last executing test programs:

10.105216997s ago: executing program 0 (id=1724):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001"], 0x28}}, 0x0)

10.074808199s ago: executing program 0 (id=1725):
socket$inet6(0xa, 0x1, 0x6)
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00e00b0000000000000000d521ab5af806a611"], 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002)
r2 = getpgrp(0x0)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x27, 0x24, 0xffffffffffffffff, @prog_fd}, 0x20)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001040)={0x8, 'bond_slave_1\x00', {'veth0\x00'}, 0x8001})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000), 0xc)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200), 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x24}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_usbip_server_init(0x5)
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x2001)
bind$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10)

6.817453918s ago: executing program 0 (id=1742):
r0 = socket$unix(0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000040))
fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1})
dup3(r0, r1, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r3, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x4f}, 0x0)
close(r4)
rt_sigreturn()
ioctl$FIOCLEX(r2, 0x5451)
inotify_init1(0x0)

6.536904241s ago: executing program 0 (id=1744):
read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0}, 0x2020)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200880, &(0x7f0000000100), 0xf, 0x9964, &(0x7f00000131c0)="$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")
syz_mount_image$nilfs2(&(0x7f0000000500), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYBLOB="fdeda9b7fd1b96d1153f7f629bfde08226acd7470ff5fd73ddc9135cc8e7cf1bd7f83bdb42a287bae3352f87689c4f7a48a02e743955b763228f5d03584dbe0907856914073dcfb6bf079aa0e8c1354e85a2a6be7adaab1fbbbda38c9fdfc7d8cae86170b73db7d74507af07d4263d3355e25ff6", @ANYRESDEC=r0], 0x1, 0xabb, &(0x7f0000000e00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='pids.current\x00', 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xc8ab)

6.498291424s ago: executing program 1 (id=1745):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r2 = socket$unix(0x1, 0x1, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x19, 0x0, 0x0)

5.861817537s ago: executing program 1 (id=1746):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '|}Y', 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ac9cb5", 0x0, 'ft7'}}}}}}}, 0x0)

5.651324054s ago: executing program 0 (id=1747):
socket$kcm(0x10, 0x0, 0x10)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x102})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000440)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

4.763717877s ago: executing program 1 (id=1748):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x1, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8}, 0x90)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
r3 = semget$private(0x0, 0x1, 0x40)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100))
msgsnd(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200"], 0xa1, 0x0)
gettid()
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="6dfedbe46e745f69c13d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9}}, 0x50)
read$FUSE(r4, &(0x7f0000006580)={0x2020, 0x0, <r6=>0x0}, 0x2020)
truncate(&(0x7f0000000080)='./file0\x00', 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0xa)
syz_fuse_handle_req(r4, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000006500)={0x50, 0x0, r6}, 0x50)
prlimit64(0x0, 0x0, 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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")
r9 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0)
getdents(r9, &(0x7f0000000140)=""/140, 0x8c)
io_submit(r7, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe71}])

3.974084732s ago: executing program 1 (id=1751):
socket$inet6(0xa, 0x1, 0x6)
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00e00b0000000000000000d521ab5af806a611"], 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002)
r2 = getpgrp(0x0)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x27, 0x24, 0xffffffffffffffff, @prog_fd}, 0x20)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001040)={0x8, 'bond_slave_1\x00', {'veth0\x00'}, 0x8001})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000), 0xc)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200), 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x24}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_usbip_server_init(0x5)
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x2001)
bind$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10)

3.821692044s ago: executing program 4 (id=1752):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325}, 0x33fe0}}, 0x0)

3.706095924s ago: executing program 0 (id=1754):
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff)
mlockall(0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)

3.476012903s ago: executing program 4 (id=1755):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2})
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r2, &(0x7f0000000040)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
close(r3)
rt_sigreturn()
epoll_create1(0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)

2.745928563s ago: executing program 3 (id=1756):
madvise(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0xb)

2.710054396s ago: executing program 4 (id=1757):
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0xffffff46)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000002600)=""/165)

2.592989556s ago: executing program 3 (id=1758):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '|}Y', 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ac9cb5", 0x0, 'ft7'}}}}}}}, 0x0)

2.575387107s ago: executing program 4 (id=1759):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001"], 0x28}}, 0x0)

2.475994686s ago: executing program 3 (id=1760):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2})
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r2)
rt_sigreturn()
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100))

2.41653632s ago: executing program 4 (id=1761):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480))
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000006000000", @ANYRES32=r3, @ANYBLOB="9f9bf993f2698e13"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x40}}, 0x0)

2.209104607s ago: executing program 3 (id=1762):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000001180)=0x61)
close(r1)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

2.134319284s ago: executing program 3 (id=1763):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000040420fffb7030000000000008500000083000000bf090000000000005509010000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

1.462696359s ago: executing program 4 (id=1764):
socket$kcm(0x10, 0x0, 0x10)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x102})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000440)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

1.163422564s ago: executing program 3 (id=1765):
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='alloc_mode=default,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',background_gc=off,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\b'], 0x1, 0x5501, &(0x7f0000005880)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x1a)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x4, 0x8, 0x8, 0x1205, r1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
nanosleep(&(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, 0x0)
io_setup(0x0, &(0x7f0000000100))
listen(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x208200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0)

742.756879ms ago: executing program 2 (id=1704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000080000001800018014"], 0x44}}, 0x0)

633.060217ms ago: executing program 2 (id=1766):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x400454ca, 0x0)

606.69743ms ago: executing program 2 (id=1767):
r0 = gettid()
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
readv(r1, 0x0, 0x0)
close(r1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000000))
rt_sigreturn()
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x0)
read$char_usb(r2, &(0x7f0000000840)=""/171, 0xab)
rt_sigreturn()
poll(0x0, 0x0, 0x64)
rt_sigreturn()
mlockall(0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x5414, 0x0)
rt_sigreturn()
mlockall(0x0)
pipe2(0x0, 0x0)

496.839629ms ago: executing program 2 (id=1768):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46)
dup3(r3, r2, 0x0)
sendmsg$netlink(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0)
close(r2)
socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x77359400}, {r4, r5+60000000}}, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c)
rt_sigreturn()
write(r0, &(0x7f0000000140)='1', 0x7ffff000)

308.582844ms ago: executing program 1 (id=1769):
syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x7)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x6, 0x6, 0x8e2, 0x7}}}}, 0xe)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r0, &(0x7f0000000280)="a70ae5fe632dc999f5e56f683dd8dc58aa142107e79dfe8b4257e8c2e6b5a400ca88c6aa25c889ef6be4582f77e814a3a6e589189d31271e4d6a5a05b005e1381d25e25cdc9f63a5a5e3fc7200f7ac70415e097672d47323425ceb15d18bd7fe3ce892fdc4fa4330ffe5a0a6a501b2607e61ec70af60e5bcca0b2650ccfa47d101813513093a779647ef0d4175632c55eb151a88c8355552056e285ace2eb0aaccc97ed3b05ab406495e2862a327d065ebc51018348fd0c396c2cb84340567ee6b28cf4dddadc4be61a434bc78e3686c0067086955ab1c", &(0x7f0000000380)=""/195}, 0x20)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0xfffffffffffffedd, &(0x7f0000002d00)="5c71f91b05c413550230b4c817a6284f597c529dd6d7ae6201c0a7c8484fc757c32e53ea7d406d8f4d06c6f8cb149cc28c", 0x0, 0x8, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)
ioctl$TIOCSLCKTRMIOS(r3, 0x542f, 0x0)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r5 = socket(0x2, 0x3, 0xff)
r6 = dup2(r0, r3)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r5, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="100000000000000001000000010000001c0000000000ed"], 0x30}}, {{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000005c0)="7ce25fa89c85c8bd1516ac045fb864098ce89811977ca3b03caaed43139d67b66396035669a6e527e6ed455b16d9850815db447984c05ee75365d0dbf3c1e650f154d2a5d8002bb2474a2f71115e0a9b234f29a569b9de9b9995edbf119f82d6c5fd1771de5f2d773596c653fbe15bda0b0750c4984836a2adbbaacd649f29", 0x7f}, {&(0x7f00000004c0)="3ffc202553da1a9ef5475caeafda81f4e7a66d932b4979f0b0d4bfa17a0bb3af9ce9532fd4cb5c8a9f7ba8d138743f682a4fe8f22bc8ab08b9e54eb36bffc361b583656e54a926c417bbac06acd44c30e379aedda25484f6149e2bc930b7ef6aee3b223a55919edf0571", 0x6a}, {&(0x7f0000000740)="3665656440a22b2b92272ab99da02cef3b8b00bbe1916b88703c1227943d35d67981dc49ae9a8a627483f7c9801d817d26ed9224f2efdf01cfe55489ba10db73e0", 0x41}], 0x3, &(0x7f0000000d00)=[@rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r5, r0, r4, r2, r4, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r3, r6, 0xffffffffffffffff, r0, r6, r5, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0x108, 0x5}}], 0x3, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x200, &(0x7f0000000880)="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"})
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0})

164.864896ms ago: executing program 2 (id=1770):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001"], 0x28}}, 0x0)

40.284356ms ago: executing program 1 (id=1771):
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001dc0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)

0s ago: executing program 2 (id=1772):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6286)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000c8c0f432a0cbd392c0f40c73a65371a371f23babe72f5370dac20396909add7a45", @ANYRES16=r6, @ANYBLOB="01000000000000000000030000"], 0x14}}, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r8], 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

