last executing test programs:

42.037882176s ago: executing program 0 (id=1536):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000019c0))

40.289169178s ago: executing program 0 (id=1539):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000e9"], 0x48)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000240)=[@op={0x18}], 0x18}], 0x1, 0x8000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
sched_getattr(r0, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)

37.961096453s ago: executing program 0 (id=1551):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000e9"], 0x48)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000240)=[@op={0x18}], 0x18}], 0x1, 0x8000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
sched_getattr(r0, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)

30.732450763s ago: executing program 0 (id=1550):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b5, &(0x7f0000001080)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551c, 0xffffffffffffffff)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f00000004c0)=""/4096)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
sendfile(r0, r6, 0x0, 0xf800)

30.54150615s ago: executing program 0 (id=1552):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

28.795295022s ago: executing program 0 (id=1553):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
faccessat(0xffffffffffffffff, 0x0, 0x190)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
write$binfmt_script(r4, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
shmctl$SHM_LOCK(0x0, 0xb)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r5, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bc, &(0x7f0000001200)="$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")
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

25.599644058s ago: executing program 3 (id=1559):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdd, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)=r4}, 0x20)
setresuid(0x0, r3, 0x0)
semget$private(0x0, 0x6, 0x0)
semtimedop(0x0, &(0x7f0000000080)=[{0x4, 0x8001}], 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1)
write$dsp(r0, &(0x7f00000001c0)="3a529df598ffb7263c288a00", 0xc)

22.906614858s ago: executing program 3 (id=1564):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

22.797177568s ago: executing program 3 (id=1565):
r0 = socket(0x10, 0x803, 0x0)
write(r0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file2\x00', 0x2000084c, &(0x7f0000000440)=ANY=[], 0x84, 0x1505, &(0x7f0000002180)="$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")
sendto(r0, &(0x7f0000000300), 0x0, 0x800, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000080)=0x7fffffff, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}}, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9})
dup2(r3, r2)

19.376587334s ago: executing program 3 (id=1571):
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b0100"], 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8)
mkdir(0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r2, 0x0, 0x0)
utime(&(0x7f0000000e00)='./file0\x00', 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

16.667368736s ago: executing program 2 (id=1577):
syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000100000080045000052f247b8e48b8270000000000001907864010100ac000045000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f00000100000000"], 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='sched_switch\x00'}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sched_setaffinity(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})

15.505738964s ago: executing program 2 (id=1579):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000020c0)='sysB/\x10', &(0x7f0000000180)='sysfs\x00', 0x0)

15.280787494s ago: executing program 2 (id=1581):
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x1b, 0xf423f, 0x4100, 0x0, 0x0, 0x2c43})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
fchmod(r2, 0x104)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}], 0xc})
syz_emit_vhci(0x0, 0x9)
sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x58, 0x40}}], 0x1, 0x4004000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r4, 0x82e0, 0xff39, 0x3)

15.268237656s ago: executing program 3 (id=1582):
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x1b, 0xf423f, 0x4100, 0x0, 0x0, 0x2c43})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
fchmod(r2, 0x104)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}], 0xc})
syz_emit_vhci(0x0, 0x9)
sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x58, 0x40}}], 0x1, 0x4004000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$eJzslb9rFEEUx78zu7e5BAlYaGFzFgEjmL3dPZU0FrEXhETU8jBjiE5y4XJFEhASbGysxX/EIpWFnVbWFioIFqa0EhyZ2dnb2dzuHcv5o/B9IJPvzOybee/tu7cgCOK/5fOn7x+f31xeuwLgDBYwY9e/evkz3Hn+w0uvYeWb7fknx6fPYwCUyuf+hPsDAK9XPOAwPVYp1xpYsGeugRutuQOOy1bfBUOY+apyawGG+3b50Y4aRtObtUIK9qAn1x9uShHpIdZDoocOoAr+nxwxrANo2iuY49/u/sHjrgT6qZAiEw2V3TOyVVeMy5/xb4XjhpMC/b7uPXt6pOehXY+c/MXgiK3ugGHV6mXMIAzDlp2K2In/gp+f76WvLeWwTiTN6RJRV5xdKtnSFT7efFYKHe1vc+On+iMBBoUS/HtZLRPaj/pWvDVqFUw4R0zvMzu9wtySOH9y/HbU6ss/Te90wjQuAO7WC1027+ekvFVqda6wcrHiJ5NVYGVJpP2D+cAlpz/5zlehPdjaae/uHyxtbnU3xIbYTpLO9ehqFF1L2qY3p+OY/tc0/WnOOb9R8WzAAux1B4N+vAcM+vFwnqSj03FXX/W+GRtu+h/H4g+lss+LCTv7ULLiHcz+cfNfq0Wv0nmCIAiCIAiCIAiCIAiCIIhatMDwbn44VeX4yW2z/SsAAP//mv9ajg==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r4, 0x82e0, 0xff39, 0x3)

11.883400849s ago: executing program 3 (id=1583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
faccessat(0xffffffffffffffff, 0x0, 0x190)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
write$binfmt_script(r4, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
shmctl$SHM_LOCK(0x0, 0xb)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r5, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bc, &(0x7f0000001200)="$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")
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

11.882383549s ago: executing program 1 (id=1592):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
epoll_create(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x5605, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
setxattr$system_posix_acl(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="11bff1d7f12db919c5c70f28914c174499060eac928d5eb68cc249bf00be2cf7fce62534fd33d966f255c09513e4c4bc35593b59e7a9adab5515098d7af77dba3c006a10bc7e765aa9b55a0713ce19b6bda61df52cd58d5f1df7eca951a799ced76380ebe0994d2fe879f67f54415b43e61ed404cfed1be6a56658e109c7ffcbffc09ba4276a757a48f460b0020f66d9d04800da8f3bc89eebdc520a96dfdd447c45dfeaaef216d8b965a75e42b886ea46e37202fc22aabaa9e1744aecc5a3b3fa7c1d06335b10f6cff3b0e4debc8a7398f4622ecfe8c733ea5b7aa7f2ce6d9f6c4ef3f674d217dbfac9bfbbb3b31dc0db71a9c7be10e2e0a415e86ba9dbe1226ea1b10382b044a9002f284483cbe68a1d37501c89102122", @ANYRES32=0x0, @ANYBLOB="100000000000000020000000000000"], 0x4c, 0x0)

11.867623621s ago: executing program 2 (id=1584):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000010004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xa0}}, 0x0)
memfd_create(&(0x7f0000000380)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xf6B\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9ac(\xf1\xe0B\xabv\xba\xb3\x8b\xdb\xd9\x01\xe4q\x85\xfa\xad\xac\xbf\xde\xec\fz\x0f\xd8fT\xa8\x9b\xd4\xd2\x91\xa4\x18\xe9>q\xaa$^\x83\xe6\xf7\xce\x9d\xcb\xa8\xd3\xbfQwy`\xcc\xe6\x88\b\xcfK\x8d`Km\xd7\x81<D\x9b\"\xf1\xf3\xb0\x8d5\x85\xc7\x9e\xb60\x91du\xedb\xba\xfdj\xee\xf5\b\x19h\xd3j\xa3\x06\xbc,n\xec\xa0h\xa5\xee\xf0\f4j>\x1f\xa7\xb7\xf0\xde\x10v\xb3g\x048ny^5\x880SX\xeb\xc3\xadW$P\x96\x9d\x92\x89_2\x7f\x9c~\xd9\xa0\xcb\xc2\xa0\xfab\xe8m\x1f\x99\xa0\xd7\xba-\xcf\x03\xf9\xa7\x9d\x8c\x8e,\x93\xfe\xe6)6\xb4:\x16\njg\x19\xf4\n~\fb\x91\xa2\x90h\x97\x81[\xb8\xb2<\xb1\xbd\xe82\xa5\x1f#TAd0\xd7\xdd\xd3\x0f\xb2\xaf\xcd3\xd3D\xb7BC\xcf\x88\xe2_\x80\xe9\xc61C\x7f\xd0\x05\xbcZOG\x94\xe4]\x8f\t', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000100010009000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

11.650497061s ago: executing program 4 (id=1585):
syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000100000080045000052f247b8e48b8270000000000001907864010100ac000045000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f00000100000000"], 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='sched_switch\x00'}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
preadv(r5, 0x0, 0x0, 0x92, 0x0)

10.635364315s ago: executing program 1 (id=1586):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

10.485358569s ago: executing program 4 (id=1587):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdd, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)=r4}, 0x20)
setresuid(0x0, r3, 0x0)
semget$private(0x0, 0x6, 0x0)
semtimedop(0x0, &(0x7f0000000080)=[{0x4, 0x8001}], 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1)
write$dsp(r0, &(0x7f00000001c0)="3a529df598ffb7263c288a00", 0xc)

10.380798858s ago: executing program 1 (id=1588):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_setup(0x6, &(0x7f0000000240)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r4, 0x2, &(0x7f0000000f40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}])

9.382457731s ago: executing program 4 (id=1589):
syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000100000080045000052f247b8e48b8270000000000001907864010100ac000045000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f00000100000000"], 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='sched_switch\x00'}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})

8.767810488s ago: executing program 1 (id=1590):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000020c0)='sysB/\x10', &(0x7f0000000180)='sysfs\x00', 0x0)

8.262462715s ago: executing program 4 (id=1591):
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x835, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xc, @void, @value, @void, @value}, 0x48)
clock_adjtime(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
fchmod(r2, 0x104)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}], 0xc})
syz_emit_vhci(0x0, 0x9)
sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x58, 0x40}}], 0x1, 0x4004000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$eJzslb9rFEEUx78zu7e5BAlYaGFzFgEjmL3dPZU0FrEXhETU8jBjiE5y4XJFEhASbGysxX/EIpWFnVbWFioIFqa0EhyZ2dnb2dzuHcv5o/B9IJPvzOybee/tu7cgCOK/5fOn7x+f31xeuwLgDBYwY9e/evkz3Hn+w0uvYeWb7fknx6fPYwCUyuf+hPsDAK9XPOAwPVYp1xpYsGeugRutuQOOy1bfBUOY+apyawGG+3b50Y4aRtObtUIK9qAn1x9uShHpIdZDoocOoAr+nxwxrANo2iuY49/u/sHjrgT6qZAiEw2V3TOyVVeMy5/xb4XjhpMC/b7uPXt6pOehXY+c/MXgiK3ugGHV6mXMIAzDlp2K2In/gp+f76WvLeWwTiTN6RJRV5xdKtnSFT7efFYKHe1vc+On+iMBBoUS/HtZLRPaj/pWvDVqFUw4R0zvMzu9wtySOH9y/HbU6ss/Te90wjQuAO7WC1027+ekvFVqda6wcrHiJ5NVYGVJpP2D+cAlpz/5zlehPdjaae/uHyxtbnU3xIbYTpLO9ehqFF1L2qY3p+OY/tc0/WnOOb9R8WzAAux1B4N+vAcM+vFwnqSj03FXX/W+GRtu+h/H4g+lss+LCTv7ULLiHcz+cfNfq0Wv0nmCIAiCIAiCIAiCIAiCIIhatMDwbn44VeX4yW2z/SsAAP//mv9ajg==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r4, 0x82e0, 0xff39, 0x3)

