317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4, 0x0, 0x802}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x40000)

1m22.909188881s ago: executing program 2 (id=324):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000025c0)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000002600)={'custom0\x00'})

1m22.772068671s ago: executing program 32 (id=324):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000025c0)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000002600)={'custom0\x00'})

1m13.988872753s ago: executing program 5 (id=326):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4)
sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x120a0)

1m13.858672323s ago: executing program 5 (id=461):
r0 = socket(0x28, 0x1, 0x0)
connect$packet(r0, &(0x7f0000000000)={0x28, 0x17, 0x0, 0x1, 0x0, 0x6, @random="99d80b5d00"}, 0x14)

1m13.717125904s ago: executing program 5 (id=465):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000140)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000001e80)={0x2020}, 0x2062)

1m12.616850305s ago: executing program 5 (id=469):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x20040090)

1m11.280241047s ago: executing program 5 (id=494):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

1m11.093930687s ago: executing program 33 (id=494):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

1m1.613060689s ago: executing program 3 (id=616):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x128, 0x17, 0x1, 0x70bd29, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x1ff, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x800000000000000, 0x0, 0x0, 0x0, 0x80000}, {0x3, 0x0, 0x1000000000000}}}}, 0x128}}, 0x0)

1m0.68105567s ago: executing program 3 (id=619):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003240)={&(0x7f0000001140), 0x0, 0x0, 0x0, 0x83, r0}, 0x38)

1m0.593262301s ago: executing program 3 (id=622):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3e}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0)

1m0.46810165s ago: executing program 3 (id=625):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64=r2], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

59.980385291s ago: executing program 3 (id=630):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007b0110aa000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

58.512201073s ago: executing program 3 (id=647):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe79, 0x0, 0x0, &(0x7f0000000000)=""/172, 0x9f}, 0x10160)

58.344370213s ago: executing program 34 (id=647):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe79, 0x0, 0x0, &(0x7f0000000000)=""/172, 0x9f}, 0x10160)

3.605182435s ago: executing program 6 (id=1304):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="4eb5d30de873", @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f09413", 0x10, 0x21, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x6, "a2c814", 0x6c}}}}}}}, 0x0)

3.479278865s ago: executing program 6 (id=1307):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020)

3.005052506s ago: executing program 4 (id=1315):
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r1], 0x0)

2.978194246s ago: executing program 7 (id=1316):
syz_emit_ethernet(0xa6, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1d86dd608a37f200700600fe8000000000000000000000000000bb"], 0x0)

2.931283356s ago: executing program 7 (id=1317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000072accc20b4365daf0008000300", @ANYRES32], 0x24}}, 0x0)

2.864833326s ago: executing program 7 (id=1318):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="4eb5d30de873", @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f09413", 0x10, 0x21, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x6, "a2c814", 0x6c}}}}}}}, 0x0)

2.803940846s ago: executing program 0 (id=1319):
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$inet6(0xa, 0x3, 0x8000000003c)
syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffff7fffaaaaaaaaaabb86dd60000000000c3c0420010000000000000000000000000000ff020000000000000000000000000001"], 0x0)

2.766955606s ago: executing program 7 (id=1320):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5008000, &(0x7f00000005c0)=ANY=[], 0x1, 0x27c, &(0x7f0000000200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c)

2.694244396s ago: executing program 0 (id=1321):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0)

2.587195276s ago: executing program 6 (id=1322):
syz_clone(0x24204400, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]})
gettid()
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)

1.745411178s ago: executing program 1 (id=1323):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0xd55319eec59dfa33, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

1.691172968s ago: executing program 0 (id=1324):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x37}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001)

1.690972977s ago: executing program 4 (id=1325):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2)

1.657462208s ago: executing program 1 (id=1326):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x4, 0x8}, @window={0x3, 0x0, 0x8}, @mss={0x2, 0x80}, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000240)="b51ed1aca1", 0x5, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

1.634258198s ago: executing program 6 (id=1327):
syz_emit_ethernet(0xa6, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1d86dd608a37f200700600fe8000000000000000000000000000bb"], 0x0)

1.571265898s ago: executing program 4 (id=1328):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r3=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4004015, &(0x7f0000000540)={0xc9, 0x4, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.552113018s ago: executing program 7 (id=1329):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000140)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000001e80)={0x2020}, 0x2062)

1.540752038s ago: executing program 0 (id=1330):
landlock_restrict_self(0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef)
read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020)

1.482183898s ago: executing program 6 (id=1331):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="4eb5d30de873", @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f09413", 0x10, 0x21, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x6, "a2c814", 0x6c}}}}}}}, 0x0)

1.426427998s ago: executing program 4 (id=1333):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020)

1.383750978s ago: executing program 6 (id=1334):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000cf4000/0x3000)=nil, 0x3000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x1)
munlockall()

1.355354398s ago: executing program 1 (id=1335):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x6, @mcast1, 0x4}, 0x1c)

1.271986668s ago: executing program 1 (id=1336):
r0 = socket$netlink(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.206037608s ago: executing program 7 (id=1337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0xd55319eec59dfa33, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

1.181569398s ago: executing program 1 (id=1338):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r0, 0x3, &(0x7f00000000c0)={0x10000, 0x8}, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES16], 0x21, 0x1cf, &(0x7f0000000780)="$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")
r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000780)=0x3)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x80000001, 0x2, 0x80, 0x4, 0x4, "32101fe06d2b5cd22c4e247bcd6145996b9936"})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000080)={0x8, "8228b0"}, 0x6)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0)

184.443839ms ago: executing program 0 (id=1339):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2)

154.0218ms ago: executing program 4 (id=1340):
socket$inet6(0xa, 0x3, 0x8000000003c)
syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffff7fffaaaaaaaaaabb86dd60000000000c3c0420010000000000000000000000000000ff020000000000000000000000000001"], 0x0)

64.12225ms ago: executing program 4 (id=1341):
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@grpid}, {@errors_remount}]}, 0x4, 0x4eb, &(0x7f0000001340)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x238041, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x20000041)
fchdir(0xffffffffffffffff)
landlock_create_ruleset(0x0, 0x0, 0x0)

16.11835ms ago: executing program 0 (id=1342):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x37}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001)

0s ago: executing program 1 (id=1343):
syz_emit_ethernet(0xa6, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1d86dd608a37f200700600fe8000000000000000000000000000bbfe"], 0x0)

kernel console output (not intermixed with test programs):