 hci4: command tx timeout
[  357.161224][ T8467] loop2: detected capacity change from 0 to 32768
[  357.251491][ T8461] loop0: detected capacity change from 0 to 32768
[  357.300426][ T8461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1158 (8461)
[  357.369449][ T8467] XFS (loop2): Mounting V5 Filesystem
[  357.421702][ T8461] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.480817][ T8461] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  357.491206][ T8467] XFS (loop2): Ending clean mount
[  357.515134][   T48] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  357.530631][   T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  357.534181][ T8461] BTRFS info (device loop0): use zlib compression, level 3
[  357.611647][   T22] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  357.620236][ T8461] BTRFS info (device loop0): using free space tree
[  357.654741][   T22] XFS (loop2): Unmount and run xfs_repair
[  357.683664][   T22] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  357.725587][   T22] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  357.771595][ T8461] BTRFS info (device loop0): enabling ssd optimizations
[  357.776230][   T22] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  357.841842][   T22] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  357.886727][   T22] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  357.919788][   T22] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  357.946237][   T22] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  357.964486][   T22] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  357.973670][   T22] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  357.989023][ T8467] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74
[  358.002273][ T3546] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  358.082362][ T7886] XFS (loop2): Unmounting Filesystem
[  358.376691][ T8510] loop0: detected capacity change from 0 to 256
[  358.418081][ T8510] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  358.858178][ T8523] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  358.894538][ T8523] kvm: pic: non byte write
[  358.928129][ T8526] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  359.667480][   T48] Bluetooth: hci1: ISO packet for unknown connection handle 4095
[  359.675946][   T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  360.594196][ T8561] loop1: detected capacity change from 0 to 256
[  360.641790][ T8561] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  360.810223][ T8161] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  360.946099][ T8572] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  361.080214][ T8161] usb 4-1: Using ep0 maxpacket: 16
[  361.105536][ T8580] loop1: detected capacity change from 0 to 64
[  361.161603][ T6857] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  361.196356][ T8580] loop1: detected capacity change from 0 to 512
[  361.208533][ T8580] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  361.230350][ T8580] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1190: iget: bad i_size value: -67835469387268086
[  361.248333][ T8580] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1190: couldn't read orphan inode 15 (err -117)
[  361.261980][ T8580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  361.270591][ T8580] ext2 filesystem being mounted at /251/file0 supports timestamps until 2038 (0x7fffffff)
[  361.455951][ T3545] EXT4-fs (loop1): unmounting filesystem.
[  361.480779][ T8161] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  361.496666][ T8161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.510336][ T8161] usb 4-1: Product: syz
[  361.533652][ T8161] usb 4-1: Manufacturer: syz
[  361.552840][ T8161] usb 4-1: SerialNumber: syz
[  361.598105][ T8161] usb 4-1: config 0 descriptor??
[  361.671738][ T8161] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  361.726233][   T48] Bluetooth: hci0: ISO packet for unknown connection handle 4095
[  361.734515][   T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  362.980443][ T8161] ssu100: probe of 4-1:0.0 failed with error -71
[  363.020632][ T8161] usb 4-1: USB disconnect, device number 18
[  363.277373][ T8617] loop2: detected capacity change from 0 to 64
[  363.305548][ T8619] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  363.336565][ T6857] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  363.362043][ T8619] kvm: pic: non byte write
[  363.371690][ T8617] loop2: detected capacity change from 0 to 512
[  363.384654][ T8617] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  363.402183][ T8619] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  363.424628][ T8617] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1202: iget: bad i_size value: -67835469387268086
[  363.439434][ T8617] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1202: couldn't read orphan inode 15 (err -117)
[  363.459659][ T8617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  363.468831][ T8617] ext2 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff)
[  364.033159][ T7886] EXT4-fs (loop2): unmounting filesystem.
[  364.162530][   T48] Bluetooth: hci0: ISO packet for unknown connection handle 4095
[  364.173707][   T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  365.374627][ T8654] loop1: detected capacity change from 0 to 64
[  365.461746][ T6857] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  365.478577][ T8654] loop1: detected capacity change from 0 to 512
[  365.507633][ T8654] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  365.539158][ T8654] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1215: iget: bad i_size value: -67835469387268086
[  365.557284][ T8654] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1215: couldn't read orphan inode 15 (err -117)
[  365.575583][ T8654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  365.584371][ T8654] ext2 filesystem being mounted at /258/file0 supports timestamps until 2038 (0x7fffffff)
[  366.123844][ T3545] EXT4-fs (loop1): unmounting filesystem.
[  366.154152][ T8660] netlink: 'syz.2.1216': attribute type 3 has an invalid length.
[  366.235092][ T8660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1216'.
[  366.560224][ T3598] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  366.816791][ T8670] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  366.830314][ T3598] usb 2-1: Using ep0 maxpacket: 16
[  366.842816][ T8670] kvm: pic: non byte write
[  366.870973][ T8670] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  367.070777][   T48] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  367.079472][   T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  367.140499][ T3598] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  367.154680][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.170509][ T3598] usb 2-1: Product: syz
[  367.178640][ T3598] usb 2-1: Manufacturer: syz
[  367.199720][ T3598] usb 2-1: SerialNumber: syz
[  367.206263][ T3598] usb 2-1: config 0 descriptor??
[  367.251806][ T3598] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  367.612162][ T8692] loop4: detected capacity change from 0 to 64
[  367.642067][ T3564] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  367.655969][ T8692] loop4: detected capacity change from 0 to 512
[  367.666045][ T8692] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  367.674924][ T3592] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  367.683233][ T8692] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1227: iget: bad i_size value: -67835469387268086
[  367.696805][ T8692] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1227: couldn't read orphan inode 15 (err -117)
[  367.709164][ T8692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  367.717665][ T8692] ext2 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff)
[  368.230386][ T3598] ssu100: probe of 2-1:0.0 failed with error -110
[  368.284938][ T7849] EXT4-fs (loop4): unmounting filesystem.
[  368.610401][ T3592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.625574][ T3592] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  368.640183][ T6509] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  368.660603][ T3592] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  368.679153][ T3592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.701291][ T3592] usb 3-1: config 0 descriptor??
[  368.930337][ T6509] usb 5-1: Using ep0 maxpacket: 8
[  369.092235][ T6509] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  369.108605][ T6509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.133723][ T6509] usb 5-1: config 0 descriptor??
[  369.187264][ T6509] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  369.196472][ T6509] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  369.389194][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.427263][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.450468][ T3592] usbhid 3-1:0.0: can't add hid device: -71
[  369.456516][ T3592] usbhid: probe of 3-1:0.0 failed with error -71
[  369.519196][ T3592] usb 3-1: USB disconnect, device number 24
[  369.539278][ T8700] usb usb2: usbfs: process 8700 (syz.4.1228) did not claim interface 0 before use
[  369.622314][ T8161] usb 2-1: USB disconnect, device number 28
[  369.810534][ T8713] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  369.833203][ T8713] kvm: pic: non byte write
[  369.867920][ T8713] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  370.081840][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1235'.
[  371.256649][ T8743] hub 6-0:1.0: USB hub found
[  371.262129][ T8743] hub 6-0:1.0: 1 port detected
[  371.824203][   T22] usb 5-1: USB disconnect, device number 13
[  372.086264][   T48] Bluetooth: hci4: ISO packet for unknown connection handle 4095
[  372.094656][   T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  372.544758][ T8736] loop0: detected capacity change from 0 to 40427
[  372.568151][ T8736] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  372.580846][ T8736] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  372.632967][ T8736] F2FS-fs (loop0): Found nat_bits in checkpoint
[  372.690190][ T8011] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  372.784296][ T8736] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  372.800301][ T8736] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  373.000347][ T8011] usb 4-1: Using ep0 maxpacket: 16
[  373.140212][ T8161] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  373.170271][   T27] kauditd_printk_skb: 57 callbacks suppressed
[  373.170330][   T27] audit: type=1800 audit(1721213228.630:117): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1239" name="bus" dev="loop0" ino=10 res=0 errno=0
[  373.417163][ T3546] syz-executor: attempt to access beyond end of device
[  373.417163][ T3546] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  373.431967][ T8011] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  373.462259][ T8011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.494194][ T8011] usb 4-1: Product: syz
[  373.502896][ T8011] usb 4-1: Manufacturer: syz
[  373.523157][ T8011] usb 4-1: SerialNumber: syz
[  373.549894][ T8011] usb 4-1: config 0 descriptor??
[  373.611612][ T8011] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  373.760479][ T8161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.783183][ T8161] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  373.812701][ T8161] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  373.822482][ T8161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.848861][ T8161] usb 2-1: config 0 descriptor??
[  374.286497][ T8781] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  374.580389][ T8161] usbhid 2-1:0.0: can't add hid device: -71
[  374.586408][ T8161] usbhid: probe of 2-1:0.0 failed with error -71
[  374.629925][ T8161] usb 2-1: USB disconnect, device number 29
[  374.950330][ T8011] ssu100: probe of 4-1:0.0 failed with error -71
[  374.970551][ T8011] usb 4-1: USB disconnect, device number 19
[  375.531391][ T8801] hub 6-0:1.0: USB hub found
[  375.537348][ T8801] hub 6-0:1.0: 1 port detected
[  376.220359][ T3559] Bluetooth: hci1: command 0x0406 tx timeout
[  376.235407][ T3559] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  376.245569][ T3559] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  376.913371][ T8825] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  377.380287][ T3597] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  377.426410][ T8810] loop2: detected capacity change from 0 to 40427
[  377.448434][ T8810] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  377.462774][ T8810] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  377.499913][ T8810] F2FS-fs (loop2): Found nat_bits in checkpoint
[  377.545629][ T6509] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  377.597042][ T8810] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  377.607415][ T8810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  377.803020][ T6509] usb 4-1: Using ep0 maxpacket: 16
[  377.890426][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.970445][   T27] audit: type=1800 audit(1721213233.480:118): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1257" name="bus" dev="loop2" ino=10 res=0 errno=0
[  377.993554][ T3597] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  378.087861][ T3597] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  378.110554][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.423857][ T8851] hub 6-0:1.0: USB hub found
[  378.429389][ T8851] hub 6-0:1.0: 1 port detected
[  378.450798][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  378.459840][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  378.497443][ T3597] usb 1-1: config 0 descriptor??
[  378.549096][ T7886] syz-executor: attempt to access beyond end of device
[  378.549096][ T7886] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  378.860681][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  379.285661][ T3597] usbhid 1-1:0.0: can't add hid device: -71
[  379.292552][ T3597] usbhid: probe of 1-1:0.0 failed with error -71
[  379.300408][ T6509] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  379.309461][ T6509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.322638][ T3597] usb 1-1: USB disconnect, device number 25
[  379.350153][ T6509] usb 4-1: Product: syz
[  379.354339][ T6509] usb 4-1: Manufacturer: syz
[  379.358941][ T6509] usb 4-1: SerialNumber: syz
[  379.410945][ T6509] usb 4-1: config 0 descriptor??
[  379.464623][ T6509] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  379.496332][   T48] Bluetooth: hci0: ISO packet for unknown connection handle 4095
[  379.504502][   T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  379.565414][ T8862] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  379.571939][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  379.618327][ T8865] vhci_hcd: connection closed
[  379.618623][ T8862] vhci_hcd vhci_hcd.0: Device attached
[  379.649156][ T4686] vhci_hcd: stop threads
[  379.653853][ T4686] vhci_hcd: release socket
[  379.666201][ T4686] vhci_hcd: disconnect device
[  379.860181][ T8072] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  380.260444][ T8072] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  380.282351][ T8072] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  380.292631][ T8072] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  380.303392][ T8072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.340433][ T8859] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  380.750425][ T6509] ssu100: probe of 4-1:0.0 failed with error -71
[  380.761061][ T6509] usb 4-1: USB disconnect, device number 20
[  381.828157][ T8904] hub 6-0:1.0: USB hub found
[  381.833468][ T8904] hub 6-0:1.0: 1 port detected
[  382.565191][ T8891] loop1: detected capacity change from 0 to 40427
[  382.679505][ T8891] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  382.730325][ T8891] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  382.739650][ T6509] usb 5-1: USB disconnect, device number 14
[  382.774974][ T8891] F2FS-fs (loop1): Found nat_bits in checkpoint
