last executing test programs:

6.726097427s ago: executing program 3 (id=1003):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.587855809s ago: executing program 3 (id=1005):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000798f00008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
openat$cgroup_int(r2, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)

6.249006257s ago: executing program 3 (id=1010):
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x148, 0xa, 0x148, 0x0, 0x10, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x148, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan0\x00', {0x0, 0x0, 0x100, 0x1, 0xfffffffd, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00', 0x0}, {'pim6reg0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x2c0, 0x320, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x560)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x1e}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a40)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='sys_enter\x00', r4}, 0x10)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x270, 0x2b8, 0xb0000000, 0x270, 0x0, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan1\x00', 'pimreg1\x00'}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00')
preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x103, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000f9ffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r9 = socket(0x2, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)

6.161948543s ago: executing program 0 (id=1011):
r0 = eventfd(0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_read_part_table(0x4031, &(0x7f0000008080)="$eJzszzGKwkAUBuA/YXdhdxtrL2FjrVh6lDR2go0Idp7DymMINh7EC3iB2AQ0QpJevq+ZN+/BvH/+b6dFkmKyXlWbtJTNuUsyL5MiybTpFflAdd07fv/zNZmdk/w9W1+DO8rXS3Xv2TTqeGG7b4qfJL9JDu35d0fdTrg8ji+DYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MEOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsFcAAAD//wQpDXk=")
r1 = socket$inet(0x2, 0x2, 0x0)
close_range(r0, r1, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

5.516050066s ago: executing program 4 (id=1012):
r0 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000))
fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = dup(r2)
dup3(r3, r1, 0x0)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
symlink(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$cgroup_ro(r6, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)

5.503825467s ago: executing program 2 (id=1013):
r0 = socket(0x0, 0x5, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)

5.313903323s ago: executing program 1 (id=1014):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46)
dup3(r2, r1, 0x0)
sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

5.313644413s ago: executing program 4 (id=1015):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.22966604s ago: executing program 2 (id=1016):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0)

5.170916315s ago: executing program 1 (id=1017):
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5450)
socket$unix(0x1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x5451, 0x0)
r1 = mq_open(&(0x7f0000000100)='`+\x00mw\xad\x8e\x03,\xfe\x88~\xe2\x85(L\xe1:\xe1\x1f\xd8fOUY\xfe^\xa9}_BM\xa0\x12~\xe5\xee\xe96J\xb5l', 0x40, 0x0, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = dup(r2)
dup3(r3, r1, 0x0)
setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0)

5.136406738s ago: executing program 4 (id=1018):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80111500, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
r2 = socket$inet(0x2, 0x0, 0x3)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, 0x0)
getsockopt(r2, 0xff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f04f8000604a201b89950e27d9d924743ef88a735ccee809a289c54f1794a2b3ba44cd8d086de7da42777f833e9de5c021384ad5a869550f4793c78eef39c8903543be07c07000000000000007b64b1bb6fb085694f92a5a415d3ecc8b2a10aebc0bb10ec9de6f37facf4da3da569bae40947749f23409d9d448be8ae0a4fd738c6266f8a654802ee342b014facc6e872809ec546b400c1bf72a146a2d7dc0381eb9209"], 0x7)
ioctl$KDSKBLED(r0, 0x4b65, 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xfffffffd, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x24ff, 0x0, 0x1020, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)

5.033604187s ago: executing program 2 (id=1019):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700), 0x30}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x2c, r4, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x2c}}, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x181, &(0x7f0000000040)={0x2, 0x20, @broadcast}, 0x10)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x6c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x50, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x6, "31851c27f051"}, {0xdd, 0x6, "30d8ac98fded"}]}}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r1, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x9}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xff, 0x6}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x40011)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
dup(r10)
r11 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r12 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000080)=0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000d00)={'bridge0\x00', <r13=>0x0})
sendto$packet(r12, &(0x7f0000000180)="0b031207e0ff64000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)
syz_emit_ethernet(0x105, &(0x7f00000007c0)={@random="0180ef38f97d", @remote, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0xcb, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x81, 0xfffe, [], "be9d2108fd1eb266329d678bd29666d552b3267d2fb53733f81246b178829148ac7db9990938a9f3d96b43e0ec90fa994e36690fc8d3a7f6834b23bff03b6269470a417b40215f201103e832fdf5eca22be7ba5bae157627269ca0a15f57cd81f01cf4ffdb0db9d9500cb2cbca965c4097afe39c65ac35ad97c3b14ded020807fc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1, 0x0, 0x1]}, {}, {}, {0x8, 0x22eb, 0x2}}}}}}}, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={0x0, 0x0})
dup(0xffffffffffffffff)

4.925785445s ago: executing program 1 (id=1020):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000798f00008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
openat$cgroup_int(r2, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)

4.730030661s ago: executing program 1 (id=1021):
rt_sigreturn()
r0 = timerfd_create(0x0, 0x0)
close(r0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x8000003)

4.697476064s ago: executing program 2 (id=1022):
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0)

4.696109934s ago: executing program 4 (id=1023):
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
socket$inet6(0xa, 0x2, 0x0)

3.88920423s ago: executing program 2 (id=1024):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003ef000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="0f201766b9e309000066b83f46151e66ba1cc889580f302ef4ba6100ed0f0966b90602000066b80100000066ba000000000f300f20c06635000000400f22c066adbaa100ecf9", 0x25}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
pipe2$9p(&(0x7f00000001c0), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.699435206s ago: executing program 4 (id=1025):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x101541c, 0x0)

3.627388342s ago: executing program 1 (id=1026):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0x74}, {0x16}]}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3.478000404s ago: executing program 4 (id=1027):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00')
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)

3.17193618s ago: executing program 0 (id=1028):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.061142369s ago: executing program 0 (id=1029):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0)

2.907641081s ago: executing program 0 (id=1030):
socket$inet(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc9e8f000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000540)=""/223, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8953, 0x0)
add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000001c0)="a6", 0x1, r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440))

2.877221474s ago: executing program 3 (id=1031):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000798f00008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
openat$cgroup_int(r2, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2.582554148s ago: executing program 1 (id=1032):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x0, 0x28)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, 0x0, 0x0)
recvfrom$inet(r5, 0x0, 0x78, 0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x32, 0x17, 0xa6, 0x40, 0x499, 0x1058, 0x3195, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3d, 0x78, 0xbf, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0)

2.530681152s ago: executing program 3 (id=1033):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700), 0x30}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x2c, r4, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x2c}}, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x181, &(0x7f0000000040)={0x2, 0x20, @broadcast}, 0x10)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x6c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x50, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x6, "31851c27f051"}, {0xdd, 0x6, "30d8ac98fded"}]}}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r1, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x9}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xff, 0x6}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x40011)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r11 = dup(r10)
r12 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r13 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000080)=0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000d00)={'bridge0\x00', <r14=>0x0})
sendto$packet(r13, &(0x7f0000000180)="0b031207e0ff64000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14)
sendmsg$inet(r11, 0x0, 0x0)
syz_emit_ethernet(0x105, &(0x7f00000007c0)={@random="0180ef38f97d", @remote, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0xcb, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x81, 0xfffe, [], "be9d2108fd1eb266329d678bd29666d552b3267d2fb53733f81246b178829148ac7db9990938a9f3d96b43e0ec90fa994e36690fc8d3a7f6834b23bff03b6269470a417b40215f201103e832fdf5eca22be7ba5bae157627269ca0a15f57cd81f01cf4ffdb0db9d9500cb2cbca965c4097afe39c65ac35ad97c3b14ded020807fc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1, 0x0, 0x1]}, {}, {}, {0x8, 0x22eb, 0x2}}}}}}}, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={0x0, 0x0})
dup(0xffffffffffffffff)

2.42973734s ago: executing program 3 (id=1034):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = dup(r5)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0)
dup3(r6, r7, 0x0)
unshare(0x64000600)

2.326698609s ago: executing program 2 (id=1035):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000140), 0x84}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000280)={0x1c, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}})
syz_open_dev$evdev(&(0x7f0000000080), 0x100000001, 0x404000)

1.307002783s ago: executing program 0 (id=1036):
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
socket$inet6(0xa, 0x2, 0x0)

0s ago: executing program 0 (id=1037):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000100), &(0x7f0000000200)=@v3, 0x18, 0x0)
fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0)

kernel console output (not intermixed with test programs):

