last executing test programs:

6.606448873s ago: executing program 0 (id=543):
r0 = socket$inet6(0xa, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x244046, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x2, 0x7c2, &(0x7f0000001900)="$eJzs3U1sHGf5APBnXbtJXSmq+q/SKErTSdq/lEqpu163LlYPZbseO9Oud1e7a5QIoTZqnMqK01YtFdQHSi4tIBDixLFw7Y0bCAkkDsAJiR64cKvUEyoIJARCSEYzu+s49vqjxvmg/f2seF7PPPO+z7vezLNje2YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhSbbZcnixFPWssnk+2GImI5IF+7MLW7esG/f3yhsUO40aU8n9x+HAc66069sD1zUfzT6fjRO+rE3E4XxyO1XuP3vfM/42ODPbfIaH9OrXHuFLEN/OkrlxcWVl64yYkcgt95+c7bR0dtvKfa/nn+bSRdZrZQnU+TbJOM5mZni4/cW6uk8xl9bRzodNNF5JaO612m+3kTO2xZHJmZipJJy40Fxvzs9V6Olj59OOVcnk6eX6ilVbbnWbjiecnOrVzWb2eNeaLmEr5a5HHPJ3UZtsvZN2km1YXkuTy8srS1G6zy4Mmd9h+4tH7Pn7ro78tL+VPyO2CSv0nZmVyslKZnH5q5qmny+XRSrly44ryJrEeESMRecRNedJy5ygOmTs5mAM3HICRfv2PemTRiMU4H8mQj7GoxWy0oxkL+dd/GNsS0Teo////xJ9/t9O4G+v/oMofu775eBT1/2Tvq5Pb1f+huR7kx0g/n+22vxlvx2pciYuxEiuxFG/suedDNz33oR8jB9vffKTRiCw60YwsFqJarEn6a5KYiemYjnK8GOdiLjqRxFxkUY80OnEhOtGNtHhG1aIdaVSjG81oRxJnohaPRRKTMRMzMRVJpDERF6IZi9GI+ZiNatHL5VguHvepTXkd/cZLP3vl9x+/n7fXgyZ3mEgpfzGXB/11h6At5X7v9X8t+hHq/+fdAR/BYf/WBvUfAAAA+MwqFT99z8//x+KhojWX1dMv3+60AAAAgANU/Ob/RL4Yy1sPRSk//y8PifzwlucGAAAAHIxScY1dKSLG4+Fea3C51LAfAgAAAAD/g4rf/5/MF+MR7xQrnP8DAADAZ8y3trvH/keDe+x2WodKv/hLtNtjpWut84+WrlbzuOrVu3r79RdfWu+xO3e8dDh6nRR9TY+u3luKiNFaeqI0uPvlvw/1lp8Un4+Pru++3b3+S5sSWN/jrs1TyhM4sropgaPFwN+NU72YU5d6y0v9uP4dicfnsno6UWvWnyluiZj/67716vLXo5j+txsLR0pxeXllaeLl11YuFblcy3u5drV/A8Ut91Ecnksx4lr/EYiHhs94rLgQoz/ueG/c8sZvQP/exCM7j1naOOa7cboXc3q8txy/cf6H8zEnJ56ZjGr1yEg3Pd99a23D7PtZTP6XM383HunFPHLmkd5iSBaVG7J4dWsWlY1Z7O2x2DWLsf4T6/1T75z/+6+bpXRqtyymNmVx+FNmAXC7XC7u+nO9Ct1TVKF/rfXk9f963U16AX39o9yD613lR7lBGdh0lLsc61sG+2+odaOxpbpvfnkRm0bZ5oh+phdzpvd6YvT4kLpSHnJEf3359d/0j+hPfvDDH33l5G9/sv/q9kE81ovpL+L+X21TY/M5f6+xMD7o9Pyz/caPtx23U6+UYizirq9efT2Ovvn26uPLVy++svTK0quVytR0+cly+alKjBUvFfoLtQeAIXZ/j51dI0pP7nJWff/6nxRMxMvxWqzEpThbXG0QEQ8P73V8w58hnI27+9kOP2sd3/AOL2d3Obe8HlvZGjt4XbEldmrDI/bgD4rFP27WdwQAbr7Tu9ThvdT/s7ucd99YyzedHcf2tXyYL9zURwMAPh/S9iel8e57pXY7a704OTMzWe2eS5N2s/ZC0s5m59Mka3TTdu1ctTGfJq12s9usDX5wPJt2ks5iq9Vsd5O5ZjtpNTvZ+eKd35P+W7930oVqo5vVOq16Wu2kSa3Z6FZr3WQ269SS1t3P1bPOubRd7NxppbVsLqtVu1mzkXSai+1aOpEknTRNWouDwGw2bXSzuSxvNpJWO1uotq9FRH1xIU1m006tnbW6zV6Hg7GyxlyzvVB0O7F1+n+61Y83ANwJ3nx79crFlZWlNz5lYzSKxh/3Eny75wgA3EiVBgAAAAAAAAAAAACAO9/Wy/Xytfu5InD1UHz6vQ7Fvq4+3Gcjn9qtGuv2N/LZ3gFp3N7GS88+e2W7mOfeOXZub/0M/5+y3rjn+kU07x2JuPun3+9t+uKtmumH+3tir5V2iLnNByYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGOI/AQAA///8c1Uo")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f00000018c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_uring_setup(0x30d3, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='workqueue_queue_work\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x986, 0x222, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)

6.475039534s ago: executing program 3 (id=545):
socket$inet6(0xa, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4184c0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0xbb)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000007580), 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68ae"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x8, 0x0, &(0x7f0000000040)="61df712bc884fef0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
gettid()
socket$nl_route(0x10, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdn', @ANYRESHEX=r3, @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB])
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
preadv(r5, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

5.506310122s ago: executing program 2 (id=548):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x2000000}})

5.502152373s ago: executing program 0 (id=549):
syz_open_dev$hidraw(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x80086601, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffddf, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000380)={0x40, 0x21, 0xaf, {0xaf, 0x7, "52b3c5e25ee063f387cfa4b6835c65505714db71b0198e2de740bfa4dc42d7e596ce024f325e17b52f2296b7dac58d125cd785f4129ee5e03831434b7e73b4d0cfff2acac653a2fbc3c423813a80360f0d902a73a3f031e34229a8d181230dc33475050a84cac66a6500b6576c1f3b19c246207e4b73d0bbb3b4a7b780575b83d225844e6394942ecab79640a32a1412f9c5f431a22ea6265dd697322dbdbe108906b0387f7fb59b981a83a03e"}}, &(0x7f0000000100)=ANY=[@ANYRES8=0x0]}, &(0x7f0000000500)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00144e000020594e5bf77c7086ccec22b786ebcb5a0a2db38b413d7fa06708f1a9b27b882e14efd9230bb94b9a333566c2d756bd71129045b7a155e38600"/75], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000680)=ANY=[], &(0x7f0000000480)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0xc0}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x80000000, 0x0)

5.326880537s ago: executing program 2 (id=551):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002003020026006500000002000020"])

5.212370426s ago: executing program 2 (id=553):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="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"/352], 0x0, 0x9eb8, &(0x7f0000001600)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0x0}, 0x600)

4.874346564s ago: executing program 4 (id=555):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0)
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2401})

4.446458409s ago: executing program 2 (id=558):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESOCT=r3, @ANYBLOB="44fd001bb33932b2e3c41b17501baeb33b2fe1d7c88a78d3304f50a10d01f5e3af59adfc0be770b8", @ANYRES32=r1], 0x0)

4.356625386s ago: executing program 1 (id=559):
r0 = socket$inet6(0xa, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x244046, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x2, 0x7c2, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f00000018c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_uring_setup(0x30d3, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='workqueue_queue_work\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x986, 0x222, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)

4.241590465s ago: executing program 2 (id=560):
syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x0, 0x8}}}, 0x1a)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)

4.134707044s ago: executing program 3 (id=561):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x2000000}})

4.044209611s ago: executing program 3 (id=562):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0xaa80, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0404309, &(0x7f0000000040)={0x43, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180)=0x8001, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)

3.962312568s ago: executing program 4 (id=563):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002003020026006500000002000020"])

3.098160978s ago: executing program 2 (id=564):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xf, 0xb8, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
ioctl$EVIOCGSND(r1, 0x541b, &(0x7f0000001240)=""/4089)

2.999038616s ago: executing program 4 (id=565):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @time})
tkill(r1, 0x7)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100))

2.886199525s ago: executing program 1 (id=566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r7=>0x0})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r9], 0x40}}, 0x0)

2.631749846s ago: executing program 4 (id=567):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)

1.84607392s ago: executing program 0 (id=568):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000), 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x11b, &(0x7f0000000280)={0x0, 0x2e59, 0x1, 0x40000, 0x2}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x4, 0x0, 0x0, "e47fbe3ba88330e7014de9e7c29ee67dea4dfd1563e7ee944e41c38b555c6ac2"})

1.829691861s ago: executing program 1 (id=569):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4ae, &(0x7f0000000a00)="$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")
creat(0x0, 0x0)
rename(&(0x7f0000000100)='./file1\x00', 0x0)

1.677783384s ago: executing program 3 (id=570):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESOCT=r3, @ANYBLOB="44fd001bb33932b2e3c41b17501baeb33b2fe1d7c88a78d3304f50a10d01f5e3af59adfc0be770b8", @ANYRES32=r1], 0x0)

1.60119378s ago: executing program 3 (id=571):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', <r0=>0x0, 0x8000, 0x0, 0x0, 0x3cf7, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x68, 0x0, 0x40, 0x0, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x6, [{@remote, 0x9}, {@private=0xa010101, 0x7fff}, {@broadcast}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x8, [{@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xd3}]}, @ra={0x94, 0x4}]}}}}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, r0, 0x1, 0x5}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23be2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000b40), 0x2b842ac, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={r7, 0x400000, 0x7f})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000180)={r8, 0x3, r6, 0x6})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)

1.500228788s ago: executing program 1 (id=572):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, 0x0)

1.35107405s ago: executing program 1 (id=573):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0)
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2401})

1.113968969s ago: executing program 4 (id=574):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x22, 0x6ed, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffe000)
write$cgroup_int(r0, &(0x7f0000000200), 0x40c000)

850.608241ms ago: executing program 0 (id=575):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002003020026006500000002000020"])

804.159305ms ago: executing program 4 (id=576):
r0 = socket$inet6(0xa, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x244046, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x2, 0x7c2, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f00000018c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_uring_setup(0x30d3, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='workqueue_queue_work\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x986, 0x222, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)

775.600877ms ago: executing program 0 (id=577):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @time})
tkill(r1, 0x7)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100))