[  382.887428][ T8891] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  382.925180][ T8891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  383.084557][ T8896] loop0: detected capacity change from 0 to 32768
[  383.115183][   T22] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  383.134679][   T48] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  383.142977][   T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  383.239732][   T27] audit: type=1800 audit(1721213238.800:119): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1279" name="bus" dev="loop1" ino=10 res=0 errno=0
[  383.260044][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.550029][ T3545] syz-executor: attempt to access beyond end of device
[  383.550029][ T3545] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  383.608391][ T8896] XFS (loop0): Mounting V5 Filesystem
[  383.690340][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.704909][   T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  383.720252][   T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  383.730153][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.739826][   T22] usb 3-1: config 0 descriptor??
[  383.748443][ T8896] XFS (loop0): Ending clean mount
[  383.838519][ T6509] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  383.850631][ T6509] XFS (loop0): Unmount and run xfs_repair
[  383.856409][ T6509] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  383.869306][ T6509] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  383.878899][ T6509] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  383.893291][ T6509] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  383.904510][ T6509] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  383.916770][ T6509] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  383.943022][ T6509] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  383.955354][ T6509] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  383.965600][ T6509] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  383.975323][ T8896] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74
[  384.091391][ T8941] loop3: detected capacity change from 0 to 512
[  384.141356][ T8941] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  384.148900][ T8941] UDF-fs: Scanning with blocksize 512 failed
[  384.157562][ T8941] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  384.165134][ T8941] UDF-fs: Scanning with blocksize 1024 failed
[  384.189987][ T8941] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  384.197545][ T8941] UDF-fs: Scanning with blocksize 2048 failed
[  384.207407][ T8941] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  384.236731][ T8941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  384.299349][   T22] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  384.328287][ T3546] XFS (loop0): Unmounting Filesystem
[  384.382555][   T22] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  384.518765][   T22] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  384.760483][   T22] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  384.842602][   T22] usb 3-1: USB disconnect, device number 25
[  385.188629][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1295'.
[  385.246045][ T8957] loop1: detected capacity change from 0 to 256
[  385.249724][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1295'.
[  385.290961][ T8957] FAT-fs (loop1): Directory bread(block 1285) failed
[  385.306985][ T8955] FAT-fs (loop1): Directory bread(block 1285) failed
[  385.318627][ T8955] FAT-fs (loop1): FAT read failed (blocknr 1281)
[  385.443763][ T8959] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  385.450309][ T8959] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  385.472486][ T8968] loop3: detected capacity change from 0 to 8
[  385.625061][ T8959] vhci_hcd vhci_hcd.0: Device attached
[  385.657083][ T8960] vhci_hcd: connection closed
[  385.657336][ T3686] vhci_hcd: stop threads
[  386.412263][ T3686] vhci_hcd: release socket
[  386.420224][ T3597] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  386.445691][ T3686] vhci_hcd: disconnect device
[  386.452349][ T3598] usb 14-1: SetAddress Request (2) to port 0
[  386.461515][ T3598] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd
[  386.493976][   T48] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  386.502144][   T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  386.512384][ T3598] usb 14-1: enqueue for inactive port 0
[  386.710257][ T3597] usb 1-1: Using ep0 maxpacket: 16
[  387.540614][ T3597] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  387.560375][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.597303][ T3597] usb 1-1: Product: syz
[  387.608725][ T3597] usb 1-1: Manufacturer: syz
[  387.623716][ T3597] usb 1-1: SerialNumber: syz
[  387.631261][ T3598] usb usb14-port1: attempt power cycle
[  387.644500][ T3597] usb 1-1: config 0 descriptor??
[  387.701507][ T3597] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  387.779484][ T8964] loop4: detected capacity change from 0 to 40427
[  387.819252][ T8964] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  387.838777][ T8964] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  387.875498][ T8964] F2FS-fs (loop4): Found nat_bits in checkpoint
[  387.959139][ T8964] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  387.973063][ T8964] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  388.249989][   T27] audit: type=1800 audit(1721213243.810:120): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1297" name="bus" dev="loop4" ino=10 res=0 errno=0
[  388.553427][ T3598] usb usb14-port1: unable to enumerate USB device
[  388.583038][ T7849] syz-executor: attempt to access beyond end of device
[  388.583038][ T7849] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  388.597358][ T3597] ssu100: probe of 1-1:0.0 failed with error -110
[  388.708281][ T8985] loop3: detected capacity change from 0 to 32768
[  388.728432][ T8985] XFS (loop3): Mounting V5 Filesystem
[  388.844080][ T9008] loop1: detected capacity change from 0 to 512
[  388.856750][ T9008] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  388.864467][ T9008] UDF-fs: Scanning with blocksize 512 failed
[  388.874926][ T9008] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  388.882446][ T9008] UDF-fs: Scanning with blocksize 1024 failed
[  388.890245][ T9008] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  388.897678][ T9008] UDF-fs: Scanning with blocksize 2048 failed
[  388.906002][ T9008] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  388.922783][ T9008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  389.023067][ T8985] XFS (loop3): Ending clean mount
[  389.669781][ T7834] XFS (loop3): Unmounting Filesystem
[  389.955184][ T9018] loop3: detected capacity change from 0 to 8
[  389.980309][ T3597] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  390.169376][   T48] Bluetooth: hci3: ISO packet for unknown connection handle 4095
[  390.179609][   T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  390.189494][   T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.99-syzkaller #0
[  390.197483][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  390.207534][   T48] Workqueue: hci3 hci_rx_work
[  390.212211][   T48] Call Trace:
[  390.215474][   T48]  <TASK>
[  390.218393][   T48]  dump_stack_lvl+0x1e3/0x2cb
[  390.223065][   T48]  ? nf_tcp_handle_invalid+0x642/0x642
[  390.228510][   T48]  ? panic+0x764/0x764
[  390.232574][   T48]  sysfs_create_dir_ns+0x2c6/0x390
[  390.237676][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  390.242349][   T48]  kobject_add_internal+0x6df/0xd10
[  390.247553][   T48]  kobject_add+0x14e/0x210
[  390.251981][   T48]  ? device_add+0x3c2/0xfd0
[  390.256476][   T48]  ? kobject_init+0x1d0/0x1d0
[  390.261148][   T48]  ? __raw_spin_lock_init+0x41/0x100
[  390.266432][   T48]  ? get_device_parent+0x128/0x400
[  390.271541][   T48]  device_add+0x476/0xfd0
[  390.275886][   T48]  hci_conn_add_sysfs+0xe4/0x1f0
[  390.280833][   T48]  le_conn_complete_evt+0xcc6/0x1320
[  390.286120][   T48]  ? trace_contention_end+0x61/0x170
[  390.291407][   T48]  ? hci_le_big_info_adv_report_evt+0x390/0x390
[  390.297642][   T48]  ? __mutex_unlock_slowpath+0x218/0x750
[  390.303270][   T48]  ? mutex_unlock+0x10/0x10
[  390.307762][   T48]  ? skb_pull_data+0x10e/0x220
[  390.312519][   T48]  hci_le_enh_conn_complete_evt+0x181/0x410
[  390.318408][   T48]  hci_event_packet+0xa40/0x1510
[  390.323343][   T48]  ? hci_remote_host_features_evt+0x210/0x210
[  390.329428][   T48]  ? bis_list+0x290/0x290
[  390.333754][   T48]  ? do_raw_spin_unlock+0x137/0x8a0
[  390.338948][   T48]  ? kcov_remote_start+0x4b5/0x7d0
[  390.344049][   T48]  ? lockdep_hardirqs_on+0x50/0x130
[  390.349239][   T48]  ? hci_send_to_monitor+0x99/0x4d0
[  390.354429][   T48]  hci_rx_work+0x3cd/0xce0
[  390.358833][   T48]  ? do_raw_spin_unlock+0x137/0x8a0
[  390.364024][   T48]  ? process_one_work+0x7a9/0x11d0
[  390.369125][   T48]  process_one_work+0x8a9/0x11d0
[  390.374064][   T48]  ? worker_detach_from_pool+0x260/0x260
[  390.379690][   T48]  ? _raw_spin_lock_irqsave+0x120/0x120
[  390.385229][   T48]  ? kthread_data+0x4e/0xc0
[  390.389732][   T48]  ? wq_worker_running+0x97/0x190
[  390.394758][   T48]  worker_thread+0xa47/0x1200
[  390.399450][   T48]  ? __sched_text_start+0x8/0x8
[  390.404322][   T48]  kthread+0x28d/0x320
[  390.408382][   T48]  ? worker_clr_flags+0x190/0x190
[  390.413402][   T48]  ? kthread_blkcg+0xd0/0xd0
[  390.417984][   T48]  ret_from_fork+0x1f/0x30
[  390.422405][   T48]  </TASK>
[  390.425471][    C1] vkms_vblank_simulate: vblank timer overrun
[  390.439586][   T48] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  390.448073][ T8008] usb 1-1: USB disconnect, device number 26
[  390.453157][   T48] Bluetooth: hci3: failed to register connection device
[  390.930392][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.465886][ T3597] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  391.493560][ T3597] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  391.515350][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.542922][ T3597] usb 2-1: config 0 descriptor??
[  391.693348][ T9044] loop0: detected capacity change from 0 to 256
[  391.749389][ T9044] FAT-fs (loop0): Directory bread(block 1285) failed
[  391.765152][ T9041] FAT-fs (loop0): Directory bread(block 1285) failed
[  391.775995][ T9041] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  392.032036][ T3597] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  392.049710][ T3597] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  392.070593][ T3597] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  392.104986][ T3597] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  392.175328][ T9036] loop3: detected capacity change from 0 to 40427
[  392.189318][ T9036] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  392.235249][ T3597] usb 2-1: USB disconnect, device number 30
[  392.256322][ T9036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  392.308654][ T9036] F2FS-fs (loop3): Found nat_bits in checkpoint
[  392.396055][ T9036] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  392.404793][ T9036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  392.550260][   T48] Bluetooth: hci3: command tx timeout
[  392.770504][   T27] audit: type=1800 audit(1721213248.240:121): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1314" name="bus" dev="loop3" ino=10 res=0 errno=0
[  392.997928][ T7834] syz-executor: attempt to access beyond end of device
[  392.997928][ T7834] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  393.212889][ T9059] loop1: detected capacity change from 0 to 512
[  393.265652][ T9059] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1319: corrupted in-inode xattr
[  393.282078][ T9059] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1319: couldn't read orphan inode 15 (err -117)
[  393.326422][ T9059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  393.498117][ T3545] EXT4-fs (loop1): unmounting filesystem.
[  393.702000][ T9071] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  394.030531][ T9080] loop3: detected capacity change from 0 to 512
[  395.424956][ T9080] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  395.432514][ T9080] UDF-fs: Scanning with blocksize 512 failed
[  395.450601][ T9080] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  395.457989][ T9080] UDF-fs: Scanning with blocksize 1024 failed
[  395.464850][ T9080] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  395.472279][ T9080] UDF-fs: Scanning with blocksize 2048 failed
[  395.480891][ T9080] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  395.492877][ T9080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.593383][ T3559] Bluetooth: hci4: ISO packet for unknown connection handle 4095
[  395.602299][ T3559] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  395.660437][ T3559] Bluetooth: hci4: command tx timeout
[  396.043132][ T9063] loop4: detected capacity change from 0 to 40427
[  396.070154][ T9063] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  396.087608][ T9063] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  396.132662][ T9063] F2FS-fs (loop4): Found nat_bits in checkpoint
[  396.196594][ T9063] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  396.209043][ T9063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  396.230450][   T27] audit: type=1804 audit(1721213251.800:122): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1320" name="/newroot/45/file2/bus" dev="loop4" ino=10 res=1 errno=0
[  396.282476][   T27] audit: type=1804 audit(1721213251.800:123): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1320" name="/newroot/45/file2/bus" dev="loop4" ino=10 res=1 errno=0
[  396.511061][ T7849] syz-executor: attempt to access beyond end of device
[  396.511061][ T7849] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  397.064983][ T9122] loop3: detected capacity change from 0 to 512
[  397.080779][ T9122] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  397.088253][ T9122] UDF-fs: Scanning with blocksize 512 failed
[  397.097198][ T9122] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  397.104697][ T9122] UDF-fs: Scanning with blocksize 1024 failed
[  397.112871][ T9122] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  397.120417][ T9122] UDF-fs: Scanning with blocksize 2048 failed
[  397.128444][ T9122] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  397.149905][ T9122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.833188][ T9126] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  398.036352][ T9131] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  398.066175][ T9128] kvm: pic: non byte write
[  398.096470][ T9128] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  398.412016][ T3559] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  398.420621][ T3559] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  398.487753][ T9144] loop2: detected capacity change from 0 to 256
[  398.507130][ T9148] loop1: detected capacity change from 0 to 16
[  398.554376][ T9144] FAT-fs (loop2): Directory bread(block 1285) failed
[  398.576468][ T9140] FAT-fs (loop2): Directory bread(block 1285) failed
[  398.584615][ T9140] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  398.598710][ T9148] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  399.535521][ T9163] loop1: detected capacity change from 0 to 512
[  399.551900][ T9163] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  399.559395][ T9163] UDF-fs: Scanning with blocksize 512 failed
[  399.568743][ T9163] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  399.576250][ T9163] UDF-fs: Scanning with blocksize 1024 failed
[  399.585874][ T9163] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  399.593486][ T9163] UDF-fs: Scanning with blocksize 2048 failed
[  399.603877][ T9163] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  399.629340][ T9163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.665210][   T48] Bluetooth: hci3: command tx timeout