 T3991] usb 5-1: device descriptor read/64, error -71
[  105.981757][ T4210] loop0: detected capacity change from 0 to 64
[  106.043234][ T3991] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  106.061927][ T4210] hfs: invalid catalog max_key_len 7
[  106.068261][ T4210] hfs: unable to open catalog tree
[  106.243549][ T3991] usb 5-1: device descriptor read/64, error -71
[  106.364851][ T3991] usb usb5-port1: attempt power cycle
[  106.783346][ T3991] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  106.893582][ T3991] usb 5-1: device descriptor read/8, error -71
[  107.168268][ T3991] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  107.273412][ T3991] usb 5-1: device descriptor read/8, error -71
[  107.353734][   T48] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260
[  107.393639][ T3991] usb usb5-port1: unable to enumerate USB device
[  107.498026][ T3558] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  107.693242][ T3991] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  107.913778][ T3770] kernel read not supported for file /usbmon0 (pid: 3770 comm: kworker/0:8)
[  107.963967][ T3991] usb 2-1: Using ep0 maxpacket: 32
[  108.055970][   T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  108.072482][   T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  108.081850][   T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  108.089792][ T3991] usb 2-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config
[  108.101828][   T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  108.111321][   T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  108.120227][   T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  108.147700][ T3991] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  108.157466][ T3991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.175408][ T3991] usb 2-1: config 0 descriptor??
[  108.224910][ T3991] usb 2-1: bad CDC descriptors
[  108.254064][ T4248] loop2: detected capacity change from 0 to 8
[  108.260951][ T4248] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  108.280043][ T4248] cramfs: unsupported filesystem features
[  108.351638][ T3640] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  108.657175][ T4245] chnl_net:caif_netlink_parms(): no params data found
[  108.860519][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.900493][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.910732][ T4245] device bridge_slave_0 entered promiscuous mode
[  108.921753][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.929132][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.938611][ T4245] device bridge_slave_1 entered promiscuous mode
[  109.028152][ T4266] loop2: detected capacity change from 0 to 64
[  109.048738][ T4266] hfs: invalid catalog max_key_len 7
[  109.054462][ T4266] hfs: unable to open catalog tree
[  109.240174][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.287609][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.424378][ T4245] team0: Port device team_slave_0 added
[  109.452134][ T4245] team0: Port device team_slave_1 added
[  109.571048][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.604250][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.701058][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.743611][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.750700][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.785796][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.876436][ T3650] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  109.910714][ T3292] usb 2-1: USB disconnect, device number 4
[  110.014528][ T4245] device hsr_slave_0 entered promiscuous mode
[  110.041306][ T4245] device hsr_slave_1 entered promiscuous mode
[  110.080159][ T4245] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.123910][ T4245] Cannot create hsr debugfs directory
[  110.206687][   T48] Bluetooth: hci5: command tx timeout
[  110.459985][ T3558] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  110.524332][ T3558] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  110.541812][ T3558] Bluetooth: hci0: Injecting HCI hardware error event
[  110.553233][   T48] Bluetooth: hci0: hardware error 0x00
[  110.633296][ T3991] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  110.710294][ T4245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.833304][ T3991] usb 5-1: device descriptor read/64, error -71
[  110.895634][ T4245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.058513][ T4245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.113304][ T3991] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  111.209033][ T4245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.319903][ T3991] usb 5-1: device descriptor read/64, error -71
[  111.444524][ T3991] usb usb5-port1: attempt power cycle
[  111.460753][ T4245] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  111.491204][ T4245] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  111.510691][ T4245] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  111.532231][ T4245] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  111.559984][ T3770] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  111.699223][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.727004][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  111.737287][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.757697][ T4245] 8021q: adding VLAN 0 to HW filter on device team0
[  111.778231][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  111.794541][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.804421][ T3770] usb 3-1: Using ep0 maxpacket: 16
[  111.813827][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.820964][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.858894][ T3991] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  111.861679][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.884626][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  111.903930][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.912508][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.919846][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.923474][ T3770] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  111.948204][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  111.979184][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.982597][ T3991] usb 5-1: device descriptor read/8, error -71
[  111.994553][ T3770] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  112.017315][ T3770] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  112.022395][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  112.035469][ T3770] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  112.052989][ T3770] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  112.055291][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  112.078779][ T3770] usb 3-1: config 1 interface 0 has no altsetting 0
[  112.086644][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  112.099050][ T3770] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  112.105895][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.120906][ T3770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.130138][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  112.149243][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  112.173448][ T4245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.174394][ T4305] fuse: root generation should be zero
[  112.195107][ T3770] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  112.197873][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  112.226720][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.235838][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  112.254874][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.283275][ T3558] Bluetooth: hci5: command tx timeout
[  112.288899][ T3991] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  112.393666][ T3991] usb 5-1: device descriptor read/8, error -71
[  112.406616][ T4302] xt_hashlimit: max too large, truncated to 1048576
[  112.443525][ T3558] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  112.452200][ T3558] Bluetooth: hci2: Injecting HCI hardware error event
[  112.461774][ T3552] Bluetooth: hci2: hardware error 0x00
[  112.523478][ T3558] Bluetooth: hci3: command tx timeout
[  112.529714][ T3991] usb usb5-port1: unable to enumerate USB device
[  112.596631][ T3770] scsi host1: usb-storage 3-1:1.0
[  112.603337][   T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  112.823469][ T3627] usb 3-1: USB disconnect, device number 4
[  112.985796][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.993999][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.026823][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.088074][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.108069][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.141156][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.150556][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.165984][ T4245] device veth0_vlan entered promiscuous mode
[  113.179484][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.188461][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.205349][ T4245] device veth1_vlan entered promiscuous mode
[  113.243611][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.251899][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  113.271552][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.317485][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.342269][ T4245] device veth0_macvtap entered promiscuous mode
[  113.376971][ T4245] device veth1_macvtap entered promiscuous mode
[  113.446226][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.468111][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.480621][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.491542][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.537155][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.552558][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.563816][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.581904][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.592806][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.608098][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.639787][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.676946][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  113.698754][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  113.727128][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  113.751501][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  113.781401][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.799437][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.817322][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.836748][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.849182][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.870209][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.890239][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.911315][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.928618][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.943279][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.972896][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.004253][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.015977][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.041398][ T4245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.052900][ T4245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.063626][ T4245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.088663][ T4245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.363406][ T3558] Bluetooth: hci5: command tx timeout
[  114.380825][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.417619][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.417844][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.437639][ T3989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  114.456395][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.486658][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  114.523323][ T3552] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  114.603793][ T4347] loop1: detected capacity change from 0 to 32768
[  114.645090][ T4347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.191 (4347)
[  114.703420][ T4347] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  114.732352][ T4347] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  114.764893][ T4347] BTRFS info (device loop1): setting nodatacow, compression disabled
[  114.795365][ T4347] BTRFS info (device loop1): enabling auto defrag
[  114.801917][ T4347] BTRFS info (device loop1): max_inline at 0
[  114.853189][ T4347] BTRFS info (device loop1): using free space tree
[  115.345862][ T3547] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.893443][  T152] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  116.143212][  T152] usb 4-1: Using ep0 maxpacket: 32
[  116.263370][  T152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.286052][  T152] usb 4-1: config 0 has no interfaces?
[  116.443371][ T3552] Bluetooth: hci5: command tx timeout
[  116.473390][  T152] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  116.496904][  T152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.533395][  T152] usb 4-1: Product: syz
[  116.552514][  T152] usb 4-1: Manufacturer: syz
[  116.571158][  T152] usb 4-1: SerialNumber: syz
[  116.598321][  T152] usb 4-1: config 0 descriptor??
[  116.783248][ T4397] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  116.885835][  T152] usb 4-1: USB disconnect, device number 7
[  117.184952][ T4397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.206496][ T4397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.222519][ T4397] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  117.262045][ T4397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.266364][ T4425] loop4: detected capacity change from 0 to 32768
[  117.279391][ T4397] usb 3-1: config 0 descriptor??
[  117.287766][ T4425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.208 (4425)
[  117.321069][ T4425] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.373419][ T4425] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  117.385853][ T4425] BTRFS info (device loop4): setting nodatacow, compression disabled
[  117.405821][ T4425] BTRFS info (device loop4): enabling auto defrag
[  117.421312][ T4425] BTRFS info (device loop4): max_inline at 0
[  117.447862][ T4425] BTRFS info (device loop4): using free space tree
[  117.756742][ T4397] hid (null): report_id 0 is invalid
[  117.776679][ T4397] logitech-hidpp-device 0003:046D:C086.0001: report_id 0 is invalid
[  117.801693][ T4397] logitech-hidpp-device 0003:046D:C086.0001: item 0 0 1 8 parsing failed
[  117.818476][ T3548] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.833036][ T4397] logitech-hidpp-device 0003:046D:C086.0001: hidpp_probe:parse failed
[  117.860431][ T4397] logitech-hidpp-device: probe of 0003:046D:C086.0001 failed with error -22
[  117.971742][ T4397] usb 3-1: USB disconnect, device number 5
[  119.083480][ T3552] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  119.092463][ T3552] Bluetooth: hci3: Injecting HCI hardware error event
[  119.101147][ T3558] Bluetooth: hci3: hardware error 0x00
[  119.133248][ T3773] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  119.163705][  T152] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  119.383386][ T3773] usb 2-1: Using ep0 maxpacket: 16
[  119.426834][  T152] usb 3-1: Using ep0 maxpacket: 32
[  119.503401][ T3773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  119.519646][ T3773] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  119.548654][ T3773] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  119.584544][  T152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.589961][ T3773] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  119.614370][  T152] usb 3-1: config 0 has no interfaces?
[  119.621717][ T3773] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  119.642159][ T3773] usb 2-1: config 1 interface 0 has no altsetting 0
[  119.659241][ T3773] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  119.678848][ T3773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.744730][ T3773] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  119.793628][  T152] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  119.810949][ T4497] loop4: detected capacity change from 0 to 32768
[  119.812974][  T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.833284][ T4497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.225 (4497)
[  119.898180][  T152] usb 3-1: Product: syz
[  119.925001][ T4497] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.943179][  T152] usb 3-1: Manufacturer: syz
[  119.949597][ T4493] xt_hashlimit: max too large, truncated to 1048576
[  119.954003][  T152] usb 3-1: SerialNumber: syz
[  119.972834][ T4497] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  120.004120][  T152] usb 3-1: config 0 descriptor??
[  120.050163][ T4497] BTRFS info (device loop4): setting nodatacow, compression disabled
[  120.073561][ T3773] scsi host1: usb-storage 2-1:1.0
[  120.079465][ T4497] BTRFS info (device loop4): enabling auto defrag
[  120.109152][ T4497] BTRFS info (device loop4): max_inline at 0
[  120.124119][ T4497] BTRFS info (device loop4): using free space tree
[  120.275990][  T152] usb 3-1: USB disconnect, device number 6