442.637414ms ago: executing program 0 (id=578):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004058043801000000000001090224000100000000090400000103000000092100050000000000000081030000000000"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
io_setup(0x23, &(0x7f0000000280))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0x0, &(0x7f0000000040))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0x40046208, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000380)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x6cb, &(0x7f0000001280)="$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")

346.169321ms ago: executing program 3 (id=579):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000003"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 1 (id=580):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0xaa80, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0404309, &(0x7f0000000040)={0x43, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180)=0x8001, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)

kernel console output (not intermixed with test programs):

981791][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  125.021203][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.097202][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.140725][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.157885][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.168058][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.184373][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.195658][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.212357][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.239408][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.259991][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.271842][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.280340][ T4544] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.285732][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.299629][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.310126][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.327544][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.340179][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.356796][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.366934][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.383206][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.407971][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.418442][ T4516] chnl_net:caif_netlink_parms(): no params data found
[  125.437792][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.452296][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.490271][   T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  125.520241][ T4544] usb 1-1: Using ep0 maxpacket: 8
[  125.549059][ T4401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.584241][ T4401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.606695][ T4401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.632578][ T4401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.641777][ T4544] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  125.649972][ T4544] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.689283][ T4544] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  125.733359][ T4544] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.757793][ T4544] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.781867][ T4544] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  125.796017][ T4544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.870518][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  125.891269][ T4561] netlink: 'syz.4.193': attribute type 2 has an invalid length.
[  125.892936][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  125.928403][   T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  125.959265][   T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  125.974868][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.997909][   T22] usb 4-1: config 0 descriptor??
[  126.021009][ T4553] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  126.024312][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.045695][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.062388][ T4544] usb 1-1: GET_CAPABILITIES returned 0
[  126.066125][ T4516] device bridge_slave_0 entered promiscuous mode
[  126.067888][ T4544] usbtmc 1-1:16.0: can't read capabilities
[  126.095700][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.112770][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.127924][ T4516] device bridge_slave_1 entered promiscuous mode
[  126.193049][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.218525][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.235522][ T4516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.284098][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.306031][ T4516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.331122][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.356093][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.390637][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.408637][ T4516] team0: Port device team_slave_0 added
[  126.433941][ T4516] team0: Port device team_slave_1 added
[  126.440268][ T4549] usbtmc 1-1:16.0: usb_control_msg returned -32
[  126.491030][   T22] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  126.500354][ T4562] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90
[  126.518876][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.526914][   T22] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  126.541244][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.560885][ T4566] serio: Serial port ptm0
[  126.585654][   T22] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  126.612046][ T4516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.642883][   T22] usb 1-1: USB disconnect, device number 6
[  126.659851][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.751578][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.803447][   T26] usb 4-1: USB disconnect, device number 5
[  126.831276][ T3651] Bluetooth: hci3: command tx timeout
[  126.917964][ T4516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.702012][ T4516] device hsr_slave_0 entered promiscuous mode
[  127.719728][ T4516] device hsr_slave_1 entered promiscuous mode
[  127.748820][ T4516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.811731][ T4516] Cannot create hsr debugfs directory
[  128.619536][ T4582] loop0: detected capacity change from 0 to 764
[  128.792016][ T4203] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  128.910343][ T3651] Bluetooth: hci3: command tx timeout
[  129.233070][ T4596] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  129.249998][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.323116][ T4596] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  129.423877][ T4600] loop3: detected capacity change from 0 to 512
[  129.448873][ T4600] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  129.484007][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.504230][ T4203] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  129.748415][  T154] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  130.030657][  T154] usb 3-1: Using ep0 maxpacket: 32
[  130.225914][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.241253][  T154] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  130.450389][  T154] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  130.474351][  T154] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  130.478073][ T4607] loop4: detected capacity change from 0 to 4096
[  130.489678][  T154] usb 3-1: Product: syz
[  130.494818][  T154] usb 3-1: Manufacturer: syz
[  130.499503][  T154] usb 3-1: SerialNumber: syz
[  130.507225][  T154] usb 3-1: config 0 descriptor??
[  130.515071][ T4607] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  130.532510][ T4602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.558882][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.592867][ T4607] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  130.719567][   T27] audit: type=1326 audit(1722402365.798:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facf73773b9 code=0x0
[  130.889450][   T26] usb 3-1: USB disconnect, device number 4
[  131.150361][ T3652] Bluetooth: hci3: command tx timeout
[  131.630287][ T4631] serio: Serial port ptm0
[  132.389950][ T4516] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  132.592292][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  132.598633][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  132.695841][ T4516] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  132.706588][ T4516] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  132.851311][ T4516] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  132.867010][ T4649] loop3: detected capacity change from 0 to 764
[  133.582819][ T4633] loop2: detected capacity change from 0 to 32768
[  133.830413][ T4633] loop2: detected capacity change from 32768 to 0
[  133.853957][ T4667] ERROR: (device loop2): dbAdjCtl: Corrupt dmapctl page
[  133.853957][ T4667] 
[  133.909026][ T4667] ERROR: (device loop2): remounting filesystem as read-only
[  133.957229][ T4663] loop4: detected capacity change from 0 to 4096
[  133.977506][ T4667] ERROR: (device loop2): dbDiscardAG: -EIO
[  133.977506][ T4667] 
[  134.045949][   T52] device hsr_slave_0 left promiscuous mode
[  134.066153][   T52] device hsr_slave_1 left promiscuous mode
[  134.093623][ T4673] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.104538][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.123605][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.183483][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.199491][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.227372][   T52] device bridge_slave_1 left promiscuous mode
[  134.244560][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.294627][   T52] device bridge_slave_0 left promiscuous mode
[  134.306651][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.398604][   T52] device veth1_macvtap left promiscuous mode
[  134.406073][   T52] device veth0_macvtap left promiscuous mode
[  134.427398][   T52] device veth1_vlan left promiscuous mode
[  134.462148][   T52] device veth0_vlan left promiscuous mode
[  135.007257][   T27] audit: type=1800 audit(1722402370.098:6): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.215" name="file1" dev="loop4" ino=15 res=0 errno=0
[  135.494816][   T52] team0 (unregistering): Port device team_slave_1 removed
[  136.002262][   T52] team0 (unregistering): Port device team_slave_0 removed
[  136.192813][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.247025][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.684457][   T52] bond0 (unregistering): Released all slaves
[  136.915105][ T4516] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.948052][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  136.962665][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.991374][ T4516] 8021q: adding VLAN 0 to HW filter on device team0
[  137.011263][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  137.023119][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.042751][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.067464][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.074625][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.124446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.132782][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.142510][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.160030][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.167207][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.183704][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.240664][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.263529][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.279969][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.363533][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  137.395049][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.436544][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.483942][ T4721] loop3: detected capacity change from 0 to 764
[  137.501487][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.565533][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.588279][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.609789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.643234][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.656935][ T4203] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  138.566682][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  138.576078][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  138.584051][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  138.593431][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  138.601718][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  138.609199][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  138.665169][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.684822][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.756438][ T4516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.819647][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  138.832377][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  138.877430][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  138.888006][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  138.919812][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  138.931955][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  138.940125][ T4516] device veth0_vlan entered promiscuous mode
[  138.962229][ T4516] device veth1_vlan entered promiscuous mode
[  139.051388][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.067818][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.117116][ T4516] device veth0_macvtap entered promiscuous mode
[  139.167442][ T4516] device veth1_macvtap entered promiscuous mode
[  139.325377][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.336037][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.346418][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.357811][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.368239][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.380162][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.150389][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.160932][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.172486][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.202513][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.247044][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.292295][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.320020][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.350484][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.363853][ T4753] loop4: detected capacity change from 0 to 4096
[  140.370352][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.382896][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.400192][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.422703][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.433474][ T4756] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.464415][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.485847][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  140.504814][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.530074][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.584338][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.610476][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.646693][ T4737] chnl_net:caif_netlink_parms(): no params data found
[  140.697307][ T3651] Bluetooth: hci1: command tx timeout
[  140.796926][ T4516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.796958][ T4516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.796980][ T4516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.797002][ T4516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.051566][   T27] audit: type=1800 audit(1722402376.138:7): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.233" name="file1" dev="loop4" ino=15 res=0 errno=0