[  399.691056][   T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  400.382035][ T9164] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  400.520211][   T22] usb 4-1: Using ep0 maxpacket: 16
[  400.576269][ T9152] loop4: detected capacity change from 0 to 40427
[  400.617676][ T9152] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  400.653739][ T9152] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  400.723003][ T9152] F2FS-fs (loop4): Found nat_bits in checkpoint
[  400.810321][   T22] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  400.829032][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.839628][ T9152] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  400.858830][ T9152] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  400.870296][   T22] usb 4-1: Product: syz
[  400.879573][   T22] usb 4-1: Manufacturer: syz
[  400.907872][   T22] usb 4-1: SerialNumber: syz
[  400.929882][   T27] audit: type=1804 audit(1721213256.490:124): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1346" name="/newroot/49/file2/bus" dev="loop4" ino=10 res=1 errno=0
[  400.970009][   T22] usb 4-1: config 0 descriptor??
[  400.989156][   T27] audit: type=1804 audit(1721213256.520:125): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1346" name="/newroot/49/file2/bus" dev="loop4" ino=10 res=1 errno=0
[  401.034070][   T22] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  401.048922][ T9183] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  401.327981][ T7849] syz-executor: attempt to access beyond end of device
[  401.327981][ T7849] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  401.500245][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  401.630673][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'.
[  401.655633][ T9197] loop1: detected capacity change from 0 to 16
[  401.735740][ T9197] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  401.856490][   T48] Bluetooth: hci3: ISO packet for unknown connection handle 4095
[  401.866367][   T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  401.945020][ T9207] loop2: detected capacity change from 0 to 512
[  402.022758][ T9207] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  402.030365][ T9207] UDF-fs: Scanning with blocksize 512 failed
[  402.039106][ T9207] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  402.046648][ T9207] UDF-fs: Scanning with blocksize 1024 failed
[  402.057612][ T9207] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  402.065587][ T9207] UDF-fs: Scanning with blocksize 2048 failed
[  402.078090][ T9207] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  402.107638][ T9207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.320618][   T22] ssu100: probe of 4-1:0.0 failed with error -71
[  402.779019][   T22] usb 4-1: USB disconnect, device number 21
[  404.653930][ T9241] loop1: detected capacity change from 0 to 512
[  405.109444][ T9241] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  405.117072][ T9241] UDF-fs: Scanning with blocksize 512 failed
[  405.128218][ T9241] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  405.135706][ T9241] UDF-fs: Scanning with blocksize 1024 failed
[  405.145368][ T9241] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  405.152846][ T9241] UDF-fs: Scanning with blocksize 2048 failed
[  405.162643][ T9241] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  405.185199][ T9241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  405.517412][ T9238] loop2: detected capacity change from 0 to 256
[  405.551350][ T9238] FAT-fs (loop2): Directory bread(block 1285) failed
[  405.577411][ T9238] FAT-fs (loop2): Directory bread(block 1285) failed
[  405.584955][ T9238] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  405.606518][   T48] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  405.614734][   T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  405.810201][ T8072] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  405.881162][ T9257] loop1: detected capacity change from 0 to 2048
[  405.887015][ T9258] loop4: detected capacity change from 0 to 16
[  405.924584][ T9257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  405.996905][ T9258] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  406.070894][ T8072] usb 1-1: Using ep0 maxpacket: 16
[  406.390265][ T8072] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  406.445672][ T8072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.540351][ T8072] usb 1-1: Product: syz
[  406.546735][ T8072] usb 1-1: Manufacturer: syz
[  406.548431][ T3545] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /293/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  406.580200][ T8072] usb 1-1: SerialNumber: syz
[  406.592742][ T3545] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0
[  406.630621][ T8072] usb 1-1: config 0 descriptor??
[  406.674535][ T3545] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  406.701080][ T8072] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  406.725552][ T3545] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  406.796317][ T4492] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm kworker/u4:15: Invalid inode table block 0 in block_group 0
[  406.802937][ T9264] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  406.826371][ T3545] EXT4-fs (loop1): unmounting filesystem.
[  407.333786][ T4686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.486841][ T4686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.630356][ T4686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.790582][ T4686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.877607][ T3559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  407.887299][ T3559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  407.896503][ T3559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  407.905940][ T3559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  407.927173][ T3559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  407.935457][ T3559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  407.980414][ T8072] ssu100: probe of 1-1:0.0 failed with error -71
[  407.989035][ T8072] usb 1-1: USB disconnect, device number 27
[  408.314242][ T3559] Bluetooth: hci4: ISO packet for unknown connection handle 4095
[  408.322706][ T3559] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  408.779231][ T9307] loop0: detected capacity change from 0 to 16
[  408.898905][ T9307] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  408.936460][ T9310] loop3: detected capacity change from 0 to 8
[  408.962188][ T9281] chnl_net:caif_netlink_parms(): no params data found
[  409.120336][ T9314] SQUASHFS error: Failed to read block 0x260685: -5
[  409.161331][ T9314] SQUASHFS error: Unable to read metadata cache entry [260685]
[  409.186401][ T9314] SQUASHFS error: Unable to read directory block [260685:0]
[  409.333415][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.333588][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.347036][ T9281] device bridge_slave_0 entered promiscuous mode
[  409.383945][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.384010][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.384995][ T9281] device bridge_slave_1 entered promiscuous mode
[  409.620320][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.622602][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.908541][ T9281] team0: Port device team_slave_0 added
[  409.939313][ T9281] team0: Port device team_slave_1 added
[  409.980233][ T3559] Bluetooth: hci0: command tx timeout
[  410.096699][ T4686] device hsr_slave_0 left promiscuous mode
[  410.239381][ T9334] loop3: detected capacity change from 0 to 256
[  410.285415][ T9334] FAT-fs (loop3): Directory bread(block 1285) failed
[  410.337011][ T9330] FAT-fs (loop3): Directory bread(block 1285) failed
[  410.347575][ T9330] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  410.476256][ T4686] device hsr_slave_1 left promiscuous mode
[  410.495617][ T9337] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  410.502159][ T9337] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  410.541739][ T9339] vhci_hcd: connection closed
[  410.574422][ T9337] vhci_hcd vhci_hcd.0: Device attached
[  410.587240][   T56] vhci_hcd: stop threads
[  410.597248][   T56] vhci_hcd: release socket
[  410.616277][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.626900][   T56] vhci_hcd: disconnect device
[  410.626919][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.650911][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.661020][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.683558][ T4686] device bridge_slave_1 left promiscuous mode
[  410.694479][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.706093][ T4686] device bridge_slave_0 left promiscuous mode
[  410.712784][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.761463][ T4686] device veth1_macvtap left promiscuous mode
[  410.774289][ T4686] device veth0_macvtap left promiscuous mode
[  410.790446][ T8072] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  410.804628][ T4686] device veth1_vlan left promiscuous mode
[  410.818046][ T4686] device veth0_vlan left promiscuous mode
[  411.213190][ T8072] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  411.224658][ T8072] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  411.235528][ T8072] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  411.246790][ T8072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.281909][ T9338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  411.817068][ T4686] team0 (unregistering): Port device team_slave_1 removed
[  411.916177][ T4686] team0 (unregistering): Port device team_slave_0 removed
[  411.998481][ T4686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  412.060277][ T3559] Bluetooth: hci0: command tx timeout
[  412.074922][ T3559] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  412.084190][ T3559] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  412.101641][ T4686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  412.196358][ T9356] loop4: detected capacity change from 0 to 512
[  412.209161][ T9356] ext4: Bad value for 'debug_want_extra_isize'
[  412.249816][ T9356] loop4: detected capacity change from 0 to 1024
[  412.257415][ T9356] EXT4-fs: Ignoring removed nomblk_io_submit option
[  412.310294][ T9356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  412.372010][ T9356] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.1400: Corrupt inode bitmap - block_group = 0, inode_bitmap = 124
[  412.396524][   T27] audit: type=1326 audit(1721213267.960:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.1400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d77775a19 code=0x0
[  412.619992][ T4686] bond0 (unregistering): Released all slaves
[  412.640962][ T7849] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Out of memory
[  412.655901][ T7849] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  412.709763][ T9364] EXT4-fs (loop4): unmounting filesystem.
[  412.833325][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.840848][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.906533][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.964937][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.976517][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.012711][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.089925][ T9281] device hsr_slave_0 entered promiscuous mode
[  413.105203][ T9281] device hsr_slave_1 entered promiscuous mode
[  413.200188][ T3597] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  413.359279][ T9378] loop0: detected capacity change from 0 to 16
[  413.463032][ T9378] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  413.570333][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.605760][ T3597] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  413.648126][ T3597] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  413.684185][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.730039][ T3597] usb 4-1: config 0 descriptor??
[  413.859648][   T14] usb 3-1: USB disconnect, device number 26
[  414.140379][ T3559] Bluetooth: hci0: command tx timeout
[  414.223098][ T3597] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  414.238685][ T3597] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  414.249118][ T3597] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  414.285638][ T3597] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  414.471476][ T9281] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  414.502487][ T8002] usb 4-1: USB disconnect, device number 22
[  414.514205][ T9281] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  414.548103][ T9281] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  414.616976][ T9281] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  414.759256][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  414.769557][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  414.778232][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  414.787071][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  414.794828][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  414.802204][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  414.928220][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.999709][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  415.008683][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  415.025387][ T9281] 8021q: adding VLAN 0 to HW filter on device team0
[  415.128154][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  415.151009][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  415.197184][ T9406] loop2: detected capacity change from 0 to 256
[  415.245619][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.252765][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.272747][ T9406] FAT-fs (loop2): Directory bread(block 1285) failed
[  415.288367][ T9402] FAT-fs (loop2): Directory bread(block 1285) failed
[  415.298618][ T9402] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  415.309421][   T48] Bluetooth: hci1: ISO packet for unknown connection handle 4095
[  415.317717][   T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  415.372329][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  415.385869][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  415.397006][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  415.405901][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.413114][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.433295][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  415.456535][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  415.505574][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  415.522383][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  415.552274][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  415.580907][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  415.607005][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  415.629257][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  415.661743][ T9281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  415.697325][ T9281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  415.717403][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  415.734529][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  415.758840][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  416.144059][ T9395] chnl_net:caif_netlink_parms(): no params data found
[  416.220294][   T48] Bluetooth: hci0: command tx timeout
[  416.504250][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.534453][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.568107][ T9395] device bridge_slave_0 entered promiscuous mode
[  416.607235][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  416.629709][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  416.639052][ T9449] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  416.670884][ T9395] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.688211][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.723511][ T9395] device bridge_slave_1 entered promiscuous mode
[  416.831332][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.856351][ T9395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.865726][ T3559] Bluetooth: hci3: command tx timeout