[  120.312932][ T3773] usb 2-1: USB disconnect, device number 5
[  120.411570][ T3548] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.163670][ T3558] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  121.663315][ T3591] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  121.923349][ T3628] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  122.033379][ T3591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.063448][ T3591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.097767][ T3591] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  122.123203][ T3591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.165082][ T3591] usb 4-1: config 0 descriptor??
[  122.190846][ T3628] usb 2-1: Using ep0 maxpacket: 32
[  122.215456][ T4564] loop2: detected capacity change from 0 to 1024
[  122.240350][ T4558] loop4: detected capacity change from 0 to 32768
[  122.270425][ T4558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.238 (4558)
[  122.308259][ T4558] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.309238][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  122.324055][ T4558] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  122.337870][ T4558] BTRFS info (device loop4): setting nodatacow, compression disabled
[  122.343481][ T3628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.349345][ T4558] BTRFS info (device loop4): enabling auto defrag
[  122.367221][ T4558] BTRFS info (device loop4): max_inline at 0
[  122.373434][ T4558] BTRFS info (device loop4): using free space tree
[  122.396319][ T3628] usb 2-1: config 0 has no interfaces?
[  122.433412][   T27] audit: type=1804 audit(1719957510.960:7): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.241" name="/newroot/50/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  122.513678][ T3555] EXT4-fs (loop2): unmounting filesystem.
[  122.605008][ T3628] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  122.613292][ T3989] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  122.634239][ T3591] hid (null): report_id 0 is invalid
[  122.638184][ T3628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.644848][ T3591] logitech-hidpp-device 0003:046D:C086.0002: report_id 0 is invalid
[  122.651845][ T3628] usb 2-1: Product: syz
[  122.656172][ T3591] logitech-hidpp-device 0003:046D:C086.0002: item 0 0 1 8 parsing failed
[  122.660031][ T3628] usb 2-1: Manufacturer: syz
[  122.669511][ T3591] logitech-hidpp-device 0003:046D:C086.0002: hidpp_probe:parse failed
[  122.681513][ T3628] usb 2-1: SerialNumber: syz
[  122.684422][ T3628] usb 2-1: config 0 descriptor??
[  122.691343][ T3591] logitech-hidpp-device: probe of 0003:046D:C086.0002 failed with error -22
[  122.721415][   T27] audit: type=1804 audit(1719957511.250:8): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.238" name="/newroot/31/file1/bus" dev="loop4" ino=263 res=1 errno=0
[  122.787275][ T3548] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.841925][ T3628] usb 4-1: USB disconnect, device number 8
[  122.874279][ T3989] usb 1-1: Using ep0 maxpacket: 16
[  122.993328][ T3989] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  123.002280][  T152] usb 2-1: USB disconnect, device number 6
[  123.012572][ T3989] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  123.050224][ T3989] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  123.070716][ T3989] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  123.101379][ T3989] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  123.113407][ T3989] usb 1-1: config 1 interface 0 has no altsetting 0
[  123.126401][ T3989] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  123.143447][ T3989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.214865][ T3989] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  123.432121][ T4569] xt_hashlimit: max too large, truncated to 1048576
[  124.158499][ T3989] scsi host1: usb-storage 1-1:1.0
[  124.355031][ T3628] usb 1-1: USB disconnect, device number 7
[  124.429061][ T4623] loop4: detected capacity change from 0 to 1024
[  124.550295][ T4623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  124.678132][   T27] audit: type=1804 audit(1719957513.210:9): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.253" name="/newroot/36/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  124.800422][ T3548] EXT4-fs (loop4): unmounting filesystem.
[  125.370558][ T4637] netlink: 56 bytes leftover after parsing attributes in process `syz.0.257'.
[  125.713724][ T3628] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  126.073329][ T3628] usb 4-1: Using ep0 maxpacket: 32
[  126.225613][ T3628] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.374875][  T152] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  126.422824][ T4631] loop4: detected capacity change from 0 to 32768
[  126.452068][ T4631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.254 (4631)
[  126.476030][ T4631] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.488762][ T4657] loop1: detected capacity change from 0 to 1024
[  126.517992][ T4631] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  126.532973][ T4631] BTRFS info (device loop4): setting nodatacow, compression disabled
[  126.543520][ T3628] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  126.552036][ T4631] BTRFS info (device loop4): enabling auto defrag
[  126.554722][ T3628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.573904][ T3628] usb 4-1: Product: syz
[  126.578716][ T3628] usb 4-1: Manufacturer: syz
[  126.583719][ T4631] BTRFS info (device loop4): max_inline at 0
[  126.589774][ T4631] BTRFS info (device loop4): using free space tree
[  126.604655][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  126.624426][ T3628] usb 4-1: SerialNumber: syz
[  126.644514][ T3628] usb 4-1: config 0 descriptor??
[  126.684507][ T3628] hub 4-1:0.0: bad descriptor, ignoring hub
[  126.690485][ T3628] hub: probe of 4-1:0.0 failed with error -5
[  126.772838][ T3547] EXT4-fs (loop1): unmounting filesystem.
[  126.808125][  T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.820330][  T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.830939][  T152] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  126.840531][  T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.857591][  T152] usb 3-1: config 0 descriptor??
[  126.868437][   T27] audit: type=1804 audit(1719957515.400:10): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.254" name="/newroot/37/file1/bus" dev="loop4" ino=263 res=1 errno=0
[  127.219227][ T3548] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.243590][  T935] usb 4-1: USB disconnect, device number 9
[  127.343785][  T152] hid (null): report_id 0 is invalid
[  127.353020][  T152] logitech-hidpp-device 0003:046D:C086.0003: report_id 0 is invalid
[  127.361667][  T152] logitech-hidpp-device 0003:046D:C086.0003: item 0 0 1 8 parsing failed
[  127.375243][  T152] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed
[  127.384541][  T152] logitech-hidpp-device: probe of 0003:046D:C086.0003 failed with error -22
[  127.549699][ T3596] usb 3-1: USB disconnect, device number 7
[  129.803387][  T935] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  130.053310][  T935] usb 4-1: Using ep0 maxpacket: 32
[  130.176703][  T935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.232813][ T4720] loop2: detected capacity change from 0 to 32768
[  130.258899][ T4720] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.278 (4720)
[  130.278066][ T4720] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.298717][ T4720] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  130.318930][ T4720] BTRFS info (device loop2): setting nodatacow, compression disabled
[  130.342698][ T4720] BTRFS info (device loop2): enabling auto defrag
[  130.357385][ T4720] BTRFS info (device loop2): max_inline at 0
[  130.364085][  T935] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  130.381155][  T935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.383314][ T4720] BTRFS info (device loop2): using free space tree
[  130.401255][  T935] usb 4-1: Product: syz
[  130.414790][  T935] usb 4-1: Manufacturer: syz
[  130.429657][  T935] usb 4-1: SerialNumber: syz
[  130.524157][  T935] usb 4-1: config 0 descriptor??
[  130.659843][  T935] hub 4-1:0.0: bad descriptor, ignoring hub
[  130.766677][  T935] hub: probe of 4-1:0.0 failed with error -5
[  131.205765][  T935] usb 4-1: USB disconnect, device number 10
[  131.300789][   T27] audit: type=1804 audit(1719957519.830:11): pid=4720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.278" name="/newroot/56/file1/bus" dev="loop2" ino=263 res=1 errno=0
[  131.362603][ T3555] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.903279][ T3628] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  132.304175][ T3628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.397859][ T3628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.510285][ T3628] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  132.561295][ T3628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.630749][ T3628] usb 5-1: config 0 descriptor??
[  132.766256][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  132.772708][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  133.204136][ T3628] hid (null): report_id 0 is invalid
[  133.217530][ T3628] logitech-hidpp-device 0003:046D:C086.0004: report_id 0 is invalid
[  133.233315][ T3628] logitech-hidpp-device 0003:046D:C086.0004: item 0 0 1 8 parsing failed
[  133.250988][ T3628] logitech-hidpp-device 0003:046D:C086.0004: hidpp_probe:parse failed
[  133.266495][ T3628] logitech-hidpp-device: probe of 0003:046D:C086.0004 failed with error -22
[  133.416814][ T3593] usb 5-1: USB disconnect, device number 20
[  133.563503][ T3628] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  134.003211][ T3628] usb 2-1: Using ep0 maxpacket: 32
[  134.145032][ T3628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.224301][ T4813] loop4: detected capacity change from 0 to 1024
[  134.293983][ T4813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  134.333379][ T3628] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  134.352934][ T3628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.363080][ T3628] usb 2-1: Product: syz
[  134.371232][ T3628] usb 2-1: Manufacturer: syz
[  134.376174][ T3628] usb 2-1: SerialNumber: syz
[  134.382686][ T3628] usb 2-1: config 0 descriptor??
[  134.424090][ T3628] hub 2-1:0.0: bad descriptor, ignoring hub
[  134.440498][ T3628] hub: probe of 2-1:0.0 failed with error -5
[  134.481496][ T3548] EXT4-fs (loop4): unmounting filesystem.
[  134.759259][ T3596] usb 2-1: USB disconnect, device number 7
[  135.329566][ T4841] loop1: detected capacity change from 0 to 1024
[  135.371190][ T4814] loop0: detected capacity change from 0 to 32768
[  135.437314][ T4814] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  135.472832][ T4841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  135.493402][ T4814] CPU: 1 PID: 4814 Comm: syz.0.304 Not tainted 6.1.96-syzkaller #0
[  135.501358][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  135.511456][ T4814] Call Trace:
[  135.514758][ T4814]  <TASK>
[  135.517711][ T4814]  dump_stack_lvl+0x1e3/0x2cb
[  135.522473][ T4814]  ? nf_tcp_handle_invalid+0x642/0x642
[  135.528002][ T4814]  ? panic+0x764/0x764
[  135.532132][ T4814]  sysfs_create_dir_ns+0x2c6/0x390
[  135.537304][ T4814]  ? sysfs_warn_dup+0xa0/0xa0
[  135.542038][ T4814]  kobject_add_internal+0x6df/0xd10
[  135.547287][ T4814]  kobject_init_and_add+0x120/0x190
[  135.552535][ T4814]  ? lockdep_softirqs_off+0x420/0x420
[  135.557963][ T4814]  ? widen_string+0x3a/0x310
[  135.562618][ T4814]  ? kobject_add+0x210/0x210
[  135.567267][ T4814]  ? __init_swait_queue_head+0xaa/0x140
[  135.572872][ T4814]  gfs2_sys_fs_add+0x237/0x4a0
[  135.577676][ T4814]  ? gfs2_recover_set+0x240/0x240
[  135.582734][ T4814]  ? snprintf+0xd6/0x120
[  135.587037][ T4814]  ? vscnprintf+0x80/0x80
[  135.591410][ T4814]  ? read_word_at_a_time+0xe/0x20
[  135.596483][ T4814]  ? strscpy+0x89/0x220
[  135.600694][ T4814]  gfs2_fill_super+0x1228/0x26e0
[  135.605725][ T4814]  ? gfs2_reconfigure+0xcf0/0xcf0
[  135.610805][ T4814]  ? ptr_to_hashval+0x70/0x70
[  135.615529][ T4814]  ? up_write+0x19d/0x580
[  135.619937][ T4814]  ? set_blocksize+0x1c6/0x350
[  135.624780][ T4814]  get_tree_bdev+0x3fe/0x620
[  135.629451][ T4814]  ? gfs2_reconfigure+0xcf0/0xcf0
[  135.634539][ T4814]  gfs2_get_tree+0x50/0x210
[  135.639101][ T4814]  ? bpf_lsm_capable+0x5/0x10
[  135.643845][ T4814]  vfs_get_tree+0x88/0x270
[  135.648323][ T4814]  do_new_mount+0x2ba/0xb40
[  135.652884][ T4814]  ? ns_capable+0x85/0xe0
[  135.657272][ T4814]  ? do_move_mount_old+0x160/0x160
[  135.662454][ T4814]  __se_sys_mount+0x2d5/0x3c0
[  135.667193][ T4814]  ? __x64_sys_mount+0xc0/0xc0
[  135.672015][ T4814]  ? syscall_enter_from_user_mode+0x2e/0x230
[  135.678048][ T4814]  ? lockdep_hardirqs_on+0x94/0x130
[  135.683295][ T4814]  ? __x64_sys_mount+0x1c/0xc0
[  135.688106][ T4814]  do_syscall_64+0x3b/0xb0
[  135.692540][ T4814]  ? clear_bhb_loop+0x45/0xa0
[  135.697230][ T4814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.703141][ T4814] RIP: 0033:0x7f465d57761a
[  135.707585][ T4814] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.727206][ T4814] RSP: 002b:00007f465e2bbe78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  135.735682][ T4814] RAX: ffffffffffffffda RBX: 00007f465e2bbf00 RCX: 00007f465d57761a
[  135.743661][ T4814] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f465e2bbec0
[  135.751631][ T4814] RBP: 0000000020000000 R08: 00007f465e2bbf00 R09: 0000000000008c1b
[  135.759630][ T4814] R10: 0000000000008c1b R11: 0000000000000206 R12: 0000000020000100
[  135.767739][ T4814] R13: 00007f465e2bbec0 R14: 0000000000012767 R15: 0000000020000500
[  135.775730][ T4814]  </TASK>
[  135.791681][ T3596] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  135.800894][ T4814] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  135.848004][ T3547] EXT4-fs (loop1): unmounting filesystem.
[  136.087642][ T4814] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  136.203361][ T3596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.209981][ T4860] 9pnet_fd: Insufficient options for proto=fd
[  136.246412][ T3596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.293265][ T3596] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  136.302371][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.357366][ T3596] usb 5-1: config 0 descriptor??
[  136.755085][ T4880] loop2: detected capacity change from 0 to 1024
[  136.769739][ T4885] loop1: detected capacity change from 0 to 512
[  136.837869][ T4885] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[  136.853860][ T3596] hid (null): report_id 0 is invalid
[  136.877576][ T3596] logitech-hidpp-device 0003:046D:C086.0005: report_id 0 is invalid
[  136.899686][ T4880] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  136.903554][ T3596] logitech-hidpp-device 0003:046D:C086.0005: item 0 0 1 8 parsing failed
[  136.918950][ T3596] logitech-hidpp-device 0003:046D:C086.0005: hidpp_probe:parse failed
[  136.929800][ T3596] logitech-hidpp-device: probe of 0003:046D:C086.0005 failed with error -22
[  136.947223][ T4885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  137.005787][ T4885] System zones: 1-12
[  137.043034][ T4885] EXT4-fs (loop1): orphan cleanup on readonly fs
[  137.058546][ T3628] usb 5-1: USB disconnect, device number 21
[  137.120938][ T3555] EXT4-fs (loop2): unmounting filesystem.
[  137.126477][ T4885] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.327: Inode bitmap for bg 0 marked uninitialized
[  137.163446][ T3558] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  137.172132][ T3558] Bluetooth: hci5: Injecting HCI hardware error event
[  137.180952][ T3552] Bluetooth: hci5: hardware error 0x00
[  137.215432][ T4885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  137.364526][ T3547] EXT4-fs (loop1): unmounting filesystem.
[  137.496703][   T27] audit: type=1326 audit(1719957526.030:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4896 comm="syz.1.332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9e5575f19 code=0x0
[  137.799496][ T4903] 9pnet_fd: Insufficient options for proto=fd
[  138.165627][ T4916] loop2: detected capacity change from 0 to 1024
[  138.343026][ T4916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  138.731159][ T3555] EXT4-fs (loop2): unmounting filesystem.
[  139.243590][ T3552] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  139.400739][ T4932] loop2: detected capacity change from 0 to 2048
[  139.872943][ T4937] 9pnet_fd: Insufficient options for proto=fd
[  140.913972][ T4953] loop1: detected capacity change from 0 to 1024
[  141.021253][ T4953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  141.140741][ T3547] EXT4-fs (loop1): unmounting filesystem.
[  142.373328][ T3593] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.613559][ T3593] usb 1-1: Using ep0 maxpacket: 16
[  143.632297][ T4989] loop1: detected capacity change from 0 to 2048
[  144.343324][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.364844][ T3593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  144.416972][ T3593] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  144.442832][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.481855][ T3593] usb 1-1: config 0 descriptor??
[  148.194916][ T3593] usbhid 1-1:0.0: can't add hid device: -71