8.212207329s ago: executing program 1 (id=1593):
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x400080, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_setup(0x6, &(0x7f0000000240)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r6, 0x2, &(0x7f0000000f40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}])

7.963760732s ago: executing program 2 (id=1594):
r0 = gettid()
setpriority(0x0, r0, 0x3607384a)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x1, 0x12, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
fadvise64(0xffffffffffffffff, 0x82e0, 0xff39, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0)
r1 = dup(0xffffffffffffffff)
mkdir(0x0, 0x408)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x8000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000000440), 0x0, 0x2000000022, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0xee01], 0x52)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
getpeername(r3, 0x0, 0x0)

1.29608118s ago: executing program 1 (id=1596):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
faccessat(0xffffffffffffffff, 0x0, 0x190)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
write$binfmt_script(r4, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
shmctl$SHM_LOCK(0x0, 0xb)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r5, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bc, &(0x7f0000001200)="$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")
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

1.29592698s ago: executing program 4 (id=1597):
syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000100000080045000052f247b8e48b8270000000000001907864010100ac000045000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f00000100000000"], 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='sched_switch\x00'}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
preadv(r5, 0x0, 0x0, 0x92, 0x0)

272.820004ms ago: executing program 4 (id=1598):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
epoll_create(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x5605, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
setxattr$system_posix_acl(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="100000000000000020000000000000"], 0x4c, 0x0)

0s ago: executing program 2 (id=1599):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdd, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)=r4}, 0x20)
setresuid(0x0, r3, 0x0)
semget$private(0x0, 0x6, 0x0)
semtimedop(0x0, &(0x7f0000000080)=[{0x4, 0x8001}], 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1)
write$dsp(r0, &(0x7f00000001c0)="3a529df598ffb7263c288a006ad2", 0xe)

kernel console output (not intermixed with test programs):