[  416.905135][ T9395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.977917][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  417.001065][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  417.060540][ T9395] team0: Port device team_slave_0 added
[  417.088091][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  417.110279][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  417.130469][ T9281] device veth0_vlan entered promiscuous mode
[  417.152083][ T9395] team0: Port device team_slave_1 added
[  417.158466][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  417.169443][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  417.202591][ T9281] device veth1_vlan entered promiscuous mode
[  417.226710][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.239394][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.265897][    C1] vkms_vblank_simulate: vblank timer overrun
[  417.331323][ T9395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.390254][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.408251][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.520268][ T9395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.568042][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  417.586116][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  417.611601][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  417.633708][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  417.673655][ T9281] device veth0_macvtap entered promiscuous mode
[  417.764955][ T9281] device veth1_macvtap entered promiscuous mode
[  417.819683][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.857658][ T9466] loop3: detected capacity change from 0 to 16
[  417.863916][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.965555][ T9466] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  417.985778][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.011089][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.077489][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.169233][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.219932][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.264215][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.334734][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.396166][ T9395] device hsr_slave_0 entered promiscuous mode
[  418.419046][ T9395] device hsr_slave_1 entered promiscuous mode
[  418.439343][ T9395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  418.455887][ T9395] Cannot create hsr debugfs directory
[  418.473968][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  418.484522][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  418.512122][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  418.547579][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  418.559990][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.581906][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.591897][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.603271][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.616009][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.626928][ T3559] Bluetooth: hci2: command tx timeout
[  418.632663][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.643933][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.654590][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.667474][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.680327][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  418.705416][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  418.773342][ T9281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.798689][ T9281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.845045][ T9281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.867647][ T9281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.892878][ T9476] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  418.940275][   T48] Bluetooth: hci3: command tx timeout
[  419.155089][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.178599][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.298987][ T4686] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.316155][ T9482] loop0: detected capacity change from 0 to 8
[  419.354280][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  419.388753][ T3686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.407109][ T3686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.445766][ T4686] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.493236][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  419.582790][ T4686] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.739547][ T4686] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.843821][ T9496] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  420.353275][ T9482] loop0: detected capacity change from 0 to 32768
[  420.842504][ T3597] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  421.020783][   T48] Bluetooth: hci3: command tx timeout
[  421.078834][ T9395] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  421.101995][ T3597] usb 3-1: Using ep0 maxpacket: 8
[  421.220541][ T3597] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  421.229649][ T3597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.250747][ T9395] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  421.347619][ T9395] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  421.368567][ T9395] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  421.380659][ T3597] usb 3-1: config 0 descriptor??
[  421.431828][ T4686] device hsr_slave_0 left promiscuous mode
[  421.464090][ T4686] device hsr_slave_1 left promiscuous mode
[  421.472391][ T3597] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  421.497202][ T3597] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19
[  421.522709][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.565992][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.620207][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.653927][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.675749][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.692488][ T4686] device bridge_slave_1 left promiscuous mode
[  421.723090][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.737175][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.781153][ T4686] device bridge_slave_0 left promiscuous mode
[  421.820462][   T48] Bluetooth: hci4: command tx timeout
[  421.826510][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.013243][ T4686] device veth1_macvtap left promiscuous mode
[  422.056585][ T4686] device veth0_macvtap left promiscuous mode
[  422.090474][ T4686] device veth1_vlan left promiscuous mode
[  422.107126][ T4686] device veth0_vlan left promiscuous mode
[  423.100621][ T3559] Bluetooth: hci3: command tx timeout
[  423.259792][ T9556] loop3: detected capacity change from 0 to 16
[  423.291690][ T9556] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  423.427333][ T9558] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  423.441202][ T4686] team0 (unregistering): Port device team_slave_1 removed
[  423.556488][ T4686] team0 (unregistering): Port device team_slave_0 removed
[  423.570750][   T14] usb 3-1: USB disconnect, device number 27
[  423.717876][ T9562] loop0: detected capacity change from 0 to 512
[  423.787185][ T4686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.809300][ T9562] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  423.905175][ T9562] EXT4-fs (loop0): 1 truncate cleaned up
[  423.978256][ T9562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  424.068559][ T4686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.788450][ T4686] bond0 (unregistering): Released all slaves
[  424.904946][ T3546] EXT4-fs (loop0): unmounting filesystem.
[  425.114840][ T9395] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.158083][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  425.170833][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  425.213630][ T9395] 8021q: adding VLAN 0 to HW filter on device team0
[  425.229350][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  425.271533][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  425.283735][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.290864][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.420212][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  425.428391][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  425.705019][ T9583] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  425.968235][ T9590] loop0: detected capacity change from 0 to 8
[  426.016455][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  426.058317][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  426.074259][ T9583] loop2: detected capacity change from 0 to 1024
[  426.116384][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.123571][ T8161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.159538][ T9583] ext3: Unknown parameter 'noacl'
[  426.190537][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  426.203583][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  426.241503][ T6857] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  426.308692][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  426.358085][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  426.383032][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  426.400670][ T3559] Bluetooth: to_multiplier 7 < 10
[  426.417777][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  426.437409][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  426.457609][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  426.490027][ T9598] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  426.493372][ T9395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  426.554023][ T9395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  426.601945][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  426.609846][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  426.670597][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  426.671004][ T9590] loop0: detected capacity change from 0 to 32768
[  426.734472][ T9601] loop1: detected capacity change from 0 to 128
[  426.886879][ T9601] syz.1.1449: attempt to access beyond end of device
[  426.886879][ T9601] loop1: rw=2049, sector=153, nr_sectors = 88 limit=128
[  426.995610][ T9608] loop2: detected capacity change from 0 to 16
[  427.181158][   T46] kworker/u4:3: attempt to access beyond end of device
[  427.181158][   T46] loop1: rw=1, sector=145, nr_sectors = 8 limit=128
[  427.295282][ T9608] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  427.311351][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1451'.
[  427.343703][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1451'.
[  427.637933][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  427.690887][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  427.715028][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.460283][ T3559] Bluetooth: hci0: command tx timeout
[  428.937238][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  428.967334][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  429.055618][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  429.089532][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  429.129012][ T9395] device veth0_vlan entered promiscuous mode
[  429.144190][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  429.159041][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  429.178982][ T9395] device veth1_vlan entered promiscuous mode
[  429.287068][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  429.304232][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  429.321702][ T9634] 9pnet_fd: Insufficient options for proto=fd
[  429.331538][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  429.346424][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  429.359729][ T9395] device veth0_macvtap entered promiscuous mode
[  429.394969][ T9395] device veth1_macvtap entered promiscuous mode
[  429.457207][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.507865][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.547318][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.562122][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.572143][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.582915][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.595438][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.608249][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.673342][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.714517][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  429.737802][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  429.763996][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  429.795544][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  429.854935][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.867872][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.885482][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.915113][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.955332][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.003903][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.029871][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.041377][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.060927][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.079602][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  430.092232][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  430.269840][ T9395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.279076][ T9395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.605809][ T9395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.753082][ T9395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.819794][ T3559] Bluetooth: hci4: ISO packet for unknown connection handle 4095
[  430.845692][ T3559] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  431.225366][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'.
[  431.230672][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.253390][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.268553][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'.
[  431.329401][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  431.360636][ T3969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.406998][ T9660] loop2: detected capacity change from 0 to 16
[  431.434069][ T3969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.480446][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  431.529827][ T9640] loop3: detected capacity change from 0 to 40427
[  431.567811][ T9660] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected
[  431.570177][ T9640] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  431.594203][ T9640] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  431.689974][ T9640] F2FS-fs (loop3): Found nat_bits in checkpoint
[  431.885413][ T9640] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  431.916325][ T9640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  433.072116][ T9675] syz.3.1458: attempt to access beyond end of device
[  433.072116][ T9675] loop3: rw=34817, sector=77824, nr_sectors = 4096 limit=40427
[  433.126455][ T9674] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  433.132987][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  433.161062][ T9674] vhci_hcd vhci_hcd.0: Device attached
[  433.195287][ T9679] vhci_hcd: connection closed
[  433.195525][   T46] vhci_hcd: stop threads
[  433.257859][ T7834] syz-executor: attempt to access beyond end of device
[  433.257859][ T7834] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  433.283678][   T46] vhci_hcd: release socket
[  433.301321][   T46] vhci_hcd: disconnect device
[  433.581890][ T8072] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  433.830653][ T9685] 9pnet_fd: Insufficient options for proto=fd
[  433.976940][ T9687] loop0: detected capacity change from 0 to 128