[  148.201699][ T3593] usbhid: probe of 1-1:0.0 failed with error -71
[  148.356630][ T3593] usb 1-1: USB disconnect, device number 8
[  149.153445][ T4394] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  149.290901][ T3558] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  149.301330][ T3558] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  149.310042][ T3558] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  149.325748][ T3558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  149.335208][ T3558] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  149.343517][ T3558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  149.403238][ T4394] usb 2-1: Using ep0 maxpacket: 16
[  149.533974][ T4394] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  149.662230][ T5029] loop2: detected capacity change from 0 to 2048
[  149.696516][ T4394] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  149.889551][ T4394] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  150.056070][ T4394] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  150.177635][ T4394] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  150.387427][ T4394] usb 2-1: config 1 interface 0 has no altsetting 0
[  150.417884][ T4394] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  150.441773][ T4394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.500133][ T5021] chnl_net:caif_netlink_parms(): no params data found
[  150.564622][ T4394] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  150.774618][ T5011] xt_hashlimit: max too large, truncated to 1048576
[  150.853925][ T5021] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.861074][ T5021] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.885409][ T5021] device bridge_slave_0 entered promiscuous mode
[  150.905326][ T5021] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.912542][ T5021] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.931624][ T5021] device bridge_slave_1 entered promiscuous mode
[  150.943240][ T4394] scsi host1: usb-storage 2-1:1.0
[  151.068039][ T5021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.080509][ T5021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.142211][ T4394] usb 2-1: USB disconnect, device number 8
[  151.159582][ T5021] team0: Port device team_slave_0 added
[  151.185335][ T5021] team0: Port device team_slave_1 added
[  151.277538][ T5021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.293952][ T5021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.397468][ T5021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.408637][ T3552] Bluetooth: hci6: command tx timeout
[  151.687681][ T5021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.191204][ T5021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.562618][ T5021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.732901][ T5041] loop2: detected capacity change from 0 to 32768
[  152.761677][ T5041] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  152.783005][ T5041] CPU: 0 PID: 5041 Comm: syz.2.383 Not tainted 6.1.96-syzkaller #0
[  152.791004][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  152.801121][ T5041] Call Trace:
[  152.804543][ T5041]  <TASK>
[  152.807512][ T5041]  dump_stack_lvl+0x1e3/0x2cb
[  152.812248][ T5041]  ? nf_tcp_handle_invalid+0x642/0x642
[  152.817767][ T5041]  ? panic+0x764/0x764
[  152.821985][ T5041]  sysfs_create_dir_ns+0x2c6/0x390
[  152.827161][ T5041]  ? sysfs_warn_dup+0xa0/0xa0
[  152.831921][ T5041]  kobject_add_internal+0x6df/0xd10
[  152.837192][ T5041]  kobject_init_and_add+0x120/0x190
[  152.842499][ T5041]  ? lockdep_softirqs_off+0x420/0x420
[  152.847939][ T5041]  ? widen_string+0x3a/0x310
[  152.852593][ T5041]  ? kobject_add+0x210/0x210
[  152.857248][ T5041]  ? __init_swait_queue_head+0xaa/0x140
[  152.859091][ T5072] loop1: detected capacity change from 0 to 512
[  152.862844][ T5041]  gfs2_sys_fs_add+0x237/0x4a0
[  152.862915][ T5041]  ? gfs2_recover_set+0x240/0x240
[  152.879107][ T5041]  ? snprintf+0xd6/0x120
[  152.883409][ T5041]  ? vscnprintf+0x80/0x80
[  152.887801][ T5041]  ? read_word_at_a_time+0xe/0x20
[  152.892880][ T5041]  ? strscpy+0x89/0x220
[  152.897118][ T5041]  gfs2_fill_super+0x1228/0x26e0
[  152.902230][ T5041]  ? gfs2_reconfigure+0xcf0/0xcf0
[  152.907316][ T5041]  ? ptr_to_hashval+0x70/0x70
[  152.912039][ T5041]  ? up_write+0x19d/0x580
[  152.916423][ T5041]  ? set_blocksize+0x1c6/0x350
[  152.921215][ T5041]  get_tree_bdev+0x3fe/0x620
[  152.925836][ T5041]  ? gfs2_reconfigure+0xcf0/0xcf0
[  152.930882][ T5041]  gfs2_get_tree+0x50/0x210
[  152.935400][ T5041]  ? bpf_lsm_capable+0x5/0x10
[  152.940099][ T5041]  vfs_get_tree+0x88/0x270
[  152.944533][ T5041]  do_new_mount+0x2ba/0xb40
[  152.949047][ T5041]  ? ns_capable+0x85/0xe0
[  152.953423][ T5041]  ? do_move_mount_old+0x160/0x160
[  152.958558][ T5041]  __se_sys_mount+0x2d5/0x3c0
[  152.963257][ T5041]  ? __x64_sys_mount+0xc0/0xc0
[  152.968064][ T5041]  ? syscall_enter_from_user_mode+0x2e/0x230
[  152.974060][ T5041]  ? lockdep_hardirqs_on+0x94/0x130
[  152.979279][ T5041]  ? __x64_sys_mount+0x1c/0xc0
[  152.984068][ T5041]  do_syscall_64+0x3b/0xb0
[  152.988502][ T5041]  ? clear_bhb_loop+0x45/0xa0
[  152.993198][ T5041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.999203][ T5041] RIP: 0033:0x7fbe78f7761a
[  153.003631][ T5041] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.023264][ T5041] RSP: 002b:00007fbe79d6ae78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  153.031724][ T5041] RAX: ffffffffffffffda RBX: 00007fbe79d6af00 RCX: 00007fbe78f7761a
[  153.039708][ T5041] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fbe79d6aec0
[  153.047689][ T5041] RBP: 0000000020000000 R08: 00007fbe79d6af00 R09: 0000000000008c1b
[  153.055670][ T5041] R10: 0000000000008c1b R11: 0000000000000206 R12: 0000000020000100
[  153.063651][ T5041] R13: 00007fbe79d6aec0 R14: 0000000000012767 R15: 0000000020000500
[  153.071647][ T5041]  </TASK>
[  153.082770][ T5041] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  153.108499][ T5041] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  153.125728][ T5021] device hsr_slave_0 entered promiscuous mode
[  153.153896][ T5021] device hsr_slave_1 entered promiscuous mode
[  153.160988][ T5021] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.173624][ T5072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  153.193325][ T5072] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff)
[  153.243304][ T5021] Cannot create hsr debugfs directory
[  153.355539][ T5079] loop4: detected capacity change from 0 to 8
[  153.387191][ T5079] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  153.417266][ T5079] cramfs: unsupported filesystem features
[  153.453555][ T5072] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.392: corrupted inode contents
[  153.483472][ T3552] Bluetooth: hci6: command tx timeout
[  153.503671][ T3640] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  153.531027][ T5072] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz.1.392: mark_inode_dirty error
[  153.553875][ T5072] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.392: corrupted inode contents
[  153.589104][ T5072] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.392: mark_inode_dirty error
[  153.687092][ T5084] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 27: comm syz.1.392: path /89/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  153.811305][ T5084] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 28: comm syz.1.392: path /89/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  153.939706][ T5087] loop4: detected capacity change from 0 to 64
[  153.985185][ T5087] hfs: invalid catalog max_key_len 7
[  153.991477][ T5087] hfs: unable to open catalog tree
[  154.729131][ T5021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.931041][ T3547] EXT4-fs (loop1): unmounting filesystem.
[  154.965245][ T5021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.083868][ T5021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.304520][ T5021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.307081][ T4394] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  155.574492][ T3552] Bluetooth: hci6: command tx timeout
[  156.020107][ T4394] usb 1-1: Using ep0 maxpacket: 16
[  156.171507][ T4394] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  156.221114][ T4394] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  156.239676][ T4394] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  156.263612][ T4394] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  156.274665][ T4394] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  156.293313][ T4394] usb 1-1: config 1 interface 0 has no altsetting 0
[  156.306321][ T4394] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  156.322737][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.384447][ T4394] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  156.458682][ T5117] loop1: detected capacity change from 0 to 8
[  156.500441][ T5117] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  156.528827][ T5021] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  156.537446][ T5117] cramfs: unsupported filesystem features
[  156.555110][ T5021] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  156.582539][ T5021] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  156.673551][ T5096] xt_hashlimit: max too large, truncated to 1048576
[  156.732980][ T5021] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  156.833365][ T4394] scsi host1: usb-storage 1-1:1.0
[  156.924408][ T5122] loop1: detected capacity change from 0 to 64
[  156.954365][ T5122] hfs: invalid catalog max_key_len 7
[  156.960555][ T5122] hfs: unable to open catalog tree
[  157.550503][ T4394] usb 1-1: USB disconnect, device number 9
[  157.643268][   T48] Bluetooth: hci6: command tx timeout
[  157.712427][ T5021] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.727856][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.736895][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.751385][ T5116] loop4: detected capacity change from 0 to 32768
[  157.759667][ T5021] 8021q: adding VLAN 0 to HW filter on device team0
[  157.775319][ T5116] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  157.785788][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.795516][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.813481][ T5116] CPU: 1 PID: 5116 Comm: syz.4.404 Not tainted 6.1.96-syzkaller #0
[  157.821455][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  157.831547][ T5116] Call Trace:
[  157.834903][ T5116]  <TASK>
[  157.837942][ T5116]  dump_stack_lvl+0x1e3/0x2cb
[  157.842672][ T5116]  ? nf_tcp_handle_invalid+0x642/0x642
[  157.848269][ T5116]  ? panic+0x764/0x764
[  157.852387][ T5116]  sysfs_create_dir_ns+0x2c6/0x390
[  157.857565][ T5116]  ? sysfs_warn_dup+0xa0/0xa0
[  157.862306][ T5116]  kobject_add_internal+0x6df/0xd10
[  157.867561][ T5116]  kobject_init_and_add+0x120/0x190
[  157.872796][ T5116]  ? lockdep_softirqs_off+0x420/0x420
[  157.878217][ T5116]  ? widen_string+0x3a/0x310
[  157.882851][ T5116]  ? kobject_add+0x210/0x210
[  157.887485][ T5116]  ? __init_swait_queue_head+0xaa/0x140
[  157.893084][ T5116]  gfs2_sys_fs_add+0x237/0x4a0
[  157.897879][ T5116]  ? gfs2_recover_set+0x240/0x240
[  157.902958][ T5116]  ? snprintf+0xd6/0x120
[  157.907245][ T5116]  ? vscnprintf+0x80/0x80
[  157.911632][ T5116]  ? read_word_at_a_time+0xe/0x20
[  157.916746][ T5116]  ? strscpy+0x89/0x220
[  157.920946][ T5116]  gfs2_fill_super+0x1228/0x26e0
[  157.925948][ T5116]  ? gfs2_reconfigure+0xcf0/0xcf0
[  157.931007][ T5116]  ? ptr_to_hashval+0x70/0x70
[  157.935719][ T5116]  ? up_write+0x19d/0x580
[  157.940105][ T5116]  ? set_blocksize+0x1c6/0x350
[  157.945059][ T5116]  get_tree_bdev+0x3fe/0x620
[  157.949696][ T5116]  ? gfs2_reconfigure+0xcf0/0xcf0
[  157.954766][ T5116]  gfs2_get_tree+0x50/0x210
[  157.959301][ T5116]  ? bpf_lsm_capable+0x5/0x10
[  157.964005][ T5116]  vfs_get_tree+0x88/0x270
[  157.968441][ T5116]  do_new_mount+0x2ba/0xb40
[  157.972957][ T5116]  ? ns_capable+0x85/0xe0
[  157.977303][ T5116]  ? do_move_mount_old+0x160/0x160
[  157.982437][ T5116]  __se_sys_mount+0x2d5/0x3c0
[  157.987133][ T5116]  ? __x64_sys_mount+0xc0/0xc0
[  157.991915][ T5116]  ? syscall_enter_from_user_mode+0x2e/0x230
[  157.997910][ T5116]  ? lockdep_hardirqs_on+0x94/0x130
[  158.003126][ T5116]  ? __x64_sys_mount+0x1c/0xc0
[  158.007918][ T5116]  do_syscall_64+0x3b/0xb0
[  158.012354][ T5116]  ? clear_bhb_loop+0x45/0xa0
[  158.017062][ T5116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.022974][ T5116] RIP: 0033:0x7f3d75f7761a
[  158.027402][ T5116] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.047116][ T5116] RSP: 002b:00007f3d76cb0e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  158.055573][ T5116] RAX: ffffffffffffffda RBX: 00007f3d76cb0f00 RCX: 00007f3d75f7761a
[  158.063573][ T5116] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f3d76cb0ec0
[  158.071864][ T5116] RBP: 0000000020000000 R08: 00007f3d76cb0f00 R09: 0000000000008c1b
[  158.079868][ T5116] R10: 0000000000008c1b R11: 0000000000000206 R12: 0000000020000100
[  158.087858][ T5116] R13: 00007f3d76cb0ec0 R14: 0000000000012767 R15: 0000000020000500
[  158.095883][ T5116]  </TASK>
[  158.213700][ T5116] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  158.214162][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.234596][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.260189][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  158.267748][ T5116] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  158.275672][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  158.294039][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  158.302827][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.310040][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.363986][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.392744][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.429529][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.440135][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.450250][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.459715][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.501013][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.531163][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.551410][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.570218][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.596582][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.617152][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.833466][ T3990] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  159.087552][ T3990] usb 1-1: Using ep0 maxpacket: 32
[  159.122237][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.142401][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.179930][ T5021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.207270][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.215625][ T3990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  159.223452][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.244476][ T3990] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  159.282056][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.291472][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.339802][ T5021] device veth0_vlan entered promiscuous mode
[  159.349964][ T5153] loop4: detected capacity change from 0 to 8
[  159.364333][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.373646][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.377115][ T5155] loop1: detected capacity change from 0 to 512
[  159.390016][ T5021] device veth1_vlan entered promiscuous mode
[  159.403970][ T5153] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  159.443469][ T3990] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  159.444701][ T5153] cramfs: unsupported filesystem features
[  159.458466][ T3990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.458511][ T3990] usb 1-1: Product: syz
[  159.458528][ T3990] usb 1-1: Manufacturer: syz
[  159.458544][ T3990] usb 1-1: SerialNumber: syz
[  159.484068][ T3990] usb 1-1: config 0 descriptor??
[  159.507330][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  159.513952][ T5155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  159.517798][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.532183][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.533752][ T3990] hub 1-1:0.0: bad descriptor, ignoring hub
[  159.563505][ T5155] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038 (0x7fffffff)
[  159.573894][ T3990] hub: probe of 1-1:0.0 failed with error -5
[  159.577127][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.589270][ T3990] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[  159.632138][ T5155] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.417: corrupted inode contents
[  159.658491][ T3990] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[  159.676243][ T5155] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz.1.417: mark_inode_dirty error
[  159.757538][ T3990] usbtouchscreen: probe of 1-1:0.0 failed with error -90
[  159.789463][ T5021] device veth0_macvtap entered promiscuous mode
[  159.806800][ T5155] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.417: corrupted inode contents
[  159.810234][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.839024][ T5021] device veth1_macvtap entered promiscuous mode