04.0001: unknown main item tag 0x0
[   56.552006][   T25] usb 1-1: Using ep0 maxpacket: 16
[   56.555888][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.569824][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.571361][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.575909][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.579648][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.581407][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.587096][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.588822][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.590337][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.594990][ T4374] udc-core: couldn't find an available UDC or it's busy
[   56.596507][ T4374] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   56.602491][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.609141][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.610659][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.612689][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.619285][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.620963][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.624445][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.626179][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.627773][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.629475][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.630948][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.636757][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.638034][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.639644][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.641145][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.645758][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.647534][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.649057][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.650851][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.656512][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.658132][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.661763][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.666198][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.667821][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.669622][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.671168][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.672545][   T25] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[   56.674474][   T25] usb 1-1: config 0 has no interface number 0
[   56.689873][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.691474][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.696938][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.698419][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.701091][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.702821][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.704215][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.705723][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.709891][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.711704][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.717047][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.718839][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.720395][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.724518][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.725946][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.727584][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.729323][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.731026][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.736359][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.737922][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.739745][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.741463][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.745673][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.747258][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.748627][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.750395][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.757201][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.758845][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.760668][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.766687][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.768474][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.769969][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.771803][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.777149][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.778763][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.780259][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.781673][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.785802][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.787440][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.788971][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.790451][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.795834][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.797302][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.798715][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.800409][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.804444][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.806253][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.807797][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.809366][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.810968][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.816440][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.817946][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.819480][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.821231][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.825428][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.827180][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.828710][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.830309][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.835378][   T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   56.836392][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.837314][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.837334][   T25] usb 1-1: Product: syz
[   56.837348][   T25] usb 1-1: Manufacturer: syz
[   56.839001][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.840456][   T25] usb 1-1: SerialNumber: syz
[   56.841318][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.846444][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.847944][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.849556][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.851216][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.859737][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.861250][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.861785][   T25] usb 1-1: config 0 descriptor??
[   56.863283][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.867499][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.869025][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.870921][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.878927][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.880599][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.882330][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.883759][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.885343][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.886828][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.888335][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.889891][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.891477][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.899346][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.900977][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.902660][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.904514][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.906092][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.907730][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.909324][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.910965][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.918740][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.920183][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.921642][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.923301][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.924733][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.926288][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.927803][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.929452][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.930929][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.938589][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.940378][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.942009][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: unknown main item tag 0x0
[   56.946103][ T4071] hid-generic 0030:FFFFFFFF:0004.0001: hidraw0: <UNKNOWN> HID vf1.14 Device [syz0] on syz0
[   57.196331][ T4380] udc-core: couldn't find an available UDC or it's busy
[   57.197793][ T4380] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   57.368390][   T25] usb 1-1: Found UVC 9.07 device syz (046d:08d3)
[   57.369868][   T25] usb 1-1: No valid video chain found.
[   57.380219][   T25] usb 1-1: USB disconnect, device number 2
[   57.664294][ T4403] udc-core: couldn't find an available UDC or it's busy
[   57.665744][ T4403] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   57.894264][ T4412] input: syz1 as /devices/virtual/input/input3
[   58.037278][ T4422] loop3: detected capacity change from 0 to 256
[   58.091461][ T4422] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   58.149251][ T4422] exFAT-fs (loop3): hint_cluster is invalid (17)
[   58.285879][ T4434] loop0: detected capacity change from 0 to 2048
[   58.293115][ T4438] netlink: 44 bytes leftover after parsing attributes in process `syz.2.128'.
[   58.307072][ T4441] loop4: detected capacity change from 0 to 1024
[   58.322079][ T4434] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   58.323690][ T4434] UDF-fs: Scanning with blocksize 512 failed
[   58.341011][ T4434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   60.126390][ T4482] udc-core: couldn't find an available UDC or it's busy
[   60.127885][ T4482] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   60.328512][ T4498] loop2: detected capacity change from 0 to 128
[   60.528703][ T4506] loop2: detected capacity change from 0 to 1024
[   60.721318][ T4520] xt_CT: You must specify a L4 protocol and not use inversions on it
[   60.743247][ T4524] udc-core: couldn't find an available UDC or it's busy
[   60.744667][ T4524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   60.797662][ T4528] loop0: detected capacity change from 0 to 512
[   60.818968][ T4529] loop2: detected capacity change from 0 to 512
[   60.844011][ T4528] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   60.880296][ T4528] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.168: iget: bad extended attribute block 19
[   60.886848][ T4528] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.168: couldn't read orphan inode 15 (err -117)
[   60.889809][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   60.942880][ T4528] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 13: comm syz.0.168: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0
[   61.121643][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'.
[   61.289943][ T4547] udc-core: couldn't find an available UDC or it's busy
[   61.300506][ T4547] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   61.336506][ T4551] loop4: detected capacity change from 0 to 256
[   61.349186][ T4550] loop0: detected capacity change from 0 to 256
[   61.379635][ T4550] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   61.893388][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   61.907651][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   62.010682][ T4585] udc-core: couldn't find an available UDC or it's busy
[   62.018005][ T4585] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   62.423506][ T4599] loop0: detected capacity change from 0 to 16
[   62.455251][ T4599] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock
[   62.741715][ T4609] udc-core: couldn't find an available UDC or it's busy
[   62.748714][ T4609] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   62.915406][ T4620] loop3: detected capacity change from 0 to 256
[   63.046696][ T4624] loop0: detected capacity change from 0 to 512
[   63.063338][ T4624] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   63.065453][ T4624] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   63.067636][ T4624] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   63.096447][ T4624] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   63.098138][ T4624] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e11c, mo2=0000]
[   63.100786][ T4624] EXT4-fs (loop0): orphan cleanup on readonly fs
[   63.104095][ T4627] udc-core: couldn't find an available UDC or it's busy
[   63.105648][ T4627] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   63.110189][ T4624] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.212: bg 0: block 34: padding at end of block bitmap is not set
[   63.170846][ T4624] Quota error (device loop0): write_blk: dquota write failed
[   63.184615][ T4624] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   63.186552][ T4624] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.212: Failed to acquire dquot type 1
[   63.230521][ T4624] EXT4-fs (loop0): 1 truncate cleaned up
[   63.253677][ T4624] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,bsdgroups,noauto_da_alloc,noblock_validity,,errors=continue. Quota mode: writeback.
[   63.458459][ T4633] binder: 4632:4633 Release 1 refcount change on invalid ref 3 ret -22
[   63.631695][ T4641] Illegal XDP return value 4294967274, expect packet loss!
[   64.018383][ T4656] loop2: detected capacity change from 0 to 512
[   64.085019][ T4656] EXT4-fs (loop2): Ignoring removed nobh option
[   64.086445][ T4656] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   64.089299][ T4656] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.124306][ T4656] EXT4-fs (loop2): 1 truncate cleaned up
[   64.125442][ T4656] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,resgid=0x0000000000000000,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none.
[   65.617890][ T4683] netlink: 168 bytes leftover after parsing attributes in process `syz.0.236'.
[   65.777323][ T4692] loop2: detected capacity change from 0 to 2048
[   65.781634][ T4694] loop0: detected capacity change from 0 to 2048
[   65.829509][ T4692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.839895][ T4694] Alternate GPT is invalid, using primary GPT.
[   65.841502][ T4694]  loop0: p2 p3 p7
[   65.931009][ T3641] Alternate GPT is invalid, using primary GPT.
[   65.942990][ T3641]  loop0: p2 p3 p7
[   66.172108][ T1960] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   66.218895][ T4714] loop2: detected capacity change from 0 to 8192
[   66.532624][ T1960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 45, changing to 9
[   66.534955][ T1960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50524, setting to 1024
[   66.537216][ T1960] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[   66.540648][ T1960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.551398][ T1960] usb 1-1: config 0 descriptor??
[   66.572716][ T4694] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   66.579918][ T4730] loop3: detected capacity change from 0 to 4096
[   66.650046][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'.
[   66.659910][ T4730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   66.660825][ T4737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.259'.
[   66.668615][ T4737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.259'.
[   66.756089][ T4741] loop2: detected capacity change from 0 to 1024
[   66.795342][ T4741] EXT4-fs (loop2): inline encryption not supported
[   66.796814][ T4741] EXT4-fs (loop2): filesystem is read-only
[   66.805393][ T4741] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   66.807701][ T4741] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (50428!=20869)