[  141.097846][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.112711][   T27] audit: type=1326 audit(1722402376.158:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.0.235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8c8f773b9 code=0x0
[  141.182951][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.216662][ T4737] device bridge_slave_0 entered promiscuous mode
[  141.274093][ T4149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.292282][ T4149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.315317][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.322607][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.362042][ T4737] device bridge_slave_1 entered promiscuous mode
[  141.405294][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.496446][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.523762][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.535224][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.572883][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.641906][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.714836][ T4737] team0: Port device team_slave_0 added
[  141.921324][ T4737] team0: Port device team_slave_1 added
[  142.750494][ T3651] Bluetooth: hci1: command tx timeout
[  143.056462][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.063631][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.077110][ T4772] loop3: detected capacity change from 0 to 32768
[  143.090612][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.596504][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.639045][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.730427][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.003505][ T4737] device hsr_slave_0 entered promiscuous mode
[  144.036032][ T4737] device hsr_slave_1 entered promiscuous mode
[  144.831581][ T3651] Bluetooth: hci1: command tx timeout
[  145.015820][   T27] audit: type=1326 audit(1722402380.098:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4806 comm="syz.4.246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28f29773b9 code=0x0
[  145.130598][ T4816] loop0: detected capacity change from 0 to 4096
[  145.207139][ T4822] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.672904][ T4737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.780983][ T4737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.873835][ T4737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.889106][   T27] audit: type=1800 audit(1722402380.978:10): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.247" name="file1" dev="loop0" ino=15 res=0 errno=0
[  146.027423][ T4737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.480038][ T4737] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  146.564624][ T4737] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  146.583724][ T4833] loop4: detected capacity change from 0 to 32768
[  146.592310][ T4737] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  146.629785][ T4737] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  146.794226][ T4843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'.
[  146.799730][ T4829] loop1: detected capacity change from 0 to 32768
[  146.843867][ T4829] 
[  146.843867][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.843867][ T4829] 
[  146.910308][ T3651] Bluetooth: hci1: command tx timeout
[  146.917583][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.008694][ T4836] loop3: detected capacity change from 0 to 32768
[  147.049793][ T4829] 
[  147.049793][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.049793][ T4829] 
[  147.092964][ T4829] 
[  147.092964][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.092964][ T4829] 
[  147.104062][ T4836] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.253 (4836)
[  147.129734][ T4829] 
[  147.129734][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.129734][ T4829] 
[  147.152292][ T4737] 8021q: adding VLAN 0 to HW filter on device team0
[  147.171771][ T4829] 
[  147.171771][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.171771][ T4829] 
[  147.185055][ T4836] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  147.208640][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.210558][ T4836] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  147.216603][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.254027][  T133] 
[  147.254027][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.254027][  T133] 
[  147.277187][ T4846] 
[  147.277187][ T4846]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.277187][ T4846] 
[  147.291592][ T4836] BTRFS info (device loop3): using free space tree
[  147.341731][ T4846] 
[  147.341731][ T4846]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.341731][ T4846] 
[  147.359436][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.370797][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.389681][ T4846] 
[  147.389681][ T4846]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.389681][ T4846] 
[  147.401976][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.409087][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.420593][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.427378][ T4846] 
[  147.427378][ T4846]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.427378][ T4846] 
[  147.430750][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.449108][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.456262][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.476274][ T4846] 
[  147.476274][ T4846]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.476274][ T4846] 
[  147.624467][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.640907][  T133] 
[  147.640907][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.640907][  T133] 
[  147.667640][ T4829] 
[  147.667640][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.667640][ T4829] 
[  147.938314][ T4737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  148.431525][ T4829] 
[  148.431525][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.431525][ T4829] 
[  148.445325][ T4737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.466034][ T4829] 
[  148.466034][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.466034][ T4829] 
[  148.477200][ T4829] 
[  148.477200][ T4829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.477200][ T4829] 
[  148.514645][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  148.524366][  T133] 
[  148.524366][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.524366][  T133] 
[  148.545350][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  148.561077][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  148.581254][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  148.593411][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  148.601830][ T4836] BTRFS info (device loop3): enabling ssd optimizations
[  148.604546][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  148.710679][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  148.718848][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.727636][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  148.735401][ T4516] 
[  148.735401][ T4516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.735401][ T4516] 
[  148.736092][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.749591][ T4516] 
[  148.749591][ T4516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.749591][ T4516] 
[  148.763230][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  148.806767][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.742835][   T52] device hsr_slave_0 left promiscuous mode
[  149.782850][ T3643] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.795366][   T52] device hsr_slave_1 left promiscuous mode
[  149.826214][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.870156][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.936020][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.954155][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.008950][ T4884] loop1: detected capacity change from 0 to 2048
[  150.062978][   T52] device bridge_slave_1 left promiscuous mode
[  150.069528][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.108037][ T4884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.110709][ T4891] loop0: detected capacity change from 0 to 512
[  150.139373][ T4891] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  150.184881][   T52] device bridge_slave_0 left promiscuous mode
[  150.203605][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.618835][   T52] device veth1_macvtap left promiscuous mode
[  150.638814][   T52] device veth0_macvtap left promiscuous mode
[  150.648705][   T52] device veth1_vlan left promiscuous mode
[  150.659973][   T52] device veth0_vlan left promiscuous mode
[  151.257920][ T4904] loop1: detected capacity change from 0 to 1024
[  151.279386][ T4904] EXT4-fs (loop1): Test dummy encryption mode enabled
[  151.896514][ T4907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.946345][ T4904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  152.126129][ T4907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.161739][ T4907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.206668][ T4907] netlink: 160 bytes leftover after parsing attributes in process `syz.4.267'.
[  152.298336][ T4516] EXT4-fs (loop1): unmounting filesystem.
[  152.478277][   T52] team0 (unregistering): Port device team_slave_1 removed
[  152.529218][   T52] team0 (unregistering): Port device team_slave_0 removed
[  152.592644][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.648181][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.463411][   T52] bond0 (unregistering): Released all slaves
[  154.656627][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.671943][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.833070][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.069391][ T4737] device veth0_vlan entered promiscuous mode
[  155.094605][ T4737] device veth1_vlan entered promiscuous mode
[  155.164591][ T4737] device veth0_macvtap entered promiscuous mode
[  155.187271][ T4737] device veth1_macvtap entered promiscuous mode
[  155.221408][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.234536][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.244733][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.260967][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.275470][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.292412][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.306766][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.317721][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.370741][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.493549][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.519929][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.563000][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.605615][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.672727][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.693966][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.705941][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.723075][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.820170][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.828273][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  155.844984][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.863577][ T4953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.876665][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.897685][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.911844][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  155.924112][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  155.932475][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  155.944474][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  155.969046][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  155.989394][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  156.007647][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  156.031793][ T4965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.043226][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  156.066065][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  156.099086][ T4967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.122594][ T4960] 9pnet_fd: Insufficient options for proto=fd
[  156.177251][ T4965] netlink: 160 bytes leftover after parsing attributes in process `syz.3.278'.
[  156.231415][ T4737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.251343][ T4737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.260055][ T4737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.299228][ T4737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.338593][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.354061][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.367495][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  156.514089][ T3700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.538702][ T3700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.573493][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  156.628198][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.642029][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.675514][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  157.031123][ T4972] loop3: detected capacity change from 0 to 512
[  157.077216][ T4972] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  157.282573][ T4974] serio: Serial port ptm0
[  157.431851][ T3652] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  157.443777][ T3652] Bluetooth: hci4: Injecting HCI hardware error event
[  157.452088][ T3651] Bluetooth: hci4: hardware error 0x00
[  159.359712][ T4993] loop1: detected capacity change from 0 to 4096
[  159.428267][ T4996] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.480773][ T3651] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  160.619688][    T7] kernel write not supported for file [eventfd] (pid: 7 comm: kworker/0:0)
[  160.863545][   T27] audit: type=1800 audit(1722402395.948:11): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.286" name="file1" dev="loop1" ino=15 res=0 errno=0
[  160.928166][ T5015] loop3: detected capacity change from 0 to 512
[  160.989556][ T5015] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  161.990454][  T152] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  162.431114][  T152] usb 5-1: Using ep0 maxpacket: 32
[  162.663286][  T152] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  162.680352][  T152] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  162.688977][  T152] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.737568][  T152] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  162.780124][  T152] usb 5-1: config 1 has no interface number 0
[  162.786271][  T152] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  162.820157][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.897995][  T152] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  162.986860][ T5043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.486606][ T5043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.590602][ T5049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.630974][ T5043] netlink: 160 bytes leftover after parsing attributes in process `syz.3.302'.
[  164.736580][  T152] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  164.769074][  T152] snd_usb_pod 5-1:1.1: invalid control EP
[  164.775430][  T152] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  164.790749][  T152] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  164.798140][  T152] snd_usb_pod: probe of 5-1:1.1 failed with error -22
[  164.992851][ T5055] loop1: detected capacity change from 0 to 512
[  165.030708][ T5055] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8
[  165.078645][ T5059] serio: Serial port ptm0
[  165.373885][ T5069] loop3: detected capacity change from 0 to 256
[  165.877351][   T27] audit: type=1804 audit(1722402400.958:12): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.310" name="/newroot/84/bus/file0" dev="fuse" ino=1 res=1 errno=0
[  165.919096][ T5074] tmpfs: Unknown parameter 'usrquota'