][ T6333] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  308.636937][ T6333] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.687192][ T6333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.734031][ T6823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  308.902451][ T6836] 9pnet: Insufficient options for proto=fd
[  309.389351][   T23] usb 5-1: USB disconnect, device number 15
[  309.758479][ T6849] 9pnet: Insufficient options for proto=fd
[  310.110798][   T23] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  310.273599][ T3620] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  310.293675][ T3618] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  312.211772][ T6866] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  312.223680][ T3620] usb 4-1: Using ep0 maxpacket: 16
[  312.229225][ T6866] PKCS7: Only support pkcs7_signedData type
[  312.257875][ T6865] netlink: 'syz.2.927': attribute type 11 has an invalid length.
[  312.278479][ T6865] netlink: 212 bytes leftover after parsing attributes in process `syz.2.927'.
[  312.294160][   T23] usb 5-1: device not accepting address 16, error -71
[  312.303877][ T3618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.324103][ T3618] usb 2-1: config 0 has no interfaces?
[  312.339921][ T3618] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  312.353849][ T3620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.378525][ T3620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.395221][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.410806][ T3620] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  312.434387][ T3618] usb 2-1: config 0 descriptor??
[  312.450160][ T3620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.488803][ T3620] usb 4-1: config 0 descriptor??
[  312.680180][ T6852] udc-core: couldn't find an available UDC or it's busy
[  312.702475][ T6852] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  312.850398][ T5163] usb 2-1: USB disconnect, device number 14
[  312.853882][ T3620] usbhid 4-1:0.0: can't add hid device: -71
[  312.867955][ T3620] usbhid: probe of 4-1:0.0 failed with error -71
[  312.926450][ T3620] usb 4-1: USB disconnect, device number 19
[  313.645795][ T6900] netlink: 'syz.0.939': attribute type 11 has an invalid length.
[  313.660390][ T6900] netlink: 212 bytes leftover after parsing attributes in process `syz.0.939'.
[  314.592839][ T6916] 9pnet: Insufficient options for proto=fd
[  315.529905][ T6928] 9pnet: Insufficient options for proto=fd
[  315.673071][ T6936] 9pnet_virtio: no channels available for device syz
[  316.503655][ T2989] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  316.628432][ T6947] netlink: 'syz.1.950': attribute type 11 has an invalid length.
[  316.663744][ T6947] netlink: 212 bytes leftover after parsing attributes in process `syz.1.950'.
[  317.064857][ T2989] usb 5-1: Using ep0 maxpacket: 16
[  317.235611][ T2989] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  317.306110][ T2989] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  317.534433][ T2989] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  317.573524][ T2989] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  317.617704][ T2989] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  317.638030][ T2989] usb 5-1: config 1 interface 0 has no altsetting 0
[  317.658342][ T2989] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  317.688784][ T2989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.774748][ T2989] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  318.104078][ T2989] scsi host1: usb-storage 5-1:1.0
[  318.391294][ T4546] usb 5-1: USB disconnect, device number 18
[  318.469157][ T6978] 9pnet_virtio: no channels available for device syz
[  319.367913][ T6982] 9pnet: Insufficient options for proto=fd
[  319.686345][ T6998] netlink: 'syz.1.965': attribute type 11 has an invalid length.
[  319.844409][ T6998] netlink: 212 bytes leftover after parsing attributes in process `syz.1.965'.
[  320.025667][ T7004] 9pnet: Insufficient options for proto=fd
[  320.905240][ T7012] mmap: syz.2.972 (7012) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  321.201473][ T7021] 9pnet_virtio: no channels available for device syz
[  322.083252][ T7024] 9pnet: Insufficient options for proto=fd
[  322.135597][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  322.141957][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  322.292597][ T7027] dccp_close: ABORT with 40 bytes unread
[  322.573893][ T7041] capability: warning: `syz.4.982' uses deprecated v2 capabilities in a way that may be insecure
[  323.926147][ T7048] 9pnet: Insufficient options for proto=fd
[  324.965861][ T7062] 9pnet: Insufficient options for proto=fd
[  325.114733][ T7069] program syz.2.990 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  325.526253][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'.
[  325.926491][ T7096] 9pnet: Insufficient options for proto=fd
[  326.618644][ T7099] 9pnet: Insufficient options for proto=fd
[  326.968260][ T7107] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96
[  327.648748][ T7118] 9pnet: Insufficient options for proto=fd
[  327.820390][ T7125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1009'.
[  328.312472][ T7135] 9pnet: Insufficient options for proto=fd
[  331.669498][ T7174] 9pnet: Insufficient options for proto=fd
[  331.926857][ T7182] 9pnet: Insufficient options for proto=fd
[  332.830144][ T3618] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  333.261918][ T7195] netlink: 'syz.0.1031': attribute type 11 has an invalid length.
[  333.299604][ T7195] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1031'.
[  333.415235][ T3618] usb 4-1: unable to get BOS descriptor or descriptor too short
[  333.485002][ T3618] usb 4-1: no configurations
[  333.492685][ T3618] usb 4-1: can't read configurations, error -22
[  334.370962][ T7214] 9pnet: Insufficient options for proto=fd
[  334.663736][ T3618] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  334.873194][ T7223] 9pnet: Insufficient options for proto=fd
[  335.323565][ T3618] usb 4-1: Using ep0 maxpacket: 16
[  335.453686][ T3618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  335.631576][ T3618] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  335.677986][ T7235] 9pnet: Insufficient options for proto=fd
[  335.684269][ T3618] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  335.784674][ T3618] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  335.908794][ T3618] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  335.968117][ T3618] usb 4-1: config 1 interface 0 has no altsetting 0
[  335.999312][ T3618] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  336.070345][ T3618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.145385][ T3618] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  336.365462][ T3618] scsi host1: usb-storage 4-1:1.0
[  336.560139][ T4546] usb 4-1: USB disconnect, device number 21
[  336.703643][ T1966] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  336.833806][   T26] audit: type=1326 audit(1728438018.465:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb70d670fa7 code=0x7ffc0000
[  336.893576][   T26] audit: type=1326 audit(1728438018.485:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70d615959 code=0x7ffc0000
[  336.952370][   T26] audit: type=1326 audit(1728438018.485:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70d679ff9 code=0x7ffc0000
[  337.000335][   T26] audit: type=1326 audit(1728438018.485:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70d679ff9 code=0x7ffc0000
[  337.025956][   T26] audit: type=1326 audit(1728438018.485:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb70d670fa7 code=0x7ffc0000
[  337.050360][   T26] audit: type=1326 audit(1728438018.485:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70d615959 code=0x7ffc0000
[  337.086360][ T1966] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  337.115525][   T26] audit: type=1326 audit(1728438018.485:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb70d670fa7 code=0x7ffc0000
[  337.139744][ T1966] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  337.154738][ T1966] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  337.173789][   T26] audit: type=1326 audit(1728438018.485:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70d615959 code=0x7ffc0000
[  337.205667][ T1966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.298212][   T26] audit: type=1326 audit(1728438018.485:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb70d670fa7 code=0x7ffc0000
[  337.411496][   T26] audit: type=1326 audit(1728438018.485:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70d615959 code=0x7ffc0000
[  337.486117][ T7261] 9pnet: Insufficient options for proto=fd
[  337.539685][ T1966] usb 2-1: usb_control_msg returned -32
[  337.548314][ T1966] usbtmc 2-1:16.0: can't read capabilities
[  337.743780][ T1301] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  337.953244][ T7260] 9pnet: Insufficient options for proto=fd
[  338.330766][ T4773] usb 2-1: USB disconnect, device number 15
[  338.433397][ T7272] netlink: 'syz.0.1056': attribute type 11 has an invalid length.
[  338.459943][ T7272] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1056'.
[  338.603787][ T1301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.633582][ T1301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  338.643254][ T1301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  338.676781][ T1301] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  338.693187][ T1301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.724092][ T7262] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  338.759993][ T1301] hub 4-1:1.0: bad descriptor, ignoring hub
[  338.784112][ T1301] hub: probe of 4-1:1.0 failed with error -5
[  338.809060][ T1301] cdc_wdm 4-1:1.0: skipping garbage
[  338.838827][ T1301] cdc_wdm 4-1:1.0: skipping garbage
[  338.898301][ T1301] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  338.930601][ T1301] cdc_wdm 4-1:1.0: Unknown control protocol
[  338.983935][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  338.991348][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  339.082501][ T1301] usb 4-1: Failed to suspend device, error -71
[  339.093218][ T1301] usb 4-1: USB disconnect, device number 22
[  339.138995][ T7288] 9pnet: Insufficient options for proto=fd
[  339.875860][ T7309] 9pnet: Insufficient options for proto=fd
[  340.293684][ T4546] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  340.583779][ T4546] usb 4-1: Using ep0 maxpacket: 32
[  340.713792][ T4546] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.764056][ T4546] usb 4-1: config 0 has no interfaces?
[  340.780077][ T4546] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  340.820620][ T4546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.842351][ T4546] usb 4-1: config 0 descriptor??
[  340.890744][ T7328] netlink: 'syz.0.1074': attribute type 11 has an invalid length.
[  340.942218][ T7328] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1074'.
[  341.463931][ T3618] usb 4-1: USB disconnect, device number 23
[  342.142841][ T7348] 9pnet: Insufficient options for proto=fd
[  342.642432][   T26] kauditd_printk_skb: 513 callbacks suppressed
[  342.642448][   T26] audit: type=1326 audit(1728438024.265:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.3.1085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7836f81ff9 code=0x0
[  342.834802][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  342.958577][ T7367] netlink: 'syz.2.1087': attribute type 11 has an invalid length.
[  343.013600][ T7367] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1087'.
[  343.505018][ T7372] 9pnet: Insufficient options for proto=fd
[  344.305758][ T7402] 9pnet: Insufficient options for proto=fd
[  345.845122][ T7400] 9pnet: Insufficient options for proto=fd
[  346.122703][ T7407] 9pnet: Insufficient options for proto=fd
[  346.147139][ T7409] input: syz1 as /devices/virtual/input/input11
[  346.441544][ T7415] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  347.002371][   T26] audit: type=1800 audit(1728438028.625:619): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1109" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  348.032323][ T7449] 9pnet: Insufficient options for proto=fd
[  348.269261][ T1301] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  348.413340][ T7469] 9pnet: Insufficient options for proto=fd
[  348.504837][ T4546] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  348.583677][ T1301] usb 2-1: Using ep0 maxpacket: 32
[  348.773858][ T4546] usb 5-1: Using ep0 maxpacket: 8
[  348.893882][ T1301] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  348.913863][ T4546] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  348.926598][ T1301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.942418][ T4546] usb 5-1: config 179 has no interface number 0
[  348.960219][ T1301] usb 2-1: Product: syz
[  348.960246][ T1301] usb 2-1: Manufacturer: syz
[  348.960264][ T1301] usb 2-1: SerialNumber: syz
[  348.962333][ T4546] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  348.962369][ T4546] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  348.962400][ T4546] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  348.962430][ T4546] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  348.962455][ T4546] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  348.962498][ T4546] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  348.962524][ T4546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.976253][ T1301] usb 2-1: config 0 descriptor??
[  349.005083][ T7463] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  349.025856][ T4546] xpad: probe of 5-1:179.65 failed with error -5
[  349.030529][ T1301] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  349.323814][ T1301] gspca_ov534_9: reg_w failed -71
[  349.813677][ T1966] Bluetooth: hci2: command 0x0406 tx timeout
[  349.873832][ T1301] gspca_ov534_9: Unknown sensor 0000
[  349.873899][ T1301] ov534_9: probe of 2-1:0.0 failed with error -22
[  349.936851][ T1301] usb 2-1: USB disconnect, device number 16
[  350.162191][ T7476] syz.2.1122 (7476): drop_caches: 1
[  352.015757][ T4773] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  352.148284][ T3620] usb 5-1: USB disconnect, device number 19
[  352.433685][ T4773] usb 4-1: Using ep0 maxpacket: 16
[  352.500139][ T7508] 9pnet: Insufficient options for proto=fd
[  352.783252][ T7509] netlink: 'syz.2.1131': attribute type 11 has an invalid length.
[  352.824003][ T4773] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  352.855991][ T7512] 9pnet: Insufficient options for proto=fd
[  352.987534][ T4773] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  353.419389][ T4773] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  353.429901][ T4773] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  353.440105][ T4773] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  353.451275][ T4773] usb 4-1: config 1 interface 0 has no altsetting 0
[  353.458329][ T4773] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  353.467905][ T4773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.534380][ T7509] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1131'.
[  353.595045][ T4773] usb 4-1: can't set config #1, error -71
[  353.648308][ T4773] usb 4-1: USB disconnect, device number 24
[  353.686363][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1135'.
[  356.405362][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1142'.
[  356.755616][ T7554] 9pnet: Insufficient options for proto=fd
[  356.972359][ T7557] 9pnet: Insufficient options for proto=fd
[  358.083882][ T1301] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  358.353612][ T1301] usb 5-1: Using ep0 maxpacket: 16
[  359.207227][ T1301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  359.228968][ T1301] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  359.251667][ T1301] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  359.262066][ T1301] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  359.273034][ T1301] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  359.283506][ T1301] usb 5-1: config 1 interface 0 has no altsetting 0
[  359.312544][ T1301] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  359.325920][ T1301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.405111][ T1301] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  359.622640][ T1301] scsi host1: usb-storage 5-1:1.0
[  359.820773][ T1301] usb 5-1: USB disconnect, device number 20
[  360.196853][ T7594] 9pnet: Insufficient options for proto=fd
[  360.781904][ T7597] 9pnet: Insufficient options for proto=fd
[  361.469599][ T7616] 9pnet: Insufficient options for proto=fd
[  362.533672][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'.
[  362.917244][ T7643] 9pnet: Insufficient options for proto=fd
[  362.923977][ T3623] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  363.003538][ T7527] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  363.302487][ T7653] 9pnet: Insufficient options for proto=fd
[  363.317123][ T3623] usb 5-1: Using ep0 maxpacket: 16