[  434.033021][ T8072] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  434.046165][ T8072] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  434.057613][ T8072] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  434.068601][ T8072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.120877][ T9674] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  434.151299][ T9687] syz.0.1469: attempt to access beyond end of device
[  434.151299][ T9687] loop0: rw=2049, sector=153, nr_sectors = 88 limit=128
[  434.280424][   T46] kworker/u4:3: attempt to access beyond end of device
[  434.280424][   T46] loop0: rw=1, sector=145, nr_sectors = 8 limit=128
[  435.492905][ T8072] usb 5-1: USB disconnect, device number 15
[  435.667233][ T9706] loop3: detected capacity change from 0 to 512
[  435.683842][ T9706] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  435.691480][ T9706] UDF-fs: Scanning with blocksize 512 failed
[  435.698289][ T9706] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  435.705885][ T9706] UDF-fs: Scanning with blocksize 1024 failed
[  436.447977][ T9706] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  436.455575][ T9706] UDF-fs: Scanning with blocksize 2048 failed
[  436.471009][ T9706] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  436.482933][ T9706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  436.660365][   T14] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  437.013881][ T9721] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  437.768348][   T14] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  437.780928][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.794142][   T14] usb 3-1: config 0 descriptor??
[  437.864988][ T9721] loop3: detected capacity change from 0 to 1024
[  437.871073][   T14] cp210x 3-1:0.0: cp210x converter detected
[  437.879449][ T9719] loop0: detected capacity change from 0 to 256
[  437.901345][ T9726] 9pnet_fd: Insufficient options for proto=fd
[  437.911273][ T9719] FAT-fs (loop0): Directory bread(block 1285) failed
[  437.923766][ T9721] ext3: Unknown parameter 'noacl'
[  437.949235][ T9719] FAT-fs (loop0): Directory bread(block 1285) failed
[  437.962137][ T9719] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  438.086411][ T9702] loop2: detected capacity change from 0 to 128
[  438.144932][ T9702] FAT-fs (loop2): bogus number of FAT sectors
[  438.175437][ T9702] FAT-fs (loop2): Can't find a valid FAT filesystem
[  438.260338][   T14] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  438.302283][   T14] cp210x 3-1:0.0: querying part number failed
[  438.368345][   T14] usb 3-1: cp210x converter now attached to ttyUSB0
[  438.416225][   T14] usb 3-1: USB disconnect, device number 28
[  438.519666][   T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  438.815817][   T14] cp210x 3-1:0.0: device disconnected
[  439.355652][ T9741] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  439.362192][ T9741] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  439.384652][ T9741] vhci_hcd vhci_hcd.0: Device attached
[  439.464966][ T9747] loop3: detected capacity change from 0 to 512
[  440.692922][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  440.699250][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  440.726905][ T9744] vhci_hcd: connection closed
[  440.729653][ T9747] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  440.729824][   T46] vhci_hcd: stop threads
[  440.735475][ T9747] UDF-fs: Scanning with blocksize 512 failed
[  440.754157][ T9747] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  440.761706][ T9747] UDF-fs: Scanning with blocksize 1024 failed
[  440.768655][ T9747] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  440.776060][ T9747] UDF-fs: Scanning with blocksize 2048 failed
[  440.785489][ T9747] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  440.799497][ T9747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  440.885338][   T46] vhci_hcd: release socket
[  440.909612][   T46] vhci_hcd: disconnect device
[  441.023546][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1492'.
[  441.130182][ T3592] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  442.035606][ T9769] 9pnet_fd: Insufficient options for proto=fd
[  442.209725][ T9776] netlink: 'syz.4.1497': attribute type 10 has an invalid length.
[  442.290541][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1497'.
[  442.340576][ T3592] usb 3-1: unable to read config index 0 descriptor/start: -71
[  442.343289][ T9776] bridge0: port 3(dummy0) entered blocking state
[  442.348249][ T3592] usb 3-1: can't read configurations, error -71
[  442.388985][ T9776] bridge0: port 3(dummy0) entered disabled state
[  442.407567][ T9776] device dummy0 entered promiscuous mode
[  442.449632][ T9776] bridge0: port 3(dummy0) entered blocking state
[  442.456354][ T9776] bridge0: port 3(dummy0) entered forwarding state
[  442.790295][ T3559] Bluetooth: hci2: command 0x0406 tx timeout
[  442.796379][ T3559] Bluetooth: hci4: command 0x0406 tx timeout
[  443.036606][ T9800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.138425][ T9807] loop0: detected capacity change from 0 to 512
[  443.165679][ T9807] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  443.173234][ T9807] UDF-fs: Scanning with blocksize 512 failed
[  443.182120][ T9807] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  443.189581][ T9807] UDF-fs: Scanning with blocksize 1024 failed
[  443.198820][ T9807] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  443.206331][ T9807] UDF-fs: Scanning with blocksize 2048 failed
[  443.221109][ T9807] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  443.240146][ T9807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  444.095642][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'.
[  444.618452][ T9825] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  444.624988][ T9825] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  444.669951][ T9825] vhci_hcd vhci_hcd.0: Device attached
[  444.693482][ T9826] vhci_hcd: connection closed
[  444.694569][   T38] vhci_hcd: stop threads
[  444.783436][   T38] vhci_hcd: release socket
[  444.801527][   T38] vhci_hcd: disconnect device
[  445.020198][ T8161] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  445.318416][ T9840] 9pnet_fd: Insufficient options for proto=fd
[  445.390367][ T8161] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  445.407392][ T8161] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  445.418032][ T8161] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  445.444132][ T8161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.591790][ T9822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  445.964856][ T9850] loop3: detected capacity change from 0 to 512
[  447.168761][ T9850] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  447.176350][ T9850] UDF-fs: Scanning with blocksize 512 failed
[  447.183195][ T9850] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  447.190655][ T9850] UDF-fs: Scanning with blocksize 1024 failed
[  447.207605][ T9850] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  447.215453][ T9850] UDF-fs: Scanning with blocksize 2048 failed
[  447.223181][ T9850] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  447.233100][ T8161] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  447.249300][ T9850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  447.304016][ T3598] usb 3-1: USB disconnect, device number 31
[  447.510283][ T8161] usb 2-1: Using ep0 maxpacket: 8
[  447.579222][ T9865] netlink: 'syz.2.1525': attribute type 10 has an invalid length.
[  447.587608][ T9865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1525'.
[  447.630552][ T8161] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  447.644102][ T8161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.683593][ T8161] usb 2-1: config 0 descriptor??
[  447.705493][ T9865] team0: Port device syz_tun added
[  447.757266][ T9860] team0: Port device vlan2 added
[  447.842216][ T9865] syz.2.1525 (9865) used greatest stack depth: 19008 bytes left
[  447.928115][ T9876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.972986][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[  448.012203][ T9876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1529'.
[  448.013409][ T9878] 9pnet_fd: Insufficient options for proto=fd
[  448.292431][ T9884] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  448.298957][ T9884] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  448.309030][ T9884] vhci_hcd vhci_hcd.0: Device attached
[  448.322982][ T9885] vhci_hcd: connection closed
[  448.323183][   T56] vhci_hcd: stop threads
[  448.342339][   T56] vhci_hcd: release socket
[  448.346844][   T56] vhci_hcd: disconnect device
[  449.756083][ T9897] loop4: detected capacity change from 0 to 512
[  449.766427][ T9897] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  449.774527][ T9897] UDF-fs: Scanning with blocksize 512 failed
[  449.785171][ T9897] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  449.792696][ T9897] UDF-fs: Scanning with blocksize 1024 failed
[  449.801347][ T9897] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  449.808785][ T9897] UDF-fs: Scanning with blocksize 2048 failed
[  449.822906][ T9897] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  450.325434][ T8161] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  450.339937][ T8161] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  450.342617][ T9897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  450.350691][ T8161] asix: probe of 2-1:0.0 failed with error -71
[  450.372561][ T8161] usb 2-1: USB disconnect, device number 31
[  450.697488][ T9912] loop0: detected capacity change from 0 to 256
[  450.777954][ T9912] FAT-fs (loop0): Directory bread(block 1285) failed
[  450.824507][ T9912] FAT-fs (loop0): Directory bread(block 1285) failed
[  450.834880][ T9912] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  450.852762][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  450.919293][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'.
[  450.955816][ T9919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1542'.
[  451.457501][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'.
[  451.879939][ T9936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.100224][ T3598] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  452.390233][ T3598] usb 5-1: Using ep0 maxpacket: 16
[  452.479397][ T9943] device pim6reg1 entered promiscuous mode
[  452.712931][ T3598] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  452.734089][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.743674][ T3598] usb 5-1: Product: syz
[  452.747996][ T3598] usb 5-1: Manufacturer: syz
[  452.765969][ T3598] usb 5-1: SerialNumber: syz
[  452.785675][ T3598] usb 5-1: config 0 descriptor??
[  452.794264][ T9951] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  452.800853][ T9951] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  452.825513][ T9955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.850327][ T8161] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  452.859992][ T9951] vhci_hcd vhci_hcd.0: Device attached
[  452.862649][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'.
[  452.865716][ T9952] vhci_hcd: connection closed
[  452.875359][ T3598] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  452.923762][ T9955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1555'.
[  452.935002][ T3941] vhci_hcd: stop threads
[  452.939325][ T3941] vhci_hcd: release socket
[  452.966451][ T3941] vhci_hcd: disconnect device
[  453.130283][ T8161] usb 3-1: Using ep0 maxpacket: 8
[  453.250447][ T8161] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  453.261087][ T8161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.277732][ T8161] usb 3-1: config 0 descriptor??
[  453.890270][ T3598] ssu100: probe of 5-1:0.0 failed with error -110
[  453.979534][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'.
[  454.548868][ T9985] loop0: detected capacity change from 0 to 8
[  454.730387][ T8161] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  454.749420][ T8161] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  454.772298][ T8161] asix: probe of 3-1:0.0 failed with error -71
[  454.806607][ T8161] usb 3-1: USB disconnect, device number 32
[  454.936047][ T8072] usb 5-1: USB disconnect, device number 16
[  455.069655][ T9989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.087594][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'.
[  455.100642][ T9989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1567'.
[  455.218213][ T9990] loop4: detected capacity change from 0 to 256
[  455.257975][ T9990] FAT-fs (loop4): Directory bread(block 1285) failed
[  455.281157][ T9990] FAT-fs (loop4): Directory bread(block 1285) failed
[  455.323791][ T9990] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  455.367641][ T9985] loop0: detected capacity change from 0 to 32768
[  455.388826][ T3559] Bluetooth: hci4: ISO packet for unknown connection handle 4095
[  455.396993][ T3559] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  456.834119][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1572'.
[  457.863167][ T8072] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  458.200171][ T8072] usb 2-1: Using ep0 maxpacket: 16
[  458.524931][T10033] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  458.531469][T10033] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  458.540476][ T8072] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  458.558379][T10033] vhci_hcd vhci_hcd.0: Device attached
[  458.564127][T10034] vhci_hcd: connection closed
[  458.565996][ T3686] vhci_hcd: stop threads
[  458.583634][ T8072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.602027][ T3686] vhci_hcd: release socket
[  458.624205][ T3686] vhci_hcd: disconnect device
[  458.624238][ T8072] usb 2-1: Product: syz
[  458.635120][ T8072] usb 2-1: Manufacturer: syz
[  458.643086][ T8072] usb 2-1: SerialNumber: syz
[  458.655414][ T8072] usb 2-1: config 0 descriptor??
[  458.711890][ T8072] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  458.847176][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'.
[  459.228945][ T3559] Bluetooth: hci4: ISO packet for unknown connection handle 4095
[  459.237528][ T3559] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  459.970283][ T8072] ssu100: probe of 2-1:0.0 failed with error -110
[  461.477312][T10085] loop3: detected capacity change from 0 to 8
[  461.497890][T10082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.553736][ T6857] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  461.915224][ T8072] usb 2-1: USB disconnect, device number 32
[  462.751919][ T3559] Bluetooth: hci0: ISO packet for unknown connection handle 4095
[  462.760317][ T3559] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  462.771441][ T3559] CPU: 0 PID: 3559 Comm: kworker/u5:5 Not tainted 6.1.99-syzkaller #0
[  462.779591][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  462.789633][ T3559] Workqueue: hci0 hci_rx_work
[  462.794306][ T3559] Call Trace:
[  462.797592][ T3559]  <TASK>
[  462.800523][ T3559]  dump_stack_lvl+0x1e3/0x2cb
[  462.805223][ T3559]  ? nf_tcp_handle_invalid+0x642/0x642
[  462.810674][ T3559]  ? panic+0x764/0x764
[  462.814735][ T3559]  sysfs_create_dir_ns+0x2c6/0x390
[  462.819838][ T3559]  ? sysfs_warn_dup+0xa0/0xa0
[  462.824508][ T3559]  kobject_add_internal+0x6df/0xd10
[  462.829698][ T3559]  kobject_add+0x14e/0x210
[  462.834100][ T3559]  ? device_add+0x3c2/0xfd0
[  462.838589][ T3559]  ? kobject_init+0x1d0/0x1d0
[  462.843256][ T3559]  ? __raw_spin_lock_init+0x41/0x100
[  462.848531][ T3559]  ? get_device_parent+0x128/0x400
[  462.853634][ T3559]  device_add+0x476/0xfd0
[  462.857964][ T3559]  hci_conn_add_sysfs+0xe4/0x1f0
[  462.862891][ T3559]  le_conn_complete_evt+0xcc6/0x1320
[  462.868163][ T3559]  ? trace_contention_end+0x61/0x170
[  462.873437][ T3559]  ? hci_le_big_info_adv_report_evt+0x390/0x390
[  462.879665][ T3559]  ? __mutex_unlock_slowpath+0x218/0x750
[  462.885287][ T3559]  ? mutex_unlock+0x10/0x10
[  462.889767][ T3559]  ? skb_pull_data+0x10e/0x220
[  462.894510][ T3559]  hci_le_enh_conn_complete_evt+0x181/0x410
[  462.900390][ T3559]  hci_event_packet+0xa40/0x1510
[  462.905314][ T3559]  ? hci_remote_host_features_evt+0x210/0x210