[  166.031363][ T5079] loop3: detected capacity change from 0 to 128
[  166.071399][ T5079] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  166.171084][ T5079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  166.277045][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  166.308829][  T152] usb 5-1: USB disconnect, device number 8
[  166.420163][ T5090] serio: Serial port ptm0
[  166.496058][ T5092] loop4: detected capacity change from 0 to 512
[  166.565351][ T5092] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8
[  166.601269][ T5096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.706982][ T5096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.757739][ T5096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.797970][ T5104] loop0: detected capacity change from 0 to 256
[  166.805278][ T5099] netlink: 160 bytes leftover after parsing attributes in process `syz.1.320'.
[  166.970492][   T27] audit: type=1804 audit(1722402402.038:13): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.323" name="/newroot/56/bus/file0" dev="fuse" ino=1 res=1 errno=0
[  167.000314][   T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  167.370486][   T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.388121][   T14] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  167.409920][   T14] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  167.427013][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.455827][   T14] usb 5-1: config 0 descriptor??
[  167.899369][   T14] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  168.445296][ T5136] serio: Serial port ptm0
[  168.475386][ T5138] loop1: detected capacity change from 0 to 512
[  168.509415][ T5138] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8
[  168.547840][ T5144] loop4: detected capacity change from 0 to 1024
[  168.708949][ T5148] loop3: detected capacity change from 0 to 512
[  168.731866][ T5148] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  169.410149][ T5148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  169.505263][ T5148] EXT4-fs (loop3): 1 truncate cleaned up
[  169.515606][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  169.637905][   T27] audit: type=1800 audit(1722402404.718:14): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.334" name="file1" dev="loop3" ino=19 res=0 errno=0
[  169.642490][ T5148] EXT4-fs (loop3): shut down requested (0)
[  169.840563][ T5160] loop2: detected capacity change from 0 to 512
[  169.859806][  T152] usb 5-1: USB disconnect, device number 9
[  169.950349][ T5160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  169.986380][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  170.038310][ T5152] loop1: detected capacity change from 0 to 32768
[  170.045518][ T5160] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  170.107788][ T5160] EXT4-fs (loop2): 1 truncate cleaned up
[  170.135894][ T5160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  170.158384][ T5152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.336 (5152)
[  170.550704][ T5152] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.570328][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /12/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.592747][ T5152] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  170.609408][ T5152] BTRFS info (device loop1): setting nodatacow, compression disabled
[  170.618255][ T5152] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  170.740401][ T5152] BTRFS info (device loop1): force lzo compression, level 0
[  170.759810][ T5152] BTRFS info (device loop1): metadata ratio 8
[  170.770703][ T4737] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  170.801922][ T5152] BTRFS info (device loop1): doing ref verification
[  170.808560][ T5152] BTRFS info (device loop1): metadata ratio 32769
[  170.815080][ T5152] BTRFS info (device loop1): turning off barriers
[  170.821585][ T5152] BTRFS info (device loop1): enabling ssd optimizations
[  170.828535][ T5152] BTRFS info (device loop1): using spread ssd allocation scheme
[  170.838020][ T5152] BTRFS info (device loop1): turning on barriers
[  170.844819][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /12/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  170.875881][ T5152] BTRFS info (device loop1): using free space tree
[  170.955237][ T4737] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  171.470596][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /12/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  171.551962][ T4737] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  171.661487][ T5192] serio: Serial port ptm0
[  171.667618][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /12/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  171.692355][ T4737] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  171.719288][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /12/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  171.741367][ T4737] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  172.255394][  T152] kernel write not supported for file [eventfd] (pid: 152 comm: kworker/1:2)
[  172.329207][   T27] audit: type=1804 audit(1722402407.408:15): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.336" name="/newroot/21/bus/bus" dev="loop1" ino=263 res=1 errno=0
[  172.365909][ T4737] EXT4-fs (loop2): unmounting filesystem.
[  172.469855][   T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.619132][   T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.694999][   T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.805411][   T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.826464][ T4516] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  173.080244][ T4890] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  173.263467][ T5224] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  173.280338][ T4890] usb 4-1: device descriptor read/64, error -71
[  173.314572][ T5224] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  173.411526][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.428275][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.438334][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.456502][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.466110][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  173.474347][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.500157][   T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  173.682648][ T4890] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  173.830588][   T26] usb 2-1: Using ep0 maxpacket: 32
[  173.880603][ T4890] usb 4-1: device descriptor read/64, error -71
[  173.970314][   T26] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  173.988561][   T26] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  174.011998][ T4890] usb usb4-port1: attempt power cycle
[  174.014575][   T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.057038][   T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  174.081823][   T26] usb 2-1: config 1 has no interface number 0
[  174.095399][   T26] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  174.128974][   T26] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  174.155941][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.186969][ T5226] chnl_net:caif_netlink_parms(): no params data found
[  174.227291][   T26] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  174.333120][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.341593][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.349623][ T5226] device bridge_slave_0 entered promiscuous mode
[  174.377164][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.407119][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.430397][   T26] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  174.455459][ T5226] device bridge_slave_1 entered promiscuous mode
[  174.469184][   T26] snd_usb_pod 2-1:1.1: invalid control EP
[  174.493016][   T26] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  174.503284][ T4890] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  174.509947][   T26] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  174.610351][ T4890] usb 4-1: device descriptor read/8, error -71
[  174.651515][   T26] snd_usb_pod: probe of 2-1:1.1 failed with error -22
[  175.550700][ T3651] Bluetooth: hci1: command tx timeout
[  175.633359][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.671846][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.690156][ T4890] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.765903][ T5263] loop0: detected capacity change from 0 to 512
[  175.820461][ T4890] usb 4-1: device descriptor read/8, error -71
[  175.864119][ T5263] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[  175.897994][   T33] device hsr_slave_0 left promiscuous mode
[  175.909894][   T33] device hsr_slave_1 left promiscuous mode
[  175.939782][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.948843][ T4890] usb usb4-port1: unable to enumerate USB device
[  175.983153][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.993430][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.009662][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.018937][   T33] device bridge_slave_1 left promiscuous mode
[  176.026667][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.042101][   T33] device bridge_slave_0 left promiscuous mode
[  176.049040][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.148721][   T33] device veth1_macvtap left promiscuous mode
[  176.157720][   T33] device veth0_macvtap left promiscuous mode
[  176.175821][   T33] device veth1_vlan left promiscuous mode
[  176.187479][   T33] device veth0_vlan left promiscuous mode
[  176.565101][ T4890] usb 2-1: USB disconnect, device number 5
[  177.640670][ T3651] Bluetooth: hci1: command tx timeout
[  177.840036][ T4890] kernel write not supported for file [eventfd] (pid: 4890 comm: kworker/0:12)
[  177.997737][   T33] team0 (unregistering): Port device team_slave_1 removed
[  178.052283][   T33] team0 (unregistering): Port device team_slave_0 removed
[  178.181362][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.229515][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.715929][ T5307] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  178.739526][ T5307] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  178.915069][   T33] bond0 (unregistering): Released all slaves
[  179.013418][ T5226] team0: Port device team_slave_0 added
[  179.018401][ T5312] serio: Serial port ptm0
[  179.028851][ T5226] team0: Port device team_slave_1 added
[  179.122047][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.154673][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.234257][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.252552][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.300280][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.346009][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.358384][ T5321] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  179.370471][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.400777][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.407891][ T5319] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.517923][ T5226] device hsr_slave_0 entered promiscuous mode
[  179.538541][ T5226] device hsr_slave_1 entered promiscuous mode
[  179.730457][   T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  179.750503][ T3652] Bluetooth: hci1: command tx timeout
[  179.980530][   T14] usb 2-1: Using ep0 maxpacket: 32
[  180.106263][   T14] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  180.146012][   T14] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  180.180178][   T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.200139][   T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  180.239552][   T14] usb 2-1: config 1 has no interface number 0
[  180.300526][   T14] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  180.348944][   T14] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  186.538880][ T3652] Bluetooth: hci0: command 0x0406 tx timeout
[  186.549509][ T3651] Bluetooth: hci1: command tx timeout
[  186.570829][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.750353][   T14] usb 2-1: can't set config #1, error -71
[  186.761293][   T14] usb 2-1: USB disconnect, device number 6
[  186.841512][ T5353] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  186.904357][ T5353] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  187.028193][ T5359] loop4: detected capacity change from 0 to 512
[  187.064114][ T5359] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8
[  187.174140][ T5346] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.346327][ T5367] loop3: detected capacity change from 0 to 512
[  187.406313][ T5367] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  187.431294][ T5367] EXT4-fs (loop3): orphan cleanup on readonly fs
[  187.469559][ T5370] serio: Serial port ptm0
[  187.486825][ T5367] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  187.497775][ T5226] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  187.512738][ T5226] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  187.522211][ T5226] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  187.534562][ T5226] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  187.616150][ T5367] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  187.701576][ T5367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.377: bg 0: block 40: padding at end of block bitmap is not set
[  187.851682][ T5367] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  187.942182][ T5367] EXT4-fs (loop3): 1 truncate cleaned up
[  187.947860][ T5367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  188.151715][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.187894][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.214185][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.278239][ T5226] 8021q: adding VLAN 0 to HW filter on device team0
[  188.696612][ T5226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  188.783930][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  188.887961][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.907307][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.917711][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  188.962735][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.969863][ T5217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.028497][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.371582][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.380024][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.387160][ T5217] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.400716][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.409426][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.431139][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.439996][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.470837][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.487333][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.513180][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.544290][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.561158][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.569525][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.592234][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.610254][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.622522][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.891829][ T5407] 9pnet_fd: Insufficient options for proto=fd
[  190.130230][   T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  190.268483][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.279616][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.303377][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.362300][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.374930][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.385240][   T14] usb 5-1: Using ep0 maxpacket: 32