[  364.043848][ T7527] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  364.054885][ T3623] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  364.084039][ T3623] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  364.102728][ T7527] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  364.119084][ T3623] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  364.141800][ T7527] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  364.171767][ T3623] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  364.181886][ T7527] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  364.205910][ T3623] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  364.219996][ T7527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.239382][ T3623] usb 5-1: config 1 interface 0 has no altsetting 0
[  364.263208][ T3623] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  364.273880][ T7636] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  364.298331][ T7527] hub 4-1:1.0: bad descriptor, ignoring hub
[  364.307505][ T3623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.325935][ T7527] hub: probe of 4-1:1.0 failed with error -5
[  364.450058][ T7527] cdc_wdm 4-1:1.0: skipping garbage
[  364.456427][ T7527] cdc_wdm 4-1:1.0: skipping garbage
[  364.481860][ T7527] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  364.494736][ T3623] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  364.504993][ T7527] cdc_wdm 4-1:1.0: Unknown control protocol
[  364.523614][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  364.530249][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  364.553676][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  364.560326][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  364.623708][ T7527] usb 4-1: Failed to suspend device, error -71
[  364.637959][ T7527] usb 4-1: USB disconnect, device number 25
[  364.720703][ T3623] scsi host1: usb-storage 5-1:1.0
[  364.948921][ T3623] usb 5-1: USB disconnect, device number 21
[  365.178633][ T7674] 9pnet: Insufficient options for proto=fd
[  365.300686][ T7527] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  365.653336][ T7684] 9pnet: Insufficient options for proto=fd
[  365.843806][ T7527] usb 4-1: device descriptor read/all, error -71
[  365.853582][ T4773] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  365.915921][ T7695] 9pnet: Insufficient options for proto=fd
[  366.143908][ T4773] usb 2-1: Using ep0 maxpacket: 8
[  366.265659][ T4773] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  366.709125][ T4773] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  366.721947][ T4773] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  366.923761][ T4773] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  366.932991][ T4773] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  366.945928][ T7703] 9pnet: Insufficient options for proto=fd
[  366.952628][ T4773] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  367.098451][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1192'.
[  367.123759][ T4773] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  367.142598][ T4773] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  367.338044][ T4773] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  367.351866][ T7715] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  367.593803][ T4773] usb 2-1: string descriptor 0 read error: -22
[  367.608540][ T4773] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  367.621266][ T4773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.700171][ T4773] adutux 2-1:168.0: interrupt endpoints not found
[  367.744091][   T13] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  367.948239][ T7681] udc-core: couldn't find an available UDC or it's busy
[  367.980372][ T7681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  368.006074][   T13] usb 4-1: Using ep0 maxpacket: 16
[  368.013113][ T7727] 9pnet: Insufficient options for proto=fd
[  368.118320][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'.
[  368.141739][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1187'.
[  368.151478][   T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  368.170499][   T13] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  368.186176][ T7681] device gtp0 entered promiscuous mode
[  368.191970][   T13] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  368.220506][   T13] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  368.233402][ T7525] usb 2-1: USB disconnect, device number 17
[  368.241736][   T13] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  368.253657][   T13] usb 4-1: config 1 interface 0 has no altsetting 0
[  368.260662][   T13] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  368.271057][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.314545][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1205'.
[  368.345344][   T13] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  368.372663][ T7732] netlink: 'syz.2.1204': attribute type 11 has an invalid length.
[  368.395984][ T7732] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1204'.
[  368.709452][ T7741] 9pnet: Insufficient options for proto=fd
[  368.845237][   T13] scsi host1: usb-storage 4-1:1.0
[  368.934127][   T13] usb 4-1: USB disconnect, device number 28
[  368.936072][ T7746] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1210'.
[  369.037665][ T7751] netlink: 'syz.4.1211': attribute type 2 has an invalid length.
[  369.107099][ T7756] netlink: 'syz.4.1211': attribute type 2 has an invalid length.
[  370.639044][ T7785] 9pnet: Insufficient options for proto=fd
[  370.997867][ T7788] 9pnet: Insufficient options for proto=fd
[  371.247855][ T7799] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  371.813828][ T4773] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  372.553590][ T4773] usb 3-1: device descriptor read/64, error -71
[  372.756450][ T7831] netlink: 'syz.3.1235': attribute type 11 has an invalid length.
[  372.784297][ T7831] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1235'.
[  372.834045][ T4773] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  373.137496][ T4773] usb 3-1: device descriptor read/64, error -71
[  373.247986][ T7843] 9pnet: Insufficient options for proto=fd
[  373.286131][ T4773] usb usb3-port1: attempt power cycle
[  373.637726][ T7845] xt_CT: You must specify a L4 protocol and not use inversions on it
[  373.921856][ T4773] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  374.143716][ T4773] usb 3-1: device descriptor read/8, error -71
[  374.170038][ T7848] 9pnet: Insufficient options for proto=fd
[  375.705970][ T7874] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  375.724208][ T7874] hub 6-0:1.0: USB hub found
[  375.731214][ T7874] hub 6-0:1.0: 1 port detected
[  376.842126][ T7878] loop2: detected capacity change from 0 to 4096
[  376.924825][ T7892] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1253'.
[  378.242343][ T7899] 9pnet: Insufficient options for proto=fd
[  378.253545][ T7525] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  378.953548][ T7525] usb 2-1: Using ep0 maxpacket: 32
[  379.020286][ T7907] loop4: detected capacity change from 0 to 256
[  379.288882][ T7909] 9pnet: Insufficient options for proto=fd
[  379.320420][ T7525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  379.477183][ T7911] loop3: detected capacity change from 0 to 16
[  380.283816][ T7911] erofs: (device loop3): mounted with root inode @ nid 36.
[  380.376547][ T7911] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  380.386490][ T7911] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  380.395627][ T7911] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  380.405588][ T7911] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  380.414708][ T7911] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  380.424667][ T7911] erofs: (device loop3): z_erofs_readahead: readahead error at page 14 @ nid 36
[  380.433790][ T7911] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  380.443752][ T7911] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36
[  380.453416][ T7911] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  380.463413][ T7911] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[  380.475133][ T7911] attempt to access beyond end of device
[  380.475133][ T7911] loop3: rw=524288, want=776, limit=16
[  380.486855][ T7911] attempt to access beyond end of device
[  380.486855][ T7911] loop3: rw=524288, want=848, limit=16
[  380.498536][ T7911] attempt to access beyond end of device
[  380.498536][ T7911] loop3: rw=524288, want=13478624056, limit=16
[  380.595928][ T7525] usb 2-1: string descriptor 0 read error: -71
[  380.606538][ T7525] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  380.728286][   T13] Bluetooth: hci0: command 0x0406 tx timeout
[  380.765574][ T7525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.788614][ T7525] usb 2-1: config 0 descriptor??
[  380.854235][ T7525] usb 2-1: can't set config #0, error -71
[  380.871759][ T7525] usb 2-1: USB disconnect, device number 18
[  381.948236][ T7934] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  381.967019][ T7934] hub 6-0:1.0: USB hub found
[  381.971952][ T7934] hub 6-0:1.0: 1 port detected
[  383.736650][ T7955] 9pnet: Insufficient options for proto=fd
[  383.755500][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  383.802323][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  384.004597][ T7957] loop0: detected capacity change from 0 to 512
[  384.056026][ T7960] loop2: detected capacity change from 0 to 256
[  384.515865][ T7965] loop3: detected capacity change from 0 to 256
[  385.744956][ T7957] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  385.805040][ T7957] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff)
[  386.105124][ T7965] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  386.356218][ T7981] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1272: Directory hole found for htree leaf block 0
[  386.473608][ T7981] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1272: Directory hole found for htree leaf block 0
[  387.962363][   T13] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  388.055295][ T7994] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  388.079388][ T7994] hub 6-0:1.0: USB hub found
[  388.085765][ T7994] hub 6-0:1.0: 1 port detected
[  388.306066][   T13] usb 5-1: Using ep0 maxpacket: 16
[  388.512298][ T8002] 9pnet: Insufficient options for proto=fd
[  388.611982][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  388.775788][   T13] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  388.980313][   T13] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  389.361252][   T13] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  389.436942][   T13] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  389.469736][   T13] usb 5-1: config 1 interface 0 has no altsetting 0
[  389.489778][   T13] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  389.521130][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.636144][ T8009] loop1: detected capacity change from 0 to 512
[  389.645072][   T13] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  389.720609][ T8011] 9pnet: Insufficient options for proto=fd
[  390.362769][ T7526] Bluetooth: hci0: command 0x0405 tx timeout
[  390.562586][ T8017] loop0: detected capacity change from 0 to 512
[  390.813097][ T8009] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  390.824641][ T8009] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038 (0x7fffffff)
[  391.177635][ T8021] loop3: detected capacity change from 0 to 256
[  391.254235][   T13] scsi host1: usb-storage 5-1:1.0
[  391.271273][ T8017] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  391.283658][ T8017] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff)
[  391.442152][ T7526] usb 5-1: USB disconnect, device number 22
[  393.592014][ T8035] loop3: detected capacity change from 0 to 4096
[  393.723553][ T8041] loop4: detected capacity change from 0 to 256
[  394.867317][ T8041] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  395.142094][ T8052] loop2: detected capacity change from 0 to 512
[  395.483281][ T8052] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  395.495620][ T8052] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038 (0x7fffffff)
[  397.457555][ T8073] 9pnet: Insufficient options for proto=fd
[  397.855214][ T8075] loop3: detected capacity change from 0 to 16
[  398.473045][   T13] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  398.745178][   T13] usb 5-1: Using ep0 maxpacket: 16
[  398.861220][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  398.919820][   T13] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  398.964395][ T8075] erofs: (device loop3): mounted with root inode @ nid 36.
[  398.991756][ T8074] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  399.001291][ T8074] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  399.010448][ T8074] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  399.021243][ T8074] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  399.030386][ T8074] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  399.040354][ T8074] erofs: (device loop3): z_erofs_readahead: readahead error at page 14 @ nid 36
[  399.049485][ T8074] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  399.059506][ T8074] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36
[  399.068767][ T8074] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  399.078765][ T8074] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[  399.087860][ T8074] attempt to access beyond end of device
[  399.087860][ T8074] loop3: rw=524288, want=776, limit=16
[  399.098967][ T8074] attempt to access beyond end of device
[  399.098967][ T8074] loop3: rw=524288, want=848, limit=16
[  399.110449][ T8074] attempt to access beyond end of device
[  399.110449][ T8074] loop3: rw=524288, want=13478624056, limit=16
[  399.123093][   T13] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  399.132870][   T13] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  399.142845][   T13] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  399.152684][   T13] usb 5-1: config 1 interface 0 has no altsetting 0
[  399.249886][   T13] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  399.259230][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.317971][   T13] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  399.342840][ T8082] loop0: detected capacity change from 0 to 512
[  399.476204][ T8082] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  399.509689][ T8082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  399.531536][ T8084] loop3: detected capacity change from 0 to 4096
[  399.541294][ T8082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  399.542213][   T13] scsi host1: usb-storage 5-1:1.0
[  399.559149][ T8082] System zones: 1-12
[  399.563546][ T4546] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  399.584832][ T8082] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  399.606176][ T8082] EXT4-fs (loop0): 1 truncate cleaned up
[  399.639369][ T8082] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback.
[  399.724451][ T3634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.782497][ T7525] usb 5-1: USB disconnect, device number 23
[  399.897321][ T3634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.008511][ T4546] usb 3-1: Using ep0 maxpacket: 32
[  401.125571][ T4546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  401.471322][ T3634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.843413][ T7525] Bluetooth: hci2: command 0x0409 tx timeout
[  401.951830][ T8104] loop3: detected capacity change from 0 to 512
[  401.973345][ T4546] usb 3-1: string descriptor 0 read error: -71
[  401.986992][ T4546] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  401.999539][ T4546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.072075][ T8088] chnl_net:caif_netlink_parms(): no params data found
[  402.094981][ T8104] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  403.446373][ T3634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.056940][ T8117] loop4: detected capacity change from 0 to 512
[  404.127179][ T4546] usb 3-1: config 0 descriptor??
[  404.211007][ T4546] usb 3-1: can't set config #0, error -71
[  404.279240][ T4773] Bluetooth: hci2: command 0x041b tx timeout
[  404.295340][ T8104] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  404.322002][ T4546] usb 3-1: USB disconnect, device number 19
[  404.349261][ T8104] EXT4-fs (loop3): 1 truncate cleaned up
[  404.362608][ T8104] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  404.391720][ T8117] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  404.403277][ T8117] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038 (0x7fffffff)
[  404.653489][ T8127] loop2: detected capacity change from 0 to 512
[  404.663977][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.679082][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.687940][ T8088] device bridge_slave_0 entered promiscuous mode
[  404.707065][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.719234][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.731906][ T8088] device bridge_slave_1 entered promiscuous mode
[  404.852262][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.970628][ T8130] ALSA: seq fatal error: cannot create timer (-22)