[  159.844244][ T3990] usb 1-1: USB disconnect, device number 10
[  159.901399][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.923488][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.934264][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.944827][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.009763][ T5163] loop4: detected capacity change from 0 to 64
[  160.047456][ T5155] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.417: mark_inode_dirty error
[  160.060803][ T5163] hfs: invalid catalog max_key_len 7
[  160.067065][ T5163] hfs: unable to open catalog tree
[  160.135788][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.301489][ T5161] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 27: comm syz.1.417: path /95/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  160.368418][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.538130][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.583236][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.643982][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.663256][ T5161] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 28: comm syz.1.417: path /95/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  160.703884][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.726288][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.743263][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.775681][ T3650] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  160.789119][ T5021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.823416][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  160.842701][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  160.856492][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.891594][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.973232][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.002285][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.012590][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.024869][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.034785][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.053165][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.067682][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.083399][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.125305][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.161672][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.189613][ T3547] EXT4-fs (loop1): unmounting filesystem.
[  161.208564][ T5021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.243961][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  161.253475][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  161.307068][ T5021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.325526][ T5021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.336852][ T5021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.345813][ T5021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.610505][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.639443][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.698760][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  161.735134][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.749761][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.813541][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  161.923393][ T3771] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  162.343824][ T3771] usb 1-1: Using ep0 maxpacket: 32
[  162.469933][ T3771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  162.664128][ T3771] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  163.043521][ T3771] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  163.083522][ T3771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.091585][ T3771] usb 1-1: Product: syz
[  163.153217][ T3771] usb 1-1: Manufacturer: syz
[  163.171958][ T3771] usb 1-1: SerialNumber: syz
[  163.254719][ T3771] usb 1-1: config 0 descriptor??
[  163.304146][ T3771] hub 1-1:0.0: bad descriptor, ignoring hub
[  163.324472][ T3771] hub: probe of 1-1:0.0 failed with error -5
[  163.341005][ T3771] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[  163.374997][ T3771] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[  163.532755][ T3771] usbtouchscreen: probe of 1-1:0.0 failed with error -90
[  163.606011][ T3771] usb 1-1: USB disconnect, device number 11
[  163.903377][ T3596] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  166.200711][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.251791][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.280040][ T5244] loop4: detected capacity change from 0 to 64
[  166.290339][ T5244] hfs: invalid catalog max_key_len 7
[  166.295851][ T5244] hfs: unable to open catalog tree
[  166.324724][ T3596] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  166.390319][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.438591][ T3596] usb 4-1: config 0 descriptor??
[  166.653891][ T3596] usbhid 4-1:0.0: can't add hid device: -71
[  166.660550][ T3596] usbhid: probe of 4-1:0.0 failed with error -71
[  166.702540][ T3596] usb 4-1: USB disconnect, device number 11
[  167.193259][ T4397] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  168.233178][ T4397] usb 3-1: Using ep0 maxpacket: 32
[  168.530312][ T4397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  168.540741][ T4397] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  168.713955][ T4397] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  168.794480][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.934087][ T4397] usb 3-1: Product: syz
[  169.005175][ T4397] usb 3-1: Manufacturer: syz
[  169.125855][ T4397] usb 3-1: SerialNumber: syz
[  169.425259][ T4397] usb 3-1: config 0 descriptor??
[  169.478072][ T4397] hub 3-1:0.0: bad descriptor, ignoring hub
[  169.494000][ T4397] hub: probe of 3-1:0.0 failed with error -5
[  169.502991][ T5258] loop0: detected capacity change from 0 to 32768
[  169.512160][ T4397] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  169.531690][ T5258] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  169.542164][ T5258] CPU: 0 PID: 5258 Comm: syz.0.449 Not tainted 6.1.96-syzkaller #0
[  169.550119][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  169.551440][ T4397] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[  169.560186][ T5258] Call Trace:
[  169.560198][ T5258]  <TASK>
[  169.560208][ T5258]  dump_stack_lvl+0x1e3/0x2cb
[  169.560250][ T5258]  ? nf_tcp_handle_invalid+0x642/0x642
[  169.560285][ T5258]  ? panic+0x764/0x764
[  169.590026][ T5258]  sysfs_create_dir_ns+0x2c6/0x390
[  169.595212][ T5258]  ? sysfs_warn_dup+0xa0/0xa0
[  169.599969][ T5258]  kobject_add_internal+0x6df/0xd10
[  169.605225][ T5258]  kobject_init_and_add+0x120/0x190
[  169.610561][ T5258]  ? lockdep_softirqs_off+0x420/0x420
[  169.616001][ T5258]  ? widen_string+0x3a/0x310
[  169.620746][ T5258]  ? kobject_add+0x210/0x210
[  169.625398][ T5258]  ? __init_swait_queue_head+0xaa/0x140
[  169.630997][ T5258]  gfs2_sys_fs_add+0x237/0x4a0
[  169.635802][ T5258]  ? gfs2_recover_set+0x240/0x240
[  169.640867][ T5258]  ? snprintf+0xd6/0x120
[  169.643326][ T3627] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  169.645140][ T5258]  ? vscnprintf+0x80/0x80
[  169.645178][ T5258]  ? read_word_at_a_time+0xe/0x20
[  169.662152][ T5258]  ? strscpy+0x89/0x220
[  169.666336][ T5258]  gfs2_fill_super+0x1228/0x26e0
[  169.671308][ T5258]  ? gfs2_reconfigure+0xcf0/0xcf0
[  169.676349][ T5258]  ? ptr_to_hashval+0x70/0x70
[  169.681044][ T5258]  ? up_write+0x19d/0x580
[  169.685406][ T5258]  ? set_blocksize+0x1c6/0x350
[  169.690187][ T5258]  get_tree_bdev+0x3fe/0x620
[  169.694798][ T5258]  ? gfs2_reconfigure+0xcf0/0xcf0
[  169.699862][ T5258]  gfs2_get_tree+0x50/0x210
[  169.704380][ T5258]  ? bpf_lsm_capable+0x5/0x10
[  169.709078][ T5258]  vfs_get_tree+0x88/0x270
[  169.713512][ T5258]  do_new_mount+0x2ba/0xb40
[  169.718035][ T5258]  ? ns_capable+0x85/0xe0
[  169.722378][ T5258]  ? do_move_mount_old+0x160/0x160
[  169.727516][ T5258]  __se_sys_mount+0x2d5/0x3c0
[  169.732649][ T5258]  ? __x64_sys_mount+0xc0/0xc0
[  169.737426][ T5258]  ? syscall_enter_from_user_mode+0x2e/0x230
[  169.743421][ T5258]  ? lockdep_hardirqs_on+0x94/0x130
[  169.748679][ T5258]  ? __x64_sys_mount+0x1c/0xc0
[  169.753462][ T5258]  do_syscall_64+0x3b/0xb0
[  169.757898][ T5258]  ? clear_bhb_loop+0x45/0xa0
[  169.762605][ T5258]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.768513][ T5258] RIP: 0033:0x7f465d57761a
[  169.772934][ T5258] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.792896][ T5258] RSP: 002b:00007f465e2bbe78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  169.801319][ T5258] RAX: ffffffffffffffda RBX: 00007f465e2bbf00 RCX: 00007f465d57761a
[  169.809302][ T5258] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f465e2bbec0
[  169.817298][ T5258] RBP: 0000000020000000 R08: 00007f465e2bbf00 R09: 0000000000008c1b
[  169.825284][ T5258] R10: 0000000000008c1b R11: 0000000000000206 R12: 0000000020000100
[  169.833269][ T5258] R13: 00007f465e2bbec0 R14: 0000000000012767 R15: 0000000020000500
[  169.841267][ T5258]  </TASK>
[  169.855419][ T5258] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  169.892291][ T4397] usbtouchscreen: probe of 3-1:0.0 failed with error -90
[  169.908275][ T5258] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  169.946356][ T4397] usb 3-1: USB disconnect, device number 8
[  170.638948][ T5303] loop1: detected capacity change from 0 to 1024
[  171.134811][ T3627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.239572][ T3609] hfsplus: b-tree write err: -5, ino 8
[  171.345308][ T3627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.356019][ T3627] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  171.366367][ T3627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.395140][ T3627] usb 5-1: config 0 descriptor??
[  171.503596][ T5314] loop2: detected capacity change from 0 to 64
[  171.530711][ T5314] hfs: invalid catalog max_key_len 7
[  171.536891][ T5314] hfs: unable to open catalog tree
[  172.173780][ T4397] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  172.333503][ T3627] usbhid 5-1:0.0: can't add hid device: -71
[  172.350047][ T3627] usbhid: probe of 5-1:0.0 failed with error -71
[  172.389892][ T3627] usb 5-1: USB disconnect, device number 22
[  172.483442][ T4397] usb 1-1: Using ep0 maxpacket: 8
[  172.644713][ T4397] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  172.679436][ T4397] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  172.904565][ T4397] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.113984][ T4397] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  173.281206][ T4397] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  173.454623][ T4397] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  173.498850][ T4397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.857865][ T5351] loop2: detected capacity change from 0 to 8
[  173.884133][ T5351] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  173.928599][ T5351] cramfs: unsupported filesystem features
[  173.971146][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.988773][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.997622][ T4398] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  174.033591][ T4397] usb 1-1: usb_control_msg returned -32
[  174.043697][ T4397] usbtmc 1-1:16.0: can't read capabilities
[  174.123695][ T5326] loop1: detected capacity change from 0 to 32768
[  174.150782][ T5326] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  174.195787][ T5326] CPU: 0 PID: 5326 Comm: syz.1.473 Not tainted 6.1.96-syzkaller #0
[  174.203752][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  174.213845][ T5326] Call Trace:
[  174.217167][ T5326]  <TASK>
[  174.220133][ T5326]  dump_stack_lvl+0x1e3/0x2cb
[  174.224874][ T5326]  ? nf_tcp_handle_invalid+0x642/0x642
[  174.230402][ T5326]  ? panic+0x764/0x764
[  174.234548][ T5326]  sysfs_create_dir_ns+0x2c6/0x390
[  174.239727][ T5326]  ? sysfs_warn_dup+0xa0/0xa0
[  174.244482][ T5326]  kobject_add_internal+0x6df/0xd10
[  174.249771][ T5326]  kobject_init_and_add+0x120/0x190
[  174.255040][ T5326]  ? lockdep_softirqs_off+0x420/0x420
[  174.260601][ T5326]  ? widen_string+0x3a/0x310
[  174.265247][ T5326]  ? kobject_add+0x210/0x210
[  174.269896][ T5326]  ? __init_swait_queue_head+0xaa/0x140
[  174.275512][ T5326]  gfs2_sys_fs_add+0x237/0x4a0
[  174.280332][ T5326]  ? gfs2_recover_set+0x240/0x240
[  174.285418][ T5326]  ? snprintf+0xd6/0x120
[  174.289716][ T5326]  ? vscnprintf+0x80/0x80
[  174.294101][ T5326]  ? read_word_at_a_time+0xe/0x20
[  174.299160][ T5326]  ? strscpy+0x89/0x220
[  174.303336][ T5326]  gfs2_fill_super+0x1228/0x26e0
[  174.308319][ T5326]  ? gfs2_reconfigure+0xcf0/0xcf0
[  174.313386][ T5326]  ? ptr_to_hashval+0x70/0x70
[  174.318099][ T5326]  ? up_write+0x19d/0x580
[  174.322469][ T5326]  ? set_blocksize+0x1c6/0x350
[  174.327257][ T5326]  get_tree_bdev+0x3fe/0x620
[  174.331887][ T5326]  ? gfs2_reconfigure+0xcf0/0xcf0
[  174.336955][ T5326]  gfs2_get_tree+0x50/0x210
[  174.341489][ T5326]  ? bpf_lsm_capable+0x5/0x10
[  174.346197][ T5326]  vfs_get_tree+0x88/0x270
[  174.350634][ T5326]  do_new_mount+0x2ba/0xb40
[  174.355185][ T5326]  ? ns_capable+0x85/0xe0
[  174.359551][ T5326]  ? do_move_mount_old+0x160/0x160
[  174.364699][ T5326]  __se_sys_mount+0x2d5/0x3c0
[  174.369418][ T5326]  ? __x64_sys_mount+0xc0/0xc0
[  174.374226][ T5326]  ? syscall_enter_from_user_mode+0x2e/0x230
[  174.380255][ T5326]  ? lockdep_hardirqs_on+0x94/0x130
[  174.385467][ T5326]  ? __x64_sys_mount+0x1c/0xc0
[  174.390250][ T5326]  do_syscall_64+0x3b/0xb0
[  174.394684][ T5326]  ? clear_bhb_loop+0x45/0xa0
[  174.399390][ T5326]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.405302][ T5326] RIP: 0033:0x7fd9e557761a
[  174.409735][ T5326] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.429353][ T5326] RSP: 002b:00007fd9e63d0e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  174.437783][ T5326] RAX: ffffffffffffffda RBX: 00007fd9e63d0f00 RCX: 00007fd9e557761a
[  174.445768][ T5326] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fd9e63d0ec0
[  174.453748][ T5326] RBP: 0000000020000000 R08: 00007fd9e63d0f00 R09: 0000000000008c1b
[  174.461731][ T5326] R10: 0000000000008c1b R11: 0000000000000206 R12: 0000000020000100
[  174.469751][ T5326] R13: 00007fd9e63d0ec0 R14: 0000000000012767 R15: 0000000020000500
[  174.477747][ T5326]  </TASK>
[  174.596049][ T5356] loop2: detected capacity change from 0 to 64
[  174.607428][ T5356] hfs: invalid catalog max_key_len 7
[  174.613036][ T5356] hfs: unable to open catalog tree
[  174.665408][ T4398] usb 4-1: Using ep0 maxpacket: 32
[  174.724572][ T5326] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  174.784606][ T4398] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  174.944647][ T5326] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  175.083604][ T4398] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  175.101771][ T4398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.134482][ T4398] usb 4-1: Product: syz
[  175.148939][ T4398] usb 4-1: Manufacturer: syz
[  175.175853][ T4398] usb 4-1: SerialNumber: syz
[  175.207223][ T4398] usb 4-1: config 0 descriptor??
[  175.273785][ T5340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  175.314098][ T4398] hub 4-1:0.0: bad descriptor, ignoring hub
[  175.320128][ T4398] hub: probe of 4-1:0.0 failed with error -5
[  175.345179][ T4398] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  175.554192][ T3770] usb 4-1: USB disconnect, device number 12
[  175.912301][  T152] usb 1-1: USB disconnect, device number 12
[  176.063409][ T4398] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  176.473181][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.492557][ T5385] loop2: detected capacity change from 0 to 8
[  176.513191][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.514107][ T5385] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  176.560307][ T4398] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  176.564735][ T5385] cramfs: unsupported filesystem features
[  176.586668][ T4398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.665165][ T4398] usb 2-1: config 0 descriptor??
[  176.940436][ T5400] loop2: detected capacity change from 0 to 64
[  176.971087][ T5400] hfs: invalid catalog max_key_len 7
[  176.977361][ T5400] hfs: unable to open catalog tree
[  177.093297][ T3770] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  177.353551][ T3770] usb 1-1: Using ep0 maxpacket: 16
[  177.473726][ T3770] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  177.500751][ T3770] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  177.569301][ T3770] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  177.629068][ T3770] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  177.649594][ T3770] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  177.660084][ T3770] usb 1-1: config 1 interface 0 has no altsetting 0
[  177.675252][ T3770] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  177.686645][ T5403] Zero length message leads to an empty skb
[  177.694848][ T3770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.841912][ T3770] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  177.853900][ T4398] hid (null): report_id 0 is invalid
[  177.885930][ T4398] logitech-hidpp-device 0003:046D:C086.0006: report_id 0 is invalid
[  177.911788][ T4398] logitech-hidpp-device 0003:046D:C086.0006: item 0 0 1 8 parsing failed