[   66.809815][ T4741] EXT4-fs (loop2): Unsupported blocksize for fs-verity
[   67.049428][ T4757] loop4: detected capacity change from 0 to 164
[   67.052383][ T1960] appletouch 1-1:0.0: Geyser mode initialized.
[   67.055090][ T1960] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4
[   67.258452][ T1960] usb 1-1: USB disconnect, device number 3
[   67.373664][ T1960] appletouch 1-1:0.0: input: appletouch disconnected
[   67.405143][ T4766] netlink: 'syz.3.267': attribute type 2 has an invalid length.
[   67.625502][ T4227] udevd[4227]: Error opening device "/dev/input/event2": No such file or directory
[   67.627804][ T4227] udevd[4227]: Unable to EVIOCGABS device "/dev/input/event2"
[   67.629343][ T4227] udevd[4227]: Unable to EVIOCGABS device "/dev/input/event2"
[   67.821255][ T4785] loop3: detected capacity change from 0 to 512
[   67.874515][ T4785] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   67.876428][ T4785] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   67.900182][ T4785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c119, mo2=0002]
[   67.901855][ T4785] System zones: 1-12
[   67.932843][ T4785] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.274: corrupted in-inode xattr
[   67.936346][ T4785] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.274: couldn't read orphan inode 15 (err -117)
[   67.949399][ T4785] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,nombcache,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none.
[   68.241879][ T4817] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   69.420258][ T4837] netlink: 'syz.0.298': attribute type 2 has an invalid length.
[   69.424743][ T4838] loop2: detected capacity change from 0 to 128
[   69.434490][ T4837] netlink: 'syz.0.298': attribute type 1 has an invalid length.
[   69.487657][ T4838] FAT-fs (loop2): Directory bread(block 32) failed
[   69.489201][ T4838] FAT-fs (loop2): Directory bread(block 33) failed
[   69.490655][ T4838] FAT-fs (loop2): Directory bread(block 34) failed
[   69.512221][ T4838] FAT-fs (loop2): Directory bread(block 35) failed
[   69.513693][ T4838] FAT-fs (loop2): Directory bread(block 36) failed
[   69.515072][ T4838] FAT-fs (loop2): Directory bread(block 37) failed
[   69.516351][ T4838] FAT-fs (loop2): Directory bread(block 38) failed
[   69.517650][ T4838] FAT-fs (loop2): Directory bread(block 39) failed
[   69.536546][ T4838] FAT-fs (loop2): Directory bread(block 40) failed
[   69.537922][ T4838] FAT-fs (loop2): Directory bread(block 41) failed
[   69.596214][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[   69.634534][   T21] cfg80211: failed to load regulatory.db
[   69.637396][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[   69.638875][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[   69.655566][ T4857] udc-core: couldn't find an available UDC or it's busy
[   69.658165][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[   69.677323][ T4857] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   69.732995][ T4838] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009)
[   69.734717][ T4838] FAT-fs (loop2): Filesystem has been set read-only
[   69.739797][ T4838] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009)
[   69.741453][ T4838] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009)
[   69.747509][ T4863] loop1: detected capacity change from 0 to 128
[   69.796700][ T4863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   69.799455][ T4867] binder: 4866:4867 ioctl 40046210 0 returned -14
[   69.941895][ T4875] loop4: detected capacity change from 0 to 512
[   70.098884][ T4875] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[   70.145256][ T4885] loop1: detected capacity change from 0 to 2048
[   70.150092][ T4885] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[   70.150092][ T4885] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   70.150092][ T4885] 
[   70.197859][ T4875] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   70.203847][ T4885] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   70.205352][ T4885] EXT4-fs (loop1): inline encryption not supported
[   70.284983][ T4885] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,barrier=0x0000000000000002,norecovery,auto_da_alloc,mblk_io_submit,inlinecrypt,barrier=0x0000000000000000,grpjquota=,bsddf,,errors=continue. Quota mode: none.
[   70.708057][ T4907] loop3: detected capacity change from 0 to 512
[   70.723150][ T4909] netlink: 'syz.0.331': attribute type 23 has an invalid length.
[   70.811116][ T4907] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.330: Invalid block bitmap block 0 in block_group 0
[   70.816469][ T4907] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   70.818565][ T4907] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.330: attempt to clear invalid blocks 983261 len 1
[   70.821798][ T4907] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.330: invalid indirect mapped block 2683928664 (level 0)
[   70.837774][ T4907] EXT4-fs error (device loop3): __ext4_get_inode_loc:4320: comm syz.3.330: Invalid inode table block 0 in block_group 0
[   70.845117][ T4907] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   70.852300][ T4907] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   70.858090][ T4907] EXT4-fs error (device loop3): __ext4_get_inode_loc:4320: comm syz.3.330: Invalid inode table block 0 in block_group 0
[   70.873983][ T4907] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   70.879783][ T4907] EXT4-fs error (device loop3): ext4_truncate:4272: inode #13: comm syz.3.330: mark_inode_dirty error
[   70.886876][ T4907] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   70.892386][ T4907] EXT4-fs error (device loop3): __ext4_get_inode_loc:4320: comm syz.3.330: Invalid inode table block 0 in block_group 0
[   70.910430][ T4907] EXT4-fs (loop3): 1 truncate cleaned up
[   70.911661][ T4907] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[   71.263770][ T4931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'.
[   71.764705][ T4926] loop1: detected capacity change from 0 to 2048
[   71.842697][ T4926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   71.847554][ T4926] process 'syz.1.336' launched './file0' with NULL argv: empty string added
[   71.971486][ T4686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.165120][ T4686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.243876][ T4686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.273500][ T4962] input: syz1 as /devices/virtual/input/input5
[   72.306910][ T4686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.361182][ T4918] chnl_net:caif_netlink_parms(): no params data found
[   72.364802][ T4967] loop3: detected capacity change from 0 to 128
[   72.428373][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.429981][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.432878][ T4918] device bridge_slave_0 entered promiscuous mode
[   72.436305][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.437897][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.440107][ T4918] device bridge_slave_1 entered promiscuous mode
[   72.452371][ T4967] FAT-fs (loop3): Unrecognized mount option "00000000000000000000003" or missing value
[   72.487996][ T4918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.492549][ T4918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.545756][ T4918] team0: Port device team_slave_0 added
[   72.549383][ T4918] team0: Port device team_slave_1 added
[   72.640310][ T4987] loop4: detected capacity change from 0 to 256
[   72.670291][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.671856][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.679206][ T4987] FAT-fs (loop4): Unrecognized mount option "dma01777777777777777777773" or missing value
[   72.682629][ T4918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.686568][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.688142][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.695546][ T4918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.751135][ T4991] binder: 4990:4991 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   72.762291][ T4991] binder: 4990:4991 BC_FREE_BUFFER u0000000000000000 no match
[   72.922126][ T4013] Bluetooth: hci4: command 0x0409 tx timeout
[   72.936027][ T5003] loop1: detected capacity change from 0 to 16
[   72.971475][ T5003] erofs: (device loop1): mounted with root inode @ nid 36.
[   72.972564][ T5007] loop3: detected capacity change from 0 to 128
[   72.977443][ T5003] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[   72.979816][ T5003] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[   72.992530][ T5003] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   73.004292][ T4918] device hsr_slave_0 entered promiscuous mode
[   73.028004][ T4918] device hsr_slave_1 entered promiscuous mode
[   73.052015][ T4918] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.054385][ T4918] Cannot create hsr debugfs directory
[   73.064473][ T5007] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   73.269238][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[   73.342607][ T5034] udc-core: couldn't find an available UDC or it's busy
[   73.344277][ T5034] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   73.498982][ T4918] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   73.534038][ T4918] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   73.558040][ T5043] loop1: detected capacity change from 0 to 16
[   73.599629][ T5043] erofs: (device loop1): mounted with root inode @ nid 36.
[   73.604711][ T5043] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 91 of nid 36
[   73.626930][ T4918] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.665589][ T4918] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   74.082458][ T4918] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.100633][ T5069] loop3: detected capacity change from 0 to 512
[   74.267329][ T5078] loop4: detected capacity change from 0 to 8
[   74.303187][ T5078] squashfs: Unknown parameter '�'
[   74.666238][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.678928][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.992428][ T4103] Bluetooth: hci4: command 0x041b tx timeout
[   74.999361][ T4918] 8021q: adding VLAN 0 to HW filter on device team0
[   75.011453][ T5069] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,grpid,errors=remount-ro,. Quota mode: writeback.
[   75.030668][  T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.033282][  T609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.035286][  T609] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.037015][  T609] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.039178][  T609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.120171][ T5093] loop1: detected capacity change from 0 to 256
[   75.174531][ T5093] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   75.288599][  T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.291830][  T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.294698][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.296217][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.299454][  T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.311207][  T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.342337][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.345019][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.347512][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.373047][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.385486][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.425214][ T5108] input: syz0 as /devices/virtual/input/input6
[   75.587431][ T5111] IPv6: Can't replace route, no match found
[   75.617915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.622986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.632606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.643245][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.658308][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.732335][ T4013] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   75.748706][ T5123] loop3: detected capacity change from 0 to 128
[   75.827248][ T5123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   75.972092][ T4013] usb 1-1: Using ep0 maxpacket: 8
[   76.045246][ T4686] device hsr_slave_0 left promiscuous mode
[   76.075108][ T4686] device hsr_slave_1 left promiscuous mode
[   76.092559][ T4013] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   76.094413][ T4013] usb 1-1: config 179 has no interface number 0
[   76.095716][ T4013] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   76.097842][ T4013] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   76.100060][ T4013] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   76.112964][ T4013] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   76.124407][ T4013] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   76.135534][ T4013] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   76.142283][ T4013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.172273][ T5110] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   76.305878][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.307657][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.310404][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.314667][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.318852][ T4686] device bridge_slave_1 left promiscuous mode
[   76.343926][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.418866][ T4013] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8
[   76.434295][ T4686] device bridge_slave_0 left promiscuous mode
[   76.435786][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.610608][ T4013] usb 1-1: USB disconnect, device number 4
[   76.611961][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   76.613988][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   76.618984][ T4013] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   76.632683][ T4686] device veth1_macvtap left promiscuous mode
[   76.634256][ T4686] device veth0_macvtap left promiscuous mode
[   76.635548][ T4686] device veth1_vlan left promiscuous mode
[   76.636873][ T4686] device veth0_vlan left promiscuous mode
[   77.072157][ T4013] Bluetooth: hci4: command 0x040f tx timeout
[   77.226954][ T5191] loop0: detected capacity change from 0 to 128
[   77.337893][ T5191] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   77.400158][ T5197] syz.0.429 (pid 5197) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   77.545685][ T4686] team0 (unregistering): Port device team_slave_1 removed
[   77.560516][ T4686] team0 (unregistering): Port device team_slave_0 removed
[   77.587420][ T4686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.625060][ T4686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.759134][ T4686] bond0 (unregistering): Released all slaves
[   77.987895][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.989686][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.996598][ T4918] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.037798][ T5209] udc-core: couldn't find an available UDC or it's busy
[   78.039349][ T5209] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   78.144121][ T5215] device pim6reg1 entered promiscuous mode
[   78.226091][ T5220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.436'.
[   78.230646][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[   78.330929][ T5224] loop3: detected capacity change from 0 to 256
[   78.390449][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.393564][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.436216][ T5224] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[   78.439228][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.441660][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.452857][ T4918] device veth0_vlan entered promiscuous mode
[   78.457876][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.461306][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.475442][ T4918] device veth1_vlan entered promiscuous mode
[   78.508302][ T5235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'.
[   78.516214][ T5235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'.
[   78.542547][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.548235][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.551459][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.564083][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.570190][ T4918] device veth0_macvtap entered promiscuous mode