[  405.124195][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.458924][ T8137] loop4: detected capacity change from 0 to 512
[  405.594376][ T8127] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  405.729364][ T8127] ext4 filesystem being mounted at /276/bus supports timestamps until 2038 (0x7fffffff)
[  405.894451][ T8137] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  405.905749][ T8137] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038 (0x7fffffff)
[  406.097181][ T8142] 9pnet: Insufficient options for proto=fd
[  406.236708][ T8088] team0: Port device team_slave_0 added
[  406.349795][ T8088] team0: Port device team_slave_1 added
[  406.447282][   T26] audit: type=1804 audit(1728438088.623:620): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1321" name="/newroot/276/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  406.552088][ T8145] 9pnet: Insufficient options for proto=fd
[  407.056879][   T26] audit: type=1800 audit(1728438088.623:621): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1321" name="bus" dev="loop2" ino=18 res=0 errno=0
[  407.152278][   T13] Bluetooth: hci2: command 0x040f tx timeout
[  407.350497][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.396429][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.459832][ T8160] loop2: detected capacity change from 0 to 512
[  407.487911][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.526112][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.543348][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.590407][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.601431][ T8160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  407.644161][ T8160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  407.656770][ T8160] System zones: 1-12
[  407.685576][ T8160] EXT4-fs (loop2): 1 truncate cleaned up
[  407.686111][ T8088] device hsr_slave_0 entered promiscuous mode
[  407.698836][ T8160] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback.
[  407.721984][ T8088] device hsr_slave_1 entered promiscuous mode
[  407.729390][ T8088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  407.745018][ T8088] Cannot create hsr debugfs directory
[  407.839548][ T4546] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  408.301819][ T4773] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  408.588897][ T4773] usb 5-1: Using ep0 maxpacket: 16
[  408.685135][ T4546] usb 4-1: Using ep0 maxpacket: 16
[  408.731983][ T4773] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  408.763474][ T4773] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  408.792198][ T4773] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  408.961022][ T4546] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  408.978722][ T4773] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  408.988694][ T4546] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  408.989596][ T4773] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  409.006794][ T4773] usb 5-1: config 1 interface 0 has no altsetting 0
[  409.013672][ T4546] usb 4-1: Product: syz
[  409.018619][ T4773] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  409.024011][ T4546] usb 4-1: Manufacturer: syz
[  409.683439][ T4773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.788863][ T4773] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  409.805912][ T4546] usb 4-1: SerialNumber: syz
[  409.813397][ T3621] Bluetooth: hci2: command 0x0419 tx timeout
[  409.820496][ T4546] usb 4-1: config 0 descriptor??
[  410.005814][ T4773] scsi host1: usb-storage 5-1:1.0
[  410.042078][ T3634] IPVS: stopping backup sync thread 6524 ...
[  410.103849][ T4546] usb 4-1: USB disconnect, device number 29
[  410.181026][ T8088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  410.198978][ T3623] usb 5-1: USB disconnect, device number 24
[  410.233680][ T8088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  410.303353][ T8088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  410.317682][ T8088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  410.381326][ T3634] device hsr_slave_0 left promiscuous mode
[  410.387831][ T3634] device hsr_slave_1 left promiscuous mode
[  410.397578][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.405683][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.420937][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.434649][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.446375][ T3634] device bridge_slave_1 left promiscuous mode
[  410.461516][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.474612][ T3634] device bridge_slave_0 left promiscuous mode
[  410.491407][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.514345][ T3634] device veth0_macvtap left promiscuous mode
[  410.525588][ T3634] device veth1_vlan left promiscuous mode
[  410.535104][ T3634] device veth0_vlan left promiscuous mode
[  410.748170][ T8208] loop0: detected capacity change from 0 to 512
[  411.077094][ T8208] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  411.091086][ T8208] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038 (0x7fffffff)
[  411.541506][ T8215] loop3: detected capacity change from 0 to 512
[  411.565122][ T8213] loop4: detected capacity change from 0 to 512
[  411.775494][ T8213] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  412.143722][ T8226] 9pnet: Insufficient options for proto=fd
[  412.417390][   T13] Bluetooth: hci2: command 0x0405 tx timeout
[  412.455787][ T8215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  412.468935][ T8213] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  412.469952][ T8215] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038 (0x7fffffff)
[  412.500982][ T8213] EXT4-fs (loop4): 1 truncate cleaned up
[  412.512129][ T8213] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  412.852901][ T3634] team0 (unregistering): Port device team_slave_1 removed
[  413.176240][ T8239] ALSA: seq fatal error: cannot create timer (-22)
[  413.780395][ T8238] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1326: Directory hole found for htree leaf block 0
[  413.850027][ T8238] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1326: Directory hole found for htree leaf block 0
[  413.898873][ T8238] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1326: Directory hole found for htree leaf block 0
[  414.338127][ T3634] team0 (unregistering): Port device team_slave_0 removed
[  414.382747][ T3634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.446824][ T3634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.749033][ T8251] 9pnet: Insufficient options for proto=fd
[  415.491107][ T3634] bond0 (unregistering): Released all slaves
[  415.628484][   T26] audit: type=1800 audit(1728438097.946:622): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1332" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  415.810689][ T5163] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  415.865397][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.887076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  415.909966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  415.923764][ T8088] 8021q: adding VLAN 0 to HW filter on device team0
[  415.938697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  415.954266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  415.964649][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.971865][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.050407][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  416.065201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  416.088454][ T5163] usb 5-1: Using ep0 maxpacket: 16
[  416.162420][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  416.205933][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.213242][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.237776][ T5163] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  416.283997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  416.295621][ T5163] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  416.345801][ T5163] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  416.365570][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  416.383802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  416.394902][ T5163] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  416.444273][ T5163] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  416.458141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  416.464103][ T5163] usb 5-1: config 1 interface 0 has no altsetting 0
[  416.476970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  416.484469][ T5163] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  416.494076][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.540927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  416.561494][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  416.574499][ T5163] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  416.589230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  416.601387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  416.656886][ T8088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.669077][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  416.680425][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  416.711130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  416.809969][ T5163] scsi host1: usb-storage 5-1:1.0
[  416.983579][ T4546] usb 5-1: USB disconnect, device number 25
[  417.076998][ T8296] 9pnet: Insufficient options for proto=fd
[  417.123817][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  417.155752][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  417.212606][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.284191][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  417.296547][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  417.353294][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  417.376991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  417.393880][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  417.402876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  417.420226][ T8088] device veth0_vlan entered promiscuous mode
[  417.453039][ T8088] device veth1_vlan entered promiscuous mode
[  417.539839][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  417.558636][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  417.584636][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  417.614055][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  417.661813][ T8088] device veth0_macvtap entered promiscuous mode
[  417.681776][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  417.705211][ T8088] device veth1_macvtap entered promiscuous mode
[  417.789991][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.873454][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.920588][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.954051][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.996784][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.088008][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.165553][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.271087][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.285732][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.365121][ T8330] 9pnet: Insufficient options for proto=fd
[  418.411766][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.066064][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.089201][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  419.148321][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  419.207582][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.253188][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.296044][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.306945][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.317058][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.357110][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.575322][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.682418][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.301895][ T7526] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  420.353481][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.355144][ T8357] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  420.378162][ T8357] hub 6-0:1.0: USB hub found
[  420.383227][ T8357] hub 6-0:1.0: 1 port detected
[  421.213039][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  421.221651][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  421.275827][ T8088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.337084][   T26] audit: type=1800 audit(1728438103.697:623): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1348" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  421.538964][ T8370] 9pnet: Insufficient options for proto=fd
[  422.354391][ T8088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.374523][ T8088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.383355][ T8088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.393739][ T7526] usb 3-1: unable to read config index 0 descriptor/start: -71
[  422.402082][ T7526] usb 3-1: can't read configurations, error -71
[  422.733413][ T8381] 9pnet: Insufficient options for proto=fd
[  423.481990][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.516409][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.551022][ T2607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.585071][ T2607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.601325][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  423.679380][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  424.754617][ T8397] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  424.769133][ T8397] hub 6-0:1.0: USB hub found
[  424.775576][ T8397] hub 6-0:1.0: 1 port detected
[  426.117451][ T8413] 9pnet: Insufficient options for proto=fd
[  426.722272][ T8412] loop1: detected capacity change from 0 to 256
[  427.906423][ T8436] 9pnet: Insufficient options for proto=fd
[  430.377620][ T8455] loop1: detected capacity change from 0 to 16
[  431.631291][ T8455] erofs: (device loop1): mounted with root inode @ nid 36.
[  431.658354][ T8453] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  431.667765][ T8453] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  431.676863][ T8453] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  431.688175][ T8453] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  431.697439][ T8453] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  431.707437][ T8453] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  431.716771][ T8453] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  431.726864][ T8453] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  431.740985][ T8453] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  431.750994][ T8453] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  431.761914][ T8453] attempt to access beyond end of device
[  431.761914][ T8453] loop1: rw=524288, want=776, limit=16
[  431.774412][ T8453] attempt to access beyond end of device
[  431.774412][ T8453] loop1: rw=524288, want=848, limit=16
[  431.787617][ T8453] attempt to access beyond end of device
[  431.787617][ T8453] loop1: rw=524288, want=13478624056, limit=16
[  432.814364][ T8461] loop2: detected capacity change from 0 to 512
[  433.076697][ T8466] 9pnet: Insufficient options for proto=fd
[  433.747068][ T8461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  433.834189][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1386'.
[  433.922600][ T8475] raw_sendmsg: syz.0.1386 forgot to set AF_INET. Fix it!
[  434.071862][ T8461] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038 (0x7fffffff)
[  439.398383][ T8484] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1377: Directory hole found for htree leaf block 0
[  441.215385][ T8496] loop4: detected capacity change from 0 to 512
[  441.280358][ T8500] loop0: detected capacity change from 0 to 512
[  442.327710][ T8496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  442.339596][ T8496] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038 (0x7fffffff)
[  442.444970][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1388'.
[  442.526942][ T8516] ODEBUG: Out of memory. ODEBUG disabled
[  443.306668][ T8518] 9pnet: Insufficient options for proto=fd
[  443.397387][ T8496] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1387: Directory hole found for htree leaf block 0
[  443.416127][ T8496] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1387: Directory hole found for htree leaf block 0
[  443.433133][ T8496] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1387: Directory hole found for htree leaf block 0
[  443.452767][ T3621] Bluetooth: hci6: command 0x0409 tx timeout
[  443.533808][ T8521] loop1: detected capacity change from 0 to 512
[  443.632722][ T8521] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  443.689704][ T8499] chnl_net:caif_netlink_parms(): no params data found
[  443.743708][ T8521] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff)
[  443.786042][ T8500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  443.995488][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  444.001856][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  444.006676][ T8500] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038 (0x7fffffff)