[  177.922764][ T4398] logitech-hidpp-device 0003:046D:C086.0006: hidpp_probe:parse failed
[  178.081766][ T5399] xt_hashlimit: max too large, truncated to 1048576
[  178.120949][ T4398] logitech-hidpp-device: probe of 0003:046D:C086.0006 failed with error -22
[  178.140599][ T4398] usb 2-1: USB disconnect, device number 9
[  178.266350][ T3770] scsi host1: usb-storage 1-1:1.0
[  178.468386][ T4398] usb 1-1: USB disconnect, device number 13
[  178.951116][ T5448] loop2: detected capacity change from 0 to 8
[  178.974017][ T5448] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  179.016114][ T5448] cramfs: unsupported filesystem features
[  179.147088][ T5453] 9pnet_fd: Insufficient options for proto=fd
[  179.413256][ T5457] loop2: detected capacity change from 0 to 64
[  179.504811][ T5457] hfs: invalid catalog max_key_len 7
[  179.511010][ T5457] hfs: unable to open catalog tree
[  180.245023][ T3650] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  180.993924][ T5491] 9pnet_fd: Insufficient options for proto=fd
[  180.996079][ T3600] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  181.373410][ T3600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.402309][ T3600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.443261][ T3600] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  181.452373][ T3600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.465154][   T48] Bluetooth: hci6: unexpected event 0x2f length: 763 > 260
[  181.475057][ T3600] usb 3-1: config 0 descriptor??
[  181.511227][ T5502] loop4: detected capacity change from 0 to 8
[  181.529751][ T5502] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  181.551856][ T5502] cramfs: unsupported filesystem features
[  181.899971][ T5504] loop4: detected capacity change from 0 to 64
[  181.917399][ T5504] hfs: invalid catalog max_key_len 7
[  181.923722][ T5504] hfs: unable to open catalog tree
[  181.932475][ T4397] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  182.020343][ T3600] hid (null): report_id 0 is invalid
[  182.128948][ T3600] logitech-hidpp-device 0003:046D:C086.0007: report_id 0 is invalid
[  182.266709][ T3600] logitech-hidpp-device 0003:046D:C086.0007: item 0 0 1 8 parsing failed
[  182.293759][ T4397] usb 4-1: Using ep0 maxpacket: 32
[  182.377691][ T3600] logitech-hidpp-device 0003:046D:C086.0007: hidpp_probe:parse failed
[  182.431640][ T3600] logitech-hidpp-device: probe of 0003:046D:C086.0007 failed with error -22
[  182.463534][ T4397] usb 4-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config
[  182.509998][ T3600] usb 3-1: USB disconnect, device number 9
[  182.528664][ T4397] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  182.578185][ T4397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.623793][ T4397] usb 4-1: config 0 descriptor??
[  182.701655][ T4397] usb 4-1: bad CDC descriptors
[  182.924208][ T3600] usb 4-1: USB disconnect, device number 13
[  183.779609][ T5532] 9pnet_fd: Insufficient options for proto=fd
[  184.441879][ T5560] 9pnet_fd: Insufficient options for proto=fd
[  184.442979][ T5559] process 'syz.2.554' launched './file0/../file0' with NULL argv: empty string added
[  185.567173][ T5587] 9pnet_fd: Insufficient options for proto=fd
[  186.540744][ T5628] 9pnet_fd: Insufficient options for proto=fd
[  188.070936][ T3847] kernel read not supported for file /usbmon0 (pid: 3847 comm: kworker/0:12)
[  189.429011][ T3594] kernel read not supported for file /usbmon0 (pid: 3594 comm: kworker/1:5)
[  190.881443][ T3847] kernel read not supported for file /usbmon0 (pid: 3847 comm: kworker/0:12)
[  192.472009][ T5766] netlink: 'syz.2.637': attribute type 17 has an invalid length.
[  192.493719][ T5766] netlink: 48 bytes leftover after parsing attributes in process `syz.2.637'.
[  192.790765][ T5780] netlink: 'syz.0.642': attribute type 10 has an invalid length.
[  192.815576][ T5780] netlink: 2 bytes leftover after parsing attributes in process `syz.0.642'.
[  192.852812][ T5780] device team0 entered promiscuous mode
[  192.885068][ T5780] device team_slave_0 entered promiscuous mode
[  192.912893][ T5780] device team_slave_1 entered promiscuous mode
[  192.955639][ T5780] bridge0: port 3(team0) entered blocking state
[  192.975283][ T5780] bridge0: port 3(team0) entered disabled state
[  192.987203][ T5780] bridge0: port 3(team0) entered blocking state
[  192.995053][ T5780] bridge0: port 3(team0) entered forwarding state
[  193.092113][ T5762] loop4: detected capacity change from 0 to 32768
[  193.111537][ T5762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.634 (5762)
[  193.149507][ T5762] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.175204][ T5762] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  193.194693][ T5762] BTRFS info (device loop4): setting nodatacow, compression disabled
[  193.211171][ T5762] BTRFS info (device loop4): enabling auto defrag
[  193.219665][ T5762] BTRFS info (device loop4): max_inline at 0
[  193.233360][ T5762] BTRFS info (device loop4): using free space tree
[  193.291104][ T3594] kernel read not supported for file /usbmon0 (pid: 3594 comm: kworker/1:5)
[  193.396498][   T27] audit: type=1804 audit(1719957581.930:13): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.634" name="/newroot/108/file1/bus" dev="loop4" ino=263 res=1 errno=0
[  193.492889][ T3548] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  194.149931][ T5824] kernel read not supported for file /usbmon0 (pid: 5824 comm: kworker/1:14)
[  194.209717][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.216332][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  194.303294][ T3292] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  194.564913][ T3292] usb 2-1: Using ep0 maxpacket: 16
[  194.713465][ T3292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  194.723575][ T3292] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  194.748604][ T3292] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  194.777845][ T3292] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  194.791654][ T3292] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  194.811322][ T3292] usb 2-1: config 1 interface 0 has no altsetting 0
[  194.819503][ T3292] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  194.829217][ T3292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.894300][ T3292] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  195.094650][ T5836] xt_hashlimit: max too large, truncated to 1048576
[  195.207402][ T3292] scsi host1: usb-storage 2-1:1.0
[  195.399326][ T3292] usb 2-1: USB disconnect, device number 10
[  196.062142][ T5893] loop2: detected capacity change from 0 to 32768
[  196.088977][ T5893] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.679 (5893)
[  196.112313][ T5893] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.134384][ T5893] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  196.155802][ T5893] BTRFS info (device loop2): setting nodatacow, compression disabled
[  196.173573][ T5901] device wlan0 entered promiscuous mode
[  196.193687][ T5893] BTRFS info (device loop2): enabling auto defrag
[  196.204106][ T5901] device wlan0 left promiscuous mode
[  196.223394][ T5893] BTRFS info (device loop2): max_inline at 0
[  196.229457][ T5893] BTRFS info (device loop2): using free space tree
[  196.489621][   T27] audit: type=1804 audit(1719957585.020:14): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.679" name="/newroot/151/file1/bus" dev="loop2" ino=263 res=1 errno=0
[  196.555487][ T5923] overlayfs: failed to resolve './file1': -2
[  196.605357][ T3555] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.063007][ T5940] smc: net device ip6_vti0 applied user defined pnetid SYZ0
[  197.861964][ T5974] loop0: detected capacity change from 0 to 8
[  197.870907][ T5974] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  197.889100][ T5974] cramfs: unsupported filesystem features
[  198.468875][ T5984] loop0: detected capacity change from 0 to 64
[  198.535653][ T5984] hfs: invalid catalog max_key_len 7
[  198.560763][ T5984] hfs: unable to open catalog tree
[  199.107545][ T3552] Bluetooth: hci6: SCO packet for unknown connection handle 0
[  200.250254][ T6030] syz.3.725 uses obsolete (PF_INET,SOCK_PACKET)
[  200.653319][ T5824] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  200.933382][ T5824] usb 2-1: Using ep0 maxpacket: 16
[  201.073589][ T5824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  201.095615][ T5824] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  201.106309][ T5824] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  201.116771][ T5824] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  201.139144][ T5824] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  201.150627][ T5824] usb 2-1: config 1 interface 0 has no altsetting 0
[  201.167008][ T5824] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  201.197604][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.274085][ T5824] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  201.477394][ T6034] xt_hashlimit: max too large, truncated to 1048576
[  201.594563][ T5824] scsi host1: usb-storage 2-1:1.0
[  201.804576][ T3771] usb 2-1: USB disconnect, device number 11
[  203.803232][ T4397] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  204.043309][ T3552] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  204.052139][ T3552] Bluetooth: hci6: Injecting HCI hardware error event
[  204.061371][ T4397] usb 2-1: Using ep0 maxpacket: 16
[  204.068388][   T48] Bluetooth: hci6: hardware error 0x00
[  204.203446][ T4397] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  204.222813][ T4397] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  204.233096][ T4397] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  204.244717][ T4397] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  204.254898][ T4397] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  204.265332][ T4397] usb 2-1: config 1 interface 0 has no altsetting 0
[  204.271976][ T4397] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  204.281621][ T4397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.332010][ T4397] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  204.542608][ T6115] xt_hashlimit: max too large, truncated to 1048576
[  204.681474][ T4397] scsi host1: usb-storage 2-1:1.0
[  204.913674][ T3990] usb 2-1: USB disconnect, device number 12
[  205.443416][ T3771] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  205.813523][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.843471][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.873429][ T3771] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  205.903673][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.926098][ T3771] usb 3-1: config 0 descriptor??
[  206.203241][   T48] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  206.404028][ T3771] hid (null): report_id 0 is invalid
[  206.412051][ T3771] logitech-hidpp-device 0003:046D:C086.0008: report_id 0 is invalid
[  206.449160][ T6180] loop1: detected capacity change from 0 to 32768
[  206.450905][ T3771] logitech-hidpp-device 0003:046D:C086.0008: item 0 0 1 8 parsing failed
[  206.489309][ T6180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.776 (6180)
[  206.505861][ T3771] logitech-hidpp-device 0003:046D:C086.0008: hidpp_probe:parse failed
[  206.543298][ T3771] logitech-hidpp-device: probe of 0003:046D:C086.0008 failed with error -22
[  206.607298][ T6180] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.623520][ T3771] usb 3-1: USB disconnect, device number 10
[  206.658772][ T6180] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  206.703636][ T6180] BTRFS info (device loop1): setting nodatacow, compression disabled
[  206.732675][ T6180] BTRFS info (device loop1): enabling auto defrag
[  206.760604][ T6180] BTRFS info (device loop1): max_inline at 0
[  206.773356][ T6180] BTRFS info (device loop1): using free space tree
[  207.011560][   T27] audit: type=1804 audit(1719957595.540:15): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.776" name="/newroot/157/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  207.095419][ T3547] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.623238][ T5824] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  207.863344][ T5824] usb 2-1: Using ep0 maxpacket: 16
[  207.983546][ T5824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  208.028775][ T5824] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  208.053356][ T5824] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  208.082396][ T5824] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  208.102630][ T5824] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  208.122945][ T5824] usb 2-1: config 1 interface 0 has no altsetting 0
[  208.143277][ T5824] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  208.162598][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.232726][ T5824] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  208.437618][ T6228] xt_hashlimit: max too large, truncated to 1048576
[  208.546304][ T5824] scsi host1: usb-storage 2-1:1.0
[  208.685359][ T6251] loop4: detected capacity change from 0 to 32768
[  208.727838][ T6251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.794 (6251)
[  208.749523][ T5824] usb 2-1: USB disconnect, device number 13
[  208.811769][ T6251] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  208.853233][ T6251] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  208.885190][ T6251] BTRFS info (device loop4): setting nodatacow, compression disabled
[  208.912359][ T6251] BTRFS info (device loop4): enabling auto defrag
[  208.934193][ T6251] BTRFS info (device loop4): max_inline at 0
[  208.956182][ T6251] BTRFS info (device loop4): using free space tree
[  209.166691][   T27] audit: type=1804 audit(1719957597.700:16): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.794" name="/newroot/138/file1/bus" dev="loop4" ino=263 res=1 errno=0
[  209.264606][ T3548] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.423166][ T3847] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  212.803463][ T3847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.824171][ T3847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.846906][ T3847] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  212.882324][ T3847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.922771][ T3847] usb 4-1: config 0 descriptor??
[  213.076843][ T6379] loop0: detected capacity change from 0 to 32768
[  213.085107][ T6379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.828 (6379)
[  213.105596][ T6379] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.127159][ T6379] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  213.147794][ T6379] BTRFS info (device loop0): setting nodatacow, compression disabled
[  213.190901][ T6379] BTRFS info (device loop0): enabling auto defrag
[  213.213963][ T6379] BTRFS info (device loop0): max_inline at 0
[  213.220387][ T6379] BTRFS info (device loop0): using free space tree
[  213.368099][   T27] audit: type=1804 audit(1719957601.900:17): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.828" name="/newroot/196/file1/bus" dev="loop0" ino=263 res=1 errno=0
[  213.404110][ T3847] hid (null): report_id 0 is invalid
[  213.417859][ T3847] logitech-hidpp-device 0003:046D:C086.0009: report_id 0 is invalid
[  213.429999][ T3847] logitech-hidpp-device 0003:046D:C086.0009: item 0 0 1 8 parsing failed
[  213.478981][ T3847] logitech-hidpp-device 0003:046D:C086.0009: hidpp_probe:parse failed
[  213.524365][ T3847] logitech-hidpp-device: probe of 0003:046D:C086.0009 failed with error -22
[  213.586223][ T3553] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.616264][ T3847] usb 4-1: USB disconnect, device number 14
[  214.193236][ T3597] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  214.433279][ T3597] usb 2-1: Using ep0 maxpacket: 16
[  214.553391][ T3597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  214.566845][ T3597] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  214.583295][ T3597] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  214.594526][ T3597] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  214.607762][ T3597] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  214.618212][ T3597] usb 2-1: config 1 interface 0 has no altsetting 0
[  214.625247][ T3597] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  214.634895][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.694358][ T3597] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  214.900488][ T6429] xt_hashlimit: max too large, truncated to 1048576
[  215.019081][ T3597] scsi host1: usb-storage 2-1:1.0
[  215.228301][ T3597] usb 2-1: USB disconnect, device number 14
[  216.083478][ T3991] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  216.453513][ T3991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.478251][ T3991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.508903][ T3991] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  216.533487][ T3991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.560140][ T3991] usb 3-1: config 0 descriptor??
[  217.043925][ T3991] hid (null): report_id 0 is invalid
[  217.072010][ T3991] logitech-hidpp-device 0003:046D:C086.000A: report_id 0 is invalid
[  217.090505][ T3991] logitech-hidpp-device 0003:046D:C086.000A: item 0 0 1 8 parsing failed
[  217.111165][ T3991] logitech-hidpp-device 0003:046D:C086.000A: hidpp_probe:parse failed