[   78.578824][ T4918] device veth1_macvtap entered promiscuous mode
[   78.634750][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.636924][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.639055][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.641207][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.680133][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.688960][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.691131][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.712024][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.724127][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.725827][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.733668][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.743802][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.765705][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.778455][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.780649][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.787120][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.789489][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.791457][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.812307][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.814280][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.816352][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.839364][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.846898][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.849865][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.854211][ T5250] Zero length message leads to an empty skb
[   78.875211][ T4918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.877028][ T4918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.878809][ T4918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.880510][ T4918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.123255][  T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.125865][  T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.151891][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.152175][ T1960] Bluetooth: hci4: command 0x0419 tx timeout
[   79.185879][ T4164] kernel write not supported for file [eventfd] (pid: 4164 comm: kworker/0:7)
[   79.200426][  T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.236127][  T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.257983][  T294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.273060][ T5268] binder: 5267:5268 ioctl c00c620f 0 returned -14
[   79.518279][ T5289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.459'.
[   79.556755][ T5297] loop1: detected capacity change from 0 to 16
[   79.563545][ T4071] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   79.602010][ T5297] erofs: (device loop1): mounted with root inode @ nid 36.
[   79.730229][ T5304] loop5: detected capacity change from 0 to 256
[   79.798093][ T5304] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   80.625449][ T5313] netlink: 'syz.3.467': attribute type 2 has an invalid length.
[   80.696472][ T5313] netlink: 'syz.3.467': attribute type 1 has an invalid length.
[   80.722381][ T4071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.724563][ T4071] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.813049][ T4071] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   80.815073][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   80.816888][ T4071] usb 1-1: SerialNumber: syz
[   80.824658][ T5322] udc-core: couldn't find an available UDC or it's busy
[   80.840284][ T5322] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   80.879566][ T5325] loop4: detected capacity change from 0 to 512
[   80.905991][ T5326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.066069][ T5325] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.472: invalid block
[   81.084214][ T5325] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.472: invalid indirect mapped block 10 (level 1)
[   81.093563][ T5325] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.472: invalid indirect mapped block 8 (level 1)
[   81.106628][ T4071] usb 1-1: 0:2 : does not exist
[   81.137847][ T5325] EXT4-fs (loop4): 1 truncate cleaned up
[   81.139048][ T5325] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none.
[   81.168967][ T4071] usb 1-1: USB disconnect, device number 5
[   81.315293][ T5339] loop1: detected capacity change from 0 to 2048
[   81.372162][ T5339] EXT4-fs (loop1): Ignoring removed oldalloc option
[   81.476298][ T5339] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,grpjquota=,,errors=continue. Quota mode: none.
[   81.808949][ T5368] loop4: detected capacity change from 0 to 128
[   81.879518][ T5368] FAT-fs (loop4): bogus sectors per cluster 0
[   81.880665][ T5368] FAT-fs (loop4): Can't find a valid FAT filesystem
[   81.986943][ T5383] loop0: detected capacity change from 0 to 256
[   82.019777][ T5387] udc-core: couldn't find an available UDC or it's busy
[   82.021213][ T5387] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   82.104480][ T5383] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   82.321418][ T5136] udevd[5136]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   82.325038][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'.
[   82.338857][ T5400] loop3: detected capacity change from 0 to 2048
[   82.462447][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.501440][ T5414] loop0: detected capacity change from 0 to 1024
[   82.668013][ T4023] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   82.768852][ T5426] loop4: detected capacity change from 0 to 256
[   82.776149][  T256] hfsplus: b-tree write err: -5, ino 4
[   82.840205][ T5426] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   82.915897][ T5436] udc-core: couldn't find an available UDC or it's busy
[   82.917293][ T5436] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   82.994097][ T5445] udc-core: couldn't find an available UDC or it's busy
[   82.995548][ T5445] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   83.186519][ T4686] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.264536][ T4013] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   83.306182][ T4686] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.378451][ T4686] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.431535][ T4686] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.502269][ T4013] usb 1-1: Using ep0 maxpacket: 32
[   83.582130][   T26] audit: type=1326 audit(83.540:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84bd38e8 code=0x7ffc0000
[   83.592974][   T26] audit: type=1326 audit(83.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84bd38e8 code=0x7ffc0000
[   83.603997][   T26] audit: type=1326 audit(83.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff84bd38e8 code=0x7ffc0000
[   83.623157][   T26] audit: type=1326 audit(83.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84bd38e8 code=0x7ffc0000
[   83.627334][   T26] audit: type=1326 audit(83.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.4.516" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84bd38e8 code=0x7ffc0000
[   83.675163][ T5415] chnl_net:caif_netlink_parms(): no params data found
[   83.781615][ T5485] netlink: 108 bytes leftover after parsing attributes in process `syz.4.520'.
[   83.782358][ T4013] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[   83.785294][ T4013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.787042][ T4013] usb 1-1: Product: syz
[   83.787879][ T4013] usb 1-1: Manufacturer: syz
[   83.788730][ T4013] usb 1-1: SerialNumber: syz
[   83.814076][ T4013] usb 1-1: config 0 descriptor??
[   83.859229][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.863780][ T5415] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.870745][ T5415] device bridge_slave_0 entered promiscuous mode
[   83.888849][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.899353][ T5415] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.915240][ T5415] device bridge_slave_1 entered promiscuous mode
[   84.056261][ T5415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.062242][ T4013] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[   84.063750][ T5415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.063903][ T4013] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[   84.149316][ T5415] team0: Port device team_slave_0 added
[   84.175144][ T5415] team0: Port device team_slave_1 added
[   84.204131][ T4013] peak_usb: probe of 1-1:0.0 failed with error -71
[   84.209874][ T4013] usb 1-1: USB disconnect, device number 6
[   84.290669][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.292802][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.297967][ T5415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.327643][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.329047][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.352780][ T5415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.484250][ T5415] device hsr_slave_0 entered promiscuous mode
[   84.513001][ T5415] device hsr_slave_1 entered promiscuous mode
[   84.579319][ T5415] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.580997][ T5415] Cannot create hsr debugfs directory
[   84.682096][ T4013] Bluetooth: hci4: command 0x0409 tx timeout
[   85.010311][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'.
[   85.154539][ T5539] loop4: detected capacity change from 0 to 256
[   85.801607][ T5540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.535'.
[   85.887375][ T5415] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   85.945639][ T5545] loop4: detected capacity change from 0 to 512
[   85.985539][ T5415] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   86.000653][ T5545] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   86.002717][ T5545] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 58368
[   86.034258][ T5415] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   86.075637][ T5547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'.
[   86.082458][ T5415] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   86.187222][ T5507] chnl_net:caif_netlink_parms(): no params data found
[   86.352286][ T4014] Bluetooth: hci1: command 0x0409 tx timeout
[   86.405273][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.411304][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.422996][ T5507] device bridge_slave_0 entered promiscuous mode
[   86.450310][ T5571] loop4: detected capacity change from 0 to 2048
[   86.475265][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.477063][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.479295][ T5507] device bridge_slave_1 entered promiscuous mode
[   86.525349][ T5571] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   86.618517][ T5575] loop3: detected capacity change from 0 to 1024
[   86.619955][ T5577] loop0: detected capacity change from 0 to 128
[   86.620169][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.648986][ T5507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.660627][ T5507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.699827][ T5577] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.745548][ T5575] hfsplus: extend alloc file! (8192,117440512,0)
[   86.752930][ T1535] Bluetooth: hci4: command 0x041b tx timeout
[   86.780367][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.782656][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.786849][ T5415] 8021q: adding VLAN 0 to HW filter on device team0
[   86.791281][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.808405][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.823899][  T256] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.825340][  T256] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.947388][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.950173][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.962695][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.972362][  T256] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.973885][  T256] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.978659][ T5507] team0: Port device team_slave_0 added
[   86.986099][ T5507] team0: Port device team_slave_1 added
[   87.030118][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.094189][ T5608] loop0: detected capacity change from 0 to 8
[   87.155065][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.157845][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.161671][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.170744][ T5612] loop4: detected capacity change from 0 to 128
[   87.174644][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.181432][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.206561][ T5612] EXT4-fs (loop4): Test dummy encryption mode enabled
[   87.212988][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.221493][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.224552][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.227728][ T5615] loop3: detected capacity change from 0 to 512
[   87.229660][ T5612] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nouid32,,errors=continue. Quota mode: none.
[   87.263461][ T5615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   87.274167][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.275768][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.309004][ T5507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.312599][ T5615] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   87.317601][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.319172][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.326308][ T5507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.336487][ T5615] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   87.348161][ T5615] EXT4-fs (loop3): 1 truncate cleaned up
[   87.350171][ T5615] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback.
[   87.360696][ T5615] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.3.554: path /106/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[   87.361239][ T4686] device hsr_slave_0 left promiscuous mode
[   87.412863][ T4686] device hsr_slave_1 left promiscuous mode
[   87.488735][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[   87.504599][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.506320][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.517855][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.519529][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.521872][ T4686] device bridge_slave_1 left promiscuous mode
[   87.528612][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.571544][ T4686] device bridge_slave_0 left promiscuous mode
[   87.580547][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.581294][ T5635] loop3: detected capacity change from 0 to 256
[   87.709054][ T5643] loop4: detected capacity change from 0 to 8
[   87.719996][ T4686] device veth1_macvtap left promiscuous mode
[   87.721238][ T4686] device veth0_macvtap left promiscuous mode
[   87.723092][ T4686] device veth1_vlan left promiscuous mode
[   87.724392][ T4686] device veth0_vlan left promiscuous mode
[   87.764401][ T5645] loop3: detected capacity change from 0 to 1024
[   87.805112][ T5645] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   87.819335][ T5645] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #4: comm syz.3.566: casefold flag without casefold feature
[   87.825978][ T5645] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.566: Bad quota inode: 4, type: 1
[   87.838689][ T5645] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   87.844570][ T5645] EXT4-fs (loop3): mount failed
[   88.376449][ T4686] team0 (unregistering): Port device team_slave_1 removed
[   88.419523][ T4686] team0 (unregistering): Port device team_slave_0 removed
[   88.432172][   T21] Bluetooth: hci1: command 0x041b tx timeout
[   88.450650][ T4686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.521646][ T4686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.728738][ T5673] loop0: detected capacity change from 0 to 256
[   88.748811][ T4686] bond0 (unregistering): Released all slaves
[   88.842187][ T1535] Bluetooth: hci4: command 0x040f tx timeout