[  444.903162][ T8528] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1390: Directory hole found for htree leaf block 0
[  444.958494][ T8527] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1390: Directory hole found for htree leaf block 0
[  444.976002][ T8527] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1390: Directory hole found for htree leaf block 0
[  445.400552][ T8536] hub 6-0:1.0: USB hub found
[  445.407148][ T8536] hub 6-0:1.0: 1 port detected
[  445.860550][ T3621] Bluetooth: hci6: command 0x041b tx timeout
[  447.369428][ T8551] loop2: detected capacity change from 0 to 512
[  447.484684][ T8551] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  447.506834][ T8560] netlink: 'syz.1.1403': attribute type 11 has an invalid length.
[  447.562784][ T8551] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038 (0x7fffffff)
[  447.731922][ T8560] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1403'.
[  447.767633][ T8554] device veth1_macvtap left promiscuous mode
[  447.773898][ T8554] device macsec0 entered promiscuous mode
[  448.302386][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.311971][ T4546] Bluetooth: hci6: command 0x040f tx timeout
[  448.318176][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.552585][ T8499] device bridge_slave_0 entered promiscuous mode
[  448.564549][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.572076][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.661181][ T8576] 9pnet: Insufficient options for proto=fd
[  449.073086][ T8499] device bridge_slave_1 entered promiscuous mode
[  449.373330][ T8577] loop4: detected capacity change from 0 to 512
[  449.442500][ T3634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.623639][ T8579] loop2: detected capacity change from 0 to 16
[  449.672136][ T8579] erofs: (device loop2): mounted with root inode @ nid 36.
[  449.682852][ T8579] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  449.692484][ T8579] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36
[  449.701620][ T8579] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  449.711684][ T8579] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36
[  449.720811][ T8579] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  449.730795][ T8579] erofs: (device loop2): z_erofs_readahead: readahead error at page 14 @ nid 36
[  449.739909][ T8579] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  449.750433][ T8579] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  449.759716][ T8579] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  449.769956][ T8579] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  449.779115][ T8579] attempt to access beyond end of device
[  449.779115][ T8579] loop2: rw=524288, want=776, limit=16
[  449.790230][ T8579] attempt to access beyond end of device
[  449.790230][ T8579] loop2: rw=524288, want=848, limit=16
[  449.801419][ T8579] attempt to access beyond end of device
[  449.801419][ T8579] loop2: rw=524288, want=13478624056, limit=16
[  449.919397][ T3634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.002681][ T8587] 9pnet: Insufficient options for proto=fd
[  450.016545][ T8577] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  450.299346][ T8577] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038 (0x7fffffff)
[  450.716752][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.770715][   T13] Bluetooth: hci6: command 0x0419 tx timeout
[  450.818567][ T8590] loop2: detected capacity change from 0 to 512
[  450.860984][ T3634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.090396][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.110703][ T8590] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  452.106302][ T8590] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038 (0x7fffffff)
[  452.181872][ T8600] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1399: Directory hole found for htree leaf block 0
[  452.466461][ T8597] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1399: Directory hole found for htree leaf block 0
[  452.487842][ T8597] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1399: Directory hole found for htree leaf block 0
[  452.515169][ T3634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.109249][ T8603] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1402: Directory hole found for htree leaf block 0
[  454.147767][ T8499] team0: Port device team_slave_0 added
[  454.157550][ T8602] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1402: Directory hole found for htree leaf block 0
[  454.185319][ T8602] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1402: Directory hole found for htree leaf block 0
[  454.201896][ T8499] team0: Port device team_slave_1 added
[  454.406491][ T8605] loop4: detected capacity change from 0 to 512
[  454.533032][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.549738][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.616651][ T8605] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  454.627925][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.639264][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.672707][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.728995][ T8605] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038 (0x7fffffff)
[  454.951878][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.969920][ T3634] tipc: Left network mode
[  456.454321][ T8614] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1406: Directory hole found for htree leaf block 0
[  456.472798][ T8614] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1406: Directory hole found for htree leaf block 0
[  456.519113][ T8614] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1406: Directory hole found for htree leaf block 0
[  457.208271][ T8630] 9pnet: Insufficient options for proto=fd
[  458.588815][ T8646] 9pnet: Insufficient options for proto=fd
[  459.842561][ T8499] device hsr_slave_0 entered promiscuous mode
[  459.986015][ T8499] device hsr_slave_1 entered promiscuous mode
[  460.991427][ T8667] loop2: detected capacity change from 0 to 512
[  461.210656][ T8675] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  461.226075][ T8675] hub 6-0:1.0: USB hub found
[  461.231154][ T8675] hub 6-0:1.0: 1 port detected
[  461.248043][ T8667] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  461.260876][ T8674] netlink: 'syz.1.1425': attribute type 11 has an invalid length.
[  461.284817][ T8667] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038 (0x7fffffff)
[  461.314435][ T8674] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1425'.
[  461.753294][ T8687] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1416: Directory hole found for htree leaf block 0
[  461.822795][ T8687] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1416: Directory hole found for htree leaf block 0
[  462.524286][ T8698] loop2: detected capacity change from 0 to 512
[  463.669397][ T8700] loop4: detected capacity change from 0 to 16
[  463.673535][ T8698] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  463.687520][ T8698] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038 (0x7fffffff)
[  463.729056][ T8700] erofs: (device loop4): mounted with root inode @ nid 36.
[  463.740912][ T8700] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  463.750753][ T8700] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36
[  463.759937][ T8700] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  463.769913][ T8700] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  463.779437][ T8700] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  463.789381][ T8700] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36
[  463.798618][ T8700] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  463.808579][ T8700] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  463.817824][ T8700] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  463.827744][ T8700] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  463.836846][ T8700] attempt to access beyond end of device
[  463.836846][ T8700] loop4: rw=524288, want=776, limit=16
[  463.848126][ T8700] attempt to access beyond end of device
[  463.848126][ T8700] loop4: rw=524288, want=848, limit=16
[  463.859455][ T8700] attempt to access beyond end of device
[  463.859455][ T8700] loop4: rw=524288, want=13478624056, limit=16
[  464.594842][ T8714] 9pnet: Insufficient options for proto=fd
[  465.511717][ T8717] loop2: detected capacity change from 0 to 512
[  465.630580][ T8499] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  465.660589][ T8499] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  465.724249][ T8717] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  466.439454][ T8729] 9pnet: Insufficient options for proto=fd
[  466.518231][ T8499] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  466.813696][ T8733] loop1: detected capacity change from 0 to 512
[  466.848907][ T8499] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  466.859157][ T8717] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  467.155620][ T8717] EXT4-fs (loop2): 1 truncate cleaned up
[  467.185977][ T8717] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  467.198010][ T8750] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  467.199445][ T8733] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  467.224627][ T8750] hub 6-0:1.0: USB hub found
[  467.229552][ T8750] hub 6-0:1.0: 1 port detected
[  467.313165][ T8733] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff)
[  467.554186][ T3634] device hsr_slave_0 left promiscuous mode
[  467.567543][ T3634] device hsr_slave_1 left promiscuous mode
[  467.995419][ T8756] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1428: Directory hole found for htree leaf block 0
[  468.064859][ T8756] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1428: Directory hole found for htree leaf block 0
[  468.118319][ T8756] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1428: Directory hole found for htree leaf block 0
[  468.572741][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  468.676064][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1433'.
[  468.725242][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.141242][ T8768] loop0: detected capacity change from 0 to 16
[  470.401996][ T3634] device bridge_slave_1 left promiscuous mode
[  470.408287][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.453181][ T8768] erofs: (device loop0): mounted with root inode @ nid 36.
[  470.464240][ T8768] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  470.474040][ T8768] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[  470.483215][ T8768] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  470.493215][ T8768] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36
[  470.502414][ T8768] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  470.512470][ T8768] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36
[  470.521655][ T8768] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  470.531632][ T8768] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36
[  470.538412][ T8764] netlink: 'syz.2.1431': attribute type 11 has an invalid length.
[  470.540864][ T8768] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  470.559378][ T8768] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[  470.568727][ T8768] attempt to access beyond end of device
[  470.568727][ T8768] loop0: rw=524288, want=776, limit=16
[  470.579836][ T8768] attempt to access beyond end of device
[  470.579836][ T8768] loop0: rw=524288, want=848, limit=16
[  470.591001][ T8768] attempt to access beyond end of device
[  470.591001][ T8768] loop0: rw=524288, want=13478624056, limit=16
[  470.836168][ T8764] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1431'.
[  470.932294][ T8776] loop1: detected capacity change from 0 to 16
[  471.651946][ T8776] erofs: (device loop1): mounted with root inode @ nid 36.
[  471.683026][ T8776] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  471.692501][ T8776] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  471.701638][ T8776] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  471.711618][ T8776] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  471.720780][ T8776] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  471.730849][ T8776] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  471.740370][ T8776] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  471.750791][ T8776] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  471.760754][ T8776] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  471.770737][ T8776] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  471.780258][ T8776] attempt to access beyond end of device
[  471.780258][ T8776] loop1: rw=524288, want=776, limit=16
[  471.791863][ T8776] attempt to access beyond end of device
[  471.791863][ T8776] loop1: rw=524288, want=848, limit=16
[  471.803451][ T8776] attempt to access beyond end of device
[  471.803451][ T8776] loop1: rw=524288, want=13478624056, limit=16
[  472.171986][ T3634] device bridge_slave_0 left promiscuous mode
[  472.184935][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.254376][ T3634] device veth0_macvtap left promiscuous mode
[  472.260497][ T3634] device veth1_vlan left promiscuous mode
[  472.468844][ T3634] device veth0_vlan left promiscuous mode
[  472.567829][ T8786] loop0: detected capacity change from 0 to 16
[  474.445747][ T8786] erofs: (device loop0): mounted with root inode @ nid 36.
[  474.474435][ T8784] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  474.483937][ T8784] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[  474.493073][ T8784] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  474.503018][ T8784] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36
[  474.512077][ T8784] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  474.522024][ T8784] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36
[  474.531816][ T8784] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  474.541787][ T8784] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36
[  474.551038][ T8784] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  474.561180][ T8784] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[  474.570255][ T8784] attempt to access beyond end of device
[  474.570255][ T8784] loop0: rw=524288, want=776, limit=16
[  474.573640][ T8789] loop1: detected capacity change from 0 to 256
[  474.581353][ T8784] attempt to access beyond end of device
[  474.581353][ T8784] loop0: rw=524288, want=848, limit=16
[  474.598605][ T8784] attempt to access beyond end of device
[  474.598605][ T8784] loop0: rw=524288, want=13478624056, limit=16
[  475.064410][ T8792] 9pnet: Insufficient options for proto=fd
[  475.541930][ T3634] team0 (unregistering): Port device vlan0 removed
[  475.672047][ T8798] loop1: detected capacity change from 0 to 512
[  475.764926][ T8798] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  475.814848][ T8798] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  475.835587][ T8798] EXT4-fs (loop1): 1 truncate cleaned up
[  475.842467][ T8798] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  475.855622][ T8799] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  475.870452][ T8799] hub 6-0:1.0: USB hub found
[  475.875245][ T8799] hub 6-0:1.0: 1 port detected
[  475.963489][ T3634] team0 (unregistering): Port device team_slave_1 removed
[  476.021466][ T3634] team0 (unregistering): Port device team_slave_0 removed
[  476.076786][ T3634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.113195][ T3634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.226453][ T8804] ALSA: seq fatal error: cannot create timer (-22)
[  477.825591][ T3634] bond0 (unregistering): Released all slaves
[  478.948997][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.086351][ T8834] loop0: detected capacity change from 0 to 256
[  479.127328][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  479.145683][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  479.412317][ T8499] 8021q: adding VLAN 0 to HW filter on device team0
[  480.006823][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[  480.213577][ T8843] loop4: detected capacity change from 0 to 512
[  480.233087][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  480.253363][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  480.285913][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.293015][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.350939][ T8847] 9pnet: Insufficient options for proto=fd
[  480.774102][ T8843] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  481.041243][ T8843] ext4 filesystem being mounted at /229/bus supports timestamps until 2038 (0x7fffffff)
[  481.137292][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  481.155165][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  481.203414][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  481.414619][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.421719][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.429957][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  481.439231][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  481.452776][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  481.485370][ T8858] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  481.563848][   T26] audit: type=1804 audit(1728438165.076:624): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1451" name="/newroot/229/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  481.608720][ T8858] hub 6-0:1.0: USB hub found