[  217.149858][ T3991] logitech-hidpp-device: probe of 0003:046D:C086.000A failed with error -22
[  217.255481][ T3991] usb 3-1: USB disconnect, device number 11
[  217.288267][ T6494] device wlan0 entered promiscuous mode
[  217.326651][ T6494] device wlan0 left promiscuous mode
[  217.575371][ T6504] overlayfs: failed to resolve './file1': -2
[  217.670525][ T3991] kernel read not supported for file /usbmon0 (pid: 3991 comm: kworker/0:15)
[  218.053511][ T3847] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  218.453549][ T3847] usb 2-1: Using ep0 maxpacket: 16
[  218.573405][ T3847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  218.610429][ T3847] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  218.651250][ T3847] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  218.676825][ T3847] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  218.715172][ T3847] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  218.751991][ T3847] usb 2-1: config 1 interface 0 has no altsetting 0
[  218.774049][ T3847] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  218.807009][ T3847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.884676][ T3847] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  219.089868][ T6509] xt_hashlimit: max too large, truncated to 1048576
[  219.111340][ T6538] device wlan0 entered promiscuous mode
[  219.137104][ T6538] device wlan0 left promiscuous mode
[  219.208121][ T3847] scsi host1: usb-storage 2-1:1.0
[  219.442907][ T5827] usb 2-1: USB disconnect, device number 15
[  219.614230][ T6548] tipc: Started in network mode
[  219.650667][ T6548] tipc: Node identity 1, cluster identity 4711
[  219.663451][ T6548] tipc: Node number set to 1
[  219.688689][ T6548] tipc: Cannot configure node identity twice
[  219.736709][ T3552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.747749][ T3552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.760606][ T3552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.779776][ T6548] Bluetooth: MGMT ver 1.22
[  219.786847][ T3552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.795264][ T3552] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  219.806786][ T3552] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.308203][ T3609] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.854339][ T3609] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.996354][ T3609] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.055729][ T6555] chnl_net:caif_netlink_parms(): no params data found
[  221.073473][ T5824] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  221.099839][ T3609] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.401667][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.436795][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.452293][ T6555] device bridge_slave_0 entered promiscuous mode
[  221.483795][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.487030][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.503916][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.505369][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.514103][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  221.530519][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.549088][ T5824] usb 3-1: config 0 descriptor??
[  221.575156][ T6555] device bridge_slave_1 entered promiscuous mode
[  221.769829][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.866789][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.883731][   T48] Bluetooth: hci1: command tx timeout
[  222.052215][ T5824] hid (null): report_id 0 is invalid
[  222.070786][ T5824] logitech-hidpp-device 0003:046D:C086.000B: report_id 0 is invalid
[  222.122211][ T5824] logitech-hidpp-device 0003:046D:C086.000B: item 0 0 1 8 parsing failed
[  222.154751][ T5824] logitech-hidpp-device 0003:046D:C086.000B: hidpp_probe:parse failed
[  222.168829][ T6555] team0: Port device team_slave_0 added
[  222.183749][ T5824] logitech-hidpp-device: probe of 0003:046D:C086.000B failed with error -22
[  222.193696][ T6555] team0: Port device team_slave_1 added
[  222.381851][ T5827] usb 3-1: USB disconnect, device number 12
[  222.388430][ T4397] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  222.693391][ T4397] usb 4-1: Using ep0 maxpacket: 16
[  222.864243][ T4397] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  222.976256][ T4397] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  223.043431][ T4397] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  223.096930][ T4397] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  223.123685][ T4397] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  223.150036][ T4397] usb 4-1: config 1 interface 0 has no altsetting 0
[  223.169148][ T4397] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  223.209293][ T4397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.284394][ T4397] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  223.377707][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.412474][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.490631][ T6599] xt_hashlimit: max too large, truncated to 1048576
[  223.529123][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.603310][ T3991] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  223.606775][ T4397] scsi host1: usb-storage 4-1:1.0
[  223.648971][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.663443][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.712080][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.796968][ T4397] usb 4-1: USB disconnect, device number 15
[  223.853322][ T3991] usb 3-1: Using ep0 maxpacket: 32
[  223.946979][ T6555] device hsr_slave_0 entered promiscuous mode
[  223.963553][   T48] Bluetooth: hci1: command tx timeout
[  223.973483][ T3991] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  223.983780][ T6555] device hsr_slave_1 entered promiscuous mode
[  224.008448][ T6555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.036039][ T6555] Cannot create hsr debugfs directory
[  224.153433][ T3991] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  224.167979][ T3991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.178092][ T3991] usb 3-1: Product: syz
[  224.182617][ T3991] usb 3-1: Manufacturer: syz
[  224.188132][ T3991] usb 3-1: SerialNumber: syz
[  224.214994][ T3991] usb 3-1: config 0 descriptor??
[  224.243948][ T6627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  224.284403][ T3991] hub 3-1:0.0: bad descriptor, ignoring hub
[  224.293549][ T3991] hub: probe of 3-1:0.0 failed with error -5
[  224.332885][ T3991] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[  224.585050][ T4397] usb 3-1: USB disconnect, device number 13
[  225.121226][ T3609] device hsr_slave_0 left promiscuous mode
[  225.129899][ T3609] device hsr_slave_1 left promiscuous mode
[  225.145961][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.177140][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.200162][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.212896][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.222074][ T3609] device bridge_slave_1 left promiscuous mode
[  225.231690][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.250698][ T3609] device bridge_slave_0 left promiscuous mode
[  225.270090][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.332450][ T3609] device veth1_macvtap left promiscuous mode
[  225.339485][ T3609] device veth0_macvtap left promiscuous mode
[  225.346152][ T3609] device veth1_vlan left promiscuous mode
[  225.352278][ T3609] device veth0_vlan left promiscuous mode
[  225.603615][ T6300] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  226.016375][ T3609] team0 (unregistering): Port device team_slave_1 removed
[  226.043315][ T3552] Bluetooth: hci1: command tx timeout
[  226.095738][ T3609] team0 (unregistering): Port device team_slave_0 removed
[  226.155836][ T3609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.173400][ T6300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.196458][ T6300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.234833][ T6300] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  226.265075][ T6300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.286865][ T6300] usb 3-1: config 0 descriptor??
[  226.322064][ T3609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.784029][ T6300] hid (null): report_id 0 is invalid
[  226.795648][ T6300] logitech-hidpp-device 0003:046D:C086.000C: report_id 0 is invalid
[  226.804818][ T6300] logitech-hidpp-device 0003:046D:C086.000C: item 0 0 1 8 parsing failed
[  226.818668][ T6300] logitech-hidpp-device 0003:046D:C086.000C: hidpp_probe:parse failed
[  226.830869][ T6300] logitech-hidpp-device: probe of 0003:046D:C086.000C failed with error -22
[  226.997583][ T3596] usb 3-1: USB disconnect, device number 14
[  227.426104][ T3609] bond0 (unregistering): Released all slaves
[  227.974038][ T6300] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  228.123561][ T3552] Bluetooth: hci1: command tx timeout
[  228.243330][ T6300] usb 4-1: Using ep0 maxpacket: 32
[  228.363984][ T6300] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  228.431394][ T6555] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.461212][ T6555] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.515224][ T6555] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.543456][ T6300] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  228.562646][ T6300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.619000][ T6300] usb 4-1: Product: syz
[  228.635729][ T6300] usb 4-1: Manufacturer: syz
[  228.645598][ T6300] usb 4-1: SerialNumber: syz
[  228.660845][ T6555] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  228.669051][ T6300] usb 4-1: config 0 descriptor??
[  228.713607][ T6704] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  228.754109][ T6300] hub 4-1:0.0: bad descriptor, ignoring hub
[  228.766393][ T6300] hub: probe of 4-1:0.0 failed with error -5
[  228.804126][ T6300] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  229.009442][ T3847] usb 4-1: USB disconnect, device number 16
[  229.013205][    C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  229.029366][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.066794][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.079384][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.119313][ T6555] 8021q: adding VLAN 0 to HW filter on device team0
[  229.150536][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.169183][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  230.026826][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.034081][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.061900][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  230.070658][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  230.080934][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  230.091251][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.098375][ T5824] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.106713][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  230.115962][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  230.133963][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  230.149853][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  230.179312][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  230.210446][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  230.240294][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  230.278409][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  230.309144][ T6555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.362714][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  230.424132][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  230.432372][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  230.490746][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  232.013213][ T3596] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  232.133007][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  232.147604][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  232.196599][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.263421][ T3596] usb 1-1: Using ep0 maxpacket: 32
[  232.384001][ T3596] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  232.583598][ T3596] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  232.592696][ T3596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.658282][ T3596] usb 1-1: Product: syz
[  232.662506][ T3596] usb 1-1: Manufacturer: syz
[  232.690993][ T3596] usb 1-1: SerialNumber: syz
[  232.724021][ T3596] usb 1-1: config 0 descriptor??
[  232.753467][ T6791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  232.773907][ T3596] hub 1-1:0.0: bad descriptor, ignoring hub
[  232.783495][ T3596] hub: probe of 1-1:0.0 failed with error -5
[  232.813394][ T3596] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11
[  233.066951][ T3596] usb 1-1: USB disconnect, device number 14
[  233.073196][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  233.689245][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  233.951557][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  234.138290][ T6555] device veth0_vlan entered promiscuous mode
[  234.153932][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  234.191682][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  234.216031][ T6555] device veth1_vlan entered promiscuous mode
[  234.233947][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  234.250787][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  234.270083][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  234.366218][ T6555] device veth0_macvtap entered promiscuous mode
[  234.420870][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  234.438673][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  234.491519][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  234.520950][ T6555] device veth1_macvtap entered promiscuous mode
[  234.544984][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  234.566893][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  234.628309][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.666673][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.690608][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.706930][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.722166][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.738098][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.758086][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.777791][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.792158][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.808029][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.822122][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.841643][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.873832][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.884174][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  234.907875][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  234.934815][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.965291][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.996996][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.028073][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.049736][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.069543][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.082039][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.095548][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.105849][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.116752][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.127060][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.137970][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.157706][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.182622][ T6555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.200855][ T6555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.225741][ T6555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.282746][ T6555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.310444][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  235.330953][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  235.553881][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.585339][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.869683][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  236.457156][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.503249][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.573179][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  236.613341][ T3597] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  236.816382][ T3597] usb 2-1: device descriptor read/64, error -71
[  237.093374][ T3597] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  237.293331][ T3597] usb 2-1: device descriptor read/64, error -71
[  237.423460][ T3597] usb usb2-port1: attempt power cycle
[  237.833380][ T3597] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  237.976008][ T3597] usb 2-1: device descriptor read/8, error -71
[  238.353405][ T3597] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  238.483685][ T3597] usb 2-1: device descriptor read/8, error -71
[  238.603763][ T3597] usb usb2-port1: unable to enumerate USB device
[  238.950678][ T7003] device wlan0 entered promiscuous mode
[  238.983777][ T7003] device wlan0 left promiscuous mode
[  241.963340][ T5824] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  242.223745][ T5824] usb 4-1: Using ep0 maxpacket: 16