[   88.886031][ T5415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.902863][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.907919][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.910345][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.023952][ T5680] binder: 5679 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[   89.023978][ T5680] binder: 5679:5680 ioctl c018620c 20000280 returned -22
[   89.060158][ T5507] device hsr_slave_0 entered promiscuous mode
[   89.103035][ T5507] device hsr_slave_1 entered promiscuous mode
[   89.152242][ T5507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.153716][ T5507] Cannot create hsr debugfs directory
[   89.310240][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   89.314777][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.316463][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.321084][ T5696] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   89.346745][ T5701] udc-core: couldn't find an available UDC or it's busy
[   89.348148][ T5701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   89.460987][ T5707] loop0: detected capacity change from 0 to 1024
[   89.518070][ T5507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.528115][ T5707] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[   89.528115][ T5707] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   89.528115][ T5707] 
[   89.591868][ T5707] EXT4-fs error (device loop0): ext4_map_blocks:738: inode #3: block 1: comm syz.0.592: lblock 1 mapped to illegal pblock 1 (length 1)
[   89.599623][ T5707] Quota error (device loop0): write_blk: dquota write failed
[   89.601179][ T5707] Quota error (device loop0): find_free_dqentry: Can't write quota data block 1
[   89.619645][ T5707] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   89.621698][ T5707] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.592: Failed to acquire dquot type 0
[   89.628807][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.630547][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.637109][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.640897][ T5707] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.592: lblock 1 mapped to illegal pblock 1 (length 1)
[   89.667393][ T5707] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1
[   89.669162][ T5707] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   89.676676][ T5707] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.592: Failed to acquire dquot type 0
[   89.692182][ T5707] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.592: Freeing blocks not in datazone - block = 0, count = 4096
[   89.695939][ T5507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.726040][ T5716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'.
[   89.752417][ T5707] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.592: lblock 1 mapped to illegal pblock 1 (length 1)
[   89.764170][ T5707] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1
[   89.807307][ T5707] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   89.809226][ T5707] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.592: Failed to acquire dquot type 0
[   89.832861][ T5728] loop3: detected capacity change from 0 to 2048
[   89.839782][ T5507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.858212][ T5707] EXT4-fs (loop0): 1 orphan inode deleted
[   89.859382][ T5707] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,barrier,nouser_xattr,noload,dioread_lock,grpjquota=,bsddf,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[   89.943879][ T5728] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.948864][ T5507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.142401][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.145246][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.158794][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.161078][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.172490][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.175162][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.206318][ T5415] device veth0_vlan entered promiscuous mode
[   90.274466][ T5415] device veth1_vlan entered promiscuous mode
[   90.307804][ T5748] udc-core: couldn't find an available UDC or it's busy
[   90.309304][ T5748] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   90.431403][ T5415] device veth0_macvtap entered promiscuous mode
[   90.441621][ T5755] loop0: detected capacity change from 0 to 512
[   90.454899][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.457287][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.459374][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.466216][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.474431][ T5415] device veth1_macvtap entered promiscuous mode
[   90.494419][ T5755] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[   90.494419][ T5755] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   90.494419][ T5755] 
[   90.512336][ T4014] Bluetooth: hci1: command 0x040f tx timeout
[   90.516740][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.519225][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.543984][ T5755] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,noacl,,errors=continue. Quota mode: writeback.
[   90.563984][ T5507] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.629952][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.635725][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.637691][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.639757][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.641748][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.646513][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.648679][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.650686][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.654324][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.658527][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.661547][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.678656][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.688233][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.690292][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.701094][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.703514][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.705694][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.724478][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.726672][ T5507] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.757471][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.760074][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.762962][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.782796][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.795737][ T5415] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.797938][ T5415] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.799776][ T5415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.807835][ T5415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.810894][ T5507] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.854224][ T5507] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.922189][ T4071] Bluetooth: hci4: command 0x0419 tx timeout
[   91.058409][ T5779] loop4: detected capacity change from 0 to 512
[   91.084976][ T5780] loop0: detected capacity change from 0 to 512
[   91.117085][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.119007][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.126356][ T5779] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   91.139275][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.160299][ T5779] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   91.183495][ T5779] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.607: invalid indirect mapped block 2683928664 (level 1)
[   91.206799][ T5779] EXT4-fs (loop4): Remounting filesystem read-only
[   91.209146][ T5779] EXT4-fs (loop4): 1 truncate cleaned up
[   91.210462][ T5779] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback.
[   91.310313][ T4685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.331139][ T5790] loop0: detected capacity change from 0 to 2048
[   91.350997][ T4685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.384344][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.451718][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.508513][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.510567][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.526708][ T5507] 8021q: adding VLAN 0 to HW filter on device team0
[   91.612633][ T5799] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.614698][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   91.618341][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.625095][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.626646][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.640809][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.654559][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.665497][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.667068][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.677175][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.703229][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   91.711175][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.729051][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.735665][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   92.532622][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.534975][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   92.573744][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   92.587763][ T5507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.589942][ T5507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.592358][ T4103] Bluetooth: hci1: command 0x0419 tx timeout
[   92.637702][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   92.639906][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.642485][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   92.645697][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   92.662860][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   92.687053][ T5815] loop0: detected capacity change from 0 to 736
[   92.841406][ T5815] Unsupported NM flag settings (9)
[   92.931549][ T5837] loop3: detected capacity change from 0 to 512
[   92.980226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   92.981874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.017033][ T5837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   93.023845][ T5507] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.218488][ T5837] EXT4-fs (loop3): 1 truncate cleaned up
[   93.219682][ T5837] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[   93.224330][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.227550][  T256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.332668][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.334913][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.345331][ T5507] device veth0_vlan entered promiscuous mode
[   93.355390][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.358974][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.380671][ T4023] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /130/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   93.386560][ T5507] device veth1_vlan entered promiscuous mode
[   93.404519][ T4023] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   93.431248][ T4023] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /130/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   93.449559][ T4023] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   93.456265][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.458537][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   93.460727][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.465375][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.477808][ T5507] device veth0_macvtap entered promiscuous mode
[   93.489598][ T4023] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /130/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   93.511221][ T5854] loop6: detected capacity change from 0 to 512
[   93.513486][ T4023] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   93.533371][ T4023] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /130/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   93.555148][ T4023] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   93.571000][ T4023] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /130/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   93.594158][ T4023] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   93.681496][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   93.689883][ T5507] device veth1_macvtap entered promiscuous mode
[   93.696488][ T5854] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   93.714362][ T5854] EXT4-fs (loop6): invalid journal inode
[   93.715729][ T5854] EXT4-fs (loop6): can't get journal size
[   93.737017][ T5854] EXT4-fs (loop6): 1 truncate cleaned up
[   93.738420][ T5854] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   93.755202][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.631'.
[   93.762782][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.763957][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.631'.
[   93.768859][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.777528][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.817123][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.819267][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.821319][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.862768][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.864886][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.866806][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.868869][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.900160][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.914730][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.917283][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.957317][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.959464][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.961517][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.991944][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.993923][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.010226][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.032815][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.035125][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.037712][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.039731][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.067046][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.128577][  T609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.130969][  T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.138419][ T5507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.140221][ T5507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.141851][ T5507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.151813][ T5507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.390828][ T5889] loop6: detected capacity change from 0 to 512
[   94.398351][ T4111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.398437][ T5889] EXT4-fs (loop6): Ignoring removed oldalloc option
[   94.400295][ T4111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.403037][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.449847][  T609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.451732][  T609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.468337][ T5889] EXT4-fs (loop6): 1 truncate cleaned up
[   94.469533][ T5889] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,user_xattr,errors=remount-ro,oldalloc,stripe=0x0000000000000007,. Quota mode: writeback.
[   94.500003][  T609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.855285][ T5916] udc-core: couldn't find an available UDC or it's busy
[   94.856603][ T5916] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   95.054459][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.111431][ T5929] loop0: detected capacity change from 0 to 256
[   95.149242][ T5933] loop1: detected capacity change from 0 to 128
[   95.167700][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.269175][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.408612][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.429750][ T5944] loop4: detected capacity change from 0 to 512
[   95.466024][ T5946] loop6: detected capacity change from 0 to 2048