[  190.436126][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  190.456931][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  190.471830][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  190.489925][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  190.510738][   T14] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  190.519089][   T14] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  190.531576][ T5226] device veth0_vlan entered promiscuous mode
[  190.551874][ T5226] device veth1_vlan entered promiscuous mode
[  190.558432][   T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  190.577893][   T14] usb 5-1: config 1 has no interface number 0
[  190.592200][   T14] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  190.623430][ T5226] device veth0_macvtap entered promiscuous mode
[  190.629916][   T14] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  190.663488][ T5226] device veth1_macvtap entered promiscuous mode
[  190.684192][   T14] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  190.707683][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.724366][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.731631][ T5429] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  190.753471][ T5429] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  190.768104][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.779365][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.798347][   T14] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  190.808426][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.832296][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.865024][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.879728][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.895924][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.907989][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.965181][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.978474][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.022307][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.079908][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.090820][   T14] snd_usb_pod 5-1:1.1: invalid control EP
[  191.096755][   T14] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  191.109578][   T14] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  191.117075][   T14] snd_usb_pod: probe of 5-1:1.1 failed with error -22
[  191.126898][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.137442][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.147354][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.158219][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.172721][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.181241][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.198864][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.269659][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.403698][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.196011][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  192.204279][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.213072][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.222194][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  192.231736][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  192.242772][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.303137][ T5226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.320175][ T5226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.325939][ T5451] loop1: detected capacity change from 0 to 512
[  192.328863][ T5226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.328893][ T5226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.368791][ T5451] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8
[  192.676807][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.716061][ T5457] serio: Serial port ptm0
[  192.726998][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.849777][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.883552][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.936956][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.969738][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.075748][ T5216] usb 5-1: USB disconnect, device number 10
[  193.608223][ T5483] 9pnet_fd: Insufficient options for proto=fd
[  193.910209][ T5461] loop3: detected capacity change from 0 to 32768
[  193.933726][ T5489] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  193.960182][ T5489] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  193.966947][ T5461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.391 (5461)
[  194.032948][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  194.039278][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  194.064572][ T5461] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  194.118141][ T5461] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  194.155396][ T5461] BTRFS info (device loop3): setting nodatacow, compression disabled
[  194.195024][ T5461] BTRFS info (device loop3): enabling auto defrag
[  194.235510][ T5461] BTRFS info (device loop3): max_inline at 0
[  194.264126][ T5461] BTRFS info (device loop3): using free space tree
[  194.741110][   T27] audit: type=1804 audit(1722402429.828:16): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.391" name="/newroot/103/file1/bus" dev="loop3" ino=263 res=1 errno=0
[  194.840427][   T27] audit: type=1804 audit(1722402429.858:17): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.391" name="/newroot/103/file1/bus" dev="loop3" ino=263 res=1 errno=0
[  194.972240][ T3643] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  195.983382][ T5538] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  196.716580][ T5552] serio: Serial port ptm0
[  197.150534][ T5563] 9pnet_fd: Insufficient options for proto=fd
[  197.468190][ T5543] loop3: detected capacity change from 0 to 32768
[  197.527870][ T5543] 
[  197.527870][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.527870][ T5543] 
[  197.768538][ T5543] 
[  197.768538][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.768538][ T5543] 
[  197.820237][ T5543] 
[  197.820237][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.820237][ T5543] 
[  197.855886][ T5543] 
[  197.855886][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.855886][ T5543] 
[  197.877003][ T5543] 
[  197.877003][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.877003][ T5543] 
[  197.922496][ T5559] loop1: detected capacity change from 0 to 32768
[  197.937114][ T5559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.408 (5559)
[  198.983036][ T5559] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  198.995825][  T133] 
[  198.995825][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  198.995825][  T133] 
[  199.016833][ T5581] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  199.032746][ T5570] 
[  199.032746][ T5570]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.032746][ T5570] 
[  199.063456][ T5570] 
[  199.063456][ T5570]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.063456][ T5570] 
[  199.088001][ T5559] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  199.107379][ T5570] 
[  199.107379][ T5570]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.107379][ T5570] 
[  199.118331][ T5559] BTRFS info (device loop1): setting nodatacow, compression disabled
[  199.161364][ T5570] 
[  199.161364][ T5570]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.161364][ T5570] 
[  199.193377][ T5559] BTRFS info (device loop1): enabling auto defrag
[  199.199852][ T5559] BTRFS info (device loop1): max_inline at 0
[  199.219906][ T5570] 
[  199.219906][ T5570]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.219906][ T5570] 
[  199.238102][ T5559] BTRFS info (device loop1): using free space tree
[  199.255205][  T133] 
[  199.255205][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.255205][  T133] 
[  199.281034][ T5543] 
[  199.281034][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.281034][ T5543] 
[  199.321981][ T5543] 
[  199.321981][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.321981][ T5543] 
[  199.362761][ T5543] 
[  199.362761][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.362761][ T5543] 
[  199.424504][ T5543] 
[  199.424504][ T5543]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.424504][ T5543] 
[  199.455200][  T132] 
[  199.455200][  T132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.455200][  T132] 
[  199.536209][   T27] audit: type=1804 audit(1722402434.618:18): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.408" name="/newroot/38/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  199.586469][ T3643] 
[  199.586469][ T3643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.586469][ T3643] 
[  199.597391][   T27] audit: type=1804 audit(1722402434.648:19): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.408" name="/newroot/38/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  199.641495][ T3643] 
[  199.641495][ T3643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.641495][ T3643] 
[  199.734485][ T4516] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.980573][ T5622] serio: Serial port ptm0
[  200.097852][ T5630] loop2: detected capacity change from 0 to 1024
[  200.158991][ T5630] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  200.207445][ T5630] EXT4-fs: test_dummy_encryption requires encrypt feature
[  200.221221][ T5632] loop3: detected capacity change from 0 to 512
[  200.278314][ T5630] loop2: detected capacity change from 0 to 512
[  200.317443][ T5632] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  200.377338][ T5630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  200.430601][ T5630] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff)
[  200.441908][ T5632] EXT4-fs (loop3): orphan cleanup on readonly fs
[  200.495623][ T5632] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  200.518122][ T5632] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  200.519724][ T5630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  200.530732][ T5632] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.424: bg 0: block 40: padding at end of block bitmap is not set
[  200.583007][ T5637] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.2.425: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[  200.609716][ T5632] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  200.639866][ T5632] EXT4-fs (loop3): 1 truncate cleaned up
[  200.646637][ T5637] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem
[  200.651413][ T5632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  200.691011][ T5637] EXT4-fs warning (device loop2): ext4_rename_delete:3735: inode #2: comm syz.2.425: Deleting old file: nlink 4, error=-117
[  200.780358][ T5641] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  200.909635][ T5226] EXT4-fs (loop2): unmounting filesystem.
[  201.479296][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  202.162538][ T5653] loop1: detected capacity change from 0 to 32768
[  202.213115][ T5653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.431 (5653)
[  202.478321][ T3685] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  202.497446][ T5653] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.537300][ T5660] loop3: detected capacity change from 0 to 32768
[  202.541853][ T5653] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  202.592583][ T5653] BTRFS info (device loop1): setting nodatacow, compression disabled
[  202.603606][ T5653] BTRFS info (device loop1): enabling auto defrag
[  202.610634][ T5653] BTRFS info (device loop1): max_inline at 0
[  202.624810][ T5660] XFS (loop3): Mounting V5 Filesystem
[  202.638512][ T5653] BTRFS info (device loop1): using free space tree
[  202.671020][ T5217] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  202.736858][ T5660] XFS (loop3): Starting recovery (logdev: internal)
[  202.773476][ T5660] XFS (loop3): Ending recovery (logdev: internal)
[  202.840627][ T3685] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.861677][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  202.899740][ T3685] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  202.917487][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.972993][ T3685] usb 1-1: config 0 descriptor??
[  203.013444][   T27] audit: type=1804 audit(1722402438.098:20): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.431" name="/newroot/41/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  203.037028][ T3685] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  203.045454][   T27] audit: type=1804 audit(1722402438.138:21): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.431" name="/newroot/41/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  203.068240][ T5217] usb 3-1: Using ep0 maxpacket: 32
[  203.126973][ T3643] XFS (loop3): Unmounting Filesystem
[  203.189620][ T4516] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.212798][ T5217] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  203.223744][ T5217] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  203.234915][ T5217] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  203.245468][ T5217] usb 3-1: config 1 has no interface number 0
[  203.407260][ T5217] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  203.417436][ T5217] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  203.430423][ T5217] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  203.439886][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.502905][ T5217] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  204.114504][ T5708] loop0: detected capacity change from 0 to 1024
[  204.150873][ T5217] snd_usb_pod 3-1:1.1: invalid control EP
[  204.156623][ T5217] snd_usb_pod 3-1:1.1: cannot start listening: -22
[  204.167812][ T5217] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  204.176339][ T5217] snd_usb_pod: probe of 3-1:1.1 failed with error -22
[  204.478024][   T27] audit: type=1326 audit(1722402439.558:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.1.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e077773b9 code=0x0
[  204.513385][ T5717] loop3: detected capacity change from 0 to 1024
[  204.557594][ T5717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  204.585733][ T5717] EXT4-fs: test_dummy_encryption requires encrypt feature
[  204.659645][ T5717] loop3: detected capacity change from 0 to 512
[  204.742996][ T5717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  204.757355][ T5717] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff)
[  204.812811][ T5717] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  204.837843][ T5717] EXT4-fs error (device loop3): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.3.439: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[  204.873742][ T5717] EXT4-fs error (device loop3) in ext4_delete_entry:2751: Corrupt filesystem
[  204.894940][ T5712] loop4: detected capacity change from 0 to 32768
[  204.904786][ T5717] EXT4-fs warning (device loop3): ext4_rename_delete:3735: inode #2: comm syz.3.439: Deleting old file: nlink 4, error=-117
[  204.997428][   T27] audit: type=1804 audit(1722402440.078:23): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.442" name="/newroot/102/file0/bus" dev="loop4" ino=8 res=1 errno=0
[  205.024627][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  205.380661][ T5217] usb 1-1: USB disconnect, device number 7
[  205.648921][ T5744] loop0: detected capacity change from 0 to 128
[  205.782171][ T3975] usb 3-1: USB disconnect, device number 5
[  205.920502][ T5217] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  206.057999][ T5756] loop4: detected capacity change from 0 to 1024
[  206.084905][ T5756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  206.127650][ T5756] EXT4-fs: test_dummy_encryption requires encrypt feature
[  206.208523][ T5756] loop4: detected capacity change from 0 to 512
[  206.305501][ T5217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  206.318999][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  206.343361][ T5217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  206.370336][ T5756] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038 (0x7fffffff)
[  206.383861][ T5752] loop2: detected capacity change from 0 to 32768
[  206.412238][ T5752] 
[  206.412238][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.412238][ T5752] 