[  462.911366][ T3559]  ? bis_list+0x290/0x290
[  462.915674][ T3559]  ? do_raw_spin_unlock+0x137/0x8a0
[  462.920853][ T3559]  ? kcov_remote_start+0x4b5/0x7d0
[  462.925945][ T3559]  ? lockdep_hardirqs_on+0x50/0x130
[  462.931126][ T3559]  ? hci_send_to_monitor+0x99/0x4d0
[  462.936305][ T3559]  hci_rx_work+0x3cd/0xce0
[  462.940700][ T3559]  ? do_raw_spin_unlock+0x137/0x8a0
[  462.945882][ T3559]  ? process_one_work+0x7a9/0x11d0
[  462.950974][ T3559]  process_one_work+0x8a9/0x11d0
[  462.955898][ T3559]  ? worker_detach_from_pool+0x260/0x260
[  462.961517][ T3559]  ? _raw_spin_lock_irqsave+0x120/0x120
[  462.967043][ T3559]  ? kthread_data+0x4e/0xc0
[  462.971532][ T3559]  ? wq_worker_running+0x97/0x190
[  462.976543][ T3559]  worker_thread+0xa47/0x1200
[  462.981208][ T3559]  ? __sched_text_start+0x8/0x8
[  462.986056][ T3559]  kthread+0x28d/0x320
[  462.990108][ T3559]  ? worker_clr_flags+0x190/0x190
[  462.995122][ T3559]  ? kthread_blkcg+0xd0/0xd0
[  462.999692][ T3559]  ret_from_fork+0x1f/0x30
[  463.004099][ T3559]  </TASK>
[  463.017898][ T3559] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  463.031246][ T3559] Bluetooth: hci0: failed to register connection device
[  463.392419][T10085] loop3: detected capacity change from 0 to 32768
[  463.418667][T10108] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  464.708941][T10126] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  464.715497][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  464.759145][T10131] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  464.891570][T10127] vhci_hcd: connection closed
[  464.903460][T10126] vhci_hcd vhci_hcd.0: Device attached
[  464.960865][ T3686] vhci_hcd: stop threads
[  464.965341][ T3686] vhci_hcd: release socket
[  465.015866][ T3686] vhci_hcd: disconnect device
[  465.100151][   T48] Bluetooth: hci0: command tx timeout
[  465.280259][ T3592] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  465.490138][ T3592] usb 5-1: device descriptor read/64, error -71
[  465.770527][ T3592] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  465.912880][T10146] loop2: detected capacity change from 0 to 40427
[  465.944397][   T48] Bluetooth: hci2: ISO packet for unknown connection handle 4095
[  465.953147][   T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  465.973221][T10146] F2FS-fs (loop2): Found nat_bits in checkpoint
[  465.990371][ T3592] usb 5-1: device descriptor read/64, error -71
[  466.012893][T10146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  466.068283][ T7886] syz-executor: attempt to access beyond end of device
[  466.068283][ T7886] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  466.120694][ T3592] usb usb5-port1: attempt power cycle
[  466.346340][T10158] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  466.560153][ T3592] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  466.660386][ T3592] usb 5-1: device descriptor read/8, error -71
[  467.071272][T10170] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  467.086635][T10170] kvm: pic: non byte write
[  467.095422][T10170] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  467.160287][ T3592] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  467.180231][   T48] Bluetooth: hci0: command tx timeout
[  467.250239][ T3592] usb 5-1: Using ep0 maxpacket: 8
[  467.370264][ T3592] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  467.379544][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.036961][ T3592] usb 5-1: config 0 descriptor??
[  468.084963][ T3592] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  468.105607][ T3592] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20
[  468.317195][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.351813][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.380183][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  469.321528][T10190] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  469.668108][T10208] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  469.756611][T10205] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  469.763153][T10205] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  469.784358][T10205] vhci_hcd vhci_hcd.0: Device attached
[  470.030984][ T3597] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  470.120229][ T6509] usb 12-1: SetAddress Request (2) to port 0
[  470.128804][ T6509] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd
[  470.320352][ T3597] usb 2-1: device descriptor read/64, error -71
[  470.469468][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  470.614917][ T3597] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  471.380211][ T3597] usb 2-1: device descriptor read/64, error -71
[  471.910717][ T3597] usb usb2-port1: attempt power cycle
[  472.440287][ T3597] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  473.033018][T10210] vhci_hcd: connection reset by peer
[  473.038787][ T3973] vhci_hcd: stop threads
[  473.044756][ T3973] vhci_hcd: release socket
[  473.054165][T10238] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  473.105237][ T3973] vhci_hcd: disconnect device
[  473.373821][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'.
[  473.396266][ T3597] usb 2-1: device not accepting address 35, error -71
[  473.741901][T10256] loop3: detected capacity change from 0 to 4096
[  473.770253][ T3597] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  473.900587][ T3597] usb 2-1: device descriptor read/8, error -71
[  474.098564][ T3597] usb usb2-port1: unable to enumerate USB device
[  474.136089][ T8002] usb 5-1: USB disconnect, device number 20
[  474.226278][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  474.392585][   T27] audit: type=1800 audit(1721213329.960:127): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1643" name="bus" dev="loop3" ino=34 res=0 errno=0
[  475.226868][ T6509] usb 12-1: device descriptor read/8, error -110
[  475.297810][   T48] Bluetooth: to_multiplier 7 < 10
[  475.324231][T10280] syz.0.1651[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  475.324300][T10280] syz.0.1651[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  475.446556][T10288] loop3: detected capacity change from 0 to 512
[  476.239834][T10288] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  476.247253][T10288] UDF-fs: Scanning with blocksize 512 failed
[  476.253927][T10288] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  476.261321][T10288] UDF-fs: Scanning with blocksize 1024 failed
[  476.267875][T10288] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  476.275317][T10288] UDF-fs: Scanning with blocksize 2048 failed
[  476.283253][T10288] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  476.297924][T10288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  476.351213][T10281] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  476.502534][ T6509] usb usb12-port1: attempt power cycle
[  477.191601][ T6509] usb usb12-port1: unable to enumerate USB device
[  477.383902][   T48] Bluetooth: hci3: command tx timeout
[  477.750755][T10312] device vlan3 entered promiscuous mode
[  477.854952][T10312] device dummy0 entered promiscuous mode
[  478.810543][T10312] device dummy0 left promiscuous mode
[  479.150103][ T6509] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  479.400144][ T6509] usb 4-1: device descriptor read/64, error -71
[  479.439204][T10336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  479.680164][ T6509] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  479.746401][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'.
[  479.857649][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'.
[  479.875304][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'.
[  479.890257][ T6509] usb 4-1: device descriptor read/64, error -71
[  480.017427][ T6509] usb usb4-port1: attempt power cycle
[  480.153846][T10357] loop4: detected capacity change from 0 to 512
[  480.230233][T10357] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  480.940152][ T6509] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  480.946540][T10360] loop0: detected capacity change from 0 to 128
[  480.981699][T10357] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1674: iget: bad i_size value: -67835469387268086
[  481.009831][T10357] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1674: couldn't read orphan inode 15 (err -117)
[  481.030425][T10357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  481.049229][T10357] ext2 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff)
[  481.060536][ T6509] usb 4-1: device descriptor read/8, error -71
[  481.226848][ T9395] EXT4-fs (loop4): unmounting filesystem.
[  481.330136][ T6509] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  481.345110][T10371] loop4: detected capacity change from 0 to 256
[  481.405158][T10371] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  481.438679][T10371] FAT-fs (loop4): Filesystem has been set read-only
[  481.450339][ T6509] usb 4-1: device descriptor read/8, error -71
[  481.570314][ T6509] usb usb4-port1: unable to enumerate USB device
[  481.635934][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1680'.
[  481.696792][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1680'.
[  481.989292][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1684'.
[  482.024137][T10386] sock: sock_timestamping_bind_phc: sock not bind to device
[  482.406273][T10393] smc: net device ip6gre0 applied user defined pnetid SYZ0
[  483.376315][T10402] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  483.380472][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1692'.
[  483.382847][T10402] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  483.430523][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1692'.
[  483.464801][T10402] vhci_hcd vhci_hcd.0: Device attached
[  483.465032][T10406] vhci_hcd: connection closed
[  483.557501][   T38] vhci_hcd: stop threads
[  483.568248][   T38] vhci_hcd: release socket
[  483.594792][   T38] vhci_hcd: disconnect device
[  483.602537][T10416] xt_hashlimit: Unknown mode mask 312C7057, kernel too old?
[  483.740177][ T6509] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  484.660542][ T6509] usb 5-1: device descriptor read/64, error -71
[  484.670704][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'.
[  484.730950][T10426] sock: sock_timestamping_bind_phc: sock not bind to device
[  484.891679][T10429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1701'.
[  484.906574][T10433] loop1: detected capacity change from 0 to 8
[  484.940202][ T6509] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  485.392661][T10436] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  485.529524][T10442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.610759][T10442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1703'.
[  485.621338][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1705'.
[  485.673493][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1705'.
[  486.636293][ T3559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  486.850221][ T3559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  486.870251][ T3559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  486.878275][ T3559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  486.887200][ T3559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  486.894568][ T3559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  487.035555][T10468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'.
[  487.418541][T10476] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  487.425088][T10476] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  487.453200][T10476] vhci_hcd vhci_hcd.0: Device attached
[  487.482996][T10478] vhci_hcd: connection closed
[  487.483202][ T3969] vhci_hcd: stop threads
[  487.518893][ T3969] vhci_hcd: release socket
[  487.544475][ T3969] vhci_hcd: disconnect device
[  487.787860][T10458] chnl_net:caif_netlink_parms(): no params data found
[  488.040784][T10466] loop0: detected capacity change from 0 to 40427
[  488.059219][T10466] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  488.070881][T10466] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  488.137729][T10458] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.148046][T10466] F2FS-fs (loop0): Found nat_bits in checkpoint
[  488.192895][T10458] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.209619][T10458] device bridge_slave_0 entered promiscuous mode
[  488.256310][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'.
[  488.296163][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'.
[  488.316062][T10466] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  488.331805][T10466] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  488.358162][T10458] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.367714][T10458] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.385217][T10458] device bridge_slave_1 entered promiscuous mode
[  489.361517][ T3559] Bluetooth: hci5: command tx timeout
[  489.562896][ T3546] syz-executor: attempt to access beyond end of device
[  489.562896][ T3546] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  489.686323][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  489.738281][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  489.929749][T10284] team0: Port device syz_tun removed
[  490.027393][T10508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.045024][T10458] team0: Port device team_slave_0 added
[  490.059238][T10506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.063809][T10458] team0: Port device team_slave_1 added
[  490.097706][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1722'.
[  490.208209][ T3941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.250666][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.267026][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.301408][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.392180][ T3941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.419193][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.440143][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.459379][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'.
[  490.496647][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.566462][ T3941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.644821][T10458] device hsr_slave_0 entered promiscuous mode
[  490.672836][T10458] device hsr_slave_1 entered promiscuous mode
[  490.687428][T10458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  490.728965][T10458] Cannot create hsr debugfs directory
[  490.757171][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.771975][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.792907][ T3941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.822815][T10519] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  490.829335][T10519] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  490.863511][T10519] vhci_hcd vhci_hcd.0: Device attached
[  490.870611][T10525] vhci_hcd: connection closed
[  490.885745][ T3812] vhci_hcd: stop threads
[  490.905260][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1727'.
[  490.917026][ T3812] vhci_hcd: release socket
[  490.921947][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1727'.
[  490.938220][ T3812] vhci_hcd: disconnect device
[  491.140350][ T3598] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  491.330171][ T3598] usb 1-1: device descriptor read/64, error -71
[  491.420422][   T48] Bluetooth: hci5: command tx timeout
[  491.600300][ T3598] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  491.696011][T10554] loop3: detected capacity change from 0 to 512
[  491.710889][T10554] EXT4-fs: Ignoring removed nomblk_io_submit option
[  492.164986][T10554] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.3.1733: corrupted xattr block 95
[  492.179856][T10554] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  492.199172][T10554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1733: bg 0: block 7: invalid block bitmap
[  492.232714][T10554] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  492.327645][T10554] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #11: comm syz.3.1733: corrupted xattr block 95