[   95.500150][ T5950] binder: 5949 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[   95.500172][ T5950] binder: 5949:5950 ioctl c018620c 20000280 returned -22
[   95.532193][ T5944] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   95.549339][ T5944] EXT4-fs (loop4): 1 truncate cleaned up
[   95.550528][ T5944] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,resgid=0x000000000000ee00,init_itable,noload,minixdf,usrjquota=,,errors=continue. Quota mode: none.
[   95.591245][ T5946] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   95.593746][ T4068] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   96.611882][ T5971] udc-core: couldn't find an available UDC or it's busy
[   96.624459][ T5970] xt_CT: You must specify a L4 protocol and not use inversions on it
[   96.627182][ T5971] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   96.752832][ T4068] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   96.754716][ T4068] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   96.756917][ T4068] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.877286][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   96.899446][ T5985] loop1: detected capacity change from 0 to 512
[   96.932761][ T4068] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.934841][ T4068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.936571][ T4068] usb 1-1: Product: syz
[   96.937497][ T4068] usb 1-1: Manufacturer: syz
[   96.938568][ T4068] usb 1-1: SerialNumber: syz
[   96.972911][ T5993] binder: 5992:5993 ioctl 400c620e 0 returned -14
[   97.022170][ T5985] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.668: invalid block
[   97.029573][ T5999] binder: 5998:5999 tried to acquire reference to desc 0, got 1 instead
[   97.033884][ T5985] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.668: Invalid block bitmap block 0 in block_group 0
[   97.034875][ T5999] binder: 5998:5999 got transaction with invalid offsets ptr
[   97.039087][ T5999] binder: 5998:5999 transaction failed 29201/-22, size 104-24 line 3417
[   97.042475][ T5985] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   97.053384][ T5985] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.668: attempt to clear invalid blocks 983261 len 1
[   97.057479][ T5985] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.668: invalid indirect mapped block 2683928664 (level 0)
[   97.068418][ T5985] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm syz.1.668: Invalid inode table block 0 in block_group 0
[   97.074290][ T4014] binder: undelivered TRANSACTION_ERROR: 29201
[   97.083676][ T5985] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   97.086002][ T5985] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   97.088054][ T5985] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm syz.1.668: Invalid inode table block 0 in block_group 0
[   97.103982][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.120188][ T5985] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem
[   97.124382][ T5985] EXT4-fs error (device loop1): ext4_truncate:4272: inode #13: comm syz.1.668: mark_inode_dirty error
[   97.125228][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.129267][ T5985] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   97.141002][ T5985] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm syz.1.668: Invalid inode table block 0 in block_group 0
[   97.146372][ T5985] EXT4-fs (loop1): 1 truncate cleaned up
[   97.147497][ T5985] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[   97.148363][ T5935] device bridge_slave_0 entered promiscuous mode
[   98.712341][ T4071] Bluetooth: hci0: command 0x0409 tx timeout
[   99.048370][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.050170][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.053410][ T5935] device bridge_slave_1 entered promiscuous mode
[   99.132187][ T4068] usb 1-1: 0:2 : does not exist
[   99.141628][ T4068] usb 1-1: USB disconnect, device number 7
[   99.270981][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.283098][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.361158][ T6024] loop4: detected capacity change from 0 to 128
[   99.409425][ T6024] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   99.424936][ T5935] team0: Port device team_slave_0 added
[   99.429992][ T5935] team0: Port device team_slave_1 added
[   99.438809][ T6024] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   99.529022][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.530565][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.546713][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.549814][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.6.684'.
[   99.584057][ T6039] loop6: detected capacity change from 0 to 16
[   99.596453][ T6035] netlink: 'syz.1.682': attribute type 3 has an invalid length.
[   99.599835][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.601368][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.625411][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.632409][ T4068] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   99.638985][ T6042] loop4: detected capacity change from 0 to 1024
[   99.670030][ T6039] erofs: (device loop6): mounted with root inode @ nid 36.
[   99.711038][ T6042] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[   99.800453][ T5935] device hsr_slave_0 entered promiscuous mode
[   99.842593][ T5935] device hsr_slave_1 entered promiscuous mode
[   99.882388][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.884136][ T5935] Cannot create hsr debugfs directory
[   99.985558][ T6067] udc-core: couldn't find an available UDC or it's busy
[   99.987096][ T6067] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  100.012434][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  100.014740][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.016797][ T4068] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  100.018605][ T4068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.027315][ T4068] usb 1-1: config 0 descriptor??
[  100.295894][ T6080] loop4: detected capacity change from 0 to 512
[  100.400922][ T6080] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  100.453389][    T9] device hsr_slave_0 left promiscuous mode
[  100.493952][ T6091] loop6: detected capacity change from 0 to 128
[  100.500662][    T9] device hsr_slave_1 left promiscuous mode
[  100.525575][ T4068] sony 0003:054C:0268.0002: invalid report_count 662779747
[  100.528819][ T4068] sony 0003:054C:0268.0002: item 0 4 1 9 parsing failed
[  100.530748][ T4068] sony 0003:054C:0268.0002: parse failed
[  100.532172][ T4068] sony: probe of 0003:054C:0268.0002 failed with error -22
[  100.549773][ T4038] udevd[4038]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  100.552740][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.555064][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.557553][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.559111][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.569718][    T9] device bridge_slave_1 left promiscuous mode
[  100.571518][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.580192][ T6091] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  100.601256][   T26] audit: type=1326 audit(100.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.6.696" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae74d8e8 code=0x0
[  100.655080][    T9] device bridge_slave_0 left promiscuous mode
[  100.656549][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.729107][ T4068] usb 1-1: USB disconnect, device number 8
[  100.754465][ T6105] loop1: detected capacity change from 0 to 512
[  100.782784][    T9] device veth1_macvtap left promiscuous mode
[  100.784268][    T9] device veth0_macvtap left promiscuous mode
[  100.785455][    T9] device veth1_vlan left promiscuous mode
[  100.786727][    T9] device veth0_vlan left promiscuous mode
[  100.900386][ T6109] udc-core: couldn't find an available UDC or it's busy
[  100.902382][ T6109] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  101.072237][ T4068] Bluetooth: hci0: command 0x041b tx timeout
[  101.117401][    T9] team0 (unregistering): Port device team_slave_1 removed
[  101.128465][    T9] team0 (unregistering): Port device team_slave_0 removed
[  101.141507][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.201004][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.350663][    T9] bond0 (unregistering): Released all slaves
[  101.451896][ T5935] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  101.504834][ T5935] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  101.521539][ T6124] loop1: detected capacity change from 0 to 256
[  101.537966][ T5935] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  101.606661][ T5935] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  101.961388][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.010850][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.013450][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.030980][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[  102.051838][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.054560][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.056665][ T4111] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.058152][ T4111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.060348][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.088368][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.090643][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.126705][ T4111] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.128320][ T4111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.130234][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.141799][ T6158] loop1: detected capacity change from 0 to 128
[  102.201471][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'.
[  102.222481][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.224951][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.227758][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.230036][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.263223][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.291795][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.299678][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.314760][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.320462][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.350320][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.364967][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.391637][ T6173] udc-core: couldn't find an available UDC or it's busy
[  102.397873][ T6169] loop6: detected capacity change from 0 to 256
[  102.412102][ T6173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  102.473912][ T6169] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  102.674785][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.676795][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.678769][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  102.697148][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.800056][ T6199] udc-core: couldn't find an available UDC or it's busy
[  102.801456][ T6199] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  102.988639][ T6212] udc-core: couldn't find an available UDC or it's busy
[  102.990024][ T6212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  103.068575][ T6216] loop6: detected capacity change from 0 to 2048
[  103.152486][    T7] Bluetooth: hci0: command 0x040f tx timeout
[  103.153366][ T6216] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  103.161059][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  103.163785][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.170882][ T6216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.243057][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.245410][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.248695][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.262675][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.282123][ T5935] device veth0_vlan entered promiscuous mode
[  103.294301][ T5935] device veth1_vlan entered promiscuous mode
[  103.363368][ T6230] udc-core: couldn't find an available UDC or it's busy
[  103.364936][ T6230] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  103.401214][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.407206][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  103.409640][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  103.417203][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  103.438164][ T5935] device veth0_macvtap entered promiscuous mode
[  103.445484][ T5935] device veth1_macvtap entered promiscuous mode
[  103.493305][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  103.495658][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  103.535290][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.537423][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.539319][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.567563][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.569671][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.571738][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.588920][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.591385][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.604612][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.606629][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.613853][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.643523][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  103.654182][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  103.670513][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.673351][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.675306][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.675398][ T6245] udc-core: couldn't find an available UDC or it's busy
[  103.678955][ T6245] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  103.687920][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.690201][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.698794][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.700752][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.707569][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.709941][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.730349][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.752731][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.757512][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  103.761268][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.770121][ T5935] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.779739][ T5935] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.781748][ T5935] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.785120][ T5935] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.963404][ T4103] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  103.981416][ T4685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.981465][ T4685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.984949][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  104.035395][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.035445][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.038377][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  104.223806][ T6273] mmap: syz.6.752 (6273) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  104.349405][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.7.755'.
[  104.350300][ T6283] netlink: 'syz.6.757': attribute type 7 has an invalid length.
[  104.472099][ T4103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  104.474627][ T4103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.476703][ T4103] usb 1-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13
[  104.478564][ T4103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.495819][ T4103] usb 1-1: config 0 descriptor??
[  104.498432][ T6286] syz.6.758 sent an empty control message without MSG_MORE.
[  105.355065][ T4164] Bluetooth: hci0: command 0x0419 tx timeout
[  105.390913][ T6295] udc-core: couldn't find an available UDC or it's busy
[  105.396527][ T6295] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  105.517137][ T4103] wacom 0003:056A:7A26.0003: Unknown device_type for 'HID 056a:7a26'. Ignoring.
[  105.719513][ T4103] usb 1-1: USB disconnect, device number 9