[  206.422601][ T5217] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  206.466295][ T5756] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  206.493047][ T5756] EXT4-fs error (device loop4): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.4.453: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[  206.514529][ T5752] 
[  206.514529][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.514529][ T5752] 
[  206.531613][ T5217] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  206.540177][ T5752] 
[  206.540177][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.540177][ T5752] 
[  206.560598][ T5756] EXT4-fs error (device loop4) in ext4_delete_entry:2751: Corrupt filesystem
[  206.569592][ T5752] 
[  206.569592][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.569592][ T5752] 
[  206.580214][ T5217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.588239][ T5752] 
[  206.588239][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.588239][ T5752] 
[  206.614312][ T5217] usb 2-1: config 0 descriptor??
[  206.631582][  T132] 
[  206.631582][  T132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.631582][  T132] 
[  206.640419][ T5742] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  206.651641][ T5756] EXT4-fs warning (device loop4): ext4_rename_delete:3735: inode #2: comm syz.4.453: Deleting old file: nlink 4, error=-117
[  206.671903][ T5761] 
[  206.671903][ T5761]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.671903][ T5761] 
[  206.679941][ T5748] loop0: detected capacity change from 0 to 32768
[  206.715749][ T5761] 
[  206.715749][ T5761]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.715749][ T5761] 
[  206.731108][ T5761] 
[  206.731108][ T5761]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.731108][ T5761] 
[  206.761859][ T5761] 
[  206.761859][ T5761]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.761859][ T5761] 
[  206.782448][ T3634] EXT4-fs (loop4): unmounting filesystem.
[  206.795886][ T5761] 
[  206.795886][ T5761]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.795886][ T5761] 
[  206.815127][ T5748] XFS (loop0): Mounting V5 Filesystem
[  206.863494][  T132] 
[  206.863494][  T132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.863494][  T132] 
[  206.881769][ T5752] 
[  206.881769][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.881769][ T5752] 
[  206.898622][ T5758] loop3: detected capacity change from 0 to 32768
[  206.920567][ T5752] 
[  206.920567][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.920567][ T5752] 
[  206.924626][ T5758] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.454 (5758)
[  206.949564][ T5752] 
[  206.949564][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.949564][ T5752] 
[  206.963943][ T5752] 
[  206.963943][ T5752]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.963943][ T5752] 
[  206.974954][ T5748] XFS (loop0): Starting recovery (logdev: internal)
[  206.985952][  T132] 
[  206.985952][  T132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.985952][  T132] 
[  206.997479][ T5748] XFS (loop0): Ending recovery (logdev: internal)
[  207.063379][ T5226] 
[  207.063379][ T5226]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.063379][ T5226] 
[  207.076840][ T5758] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  207.110950][ T5226] 
[  207.110950][ T5226]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.110950][ T5226] 
[  207.121536][ T5758] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  207.150232][ T5758] BTRFS info (device loop3): setting nodatacow, compression disabled
[  207.183132][ T5758] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  207.211928][ T5775] serio: Serial port ptm0
[  207.226507][ T5758] BTRFS info (device loop3): force lzo compression, level 0
[  207.230351][ T5217] usbhid 2-1:0.0: can't add hid device: -71
[  207.240705][ T5217] usbhid: probe of 2-1:0.0 failed with error -71
[  207.274189][ T5217] usb 2-1: USB disconnect, device number 7
[  207.350215][ T5758] BTRFS info (device loop3): metadata ratio 8
[  207.376727][ T5758] BTRFS info (device loop3): doing ref verification
[  207.427282][ T5758] BTRFS info (device loop3): metadata ratio 32769
[  207.433817][ T5758] BTRFS info (device loop3): turning off barriers
[  207.440567][ T5758] BTRFS info (device loop3): enabling ssd optimizations
[  207.447515][ T5758] BTRFS info (device loop3): using spread ssd allocation scheme
[  207.455740][ T5758] BTRFS info (device loop3): turning on barriers
[  207.463393][ T5758] BTRFS info (device loop3): using free space tree
[  207.491764][ T4128] XFS (loop0): Unmounting Filesystem
[  207.840443][ T5217] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  208.025716][   T27] audit: type=1804 audit(1722402443.108:24): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.454" name="/newroot/111/bus/bus" dev="loop3" ino=263 res=1 errno=0
[  208.107277][ T5812] BTRFS info (device loop3): space_info DATA+METADATA has 122880 free, is not full
[  208.117338][ T5812] BTRFS info (device loop3): space_info total=3276800, used=28672, pinned=32768, reserved=503808, may_use=2588672, readonly=0 zone_unusable=0
[  208.131870][ T5812] BTRFS info (device loop3): global_block_rsv: size 917504 reserved 917504
[  208.140837][ T5812] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  208.148491][ T5812] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  208.156192][ T5812] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  208.164057][ T5812] BTRFS info (device loop3): delayed_refs_rsv: size 1441792 reserved 1441792
[  208.300352][ T5217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.320761][ T5217] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  208.371553][ T5217] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  208.381297][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.397432][ T5217] usb 3-1: config 0 descriptor??
[  208.442369][ T5217] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  208.570049][ T3643] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  208.690410][ T5811] loop1: detected capacity change from 0 to 32768
[  208.890245][ T5217] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  209.357027][ T5829] loop2: detected capacity change from 0 to 1024
[  209.463564][ T5217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.514030][ T5217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.532170][ T5217] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  209.545268][ T5217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.581929][ T5217] usb 5-1: config 0 descriptor??
[  209.759554][ T5837] serio: Serial port ptm0
[  210.066233][ T5833] loop3: detected capacity change from 0 to 32768
[  210.078940][ T5833] 
[  210.078940][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.078940][ T5833] 
[  210.165029][ T5833] 
[  210.165029][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.165029][ T5833] 
[  210.176728][ T5833] 
[  210.176728][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.176728][ T5833] 
[  210.199340][ T5833] 
[  210.199340][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.199340][ T5833] 
[  210.212325][ T5833] 
[  210.212325][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.212325][ T5833] 
[  210.224792][  T132] 
[  210.224792][  T132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.224792][  T132] 
[  210.241746][ T5833] 
[  210.241746][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.241746][ T5833] 
[  210.260674][ T5833] 
[  210.260674][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.260674][ T5833] 
[  210.276005][ T5833] 
[  210.276005][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.276005][ T5833] 
[  210.294111][ T5833] 
[  210.294111][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.294111][ T5833] 
[  210.305641][ T5833] 
[  210.305641][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.305641][ T5833] 
[  210.331436][  T133] 
[  210.331436][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.331436][  T133] 
[  210.342171][ T5839] 
[  210.342171][ T5839]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.342171][ T5839] 
[  210.353916][ T5839] 
[  210.353916][ T5839]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.353916][ T5839] 
[  210.368521][ T5839] 
[  210.368521][ T5839]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.368521][ T5839] 
[  210.384531][ T5839] 
[  210.384531][ T5839]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.384531][ T5839] 
[  210.416728][  T133] 
[  210.416728][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.416728][  T133] 
[  210.478840][ T3643] 
[  210.478840][ T3643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.478840][ T3643] 
[  210.489761][ T3643] 
[  210.489761][ T3643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.489761][ T3643] 
[  210.510755][ T5217] hid-led: probe of 0003:27B8:01ED.0002 failed with error -71
[  210.533931][ T5217] usb 5-1: USB disconnect, device number 11
[  210.766336][ T3681] usb 3-1: USB disconnect, device number 6
[  210.920299][ T4887] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  210.997193][ T5859] loop1: detected capacity change from 0 to 1024
[  211.109740][   T33] hfsplus: b-tree write err: -5, ino 4
[  211.172035][ T5866] loop0: detected capacity change from 0 to 128
[  211.223961][ T3681] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  211.283469][ T4887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  211.303297][ T4887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  211.317431][ T4887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  211.335945][ T4887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  211.346229][ T4887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.364292][ T4887] usb 1-1: config 0 descriptor??
[  211.380421][ T5843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  211.592112][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.603327][ T5869] loop1: detected capacity change from 0 to 32768
[  211.607934][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.621403][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  211.654640][ T3681] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  211.665205][ T3681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.682184][ T3681] usb 3-1: config 0 descriptor??
[  211.900363][ T4887] usbhid 1-1:0.0: can't add hid device: -71
[  211.910828][ T4887] usbhid: probe of 1-1:0.0 failed with error -71
[  211.924175][ T4887] usb 1-1: USB disconnect, device number 8
[  211.939424][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.960834][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.085514][ T4117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.163801][ T4117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.182769][ T3681] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  212.197190][ T3681] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  212.226472][ T3681] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  212.295276][ T4117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.298374][ T5874] loop4: detected capacity change from 0 to 32768
[  212.331545][ T5874] 
[  212.331545][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.331545][ T5874] 
[  212.413608][ T4117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.453430][ T3681] usb 3-1: USB disconnect, device number 7
[  212.480536][ T5874] 
[  212.480536][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.480536][ T5874] 
[  212.529330][ T5874] 
[  212.529330][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.529330][ T5874] 
[  212.545372][ T5874] 
[  212.545372][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.545372][ T5874] 
[  212.560541][ T5874] 
[  212.560541][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.560541][ T5874] 
[  212.589364][  T133] 
[  212.589364][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.589364][  T133] 
[  212.621171][ T5877] 
[  212.621171][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.621171][ T5877] 
[  212.650286][ T5877] 
[  212.650286][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.650286][ T5877] 
[  212.677229][ T5877] 
[  212.677229][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.677229][ T5877] 
[  212.689563][ T5877] 
[  212.689563][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.689563][ T5877] 
[  212.715523][ T5877] 
[  212.715523][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.715523][ T5877] 
[  212.756040][  T133] 
[  212.756040][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.756040][  T133] 
[  212.770223][ T5621] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  212.788474][ T5874] 
[  212.788474][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.788474][ T5874] 
[  212.814460][ T5874] 
[  212.814460][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.814460][ T5874] 
[  212.834990][ T5874] 
[  212.834990][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.834990][ T5874] 
[  212.850503][ T5874] 
[  212.850503][ T5874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.850503][ T5874] 
[  212.878827][  T133] 
[  212.878827][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.878827][  T133] 
[  212.990942][ T3634] 
[  212.990942][ T3634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  212.990942][ T3634] 
[  213.020326][ T3634] 
[  213.020326][ T3634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  213.020326][ T3634] 
[  213.153581][ T5621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.183161][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  213.220251][ T5621] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  213.239554][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.245681][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.262719][ T3651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.266322][ T5621] usb 1-1: config 0 descriptor??
[  213.275214][ T3651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.284693][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.293048][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.301329][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.342473][ T5621] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  214.270561][ T5912] loop0: detected capacity change from 0 to 1024
[  214.562852][ T4117] device hsr_slave_0 left promiscuous mode
[  214.656800][ T4117] device hsr_slave_1 left promiscuous mode
[  214.700575][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.744446][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.756779][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.780141][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.789823][ T4117] device bridge_slave_1 left promiscuous mode
[  214.798116][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.078092][ T4117] device bridge_slave_0 left promiscuous mode
[  215.128168][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.408342][ T3651] Bluetooth: hci3: command tx timeout
[  215.483659][ T4117] device veth1_macvtap left promiscuous mode
[  215.489712][ T4117] device veth0_macvtap left promiscuous mode
[  215.496696][ T4117] device veth1_vlan left promiscuous mode
[  215.502598][ T4117] device veth0_vlan left promiscuous mode
[  215.611274][ T5523] usb 1-1: USB disconnect, device number 9
[  216.007996][ T5910] loop4: detected capacity change from 0 to 32768
[  216.190473][ T5523] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  216.533995][ T4117] team0 (unregistering): Port device team_slave_1 removed
[  216.575764][ T5523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  216.606410][ T5523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  216.620068][ T4117] team0 (unregistering): Port device team_slave_0 removed
[  216.627887][ T5523] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  216.665734][ T5523] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  216.684242][ T5523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.685397][ T5941] loop3: detected capacity change from 0 to 32768
[  216.695981][ T5523] usb 1-1: config 0 descriptor??
[  216.730452][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  216.746145][ T5941] 