[  242.354439][ T5824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  242.380948][ T5824] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  242.428773][ T5824] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  242.460336][ T5824] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  242.490120][ T5824] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  242.518960][ T5824] usb 4-1: config 1 interface 0 has no altsetting 0
[  242.542184][ T5824] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  242.564797][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.654367][ T5824] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  242.683238][ T3552] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  242.692018][ T3552] Bluetooth: hci1: Injecting HCI hardware error event
[  242.701707][   T48] Bluetooth: hci1: hardware error 0x00
[  243.004542][ T7065] xt_hashlimit: max too large, truncated to 1048576
[  243.720181][ T5824] scsi host1: usb-storage 4-1:1.0
[  243.943719][ T5824] usb 4-1: USB disconnect, device number 17
[  244.217377][ T3847] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  244.583451][ T3847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.612305][ T3847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.640411][ T3847] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  244.704547][ T3847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.739711][ T3847] usb 5-1: config 0 descriptor??
[  244.763713][   T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  245.433329][ T4398] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  245.904430][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  245.943216][ T5824] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  245.980530][ T4398] usb 2-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=31.95
[  246.000245][ T4398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.041913][ T4398] usb 2-1: config 0 descriptor??
[  246.193241][ T5824] usb 3-1: Using ep0 maxpacket: 8
[  247.213594][ T4398] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  247.283615][ T5824] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  247.303924][ T4573] udevd[4573]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.320069][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.329799][   T28] INFO: task syz-executor:3560 blocked for more than 143 seconds.
[  247.342299][   T28]       Not tainted 6.1.96-syzkaller #0
[  247.361233][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  247.389794][ T5824] usb 3-1: config 0 descriptor??
[  247.410266][   T28] task:syz-executor    state:D stack:20176 pid:3560  ppid:1      flags:0x00004004
[  247.457045][   T28] Call Trace:
[  247.467827][   T28]  <TASK>
[  247.478385][   T28]  __schedule+0x142d/0x4550
[  247.493767][   T28]  ? _raw_spin_unlock+0x40/0x40
[  247.518941][   T28]  ? __mod_timer+0x956/0xee0
[  247.523720][   T28]  ? __sched_text_start+0x8/0x8
[  247.528629][   T28]  ? lockdep_softirqs_off+0x420/0x420
[  247.534297][ T3847] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71
[  247.543333][   T28]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  247.549980][   T28]  ? _raw_spin_unlock+0x40/0x40
[  247.555014][ T3847] uclogic 0003:256C:006D.000D: failed probing parameters: -71
[  247.562538][ T3847] uclogic: probe of 0003:256C:006D.000D failed with error -71
[  247.570233][   T28]  schedule+0xbf/0x180
[  247.574402][   T28]  schedule_timeout+0x1b9/0x300
[  247.579298][   T28]  ? console_conditional_schedule+0x40/0x40
[  247.585659][   T28]  ? update_process_times+0x1b0/0x1b0
[  247.592926][ T3847] usb 5-1: USB disconnect, device number 23
[  247.602604][   T28]  ? prepare_to_wait_event+0x3b5/0x3f0
[  247.608317][   T28]  gfs2_gl_hash_clear+0x19f/0x310
[  247.618279][   T28]  ? gfs2_jindex_free+0x468/0x4f0
[  247.625214][   T28]  ? withdraw_dq+0x240/0x240
[  247.633127][   T28]  ? gfs2_jindex_free+0x495/0x4f0
[  247.638214][   T28]  ? wake_bit_function+0x210/0x210
[  247.655285][   T28]  ? gfs2_setbit+0x630/0x630
[  247.659969][   T28]  ? gfs2_clear_rgrpd+0x6e6/0x710
[  247.665259][   T28]  gfs2_put_super+0x823/0x890
[  247.669992][   T28]  ? gfs2_evict_inode+0x1280/0x1280
[  247.675495][   T28]  generic_shutdown_super+0x130/0x340
[  247.680929][   T28]  kill_block_super+0x7a/0xe0
[  247.685893][   T28]  deactivate_locked_super+0xa0/0x110
[  247.691320][   T28]  cleanup_mnt+0x490/0x520
[  247.699964][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  247.733357][   T28]  task_work_run+0x246/0x300
[  247.738046][   T28]  ? task_work_cancel+0x2b0/0x2b0
[  247.750726][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  247.757579][   T28]  exit_to_user_mode_loop+0xde/0x100
[  247.762924][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  247.776476][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  247.782100][   T28]  do_syscall_64+0x47/0xb0
[  247.791121][   T28]  ? clear_bhb_loop+0x45/0xa0
[  247.799248][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  247.809715][   T28] RIP: 0033:0x7fa1cdd77247
[  247.817580][   T28] RSP: 002b:00007ffebe0ec288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  247.831135][   T28] RAX: 0000000000000000 RBX: 00007fa1cdde365d RCX: 00007fa1cdd77247
[  247.843347][ T4397] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  247.849921][   T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebe0ec340
[  247.864074][   T28] RBP: 00007ffebe0ec340 R08: 0000000000000000 R09: 0000000000000000
[  247.872262][   T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebe0ed410
[  247.882554][   T28] R13: 00007fa1cdde365d R14: 0000000000017543 R15: 0000000000000005
[  247.891846][   T28]  </TASK>
[  247.901966][   T28] 
[  247.901966][   T28] Showing all locks held in the system:
[  247.911281][   T28] 1 lock held by rcu_tasks_kthre/12:
[  247.925609][   T28]  #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  247.941738][   T28] 1 lock held by rcu_tasks_trace/13:
[  247.949382][   T28]  #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  247.970611][   T28] 1 lock held by khungtaskd/28:
[  247.976452][   T28]  #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  247.992061][   T28] 5 locks held by kworker/u4:3/46:
[  247.999430][   T28]  #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.017601][   T28]  #1: ffffc90000b77d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.029927][   T28]  #2: ffffffff8e28da10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  248.047251][   T28]  #3: ffffffff8e299d68 (rtnl_mutex){+.+.}-{3:3}, at: ip6gre_exit_batch_net+0xc0/0x460
[  248.060392][   T28]  #4: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  248.061601][ T7156] loop0: detected capacity change from 0 to 40427
[  248.092093][ T7156] F2FS-fs (loop0): invalid crc value
[  248.108797][   T28] 2 locks held by getty/3307:
[  248.113741][ T4397] usb 4-1: Using ep0 maxpacket: 8
[  248.173352][   T28]  #0: ffff88814b263098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  248.183863][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  248.204982][ T3596] usb 2-1: USB disconnect, device number 20
[  248.211095][   T28] 1 lock held by syz-executor/3560:
[  248.217329][   T28]  #0: ffff88807c69e0e0 (&type->s_umount_key#56){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[  248.228730][   T28] 3 locks held by kworker/0:6/3596:
[  248.231681][ T7156] F2FS-fs (loop0): Found nat_bits in checkpoint
[  248.235208][   T28]  #0: ffff888143eb7d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.241154][ T4397] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  248.251347][   T28]  #1: ffffc900046afd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.280210][ T4397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.291718][ T4397] usb 4-1: config 0 descriptor??
[  248.295159][   T28]  #2: ffff888145736190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730
[  248.323161][   T28] 4 locks held by udevd/3640:
[  248.327917][   T28]  #0: ffff88807aae2e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10
[  248.347431][   T28]  #1: ffff88805ce6e488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0
[  248.357753][   T28]  #2: ffff88805ee49e88 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0
[  248.368839][   T28]  #3: ffff88805aa79118 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330
[  248.369426][ T7156] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  248.378026][   T28] 5 locks held by kworker/1:12/4397:
[  248.378045][   T28]  #0: ffff888143eb7d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.378120][   T28]  #1: ffffc90015227d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.378261][   T28]  #2: ffff888022486190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730
[  248.378325][   T28]  #3: ffff88805aa7e190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  248.421991][ T7156] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  248.432859][   T28]  #4: ffff8880772d2118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  248.448681][   T28] 2 locks held by kworker/1:13/4398:
[  248.454571][   T28]  #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.472132][   T28]  #1: ffffc9001501fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.484498][   T28] 4 locks held by udevd/4573:
[  248.489303][   T28]  #0: ffff8880792d3e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10
[  248.498754][   T28]  #1: ffff88805cf95c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0
[  248.508561][   T28]  #2: ffff88805ef952c0 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0
[  248.518629][   T28]  #3: ffff88805aa7e190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330
[  248.537087][   T28] 1 lock held by syz.3.340/4913:
[  248.542570][   T28]  #0: ffff88807c69e0e0 (&type->s_umount_key#56){++++}-{3:3}, at: user_get_super+0x11a/0x250
[  248.560747][   T28] 5 locks held by kworker/1:14/5824:
[  248.566867][   T28]  #0: ffff888143eb7d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.581124][   T28]  #1: ffffc900032e7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  248.593288][   T28]  #2: ffff88802246e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730
[  248.602419][   T28]  #3: ffff888020bcc190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  248.615373][   T28]  #4: ffff88805aa79118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  248.616178][ T3553] syz-executor: attempt to access beyond end of device
[  248.616178][ T3553] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  248.631579][   T28] 
[  248.645928][ T3553] syz-executor: attempt to access beyond end of device
[  248.645928][ T3553] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  248.649503][   T28] =============================================
[  248.649503][   T28] 
[  248.679531][   T28] NMI backtrace for cpu 1
[  248.683917][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  248.691726][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  248.701796][   T28] Call Trace:
[  248.705076][   T28]  <TASK>
[  248.708009][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  248.712707][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  248.718182][   T28]  ? panic+0x764/0x764
[  248.722352][   T28]  ? vprintk_emit+0x622/0x740
[  248.727065][   T28]  ? printk_sprint+0x490/0x490
[  248.731857][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  248.736988][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  248.741950][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  248.748141][   T28]  ? _printk+0xd1/0x111
[  248.752310][   T28]  ? panic+0x764/0x764
[  248.756399][   T28]  ? __wake_up_klogd+0xcc/0x100
[  248.761256][   T28]  ? panic+0x764/0x764
[  248.765338][   T28]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  248.771454][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  248.777547][   T28]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  248.783565][   T28]  watchdog+0xf88/0xfd0
[  248.787746][   T28]  ? watchdog+0x1f8/0xfd0
[  248.792092][   T28]  kthread+0x28d/0x320
[  248.796167][   T28]  ? hungtask_pm_notify+0x50/0x50
[  248.801201][   T28]  ? kthread_blkcg+0xd0/0xd0
[  248.805805][   T28]  ret_from_fork+0x1f/0x30
[  248.810242][   T28]  </TASK>
[  248.814303][   T28] Sending NMI from CPU 1 to CPUs 0:
[  248.819550][    C0] NMI backtrace for cpu 0
[  248.819561][    C0] CPU: 0 PID: 3609 Comm: kworker/u4:5 Not tainted 6.1.96-syzkaller #0
[  248.819580][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  248.819591][    C0] Workqueue: bat_events batadv_nc_worker
[  248.819620][    C0] RIP: 0010:kasan_check_range+0x30/0x290
[  248.819639][    C0] Code: b0 01 48 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 0f 82 5a 02 00 00 48 89 fd 48 c1 ed 2f 81 fd ff ff 01 00 0f 82 47 02 00 00 <48> 89 fb 48 c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4e 8d 0c 03 4c
[  248.819654][    C0] RSP: 0018:ffffc900046df970 EFLAGS: 00000046
[  248.819668][    C0] RAX: 0000000000000001 RBX: 00000000000006b1 RCX: ffffffff816ad45a
[  248.819681][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9049c2f0
[  248.819692][    C0] RBP: 000000000001ffff R08: dffffc0000000000 R09: fffffbfff209385f
[  248.819705][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801f966468
[  248.819718][    C0] R13: dffffc0000000000 R14: 0000000000000040 R15: ffff88801f966448
[  248.819731][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  248.819747][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  248.819759][    C0] CR2: 00007ffd598946c0 CR3: 000000007eafc000 CR4: 00000000003506f0
[  248.819775][    C0] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000
[  248.819786][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  248.819797][    C0] Call Trace:
[  248.819803][    C0]  <NMI>
[  248.819808][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  248.819836][    C0]  ? read_lock_is_recursive+0x10/0x10
[  248.819864][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  248.819900][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  248.819927][    C0]  ? nmi_handle+0x12e/0x440
[  248.819953][    C0]  ? nmi_handle+0x25/0x440
[  248.819979][    C0]  ? kasan_check_range+0x30/0x290
[  248.819995][    C0]  ? default_do_nmi+0x62/0x150
[  248.820013][    C0]  ? exc_nmi+0xa8/0x100
[  248.820029][    C0]  ? end_repeat_nmi+0x16/0x31
[  248.820058][    C0]  ? mark_lock+0x9a/0x340
[  248.820083][    C0]  ? kasan_check_range+0x30/0x290
[  248.820100][    C0]  ? kasan_check_range+0x30/0x290
[  248.820117][    C0]  ? kasan_check_range+0x30/0x290
[  248.820135][    C0]  </NMI>
[  248.820139][    C0]  <TASK>
[  248.820146][    C0]  mark_lock+0x9a/0x340
[  248.820173][    C0]  lockdep_hardirqs_on_prepare+0x3a0/0x7a0
[  248.820200][    C0]  ? print_irqtrace_events+0x210/0x210
[  248.820227][    C0]  ? __local_bh_enable_ip+0x102/0x1f0
[  248.820255][    C0]  trace_hardirqs_on+0x34/0x40
[  248.820280][    C0]  __local_bh_enable_ip+0x164/0x1f0
[  248.820307][    C0]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  248.820332][    C0]  ? _local_bh_enable+0xa0/0xa0
[  248.820359][    C0]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  248.820384][    C0]  ? batadv_nc_to_purge_nc_path_coding+0x120/0x120
[  248.820411][    C0]  batadv_nc_purge_paths+0x30e/0x3b0
[  248.820441][    C0]  batadv_nc_worker+0x361/0x610
[  248.820467][    C0]  ? process_one_work+0x7a9/0x11d0
[  248.820493][    C0]  process_one_work+0x8a9/0x11d0
[  248.820521][    C0]  ? worker_detach_from_pool+0x260/0x260
[  248.820543][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  248.820564][    C0]  ? kthread_data+0x4e/0xc0
[  248.820591][    C0]  ? wq_worker_running+0x97/0x190
[  248.820619][    C0]  worker_thread+0xa47/0x1200
[  248.820649][    C0]  kthread+0x28d/0x320
[  248.820664][    C0]  ? worker_clr_flags+0x190/0x190
[  248.820682][    C0]  ? kthread_blkcg+0xd0/0xd0
[  248.820698][    C0]  ret_from_fork+0x1f/0x30
[  248.820728][    C0]  </TASK>
[  249.167816][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  249.174709][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  249.182543][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  249.192619][   T28] Call Trace:
[  249.195672][   T33] kworker/u4:2: attempt to access beyond end of device
[  249.195672][   T33] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  249.209887][   T28]  <TASK>
[  249.212821][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  249.217517][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  249.222987][   T28]  ? panic+0x764/0x764
[  249.227061][   T28]  ? llist_add_batch+0x160/0x1d0
[  249.232009][   T28]  ? vscnprintf+0x59/0x80
[  249.236349][   T28]  panic+0x318/0x764
[  249.240250][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  249.246419][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  249.251798][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  249.257961][   T28]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  249.264133][   T28]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  249.270305][   T28]  watchdog+0xfc7/0xfd0
[  249.274472][   T28]  ? watchdog+0x1f8/0xfd0
[  249.278815][   T28]  kthread+0x28d/0x320
[  249.282883][   T28]  ? hungtask_pm_notify+0x50/0x50
[  249.287916][   T28]  ? kthread_blkcg+0xd0/0xd0
[  249.292510][   T28]  ret_from_fork+0x1f/0x30
[  249.297036][   T28]  </TASK>
[  249.300351][   T28] Kernel Offset: disabled
[  249.304675][   T28] Rebooting in 86400 seconds..