[  492.369346][T10554] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117)
[  492.414688][T10554] EXT4-fs (loop3): 1 orphan inode deleted
[  492.420530][T10554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  492.480267][ T3598] usb 1-1: device descriptor read/64, error -71
[  492.512988][T10554] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  492.549080][T10554] EXT4-fs error (device loop3): __ext4_remount:6425: comm syz.3.1733: Abort forced by user
[  492.573016][T10554] EXT4-fs (loop3): Remounting filesystem read-only
[  492.610669][ T3598] usb usb1-port1: attempt power cycle
[  492.687083][ T7834] EXT4-fs (loop3): unmounting filesystem.
[  492.840170][T10574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.933057][T10574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1737'.
[  493.030307][ T3598] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  493.117511][T10458] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  493.140480][ T3598] usb 1-1: device descriptor read/8, error -71
[  493.146965][T10458] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  493.297258][T10458] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  493.309080][T10458] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  493.393518][T10577] loop1: detected capacity change from 0 to 40427
[  493.410498][ T3598] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  493.419279][T10577] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  493.433951][T10577] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  493.481884][T10577] F2FS-fs (loop1): Found nat_bits in checkpoint
[  493.500149][   T48] Bluetooth: hci5: command tx timeout
[  493.520400][ T3598] usb 1-1: device descriptor read/8, error -71
[  493.609294][ T3941] device hsr_slave_0 left promiscuous mode
[  493.610684][T10577] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  493.650187][T10577] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  493.650348][ T3598] usb usb1-port1: unable to enumerate USB device
[  493.695818][ T3941] device hsr_slave_1 left promiscuous mode
[  493.704285][ T3941] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  493.724262][ T3941] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.732216][   T27] audit: type=1804 audit(1721213349.300:128): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1739" name="/newroot/62/file2/bus" dev="loop1" ino=10 res=1 errno=0
[  493.811985][ T3941] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.835863][ T3941] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.861547][   T27] audit: type=1804 audit(1721213349.300:129): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1739" name="/newroot/62/file2/bus" dev="loop1" ino=10 res=1 errno=0
[  493.883580][ T3941] device bridge_slave_1 left promiscuous mode
[  493.892634][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.918634][ T3941] device bridge_slave_0 left promiscuous mode
[  493.932349][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.980696][T10610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  494.067847][ T3941] device veth1_macvtap left promiscuous mode
[  494.079276][ T3941] device veth0_macvtap left promiscuous mode
[  494.088073][ T3941] device veth1_vlan left promiscuous mode
[  494.094416][ T9281] syz-executor: attempt to access beyond end of device
[  494.094416][ T9281] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  494.097776][ T3941] device veth0_vlan left promiscuous mode
[  494.657309][T10615] loop0: detected capacity change from 0 to 32768
[  494.713341][T10615] XFS (loop0): Mounting V5 Filesystem
[  494.793236][T10615] XFS (loop0): Ending clean mount
[  494.886820][ T3546] XFS (loop0): Unmounting Filesystem
[  495.003934][ T3941] team0 (unregistering): Port device team_slave_1 removed
[  495.077355][ T3941] team0 (unregistering): Port device team_slave_0 removed
[  495.147980][ T3941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  495.189213][ T3941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  495.590147][   T48] Bluetooth: hci5: command tx timeout
[  495.679632][ T3941] bond0 (unregistering): Released all slaves
[  495.917274][T10458] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.959760][T10640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.994297][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  496.001352][T10644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  496.021126][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  496.043894][T10458] 8021q: adding VLAN 0 to HW filter on device team0
[  496.059915][T10642] fuse: Bad value for 'user_id'
[  496.067451][T10640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1749'.
[  496.075918][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  496.090860][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  496.100401][T10642] loop1: detected capacity change from 0 to 512
[  496.120770][T10642] EXT4-fs: Ignoring removed mblk_io_submit option
[  496.161479][T10642] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  496.191194][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.198301][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.200652][T10642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  496.223276][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  496.231458][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  496.240177][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  496.248610][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.255741][ T6509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.265516][T10642] System zones: 1-12
[  496.279072][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  496.289760][T10642] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1748: corrupted in-inode xattr
[  496.314539][T10642] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1748: couldn't read orphan inode 15 (err -117)
[  496.314704][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  496.335742][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  496.344861][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  496.353183][T10642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  496.357526][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  496.375976][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  496.399220][T10458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  496.416430][T10458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  496.417163][T10642] EXT4-fs (loop1): unmounting filesystem.
[  496.429540][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  496.451950][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  496.466500][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  496.475209][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  496.488954][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  496.520449][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  496.941194][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  496.948693][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  497.139255][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.140260][T10655] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  497.152555][T10655] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  497.849382][T10655] vhci_hcd vhci_hcd.0: Device attached
[  497.854961][T10668] vhci_hcd: connection closed
[  497.902012][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  497.915073][ T4686] vhci_hcd: stop threads
[  497.919321][ T4686] vhci_hcd: release socket
[  497.930174][ T4686] vhci_hcd: disconnect device
[  497.950837][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  497.973709][T10458] device veth0_vlan entered promiscuous mode
[  498.016854][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  498.041324][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  498.059320][T10458] device veth1_vlan entered promiscuous mode
[  498.081279][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  498.086282][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'.
[  498.089309][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  498.191516][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  498.208563][ T6509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  498.230954][T10458] device veth0_macvtap entered promiscuous mode
[  498.249056][T10685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.250632][T10458] device veth1_macvtap entered promiscuous mode
[  498.291810][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1761'.
[  498.312603][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.330228][ T3592] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  498.352591][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.380116][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.396988][T10690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1761'.
[  498.406111][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.433543][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.453437][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.485651][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.518431][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.536506][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.547463][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  498.562189][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  498.574837][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  498.584802][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  498.675976][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.705861][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.726017][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.740332][ T3592] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  498.760088][ T3592] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  498.769281][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.789575][ T3592] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  498.799007][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.819760][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.842409][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.894341][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.933185][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.966480][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  498.999733][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  499.019016][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  499.051946][T10458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.101110][T10458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.138636][T10458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.147982][T10458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.524618][ T4686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.546454][ T4686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.633030][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  499.672558][ T4686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.698137][ T4686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.765510][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  500.139047][ T3598] usb 2-1: USB disconnect, device number 37
[  500.440942][T10713] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  500.489626][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'.
[  500.582192][ T3597] wlan1: authenticate with 50:50:50:50:50:50
[  500.610963][ T3597] wlan1: No legacy rates in association response
[  500.617730][ T3597] 
[  500.620460][ T3597] =============================
[  500.625329][ T3597] WARNING: suspicious RCU usage
[  500.630241][ T3597] 6.1.99-syzkaller #0 Not tainted
[  500.635269][ T3597] -----------------------------
[  500.640182][ T3597] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage!
[  500.648886][ T3597] 
[  500.648886][ T3597] other info that might help us debug this:
[  500.648886][ T3597] 
[  500.659213][ T3597] 
[  500.659213][ T3597] rcu_scheduler_active = 2, debug_locks = 1
[  500.667333][ T3597] 4 locks held by kworker/1:7/3597:
[  500.672597][ T3597]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  500.683039][ T3597]  #1: ffffc90004dbfd20 ((work_completion)(&rdev->conn_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  500.694755][ T3597]  #2: ffff8880221807c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0xbe/0x500
[  500.704760][ T3597]  #3: ffff8880219e0d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0x13e/0x500
[  500.714358][ T3597] 
[  500.714358][ T3597] stack backtrace:
[  500.720280][ T3597] CPU: 1 PID: 3597 Comm: kworker/1:7 Not tainted 6.1.99-syzkaller #0
[  500.728350][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  500.738414][ T3597] Workqueue: events cfg80211_conn_work
[  500.743893][ T3597] Call Trace:
[  500.746726][T10698] loop3: detected capacity change from 0 to 40427
[  500.747158][ T3597]  <TASK>
[  500.756509][ T3597]  dump_stack_lvl+0x1e3/0x2cb
[  500.761205][ T3597]  ? nf_tcp_handle_invalid+0x642/0x642
[  500.766682][ T3597]  ? panic+0x764/0x764
[  500.770773][ T3597]  lockdep_rcu_suspicious+0x21c/0x330
[  500.776163][ T3597]  sta_remove_link+0x353/0x4a0
[  500.780949][ T3597]  sta_info_free+0x4f/0x750
[  500.785466][ T3597]  ieee80211_prep_connection+0xda4/0x1150
[  500.791199][ T3597]  ? ieee80211_prep_connection+0x51d/0x1150
[  500.797106][ T3597]  ieee80211_mgd_auth+0xbaf/0x1150
[  500.802227][ T3597]  ? __local_bh_enable_ip+0x164/0x1f0
[  500.807629][ T3597]  ? ieee80211_mlme_notify_scan_completed+0x400/0x400
[  500.814410][ T3597]  ? rcu_is_watching+0x11/0xb0
[  500.819201][ T3597]  cfg80211_mlme_auth+0x587/0x9b0
[  500.824240][ T3597]  cfg80211_conn_do_work+0x47c/0xdd0
[  500.829540][ T3597]  ? cfg80211_conn_work+0x500/0x500
[  500.834758][ T3597]  ? __lock_acquire+0x125b/0x1f80
[  500.839870][ T3597]  ? mutex_lock_nested+0x10/0x10
[  500.844808][ T3597]  ? __lock_acquire+0x125b/0x1f80
[  500.849851][ T3597]  ? mark_lock+0x9a/0x340
[  500.854196][ T3597]  ? cfg80211_conn_work+0x255/0x500
[  500.859417][ T3597]  cfg80211_conn_work+0x2a1/0x500
[  500.864461][ T3597]  ? trace_rdev_return_int+0x270/0x270
[  500.869933][ T3597]  ? mark_lock+0x9a/0x340
[  500.874278][ T3597]  ? __lock_acquire+0x125b/0x1f80
[  500.879342][ T3597]  ? read_lock_is_recursive+0x10/0x10
[  500.884730][ T3597]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  500.890724][ T3597]  ? print_irqtrace_events+0x210/0x210
[  500.896190][ T3597]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  500.902095][ T3597]  ? do_raw_spin_unlock+0x137/0x8a0
[  500.907305][ T3597]  ? process_one_work+0x7a9/0x11d0
[  500.912427][ T3597]  process_one_work+0x8a9/0x11d0
[  500.917386][ T3597]  ? worker_detach_from_pool+0x260/0x260
[  500.923032][ T3597]  ? _raw_spin_lock_irqsave+0x120/0x120
[  500.928580][ T3597]  ? kthread_data+0x4e/0xc0
[  500.933099][ T3597]  ? wq_worker_running+0x97/0x190
[  500.938136][ T3597]  worker_thread+0xa47/0x1200
[  500.942829][ T3597]  ? _raw_spin_unlock+0x40/0x40
[  500.947702][ T3597]  kthread+0x28d/0x320
[  500.951778][ T3597]  ? worker_clr_flags+0x190/0x190
[  500.956810][ T3597]  ? kthread_blkcg+0xd0/0xd0
[  500.961413][ T3597]  ret_from_fork+0x1f/0x30
[  500.965856][ T3597]  </TASK>
[  501.024212][T10698] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  501.072974][T10698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  501.134929][T10698] F2FS-fs (loop3): Found nat_bits in checkpoint
[  501.182317][T10698] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  501.189504][T10698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  501.217407][   T27] audit: type=1804 audit(1721213356.780:130): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1765" name="/newroot/164/file2/bus" dev="loop3" ino=10 res=1 errno=0
[  501.258252][   T27] audit: type=1804 audit(1721213356.810:131): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1765" name="/newroot/164/file2/bus" dev="loop3" ino=10 res=1 errno=0
[  501.280838][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  501.280881][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  501.605327][ T7834] syz-executor: attempt to access beyond end of device
[  501.605327][ T7834] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427