[  216.746145][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.746145][ T5941] 
[  216.780959][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.815552][ T5941] 
[  216.815552][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.815552][ T5941] 
[  216.837013][ T5941] 
[  216.837013][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.837013][ T5941] 
[  216.848775][ T5941] 
[  216.848775][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.848775][ T5941] 
[  216.859660][ T5941] 
[  216.859660][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.859660][ T5941] 
[  216.872210][  T133] 
[  216.872210][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.872210][  T133] 
[  216.876746][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.896186][ T5941] 
[  216.896186][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.896186][ T5941] 
[  216.908299][ T5941] 
[  216.908299][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.908299][ T5941] 
[  216.922172][ T5941] 
[  216.922172][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.922172][ T5941] 
[  216.934038][ T5941] 
[  216.934038][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.934038][ T5941] 
[  216.954074][ T5941] 
[  216.954074][ T5941]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.954074][ T5941] 
[  216.975678][  T133] 
[  216.975678][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.975678][  T133] 
[  216.996462][ T5954] 
[  216.996462][ T5954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.996462][ T5954] 
[  217.007536][ T5954] 
[  217.007536][ T5954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.007536][ T5954] 
[  217.025364][ T5954] 
[  217.025364][ T5954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.025364][ T5954] 
[  217.036716][ T5954] 
[  217.036716][ T5954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.036716][ T5954] 
[  217.057269][  T133] 
[  217.057269][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.057269][  T133] 
[  217.122094][ T3643] 
[  217.122094][ T3643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.122094][ T3643] 
[  217.138008][ T3643] 
[  217.138008][ T3643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.138008][ T3643] 
[  217.257283][ T5523] usbhid 1-1:0.0: can't add hid device: -71
[  217.264470][ T5523] usbhid: probe of 1-1:0.0 failed with error -71
[  217.284320][ T5523] usb 1-1: USB disconnect, device number 10
[  217.392246][ T5958] serio: Serial port ptm0
[  217.470701][ T4117] bond0 (unregistering): Released all slaves
[  217.500178][ T3651] Bluetooth: hci3: command tx timeout
[  217.592938][ T5893] chnl_net:caif_netlink_parms(): no params data found
[  217.841762][ T5969] Driver unsupported XDP return value 0 on prog  (id 180) dev N/A, expect packet loss!
[  217.979095][ T5972] loop3: detected capacity change from 0 to 764
[  217.998153][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.017946][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.023262][ T5978] loop4: detected capacity change from 0 to 1024
[  218.068172][ T5893] device bridge_slave_0 entered promiscuous mode
[  218.082436][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.094661][ T5586] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  218.120225][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.161071][ T5893] device bridge_slave_1 entered promiscuous mode
[  218.330176][ T3759] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  218.408949][ T3761] hfsplus: b-tree write err: -5, ino 4
[  218.422995][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.434575][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.467907][ T5893] team0: Port device team_slave_0 added
[  218.475906][ T5893] team0: Port device team_slave_1 added
[  218.697946][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.710437][ T3759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.721341][ T3759] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  218.735153][ T3759] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  218.744608][ T3759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.753052][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.797032][ T3759] usb 3-1: config 0 descriptor??
[  218.838506][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.863545][ T3759] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  218.900694][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.907656][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.987740][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.169818][ T5999] serio: Serial port ptm0
[  219.550224][ T3647] Bluetooth: hci3: command tx timeout
[  219.949551][ T6009] loop2: detected capacity change from 0 to 1024
[  220.039551][ T5893] device hsr_slave_0 entered promiscuous mode
[  220.065896][ T5893] device hsr_slave_1 entered promiscuous mode
[  220.108080][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.124782][ T5893] Cannot create hsr debugfs directory
[  220.142711][ T5985] loop0: detected capacity change from 0 to 32768
[  221.310635][   T22] usb 3-1: USB disconnect, device number 8
[  221.630336][ T3651] Bluetooth: hci3: command tx timeout
[  221.810350][ T3685] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  221.945637][   T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  222.141678][ T5893] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  222.193948][ T5893] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  222.222116][ T5893] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  222.237850][ T5893] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  222.244786][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  222.277289][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  222.324618][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  222.353668][ T6049] netlink: 'syz.3.514': attribute type 2 has an invalid length.
[  222.390378][ T3685] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  222.416543][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.441372][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.470360][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.479362][ T3685] usb 1-1: config 0 descriptor??
[  222.489434][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[  222.510655][ T6027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.514641][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.562787][   T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  222.601175][   T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  222.636524][ T5893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  222.646969][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.684520][   T22] usb 3-1: config 0 descriptor??
[  222.690577][ T5893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  222.727493][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  222.770790][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.778630][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  222.795049][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.824392][ T3975] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.831520][ T3975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.854970][ T6056] loop4: detected capacity change from 0 to 1024
[  222.880316][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  222.918036][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  222.948003][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.951336][ T3975] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.963454][ T3975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.983384][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.015337][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  223.030312][ T3685] usbhid 1-1:0.0: can't add hid device: -71
[  223.044439][ T3685] usbhid: probe of 1-1:0.0 failed with error -71
[  223.051285][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  223.059972][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  223.072497][ T3685] usb 1-1: USB disconnect, device number 11
[  223.105033][   T63] hfsplus: b-tree write err: -5, ino 4
[  223.122169][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  223.160816][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  223.190590][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  223.219376][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  223.229608][   T22] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  223.258542][   T22] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  223.267824][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  223.296843][   T22] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  223.310762][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  223.330069][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  223.364136][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  223.380743][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  223.438954][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  223.472178][ T6067] loop4: detected capacity change from 0 to 764
[  223.563353][ T3975] usb 3-1: USB disconnect, device number 9
[  223.583569][ T5586] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  223.710348][ T3651] Bluetooth: hci3: command tx timeout
[  224.582156][ T6080] loop0: detected capacity change from 0 to 2048
[  224.612509][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  224.630478][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  224.641210][ T6080] EXT4-fs: Ignoring removed orlov option
[  224.645106][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.722047][ T6080] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  224.723609][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  224.740754][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  224.848310][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  224.860212][ T3681] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  224.881186][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  224.891906][ T5893] device veth0_vlan entered promiscuous mode
[  224.926749][ T5893] device veth1_vlan entered promiscuous mode
[  224.958651][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.975309][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.996697][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  225.075437][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  225.088285][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  225.110631][ T3681] usb 5-1: Using ep0 maxpacket: 32
[  225.116756][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  225.163295][ T5893] device veth0_macvtap entered promiscuous mode
[  225.200958][ T5893] device veth1_macvtap entered promiscuous mode
[  225.230750][ T3681] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  225.245177][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.304827][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.319720][ T6096] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  225.336139][ T3681] usb 5-1: config 0 descriptor??
[  225.346950][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.366062][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.370169][ T6096] EXT4-fs (loop0): Remounting filesystem read-only
[  225.377429][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.395453][ T3681] gspca_main: sunplus-2.14.0 probing 041e:400b
[  225.406533][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.418767][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.434236][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.446712][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.463670][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.505168][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.521009][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  225.539308][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.544042][ T6084] loop2: detected capacity change from 0 to 32768
[  225.548836][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.573971][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.619376][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.628361][ T4128] EXT4-fs (loop0): unmounting filesystem.
[  225.702246][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.703653][ T6087] loop4: detected capacity change from 0 to 1024
[  225.729648][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.794729][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.822061][ T6106] serio: Serial port ptm0
[  225.849294][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.868886][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.879670][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.891893][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.921722][ T3681] gspca_sunplus: reg_w_riv err -110
[  225.927015][ T3681] sunplus: probe of 5-1:0.0 failed with error -110
[  225.963428][ T6087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  226.018188][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  226.048749][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.116385][ T6109] Zero length message leads to an empty skb
[  226.118233][ T5893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.189507][ T5893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.212723][ T5893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.230420][ T5893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.404734][ T3700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.440191][ T3700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.472895][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  226.495127][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.505698][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.541456][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.160270][ T5523] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  227.540501][ T5523] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  227.561946][ T5523] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  227.583557][ T5523] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  227.584624][ T6159] loop0: detected capacity change from 0 to 764
[  227.610392][ T5523] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  227.641119][ T5523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.673187][ T5523] usb 3-1: config 0 descriptor??
[  227.690394][ T6138] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  227.821491][ T5586] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  227.945578][ T6165] netlink: 'syz.3.531': attribute type 2 has an invalid length.
[  228.067020][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.210453][ T5523] usbhid 3-1:0.0: can't add hid device: -71
[  228.221030][ T5523] usbhid: probe of 3-1:0.0 failed with error -71
[  228.283484][ T5523] usb 3-1: USB disconnect, device number 10
[  228.558757][ T6171] loop0: detected capacity change from 0 to 256
[  228.767654][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.806242][   T22] usb 5-1: USB disconnect, device number 12
[  228.848691][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.867043][ T6178] serio: Serial port ptm0
[  228.873083][ T3634] EXT4-fs (loop4): unmounting filesystem.
[  228.902923][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.019905][ T6184] loop4: detected capacity change from 0 to 1024
[  229.133469][ T4121] hfsplus: b-tree write err: -5, ino 4
[  229.403690][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  229.628605][ T6202] loop0: detected capacity change from 0 to 764
[  229.663268][ T6203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.120473][ T4890] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  230.540452][ T4890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  230.605427][ T4890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  230.677743][ T4890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  230.712455][ T4890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  230.735387][ T4890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.778266][ T4890] usb 4-1: config 0 descriptor??
[  230.814690][ T6208] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.910835][ T3759] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  230.929572][ T6229] loop2: detected capacity change from 0 to 128