[  105.784913][ T6319] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  105.873574][ T6326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.771'.
[  106.079532][ T6333] cgroup: Need name or subsystem set
[  106.150372][ T6344] loop4: detected capacity change from 0 to 1024
[  106.185715][ T6346] binder: 6345:6346 transaction failed 29189/-22, size 0-0 line 2917
[  106.193737][ T4013] binder: undelivered TRANSACTION_ERROR: 29189
[  106.246811][ T6344] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  106.248487][ T6344] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.055765][ T6352] loop6: detected capacity change from 0 to 1024
[  107.108842][ T6344] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,max_dir_size_kb=0x0000000000000009,sysvgroups,data_err=ignore,dioread_nolock,stripe=0x0000000000000004,min_batch_time=0x0000000000000002,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  107.184497][ T6352] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,init_itable=0x0000000000000009,barrier=0x0000000001000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  107.511762][ T6384] loop7: detected capacity change from 0 to 256
[  107.583633][ T6384] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  107.682983][ T6397] netlink: 428 bytes leftover after parsing attributes in process `syz.6.799'.
[  107.690675][ T6397] netlink: 104 bytes leftover after parsing attributes in process `syz.6.799'.
[  107.701453][ T6398] netpci0: tun_chr_ioctl cmd 1074025677
[  107.716718][ T6398] netpci0: linktype set to 769
[  107.929962][ T6410] udc-core: couldn't find an available UDC or it's busy
[  107.931519][ T6410] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  107.970799][ T6414] udc-core: couldn't find an available UDC or it's busy
[  107.979265][ T6414] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  108.366910][ T6441] loop7: detected capacity change from 0 to 1024
[  108.406653][ T6445] xt_TCPMSS: Only works on TCP SYN packets
[  108.624079][ T6455] input: syz1 as /devices/virtual/input/input16
[  108.742359][ T6467] loop7: detected capacity change from 0 to 8
[  108.849621][ T6477] udc-core: couldn't find an available UDC or it's busy
[  108.895730][ T6477] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  109.041753][ T6490] loop4: detected capacity change from 0 to 1024
[  109.177971][ T6490] attempt to access beyond end of device
[  109.177971][ T6490] loop4: rw=0, want=5780, limit=1024
[  109.181371][ T6490] attempt to access beyond end of device
[  109.181371][ T6490] loop4: rw=0, want=5780, limit=1024
[  109.204760][ T6490] attempt to access beyond end of device
[  109.204760][ T6490] loop4: rw=0, want=5780, limit=1024
[  109.342902][ T6509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.839'.
[  109.352945][ T6509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.839'.
[  113.458389][   T26] audit: type=1326 audit(113.420:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.941" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4da18e8 code=0x0
[  113.963883][ T6815] udc-core: couldn't find an available UDC or it's busy
[  113.965460][ T6815] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  114.677861][ T6838] binder: 6837:6838 unknown command 0
[  114.688395][ T6838] binder: 6837:6838 ioctl c0306201 20000080 returned -22
[  114.716544][ T6838] binder: 6837:6838 tried to acquire reference to desc 0, got 1 instead
[  114.719113][ T6838] binder: 6837:6838 got transaction with invalid parent offset or type
[  114.725058][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.961'.
[  114.734755][ T6838] binder: 6837:6838 transaction failed 29201/-22, size 120-24 line 3381
[  114.737062][ T4103] binder: undelivered TRANSACTION_ERROR: 29201
[  114.899109][ T6853] binder: 6849:6853 got transaction to invalid handle, 1
[  114.912155][ T6853] binder: 6849:6853 transaction failed 29201/-22, size 0-0 line 2917
[  114.928054][ T1960] binder: undelivered TRANSACTION_ERROR: 29201
[  115.274071][ T6842] device hsr_slave_1 left promiscuous mode
[  115.304816][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'.
[  115.306813][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'.
[  115.311656][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'.
[  115.416048][ T6856] bond0: (slave bond_slave_0): Releasing backup interface
[  115.487691][ T6873] udc-core: couldn't find an available UDC or it's busy
[  115.499917][ T6873] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  115.844294][ T6887] syz.6.977 uses obsolete (PF_INET,SOCK_PACKET)
[  115.846452][ T6887] device syzkaller1 entered promiscuous mode
[  117.317141][ T6972] udc-core: couldn't find an available UDC or it's busy
[  117.319118][ T6972] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  117.564531][ T6985] tmpfs: Unknown parameter 'usrquota'
[  118.172449][ T7014] udc-core: couldn't find an available UDC or it's busy
[  118.174107][ T7014] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  118.213062][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'.
[  118.592239][   T13] Bluetooth: hci0: command 0x0401 tx timeout
[  120.079186][ T7057] udc-core: couldn't find an available UDC or it's busy
[  120.080756][ T7057] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  120.427327][ T7082] 9pnet: bogus RWRITE count (2 > 1)
[  120.488157][ T7084] team0: Device wg2 is of different type
[  121.850478][ T7118] udc-core: couldn't find an available UDC or it's busy
[  121.866886][ T7118] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  122.748809][ T4075] Bluetooth: hci0: command 0x0405 tx timeout
[  122.787683][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'.
[  122.789777][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'.
[  122.791698][ T7152] netlink: 'syz.4.1058': attribute type 5 has an invalid length.
[  122.822532][ T7153] udc-core: couldn't find an available UDC or it's busy
[  122.829850][ T7153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  124.152005][ T7183] 9pnet: bogus RWRITE count (2 > 1)
[  124.240847][ T7191] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1069'.
[  125.979957][ T7252] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  126.819445][ T4013] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  127.227385][ T7293] raw_sendmsg: syz.4.1101 forgot to set AF_INET. Fix it!
[  127.282150][ T4013] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  127.336081][ T7299] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  127.372873][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.374742][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.376974][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.411086][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1107'.
[  127.472229][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.474193][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.476436][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.562792][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.564703][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.566840][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.795940][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.798476][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.800622][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.826417][ T7327] udc-core: couldn't find an available UDC or it's busy
[  127.829174][ T7327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  127.882754][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.887802][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  127.890336][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  128.672603][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  128.674370][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  128.676547][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  128.793300][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  128.795258][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  128.797486][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  128.882191][ T4013] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  128.884223][ T4013] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  128.886462][ T4013] usb 1-1: config 0 interface 0 has no altsetting 0
[  128.960295][ T4013] usb 1-1: string descriptor 0 read error: -71
[  128.961821][ T4013] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  128.964695][ T4013] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  128.969756][ T4013] usb 1-1: config 0 descriptor??
[  128.980743][ T7359] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  128.985770][ T7360] netlink: 'syz.4.1126': attribute type 10 has an invalid length.
[  128.992177][ T4013] usb 1-1: can't set config #0, error -71
[  128.995732][ T4013] usb 1-1: USB disconnect, device number 10
[  129.044079][ T7360] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  129.111453][ T7371] udc-core: couldn't find an available UDC or it's busy
[  129.121089][ T7371] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  129.610406][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.613397][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.260328][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.298082][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.799344][ T7364] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.801491][ T7364] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.804116][ T7364] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.806105][ T7364] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.975831][ T7360] device bridge_slave_0 left promiscuous mode
[  130.977355][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.024160][ T7360] device bridge_slave_1 left promiscuous mode
[  131.025495][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.064445][ T7360] bond0: (slave bond_slave_1): Releasing backup interface
[  131.074279][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  131.075669][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  131.111186][ T7360] team0: Port device team_slave_0 removed
[  131.114497][ T7360] team0: Port device team_slave_1 removed
[  131.116022][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.118198][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.120771][ T7360] bond0: (slave netdevsim0): Releasing backup interface
[  131.346178][ T7410] loop7: detected capacity change from 0 to 1024
[  131.573352][ T7428] udc-core: couldn't find an available UDC or it's busy
[  131.600044][ T7428] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  132.605093][ T7447] udc-core: couldn't find an available UDC or it's busy
[  132.606422][ T7447] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  132.779474][ T7453] dccp_flush_write_queue: CCID did not manage to send all packets
[  133.199237][ T7481] loop6: detected capacity change from 0 to 1024
[  133.557109][ T7501] loop4: detected capacity change from 0 to 1024
[  134.356921][ T7514] udc-core: couldn't find an available UDC or it's busy
[  134.402125][ T7514] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  135.499825][ T7575] udc-core: couldn't find an available UDC or it's busy
[  135.503708][ T7575] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  136.844529][ T7613] loop4: detected capacity change from 0 to 1024
[  140.449521][ T4032] Bluetooth: hci0: link tx timeout
[  140.450948][ T4032] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.171553][ T4032] Bluetooth: hci0: link tx timeout
[  141.173414][ T4032] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.450093][ T4032] Bluetooth: hci0: link tx timeout
[  142.451106][ T4032] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.512056][ T4075] Bluetooth: hci0: command 0x0406 tx timeout
[  143.194688][ T4032] Bluetooth: hci0: link tx timeout
[  143.195869][ T4032] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.384200][ T7823] 9pnet: Insufficient options for proto=fd
[  144.188398][ T7839] usb usb7: selecting invalid altsetting 6
[  144.363424][ T7853] loop7: detected capacity change from 0 to 1024
[  144.450667][ T4032] Bluetooth: hci0: link tx timeout
[  144.451829][ T4032] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.915273][ T7931] 9pnet: Insufficient options for proto=fd
[  145.001249][ T7938] udc-core: couldn't find an available UDC or it's busy
[  145.022300][ T7938] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  145.057825][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1222'.
[  145.287417][ T7949] loop4: detected capacity change from 0 to 1024
[  145.695115][ T7965] 9pnet: Insufficient options for proto=fd
[  147.194274][ T4032] Bluetooth: hci0: link tx timeout
[  147.195414][ T4032] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.321286][ T7996] input: syz1 as /devices/virtual/input/input17
[  147.348854][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'.
[  147.820273][ T8023] tmpfs: Unknown parameter 'usrquota'
[  147.857625][ T4013] binder: undelivered death notification, 0000000000000000
[  148.117118][ T8041] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  148.260273][ T4032] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  148.263108][ T4032] CPU: 0 PID: 4032 Comm: kworker/u5:4 Not tainted 5.15.173-syzkaller #0
[  148.264832][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  148.267124][ T4032] Workqueue: hci4 hci_rx_work
[  148.268172][ T4032] Call trace:
[  148.268834][ T4032]  dump_backtrace+0x0/0x530
[  148.269779][ T4032]  show_stack+0x2c/0x3c
[  148.270718][ T4032]  dump_stack_lvl+0x108/0x170
[  148.271667][ T4032]  dump_stack+0x1c/0x58
[  148.272579][ T4032]  sysfs_create_dir_ns+0x278/0x318
[  148.273751][ T4032]  kobject_add_internal+0x384/0x8f0
[  148.274788][ T4032]  kobject_add+0x14c/0x21c
[  148.275709][ T4032]  device_add+0x400/0xef4
[  148.276704][ T4032]  hci_conn_add_sysfs+0xc4/0x1cc
[  148.277761][ T4032]  le_conn_complete_evt+0x954/0x1228
[  148.278913][ T4032]  hci_le_meta_evt+0x234/0x31c0
[  148.279941][ T4032]  hci_event_packet+0xd34/0x12b4
[  148.281014][ T4032]  hci_rx_work+0x1c0/0x7c4
[  148.281943][ T4032]  process_one_work+0x790/0x11b8
[  148.283088][ T4032]  worker_thread+0x910/0x1034
[  148.284038][ T4032]  kthread+0x37c/0x45c
[  148.284920][ T4032]  ret_from_fork+0x10/0x20
[  148.288997][ T4032] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  148.291854][ T4032] Bluetooth: hci4: failed to register connection device
[  148.446302][ T8056] netlink: 'syz.0.1271': attribute type 1 has an invalid length.
[  148.522980][ T8056] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  148.573194][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'.
[  148.594115][ T8056] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.623745][ T8067] loop4: detected capacity change from 0 to 2048
[  148.667647][ T3641] Alternate GPT is invalid, using primary GPT.
[  148.669148][ T3641]  loop4: p2 p3 p7
[  148.713041][ T8067] Alternate GPT is invalid, using primary GPT.
[  148.714403][ T8067]  loop4: p2 p3 p7
[  148.725514][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'.
[  148.835310][ T8067] udc-core: couldn't find an available UDC or it's busy
[  148.836834][ T8067] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  148.846237][ T3641] Alternate GPT is invalid, using primary GPT.
[  148.847645][ T3641]  loop4: p2 p3 p7
[  148.897940][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'.
[  149.046692][ T8092] 9pnet: Insufficient options for proto=fd
[  149.256972][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1293'.
[  149.260748][ T8101] netlink: 'syz.6.1293': attribute type 7 has an invalid length.
[  149.262649][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1293'.
[  149.467325][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1296'.
[  149.531265][ T4032] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  149.533717][ T4032] CPU: 0 PID: 4032 Comm: kworker/u5:4 Not tainted 5.15.173-syzkaller #0
[  149.535445][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  149.537555][ T4032] Workqueue: hci0 hci_rx_work
[  149.538486][ T4032] Call trace:
[  149.539106][ T4032]  dump_backtrace+0x0/0x530
[  149.539993][ T4032]  show_stack+0x2c/0x3c
[  149.540906][ T4032]  dump_stack_lvl+0x108/0x170
[  149.541940][ T4032]  dump_stack+0x1c/0x58
[  149.542874][ T4032]  sysfs_create_dir_ns+0x278/0x318
[  149.543904][ T4032]  kobject_add_internal+0x384/0x8f0
[  149.544928][ T4032]  kobject_add+0x14c/0x21c
[  149.545801][ T4032]  device_add+0x400/0xef4