[  481.615162][ T8858] hub 6-0:1.0: 1 port detected
[  481.973074][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  482.131937][ T3620] Bluetooth: hci4: command 0x041b tx timeout
[  482.151857][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  482.159847][   T26] audit: type=1800 audit(1728438165.076:625): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1451" name="bus" dev="loop4" ino=18 res=0 errno=0
[  482.196767][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  482.232187][ T8499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  482.254362][ T8499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  482.367294][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  482.375253][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  482.398829][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  482.407740][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  482.416369][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  482.532440][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  484.032096][ T8817] chnl_net:caif_netlink_parms(): no params data found
[  484.157749][ T3621] Bluetooth: hci4: command 0x040f tx timeout
[  484.276611][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  484.284123][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  485.539368][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.717666][ T8919] loop0: detected capacity change from 0 to 256
[  485.716333][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.754450][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.812002][ T8817] device bridge_slave_0 entered promiscuous mode
[  485.963246][ T8922] loop1: detected capacity change from 0 to 512
[  486.018901][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.059219][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.122224][ T8817] device bridge_slave_1 entered promiscuous mode
[  486.241385][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  486.245825][ T3621] Bluetooth: hci4: command 0x0419 tx timeout
[  486.259358][ T8922] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  486.262045][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  486.272708][ T8922] ext4 filesystem being mounted at /27/bus supports timestamps until 2038 (0x7fffffff)
[  486.334218][ T8929] hub 6-0:1.0: USB hub found
[  486.335773][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.348831][ T8929] hub 6-0:1.0: 1 port detected
[  486.390069][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.432561][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  486.456867][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  486.578136][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  486.586884][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  486.604969][ T8817] team0: Port device team_slave_0 added
[  486.623838][ T8499] device veth0_vlan entered promiscuous mode
[  486.709121][   T26] audit: type=1804 audit(1728438170.326:626): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1462" name="/newroot/27/bus/bus" dev="loop1" ino=18 res=1 errno=0
[  487.244937][ T8817] team0: Port device team_slave_1 added
[  487.318744][ T8499] device veth1_vlan entered promiscuous mode
[  487.335553][   T26] audit: type=1800 audit(1728438170.326:627): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1462" name="bus" dev="loop1" ino=18 res=0 errno=0
[  487.464380][ T8937] netlink: 'syz.4.1465': attribute type 11 has an invalid length.
[  487.497616][ T8937] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1465'.
[  487.562270][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.569245][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.219816][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.272087][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.279065][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.391185][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.406428][ T8499] device veth0_macvtap entered promiscuous mode
[  488.519431][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  488.548088][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  488.630933][ T8499] device veth1_macvtap entered promiscuous mode
[  489.122238][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  489.167224][ T8817] device hsr_slave_0 entered promiscuous mode
[  489.187236][ T8817] device hsr_slave_1 entered promiscuous mode
[  489.312206][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  489.336245][ T8817] Cannot create hsr debugfs directory
[  490.358185][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.398763][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.418402][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.437275][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.447675][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.469162][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.487861][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.506227][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.516629][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.536667][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.566262][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.605153][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.685685][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.695912][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.706394][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.719764][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.719851][ T8964] loop4: detected capacity change from 0 to 256
[  490.730889][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.746772][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.759519][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.769491][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.780104][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.791842][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.990253][ T8499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.999193][ T8499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.008073][ T8499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.016889][ T8499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.036595][ T8968] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  491.050768][ T8968] hub 6-0:1.0: USB hub found
[  491.055758][ T8968] hub 6-0:1.0: 1 port detected
[  491.082732][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  491.103209][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  491.123349][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  491.177098][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  493.173158][ T3685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.232049][ T3685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.277307][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  494.227589][ T8817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.512635][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.554975][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.788395][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  495.320361][ T8817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.860834][ T9008] loop3: detected capacity change from 0 to 4096
[  495.957098][ T9015] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1482'.
[  496.759805][ T9019] loop0: detected capacity change from 0 to 256
[  497.017482][ T9023] hub 6-0:1.0: USB hub found
[  497.023255][ T9023] hub 6-0:1.0: 1 port detected
[  498.154745][ T8817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.131666][ T9041] netlink: 'syz.3.1486': attribute type 11 has an invalid length.
[  499.154586][ T9041] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1486'.
[  499.334789][ T9040] device veth1_macvtap left promiscuous mode
[  499.352935][ T9040] device macsec0 entered promiscuous mode
[  499.365158][ T9044] loop4: detected capacity change from 0 to 8192
[  499.434751][ T8817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.687865][ T8817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  499.705991][ T8817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  499.732379][ T8817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  500.098480][ T8817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  501.820399][ T9064] loop1: detected capacity change from 0 to 4096
[  502.063062][ T9073] loop4: detected capacity change from 0 to 256
[  502.142221][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.153954][ T9076] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  502.168325][ T9076] hub 6-0:1.0: USB hub found
[  502.173179][ T9076] hub 6-0:1.0: 1 port detected
[  502.191506][ T8817] 8021q: adding VLAN 0 to HW filter on device team0
[  503.761927][ T8817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  503.797573][ T8817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  503.812357][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  503.881024][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  503.900460][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  503.918734][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  503.938863][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.946042][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.964345][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  503.973812][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  503.995580][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.002749][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.034272][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  504.071469][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  504.128659][ T9099] netlink: 'syz.4.1501': attribute type 11 has an invalid length.
[  504.159421][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  504.168455][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  504.177747][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  504.186805][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  504.196056][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  504.204701][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  504.213463][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  504.222105][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  504.239203][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  504.249761][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  504.261240][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  504.291890][ T9101] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1503'.
[  504.329749][ T9099] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1501'.
[  504.394131][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  504.403971][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  505.489820][ T9114] 9pnet: Insufficient options for proto=fd
[  506.919646][ T9126] loop4: detected capacity change from 0 to 256
[  507.034866][ T9130] loop1: detected capacity change from 0 to 16
[  508.701617][ T9127] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  508.719214][ T9127] hub 6-0:1.0: USB hub found
[  508.724204][ T9127] hub 6-0:1.0: 1 port detected
[  508.818728][ T9130] erofs: (device loop1): mounted with root inode @ nid 36.
[  508.845380][ T9128] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  508.854894][ T9128] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  508.864012][ T9128] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  508.874047][ T9128] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  508.883239][ T9128] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  508.893203][ T9128] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  508.902836][ T9128] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  508.912786][ T9128] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  508.922052][ T9128] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  508.932018][ T9128] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  508.941116][ T9128] attempt to access beyond end of device
[  508.941116][ T9128] loop1: rw=524288, want=776, limit=16
[  508.952186][ T9128] attempt to access beyond end of device
[  508.952186][ T9128] loop1: rw=524288, want=848, limit=16
[  508.963548][ T9128] attempt to access beyond end of device
[  508.963548][ T9128] loop1: rw=524288, want=13478624056, limit=16
[  509.210320][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.433542][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  509.445947][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  509.774967][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  509.795068][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  510.013725][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  510.038577][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  510.208410][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  510.367246][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  511.542266][ T8817] device veth0_vlan entered promiscuous mode
[  511.929626][ T8817] device veth1_vlan entered promiscuous mode
[  512.023153][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  512.043965][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  512.119277][ T8817] device veth0_macvtap entered promiscuous mode
[  512.156212][ T8817] device veth1_macvtap entered promiscuous mode
[  512.314157][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'.
[  513.715301][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  513.724875][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  513.749620][ T9175] loop3: detected capacity change from 0 to 512
[  513.927649][ T9176] loop0: detected capacity change from 0 to 16
[  515.293408][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.327969][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.403458][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.444557][ T9180] loop4: detected capacity change from 0 to 256
[  515.454294][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.478480][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.490161][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.508832][ T9175] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  515.519912][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.519937][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.519957][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.519972][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.519991][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.520006][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.539012][ T9175] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff)
[  515.552573][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.611259][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.625413][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.635570][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.646345][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.656388][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.667102][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.684082][ T9176] erofs: (device loop0): mounted with root inode @ nid 36.
[  515.711108][ T9172] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  515.720559][ T9172] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[  515.729703][ T9172] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  515.739656][ T9172] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36
[  515.748814][ T9172] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  515.758809][ T9172] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36
[  515.767917][ T9172] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  515.777884][ T9172] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36
[  515.787552][ T9172] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  515.797766][ T9172] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[  515.808811][ T9172] attempt to access beyond end of device
[  515.808811][ T9172] loop0: rw=524288, want=776, limit=16
[  515.820302][ T9172] attempt to access beyond end of device
[  515.820302][ T9172] loop0: rw=524288, want=848, limit=16
[  515.831488][ T9172] attempt to access beyond end of device
[  515.831488][ T9172] loop0: rw=524288, want=13478624056, limit=16
[  515.853457][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.864182][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.879830][ T9186] hub 6-0:1.0: USB hub found
[  515.884809][ T9186] hub 6-0:1.0: 1 port detected
[  515.894572][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.028182][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.233594][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.244682][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.261810][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.271089][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  516.912577][   T26] audit: type=1804 audit(1728438200.469:628): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1523" name="/newroot/11/bus/bus" dev="loop3" ino=18 res=1 errno=0
[  516.976089][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  517.060622][   T26] audit: type=1800 audit(1728438200.469:629): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1523" name="bus" dev="loop3" ino=18 res=0 errno=0