[  230.948420][ T6229] VFS: Found a Xenix FS (block size = 512) on device loop2
[  231.004294][ T6229] syz.2.553: attempt to access beyond end of device
[  231.004294][ T6229] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  231.031599][ T6229] Buffer I/O error on dev loop2, logical block 8767744, async page read
[  231.047039][ T6229] syz.2.553: attempt to access beyond end of device
[  231.047039][ T6229] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  231.067192][ T6229] Buffer I/O error on dev loop2, logical block 13269809, async page read
[  231.075844][ T6229] syz.2.553: attempt to access beyond end of device
[  231.075844][ T6229] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128
[  231.097882][ T6229] Buffer I/O error on dev loop2, logical block 1157, async page read
[  231.107675][ T6229] syz.2.553: attempt to access beyond end of device
[  231.107675][ T6229] loop2: rw=0, sector=3211264, nr_sectors = 1 limit=128
[  231.126735][ T6229] Buffer I/O error on dev loop2, logical block 3211264, async page read
[  231.135254][ T6229] syz.2.553: attempt to access beyond end of device
[  231.135254][ T6229] loop2: rw=0, sector=8768635, nr_sectors = 1 limit=128
[  231.159025][ T6229] Buffer I/O error on dev loop2, logical block 8768635, async page read
[  231.179246][ T6229] syz.2.553: attempt to access beyond end of device
[  231.179246][ T6229] loop2: rw=0, sector=13466417, nr_sectors = 1 limit=128
[  231.194014][ T6229] Buffer I/O error on dev loop2, logical block 13466417, async page read
[  231.200230][ T3759] usb 1-1: Using ep0 maxpacket: 32
[  231.231366][ T6229] syz.2.553: attempt to access beyond end of device
[  231.231366][ T6229] loop2: rw=0, sector=209285, nr_sectors = 1 limit=128
[  231.256026][ T6229] Buffer I/O error on dev loop2, logical block 209285, async page read
[  231.267355][ T6229] syz.2.553: attempt to access beyond end of device
[  231.267355][ T6229] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  231.290606][ T6229] Buffer I/O error on dev loop2, logical block 8767744, async page read
[  231.308705][ T6229] syz.2.553: attempt to access beyond end of device
[  231.308705][ T6229] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  231.340417][ T3759] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  231.348896][ T6229] Buffer I/O error on dev loop2, logical block 13269809, async page read
[  231.350345][ T4890] usbhid 4-1:0.0: can't add hid device: -71
[  231.363205][ T3759] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  231.363229][ T3759] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  231.363249][ T3759] usb 1-1: config 1 has no interface number 0
[  231.363279][ T3759] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  231.398549][ T6229] syz.2.553: attempt to access beyond end of device
[  231.398549][ T6229] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128
[  231.416258][ T4890] usbhid: probe of 4-1:0.0 failed with error -71
[  231.426972][ T6229] Buffer I/O error on dev loop2, logical block 1157, async page read
[  231.440681][ T4890] usb 4-1: USB disconnect, device number 10
[  231.448830][ T6240] loop1: detected capacity change from 0 to 512
[  231.459823][   T27] audit: type=1800 audit(1722402466.548:25): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.553" name="/" dev="loop2" ino=2 res=0 errno=0
[  231.470704][ T6229] sysv_free_block: trying to free block not in datazone
[  231.493514][ T3759] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  231.516227][ T3759] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  231.539825][ T3759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.582183][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  231.609790][ T6240] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff)
[  231.628119][ T3759] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  231.646660][ T5226] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  231.690192][ T6236] loop4: detected capacity change from 0 to 32768
[  231.750632][ T5893] EXT4-fs (loop1): unmounting filesystem.
[  231.802616][   T27] audit: type=1804 audit(1722402466.888:26): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.555" name="/newroot/138/file0/bus" dev="loop4" ino=8 res=1 errno=0
[  231.831469][ T3759] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  231.927646][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.996255][ T6253] loop1: detected capacity change from 0 to 764
[  232.054809][ T5586] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  232.912295][ T3759] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  233.380264][ T3681] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  233.581296][ T6278] device dummy0 entered promiscuous mode
[  233.591932][ T6278] device dummy0 left promiscuous mode
[  234.171621][ T3759] usb 1-1: USB disconnect, device number 12
[  234.201300][ T3759] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  234.307307][ T6284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  234.308900][ T6283] loop1: detected capacity change from 0 to 512
[  234.379006][ T6283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  234.396579][ T6283] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff)
[  234.406600][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.490166][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.500005][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  234.554325][ T3681] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  234.567478][ T6294] serio: Serial port ptm0
[  234.582039][ T3681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.600374][ T5893] EXT4-fs (loop1): unmounting filesystem.
[  234.628939][ T3681] usb 3-1: config 0 descriptor??
[  235.073039][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.110725][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.147978][ T6304] loop4: detected capacity change from 0 to 1024
[  235.296806][   T52] hfsplus: b-tree write err: -5, ino 4
[  235.413261][ T3681] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  235.442066][ T3681] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  235.449917][ T6312] loop4: detected capacity change from 0 to 764
[  235.473784][ T3681] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  235.511621][ T5346] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  235.702842][ T3759] usb 3-1: USB disconnect, device number 11
[  235.756897][ T6300] loop1: detected capacity change from 0 to 32768
[  236.105059][ T5893] 
[  236.107415][ T5893] ======================================================
[  236.114411][ T5893] WARNING: possible circular locking dependency detected
[  236.121400][ T5893] 6.1.102-syzkaller #0 Not tainted
[  236.126505][ T5893] ------------------------------------------------------
[  236.133495][ T5893] syz-executor/5893 is trying to acquire lock:
[  236.139619][ T5893] ffff88814a1b6130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x104/0x300
[  236.150038][ T5893] 
[  236.150038][ T5893] but task is already holding lock:
[  236.157384][ T5893] ffffffff8e64e7c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  236.166950][ T5893] 
[  236.166950][ T5893] which lock already depends on the new lock.
[  236.166950][ T5893] 
[  236.177330][ T5893] 
[  236.177330][ T5893] the existing dependency chain (in reverse order) is:
[  236.186319][ T5893] 
[  236.186319][ T5893] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  236.194029][ T5893]        lock_acquire+0x1f8/0x5a0
[  236.199039][ T5893]        __mutex_lock+0x132/0xd80
[  236.204046][ T5893]        hci_remote_features_evt+0x664/0xab0
[  236.210005][ T5893]        hci_event_packet+0xa9d/0x1510
[  236.215446][ T5893]        hci_rx_work+0x3cd/0xce0
[  236.220368][ T5893]        process_one_work+0x8a9/0x11d0
[  236.225807][ T5893]        worker_thread+0xa47/0x1200
[  236.230986][ T5893]        kthread+0x28d/0x320
[  236.235552][ T5893]        ret_from_fork+0x1f/0x30
[  236.240471][ T5893] 
[  236.240471][ T5893] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  236.247752][ T5893]        lock_acquire+0x1f8/0x5a0
[  236.252764][ T5893]        __mutex_lock+0x132/0xd80
[  236.257772][ T5893]        sco_sock_connect+0x181/0x8f0
[  236.263128][ T5893]        __sys_connect+0x2c9/0x300
[  236.268224][ T5893]        __x64_sys_connect+0x76/0x80
[  236.273491][ T5893]        do_syscall_64+0x3b/0xb0
[  236.278409][ T5893]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.284809][ T5893] 
[  236.284809][ T5893] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
[  236.293909][ T5893]        validate_chain+0x1661/0x5950
[  236.299263][ T5893]        __lock_acquire+0x125b/0x1f80
[  236.304616][ T5893]        lock_acquire+0x1f8/0x5a0
[  236.309622][ T5893]        lock_sock_nested+0x44/0x100
[  236.314887][ T5893]        sco_conn_del+0x104/0x300
[  236.319897][ T5893]        hci_conn_hash_flush+0x10e/0x2a0
[  236.325509][ T5893]        hci_dev_close_sync+0x9a9/0x1020
[  236.331122][ T5893]        hci_unregister_dev+0x207/0x500
[  236.336651][ T5893]        vhci_release+0x7f/0xd0
[  236.341485][ T5893]        __fput+0x3f6/0x8d0
[  236.345968][ T5893]        task_work_run+0x246/0x300
[  236.351061][ T5893]        do_exit+0xa73/0x26a0
[  236.355722][ T5893]        do_group_exit+0x202/0x2b0
[  236.360814][ T5893]        __x64_sys_exit_group+0x3b/0x40
[  236.366361][ T5893]        do_syscall_64+0x3b/0xb0
[  236.371283][ T5893]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.377678][ T5893] 
[  236.377678][ T5893] other info that might help us debug this:
[  236.377678][ T5893] 
[  236.387882][ T5893] Chain exists of:
[  236.387882][ T5893]   sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
[  236.387882][ T5893] 
[  236.402113][ T5893]  Possible unsafe locking scenario:
[  236.402113][ T5893] 
[  236.409539][ T5893]        CPU0                    CPU1
[  236.414879][ T5893]        ----                    ----
[  236.420221][ T5893]   lock(hci_cb_list_lock);
[  236.424704][ T5893]                                lock(&hdev->lock);
[  236.431270][ T5893]                                lock(hci_cb_list_lock);
[  236.438272][ T5893]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
[  236.444142][ T5893] 
[  236.444142][ T5893]  *** DEADLOCK ***
[  236.444142][ T5893] 
[  236.452262][ T5893] 3 locks held by syz-executor/5893:
[  236.457519][ T5893]  #0: ffff8880748ad0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  236.467418][ T5893]  #1: ffff8880748ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  236.477052][ T5893]  #2: ffffffff8e64e7c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  236.487035][ T5893] 
[  236.487035][ T5893] stack backtrace:
[  236.492905][ T5893] CPU: 0 PID: 5893 Comm: syz-executor Not tainted 6.1.102-syzkaller #0
[  236.501209][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  236.511249][ T5893] Call Trace:
[  236.514510][ T5893]  <TASK>
[  236.517425][ T5893]  dump_stack_lvl+0x1e3/0x2cb
[  236.522090][ T5893]  ? nf_tcp_handle_invalid+0x642/0x642
[  236.527537][ T5893]  ? print_circular_bug+0x12b/0x1a0
[  236.532714][ T5893]  check_noncircular+0x2fa/0x3b0
[  236.537630][ T5893]  ? reacquire_held_locks+0x660/0x660
[  236.542989][ T5893]  ? add_chain_block+0x850/0x850
[  236.547920][ T5893]  ? lockdep_lock+0x11f/0x2a0
[  236.552586][ T5893]  ? is_dynamic_key+0x260/0x260
[  236.557419][ T5893]  ? _find_first_zero_bit+0xd0/0x100
[  236.562691][ T5893]  validate_chain+0x1661/0x5950
[  236.567538][ T5893]  ? reacquire_held_locks+0x660/0x660
[  236.572897][ T5893]  ? reacquire_held_locks+0x660/0x660
[  236.578255][ T5893]  ? mark_lock+0x9a/0x340
[  236.582570][ T5893]  ? __lock_acquire+0x125b/0x1f80
[  236.587582][ T5893]  ? mark_lock+0x9a/0x340
[  236.591897][ T5893]  __lock_acquire+0x125b/0x1f80
[  236.596737][ T5893]  lock_acquire+0x1f8/0x5a0
[  236.601223][ T5893]  ? sco_conn_del+0x104/0x300
[  236.605888][ T5893]  ? read_lock_is_recursive+0x10/0x10
[  236.611269][ T5893]  ? sco_conn_del+0xfa/0x300
[  236.615937][ T5893]  ? __lock_acquire+0x1f80/0x1f80
[  236.620948][ T5893]  ? do_raw_spin_lock+0x14a/0x370
[  236.625960][ T5893]  lock_sock_nested+0x44/0x100
[  236.630709][ T5893]  ? sco_conn_del+0x104/0x300
[  236.635370][ T5893]  sco_conn_del+0x104/0x300
[  236.639859][ T5893]  ? sco_connect_cfm+0xb10/0xb10
[  236.644783][ T5893]  hci_conn_hash_flush+0x10e/0x2a0
[  236.649892][ T5893]  hci_dev_close_sync+0x9a9/0x1020
[  236.654996][ T5893]  hci_unregister_dev+0x207/0x500
[  236.660012][ T5893]  vhci_release+0x7f/0xd0
[  236.664328][ T5893]  ? vhci_open+0x360/0x360
[  236.668727][ T5893]  __fput+0x3f6/0x8d0
[  236.672698][ T5893]  task_work_run+0x246/0x300
[  236.677272][ T5893]  ? kasan_quarantine_put+0xd4/0x220
[  236.682542][ T5893]  ? task_work_cancel+0x2b0/0x2b0
[  236.687548][ T5893]  ? kmem_cache_free+0x292/0x510
[  236.692469][ T5893]  ? do_exit+0xa6e/0x26a0
[  236.696787][ T5893]  do_exit+0xa73/0x26a0
[  236.700932][ T5893]  ? put_task_struct+0x80/0x80
[  236.705679][ T5893]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  236.711643][ T5893]  ? print_irqtrace_events+0x210/0x210
[  236.717089][ T5893]  ? _raw_spin_unlock_irq+0x1f/0x40
[  236.722268][ T5893]  ? lockdep_hardirqs_on+0x94/0x130
[  236.727448][ T5893]  do_group_exit+0x202/0x2b0
[  236.732026][ T5893]  __x64_sys_exit_group+0x3b/0x40
[  236.737035][ T5893]  do_syscall_64+0x3b/0xb0
[  236.741434][ T5893]  ? clear_bhb_loop+0x45/0xa0
[  236.746098][ T5893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.751978][ T5893] RIP: 0033:0x7f8aff3773b9
[  236.756386][ T5893] Code: Unable to access opcode bytes at 0x7f8aff37738f.
[  236.763383][ T5893] RSP: 002b:00007ffca8a304d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  236.771787][ T5893] RAX: ffffffffffffffda RBX: 00007f8aff3e47a9 RCX: 00007f8aff3773b9
[  236.779740][ T5893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  236.787693][ T5893] RBP: 0000000000000002 R08: 00007ffca8a2e277 R09: 00007ffca8a31790
[  236.795646][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca8a31790
[  236.803613][ T5893] R13: 00007f8aff3e4784 R14: 0000000000039523 R15: 00007ffca8a32850
[  236.811577][ T5893]  </TASK>
[  236.892746][ T3681] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  237.075178][   T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.123384][   T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.194836][   T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.246070][   T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.280344][ T3681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.294249][ T3681] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  237.307350][ T3681] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  237.318091][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.338996][ T3681] usb 1-1: config 0 descriptor??
[  237.383690][ T3681] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  238.174160][ T6340] loop0: detected capacity change from 0 to 1024
[  238.534920][   T63] device hsr_slave_0 left promiscuous mode
[  238.541290][   T63] device hsr_slave_1 left promiscuous mode
[  238.547543][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.555010][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.564306][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.571733][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.579760][   T63] device bridge_slave_1 left promiscuous mode
[  238.586728][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.594905][   T63] device bridge_slave_0 left promiscuous mode
[  238.601249][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.622532][   T63] device veth1_macvtap left promiscuous mode
[  238.628558][   T63] device veth0_macvtap left promiscuous mode
[  238.634760][   T63] device veth1_vlan left promiscuous mode
[  238.642097][   T63] device veth0_vlan left promiscuous mode
[  238.793588][   T63] team0 (unregistering): Port device team_slave_1 removed
[  238.818454][   T63] team0 (unregistering): Port device team_slave_0 removed
[  238.849225][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.875172][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.937542][   T63] bond0 (unregistering): Released all slaves
[  239.331019][   T22] usb 1-1: USB disconnect, device number 13