[  149.546672][ T4032]  hci_conn_add_sysfs+0xc4/0x1cc
[  149.547697][ T4032]  le_conn_complete_evt+0x954/0x1228
[  149.548695][ T4032]  hci_le_meta_evt+0x234/0x31c0
[  149.549824][ T4032]  hci_event_packet+0xd34/0x12b4
[  149.550831][ T4032]  hci_rx_work+0x1c0/0x7c4
[  149.551766][ T4032]  process_one_work+0x790/0x11b8
[  149.552896][ T4032]  worker_thread+0x910/0x1034
[  149.553787][ T4032]  kthread+0x37c/0x45c
[  149.554289][   T26] audit: type=1326 audit(149.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.7.1297" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa5d48e8 code=0x0
[  149.554600][ T4032]  ret_from_fork+0x10/0x20
[  149.564852][ T4032] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  149.567632][ T4032] Bluetooth: hci0: failed to register connection device
[  149.572477][ T4032] Bluetooth: hci0: link tx timeout
[  149.573581][ T4032] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.611365][ T8114] 9pnet: Insufficient options for proto=fd
[  149.737246][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1301'.
[  149.946699][ T8104] udevd[8104]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  149.956529][ T7829] udevd[7829]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  149.963242][ T7943] udevd[7943]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  150.020690][ T7944] udevd[7944]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  150.031895][ T7829] udevd[7829]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  150.058056][ T7943] udevd[7943]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  150.088907][ T7829] udevd[7829]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  150.108059][ T8146] 9pnet: Insufficient options for proto=fd
[  150.117275][ T7943] udevd[7943]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  150.126239][ T8104] udevd[8104]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  150.164715][ T8150] input: syz1 as /devices/virtual/input/input18
[  150.331262][ T8153] udc-core: couldn't find an available UDC or it's busy
[  150.333338][ T8153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  150.457524][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1317'.
[  150.951309][ T8175] loop7: detected capacity change from 0 to 256
[  151.606854][   T26] audit: type=1326 audit(151.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.6.1322" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae74d8e8 code=0x0
[  151.899508][ T8192] loop7: detected capacity change from 0 to 256
[  152.000717][ T8192] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  153.457125][ T8216] loop4: detected capacity change from 0 to 512
[  153.503127][ T6875] ------------[ cut here ]------------
[  153.504584][ T6875] sysfs group 'byte_queue_limits' not found for kobject 'tx-0'
[  153.506198][ T6875] WARNING: CPU: 1 PID: 6875 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x288
[  153.508114][ T6875] Modules linked in:
[  153.508951][ T6875] CPU: 1 PID: 6875 Comm: kbnepd y Not tainted 5.15.173-syzkaller #0
[  153.510627][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  153.512713][ T6875] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  153.514181][ T6875] pc : sysfs_remove_group+0x174/0x288
[  153.515280][ T6875] lr : sysfs_remove_group+0x174/0x288
[  153.516348][ T6875] sp : ffff800021397830
[  153.517292][ T6875] x29: ffff800021397830 x28: 1fffe0001b084cbb x27: 0000000000000000
[  153.519000][ T6875] x26: 0000000000000000 x25: 1fffe0001b084c88 x24: 1ffff000026d8f14
[  153.520802][ T6875] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e4133c18
[  153.522456][ T6875] x20: ffff0000e20870e8 x19: ffff8000136c7f80 x18: 0000000000000001
[  153.524117][ T6875] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff
[  153.525749][ T6875] x14: ffff0000d531b680 x13: 0000000000000001 x12: 0000000000000001
[  153.527385][ T6875] x11: 0000000000000000 x10: 0000000000000000 x9 : a0104ddb47a15900
[  153.529077][ T6875] x8 : a0104ddb47a15900 x7 : 0000000000000001 x6 : 0000000000000001
[  153.530724][ T6875] x5 : ffff800021396f98 x4 : ffff800014c405e0 x3 : ffff800008555e80
[  153.532334][ T6875] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003c
[  153.533959][ T6875] Call trace:
[  153.534612][ T6875]  sysfs_remove_group+0x174/0x288
[  153.535599][ T6875]  netdev_queue_update_kobjects+0x388/0x404
[  153.536685][ T6875]  netdev_unregister_kobject+0x100/0x204
[  153.537929][ T6875]  unregister_netdevice_many+0x12c8/0x189c
[  153.539138][ T6875]  unregister_netdev+0x178/0x1f0
[  153.540120][ T6875]  bnep_session+0x2274/0x2424
[  153.541098][ T6875]  kthread+0x37c/0x45c
[  153.541985][ T6875]  ret_from_fork+0x10/0x20
[  153.542885][ T6875] irq event stamp: 6766
[  153.543645][ T6875] hardirqs last  enabled at (6765): [<ffff80000832c128>] __up_console_sem+0xb4/0x100
[  153.545503][ T6875] hardirqs last disabled at (6766): [<ffff800011b47794>] el1_dbg+0x24/0x80
[  153.547263][ T6875] softirqs last  enabled at (6698): [<ffff80000ffba2fc>] dev_mc_flush+0x1b4/0x1f8
[  153.549062][ T6875] softirqs last disabled at (6696): [<ffff80000ffba914>] local_bh_disable+0x10/0x34
[  153.550862][ T6875] ---[ end trace dc60020ef5ff1d3a ]---
[  153.567449][ T6875] ==================================================================
[  153.569302][ T6875] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174
[  153.570707][ T6875] Read of size 8 at addr ffff0000cce0d388 by task kbnepd y/6875
[  153.572169][ T6875] 
[  153.572612][ T6875] CPU: 1 PID: 6875 Comm: kbnepd y Tainted: G        W         5.15.173-syzkaller #0
[  153.574449][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  153.576444][ T6875] Call trace:
[  153.577161][ T6875]  dump_backtrace+0x0/0x530
[  153.578114][ T6875]  show_stack+0x2c/0x3c
[  153.578936][ T6875]  dump_stack_lvl+0x108/0x170
[  153.579863][ T6875]  print_address_description+0x7c/0x3f0
[  153.581064][ T6875]  kasan_report+0x174/0x1e4
[  153.582005][ T6875]  __asan_report_load8_noabort+0x44/0x50
[  153.583238][ T6875]  device_for_each_child+0xa8/0x174
[  153.584262][ T6875]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  153.585442][ T6875]  netdev_unregister_kobject+0x144/0x204
[  153.586572][ T6875]  unregister_netdevice_many+0x12c8/0x189c
[  153.587724][ T6875]  unregister_netdev+0x178/0x1f0
[  153.588758][ T6875]  bnep_session+0x2274/0x2424
[  153.589692][ T6875]  kthread+0x37c/0x45c
[  153.590540][ T6875]  ret_from_fork+0x10/0x20
[  153.591460][ T6875] 
[  153.591870][ T6875] Allocated by task 5935:
[  153.592772][ T6875]  ____kasan_kmalloc+0xbc/0xfc
[  153.593664][ T6875]  __kasan_kmalloc+0x10/0x1c
[  153.594623][ T6875]  __kmalloc+0x29c/0x4c8
[  153.595547][ T6875]  hci_alloc_dev_priv+0x30/0x18b0
[  153.596604][ T6875]  vhci_create_device+0xf8/0x568
[  153.597607][ T6875]  vhci_write+0x318/0x3b8
[  153.598503][ T6875]  vfs_write+0x884/0xb44
[  153.599349][ T6875]  ksys_write+0x15c/0x26c
[  153.600309][ T6875]  __arm64_sys_write+0x7c/0x90
[  153.601227][ T6875]  invoke_syscall+0x98/0x2b8
[  153.602151][ T6875]  el0_svc_common+0x138/0x258
[  153.603176][ T6875]  do_el0_svc+0x58/0x14c
[  153.603973][ T6875]  el0_svc+0x7c/0x1f0
[  153.604689][ T6875]  el0t_64_sync_handler+0x84/0xe4
[  153.605679][ T6875]  el0t_64_sync+0x1a0/0x1a4
[  153.606504][ T6875] 
[  153.606986][ T6875] Freed by task 6752:
[  153.607837][ T6875]  kasan_set_track+0x4c/0x84
[  153.608693][ T6875]  kasan_set_free_info+0x28/0x4c
[  153.609669][ T6875]  ____kasan_slab_free+0x118/0x164
[  153.610648][ T6875]  __kasan_slab_free+0x18/0x28
[  153.611611][ T6875]  slab_free_freelist_hook+0x128/0x1ec
[  153.612709][ T6875]  kfree+0x178/0x410
[  153.613561][ T6875]  hci_release_dev+0x1004/0x116c
[  153.614529][ T6875]  bt_host_release+0x70/0x88
[  153.615460][ T6875]  device_release+0x8c/0x1ac
[  153.616388][ T6875]  kobject_put+0x2c4/0x438
[  153.617264][ T6875]  put_device+0x28/0x40
[  153.618121][ T6875]  hci_free_dev+0x24/0x34
[  153.618926][ T6875]  vhci_release+0x7c/0xc4
[  153.619881][ T6875]  __fput+0x1c4/0x800
[  153.620729][ T6875]  ____fput+0x20/0x30
[  153.621490][ T6875]  task_work_run+0x130/0x1e4
[  153.622458][ T6875]  do_exit+0x670/0x20bc
[  153.623362][ T6875]  do_group_exit+0x110/0x268
[  153.624318][ T6875]  get_signal+0x634/0x1550
[  153.625324][ T6875]  do_notify_resume+0x3d0/0x32b8
[  153.626377][ T6875]  asm_exit_to_user_mode+0x9c/0xf0
[  153.627426][ T6875]  ret_from_fork+0x1c/0x20
[  153.628385][ T6875] 
[  153.628834][ T6875] Last potentially related work creation:
[  153.630014][ T6875]  kasan_save_stack+0x38/0x68
[  153.631014][ T6875]  kasan_record_aux_stack+0xd4/0x11c
[  153.632130][ T6875]  insert_work+0x64/0x394
[  153.633044][ T6875]  __queue_work+0xb84/0x114c
[  153.634071][ T6875]  queue_work_on+0xc4/0x17c
[  153.635068][ T6875]  le_conn_complete_evt+0xc68/0x1228
[  153.636177][ T6875]  hci_le_meta_evt+0x234/0x31c0
[  153.637191][ T6875]  hci_event_packet+0xd34/0x12b4
[  153.638156][ T6875]  hci_rx_work+0x1c0/0x7c4
[  153.639105][ T6875]  process_one_work+0x790/0x11b8
[  153.640068][ T6875]  worker_thread+0x910/0x1034
[  153.641105][ T6875]  kthread+0x37c/0x45c
[  153.641890][ T6875]  ret_from_fork+0x10/0x20
[  153.642786][ T6875] 
[  153.643229][ T6875] Second to last potentially related work creation:
[  153.644621][ T6875]  kasan_save_stack+0x38/0x68
[  153.645557][ T6875]  kasan_record_aux_stack+0xd4/0x11c
[  153.646617][ T6875]  insert_work+0x64/0x394
[  153.647462][ T6875]  __queue_work+0xb84/0x114c
[  153.648359][ T6875]  queue_work_on+0xc4/0x17c
[  153.649217][ T6875]  hci_send_acl+0x7a8/0xaa4
[  153.650182][ T6875]  l2cap_send_cmd+0x52c/0x76c
[  153.651123][ T6875]  l2cap_connect_cfm+0xb34/0xe5c
[  153.652109][ T6875]  le_conn_complete_evt+0xa30/0x1228
[  153.653157][ T6875]  hci_le_meta_evt+0x234/0x31c0
[  153.654127][ T6875]  hci_event_packet+0xd34/0x12b4
[  153.655096][ T6875]  hci_rx_work+0x1c0/0x7c4
[  153.656000][ T6875]  process_one_work+0x790/0x11b8
[  153.656990][ T6875]  worker_thread+0x910/0x1034
[  153.657908][ T6875]  kthread+0x37c/0x45c
[  153.658854][ T6875]  ret_from_fork+0x10/0x20
[  153.659709][ T6875] 
[  153.660166][ T6875] The buggy address belongs to the object at ffff0000cce0c000
[  153.660166][ T6875]  which belongs to the cache kmalloc-8k of size 8192
[  153.663038][ T6875] The buggy address is located 5000 bytes inside of
[  153.663038][ T6875]  8192-byte region [ffff0000cce0c000, ffff0000cce0e000)
[  153.665899][ T6875] The buggy address belongs to the page:
[  153.667077][ T6875] page:00000000cef9a32d refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000cce08000 pfn:0x10ce08
[  153.669384][ T6875] head:00000000cef9a32d order:3 compound_mapcount:0 compound_pincount:0
[  153.671131][ T6875] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  153.672698][ T6875] raw: 05ffc00000010200 fffffc00036b0c08 fffffc0003656a08 ffff0000c0002c00
[  153.674518][ T6875] raw: ffff0000cce08000 0000000000020001 00000001ffffffff 0000000000000000
[  153.676331][ T6875] page dumped because: kasan: bad access detected
[  153.677723][ T6875] 
[  153.678195][ T6875] Memory state around the buggy address:
[  153.679268][ T6875]  ffff0000cce0d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.680995][ T6875]  ffff0000cce0d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.682662][ T6875] >ffff0000cce0d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.684277][ T6875]                       ^
[  153.685182][ T6875]  ffff0000cce0d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.686768][ T6875]  ffff0000cce0d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.688453][ T6875] ==================================================================
[  153.690137][ T6875] Disabling lock debugging due to kernel taint
[  153.693375][ T6875] ================================================================================
[  153.695323][ T6875] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9
[  153.697040][ T6875] index 14871 is out of range for type 'unsigned long[8]'
[  153.698438][ T6875] CPU: 1 PID: 6875 Comm: kbnepd y Tainted: G    B   W         5.15.173-syzkaller #0
[  153.700433][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  153.702410][ T6875] Call trace:
[  153.703083][ T6875]  dump_backtrace+0x0/0x530
[  153.704043][ T6875]  show_stack+0x2c/0x3c
[  153.704844][ T6875]  dump_stack_lvl+0x108/0x170
[  153.705779][ T6875]  dump_stack+0x1c/0x58
[  153.706627][ T6875]  __ubsan_handle_out_of_bounds+0x108/0x15c
[  153.707891][ T6875]  queued_spin_lock_slowpath+0x854/0x938
[  153.709043][ T6875]  do_raw_spin_lock+0x334/0x35c
[  153.709981][ T6875]  _raw_spin_lock_irqsave+0xcc/0x14c
[  153.711071][ T6875]  klist_next+0x8c/0x2f4
[  153.711946][ T6875]  device_for_each_child+0xc0/0x174
[  153.713009][ T6875]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  153.714194][ T6875]  netdev_unregister_kobject+0x144/0x204
[  153.715418][ T6875]  unregister_netdevice_many+0x12c8/0x189c
[  153.716611][ T6875]  unregister_netdev+0x178/0x1f0
[  153.717558][ T6875]  bnep_session+0x2274/0x2424
[  153.718547][ T6875]  kthread+0x37c/0x45c
[  153.719364][ T6875]  ret_from_fork+0x10/0x20
[  153.720381][ T6875] ================================================================================
[  153.722198][ T6875] Unable to handle kernel paging request at virtual address f9b84aa5709c3e12
[  153.724018][ T6875] Mem abort info:
[  153.724709][ T6875]   ESR = 0x0000000096000004
[  153.725639][ T6875]   EC = 0x25: DABT (current EL), IL = 32 bits
[  153.727008][ T6875]   SET = 0, FnV = 0
[  153.727772][ T6875]   EA = 0, S1PTW = 0
[  153.728522][ T6875]   FSC = 0x04: level 0 translation fault
[  153.730031][ T6875] Data abort info:
[  153.730809][ T6875]   ISV = 0, ISS = 0x00000004
[  153.731776][ T6875]   CM = 0, WnR = 0
[  153.732506][ T6875] [f9b84aa5709c3e12] address between user and kernel address ranges
[  153.734096][ T6875] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
[  153.735579][ T6875] Modules linked in:
[  153.736316][ T6875] CPU: 1 PID: 6875 Comm: kbnepd y Tainted: G    B   W         5.15.173-syzkaller #0
[  153.738319][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  153.740384][ T6875] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  153.742103][ T6875] pc : queued_spin_lock_slowpath+0x354/0x938
[  153.743279][ T6875] lr : queued_spin_lock_slowpath+0x854/0x938
[  153.744540][ T6875] sp : ffff800021397580
[  153.745343][ T6875] x29: ffff800021397620 x28: 1ffff00004272ebc x27: 0000000000000000
[  153.746912][ T6875] x26: dfff800000000000 x25: ffff700004272eb4 x24: 0000000000080000
[  153.748715][ T6875] x23: cdc6552b84e1f091 x22: ffff0001b41ac708 x21: ffff0001b41ac700
[  153.750348][ T6875] x20: ffff800014ac7710 x19: ffff0000e8512800 x18: 0000000000000002
[  153.752103][ T6875] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff
[  153.753757][ T6875] x14: ffff0000d531b680 x13: 0000000000000001 x12: ffff700002e38164
[  153.755278][ T6875] x11: 0000000000000001 x10: ffff800014ac7700 x9 : 0000000000000001
[  153.756991][ T6875] x8 : 19b8caa5709c3e12 x7 : 0000000000000001 x6 : 0000000000000001
[  153.758656][ T6875] x5 : ffff800021396c78 x4 : ffff800014c405e0 x3 : ffff80000819c3ec
[  153.760291][ T6875] x2 : 0000000000000001 x1 : 0000000000000003 x0 : 00000000ffffffff
[  153.762023][ T6875] Call trace:
[  153.762719][ T6875]  queued_spin_lock_slowpath+0x354/0x938
[  153.764064][ T6875]  do_raw_spin_lock+0x334/0x35c
[  153.765061][ T6875]  _raw_spin_lock_irqsave+0xcc/0x14c
[  153.766267][ T6875]  klist_next+0x8c/0x2f4
[  153.767257][ T6875]  device_for_each_child+0xc0/0x174
[  153.768357][ T6875]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  153.769617][ T6875]  netdev_unregister_kobject+0x144/0x204
[  153.770926][ T6875]  unregister_netdevice_many+0x12c8/0x189c
[  153.772163][ T6875]  unregister_netdev+0x178/0x1f0
[  153.773178][ T6875]  bnep_session+0x2274/0x2424
[  153.774182][ T6875]  kthread+0x37c/0x45c
[  153.775007][ T6875]  ret_from_fork+0x10/0x20
[  153.775898][ T6875] Code: 941744c0 f94002e8 8b140117 d343fee8 (387a6908) 
[  153.777227][ T6875] ---[ end trace dc60020ef5ff1d3b ]---
[  153.868263][ T8216] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,grpid,errors=remount-ro,. Quota mode: writeback.
[  154.332432][ T6875] Kernel panic - not syncing: Oops: Fatal exception
[  154.333895][ T6875] SMP: stopping secondary CPUs
[  154.334937][ T6875] Kernel Offset: disabled
[  154.335967][ T6875] CPU features: 0x8,000081c1,21302e40
[  154.337019][ T6875] Memory Limit: none
[  154.868776][ T6875] Rebooting in 86400 seconds..