[  517.202068][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  517.205780][ T9195] loop0: detected capacity change from 0 to 256
[  517.222113][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  517.234140][ T8817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.333476][ T9195] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  517.565576][ T8817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.665066][ T9195] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  517.769956][ T8817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.015272][ T8817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.350954][ T9220] loop0: detected capacity change from 0 to 16
[  520.266178][ T9220] erofs: (device loop0): mounted with root inode @ nid 36.
[  520.301554][ T9220] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  520.311051][ T9220] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[  520.320353][ T9220] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  520.330404][ T9220] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36
[  520.339530][ T9220] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  520.349511][ T9220] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36
[  520.358629][ T9220] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  520.368690][ T9220] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36
[  520.378344][ T9220] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  520.388311][ T9220] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[  520.397970][ T9220] attempt to access beyond end of device
[  520.397970][ T9220] loop0: rw=524288, want=776, limit=16
[  520.409443][ T9220] attempt to access beyond end of device
[  520.409443][ T9220] loop0: rw=524288, want=848, limit=16
[  520.421031][ T9220] attempt to access beyond end of device
[  520.421031][ T9220] loop0: rw=524288, want=13478624056, limit=16
[  520.748293][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.756976][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.767656][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.776582][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.787380][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  520.829698][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  522.833222][ T9234] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  522.849129][ T9234] hub 6-0:1.0: USB hub found
[  522.854148][ T9234] hub 6-0:1.0: 1 port detected
[  522.854918][ T3621] Bluetooth: hci2: command 0x0406 tx timeout
[  523.092486][ T9239] loop1: detected capacity change from 0 to 256
[  524.342318][ T9247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1445'.
[  524.377985][ T3889] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  524.774975][ T3889] usb 5-1: device descriptor read/64, error -71
[  525.142079][ T9254] loop2: detected capacity change from 0 to 512
[  526.356694][ T3889] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  526.431834][ T9254] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  526.479253][ T9254] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff)
[  527.760992][   T26] audit: type=1804 audit(1728438211.598:630): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1541" name="/newroot/1/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  527.980022][   T26] audit: type=1800 audit(1728438211.598:631): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1541" name="bus" dev="loop2" ino=18 res=0 errno=0
[  532.330017][ T9282] loop1: detected capacity change from 0 to 16
[  532.330084][ T9284] loop3: detected capacity change from 0 to 16
[  532.465027][ T9282] erofs: (device loop1): mounted with root inode @ nid 36.
[  532.473140][ T9284] erofs: (device loop3): mounted with root inode @ nid 36.
[  532.501801][ T9282] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  532.511319][ T9282] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  532.520420][ T9282] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  532.530391][ T9282] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  532.540209][ T9282] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  532.541113][ T9283] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  532.560368][ T9283] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  532.569259][ T9282] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  532.569555][ T9283] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  532.578643][ T9282] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  532.588942][ T9283] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  532.598338][ T9282] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  532.607344][ T9283] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  532.616476][ T9282] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  532.626260][ T9283] erofs: (device loop3): z_erofs_readahead: readahead error at page 14 @ nid 36
[  532.636324][ T9282] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  532.645354][ T9283] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  532.664126][ T9283] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36
[  532.675012][ T9283] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  532.685013][ T9283] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[  532.695288][ T9283] attempt to access beyond end of device
[  532.695288][ T9283] loop3: rw=524288, want=776, limit=16
[  532.748654][ T9283] attempt to access beyond end of device
[  532.748654][ T9283] loop3: rw=524288, want=848, limit=16
[  532.762151][ T9283] attempt to access beyond end of device
[  532.762151][ T9283] loop3: rw=524288, want=13478624056, limit=16
[  533.868132][ T9282] attempt to access beyond end of device
[  533.868132][ T9282] loop1: rw=524288, want=776, limit=16
[  533.879214][ T9282] attempt to access beyond end of device
[  533.879214][ T9282] loop1: rw=524288, want=848, limit=16
[  533.890343][ T9282] attempt to access beyond end of device
[  533.890343][ T9282] loop1: rw=524288, want=13478624056, limit=16
[  534.236407][ T9299] loop2: detected capacity change from 0 to 256
[  534.287193][ T9301] loop0: detected capacity change from 0 to 512
[  535.616728][ T3622] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  536.123790][ T9307] loop4: detected capacity change from 0 to 16
[  536.995726][ T9301] EXT4-fs: error -4 creating inode table initialization thread
[  537.004620][ T9301] EXT4-fs (loop0): mount failed
[  537.046691][ T9307] erofs: (device loop4): mounted with root inode @ nid 36.
[  537.073259][ T9306] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  537.082747][ T9306] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36
[  537.091897][ T9306] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  537.102066][ T9306] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  537.111255][ T9306] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  537.121521][ T9306] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36
[  537.130749][ T9306] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  537.141599][ T9306] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  537.150883][ T9306] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  537.160866][ T9306] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  537.169953][ T9306] attempt to access beyond end of device
[  537.169953][ T9306] loop4: rw=524288, want=776, limit=16
[  537.181170][ T9306] attempt to access beyond end of device
[  537.181170][ T9306] loop4: rw=524288, want=848, limit=16
[  537.192370][ T9306] attempt to access beyond end of device
[  537.192370][ T9306] loop4: rw=524288, want=13478624056, limit=16
[  537.649586][ T3622] usb 2-1: device not accepting address 19, error -71
[  539.996976][ T9330] loop4: detected capacity change from 0 to 512
[  540.173171][ T9330] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  540.213227][ T9338] loop3: detected capacity change from 0 to 256
[  540.219788][ T9330] ext4 filesystem being mounted at /259/bus supports timestamps until 2038 (0x7fffffff)
[  540.873985][ T9338] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  541.115860][ T9338] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  541.348828][   T26] audit: type=1804 audit(1728438226.012:632): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1562" name="/newroot/259/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  542.189290][   T26] audit: type=1800 audit(1728438226.022:633): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1562" name="bus" dev="loop4" ino=18 res=0 errno=0
[  542.374811][ T9351] loop1: detected capacity change from 0 to 16
[  543.123305][ T9351] erofs: (device loop1): mounted with root inode @ nid 36.
[  543.149718][ T9350] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  543.159242][ T9350] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  543.168291][ T9350] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  543.178283][ T9350] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  543.187433][ T9350] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  543.197551][ T9350] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  543.206644][ T9350] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  543.216614][ T9350] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  543.226099][ T9350] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  543.236636][ T9350] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  543.245699][ T9350] attempt to access beyond end of device
[  543.245699][ T9350] loop1: rw=524288, want=776, limit=16
[  543.256959][ T9350] attempt to access beyond end of device
[  543.256959][ T9350] loop1: rw=524288, want=848, limit=16
[  543.268140][ T9350] attempt to access beyond end of device
[  543.268140][ T9350] loop1: rw=524288, want=13478624056, limit=16
[  543.492964][ T9358] loop4: detected capacity change from 0 to 512
[  543.704611][ T9358] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  543.725838][ T9358] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038 (0x7fffffff)
[  544.511498][ T9365] loop1: detected capacity change from 0 to 256
[  545.472833][ T7525] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  545.726263][ T7525] usb 4-1: Using ep0 maxpacket: 16
[  545.852794][ T7525] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  545.891878][ T7525] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 11
[  545.971606][ T7525] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  546.043874][ T7525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.570933][ T9388] 9pnet: Insufficient options for proto=fd
[  547.586222][ T3621] usb 4-1: USB disconnect, device number 30
[  547.810353][ T4546] Bluetooth: hci5: command 0x0409 tx timeout
[  549.743571][ T9399] loop3: detected capacity change from 0 to 16
[  549.869357][ T9401] loop2: detected capacity change from 0 to 16
[  550.503472][ T4546] Bluetooth: hci5: command 0x041b tx timeout
[  550.599297][ T9399] erofs: (device loop3): mounted with root inode @ nid 36.
[  550.599322][ T9401] erofs: (device loop2): mounted with root inode @ nid 36.
[  550.617180][ T9399] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  550.626713][ T9399] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  550.635896][ T9399] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  550.639220][ T9400] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  550.645832][ T9399] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  550.645858][ T9399] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  550.655331][ T9400] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36
[  550.664328][ T9399] erofs: (device loop3): z_erofs_readahead: readahead error at page 14 @ nid 36
[  550.664355][ T9399] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  550.664377][ T9399] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36
[  550.674301][ T9400] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  550.683423][ T9399] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  550.692552][ T9400] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36
[  550.692576][ T9400] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  550.702487][ T9399] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[  550.702599][ T9399] attempt to access beyond end of device
[  550.702599][ T9399] loop3: rw=524288, want=776, limit=16
[  550.712149][ T9400] erofs: (device loop2): z_erofs_readahead: readahead error at page 14 @ nid 36
[  550.721509][ T9399] attempt to access beyond end of device
[  550.721509][ T9399] loop3: rw=524288, want=848, limit=16
[  550.731368][ T9400] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  550.740511][ T9399] attempt to access beyond end of device
[  550.740511][ T9399] loop3: rw=524288, want=13478624056, limit=16
[  550.750352][ T9400] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  550.821710][ T9400] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  550.831759][ T9400] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  550.840830][ T9400] attempt to access beyond end of device
[  550.840830][ T9400] loop2: rw=524288, want=776, limit=16
[  550.851927][ T9400] attempt to access beyond end of device
[  550.851927][ T9400] loop2: rw=524288, want=848, limit=16
[  550.863154][ T9400] attempt to access beyond end of device
[  550.863154][ T9400] loop2: rw=524288, want=13478624056, limit=16
[  551.057967][ T9378] chnl_net:caif_netlink_parms(): no params data found
[  551.289480][ T9406] hub 6-0:1.0: USB hub found
[  551.294348][ T9406] hub 6-0:1.0: 1 port detected
[  551.588260][ T9419] 9pnet: Insufficient options for proto=fd
[  551.805139][ T9416] loop3: detected capacity change from 0 to 512
[  552.368842][ T9378] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.431626][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.433117][ T9416] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  552.450062][ T9416] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff)
[  552.505925][ T9378] device bridge_slave_0 entered promiscuous mode
[  552.534668][ T4546] Bluetooth: hci5: command 0x040f tx timeout
[  552.534710][ T9378] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.696714][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.794382][ T9378] device bridge_slave_1 entered promiscuous mode
[  553.826855][ T9436] 9pnet: Insufficient options for proto=fd
[  554.598034][ T4546] Bluetooth: hci5: command 0x0419 tx timeout
[  554.633800][ T9378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.747563][ T9378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.876993][ T3634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.957495][ T9447] loop4: detected capacity change from 0 to 16
[  554.972154][ T9378] team0: Port device team_slave_0 added
[  554.991556][ T9378] team0: Port device team_slave_1 added
[  555.079069][ T9378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.096235][ T9378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  561.482956][ T9378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  561.777044][ T9378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  561.849996][ T9457] 9pnet: Insufficient options for proto=fd
[  562.610427][ T9378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.647162][ T9458] loop1: detected capacity change from 0 to 512
[  562.914740][ T9458] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  562.926055][ T9458] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff)
[  562.957627][ T9463] hub 6-0:1.0: USB hub found
[  562.962486][ T9463] hub 6-0:1.0: 1 port detected
[  563.094235][ T9378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  563.176476][ T3634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.315085][ T3634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.412346][ T9378] device hsr_slave_0 entered promiscuous mode
[  563.424252][ T9378] device hsr_slave_1 entered promiscuous mode
[  563.439300][ T9378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  563.454778][ T9378] Cannot create hsr debugfs directory
[  563.476525][ T2989] Bluetooth: hci6: command 0x0406 tx timeout
[  563.482790][ T2989] ------------[ cut here ]------------
[  563.488357][ T2989] WARNING: CPU: 1 PID: 2989 at kernel/workqueue.c:1453 __queue_work+0xbaf/0xd00
[  563.497404][ T2989] Modules linked in:
[  563.501317][ T2989] CPU: 1 PID: 2989 Comm: kworker/1:3 Not tainted 5.15.167-syzkaller #0
[  563.509575][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  563.519812][ T2989] Workqueue: events hci_cmd_timeout
[  563.525047][ T2989] RIP: 0010:__queue_work+0xbaf/0xd00
[  563.530434][ T2989] Code: 7c 24 10 e8 d3 61 77 00 e9 1c fd ff ff e8 b9 97 2d 00 89 ee 48 c7 c7 a0 18 7d 8c e8 bb 66 d8 02 e9 64 fc ff ff e8 a1 97 2d 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 97 2d 00
[  563.550051][ T2989] RSP: 0018:ffffc9000b8dfaf8 EFLAGS: 00010093
[  563.556136][ T2989] RAX: ffffffff8152c2cf RBX: 00000000000b0012 RCX: ffff888029f15940
[  563.564132][ T2989] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[  563.572117][ T2989] RBP: 0000000000010000 R08: ffffffff8154fba5 R09: ffffed100f888967
[  563.580190][ T2989] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  563.588179][ T2989] R13: ffff8880783ac800 R14: 0000000000000008 R15: 1ffff9200171bf74
[  563.596167][ T2989] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  563.605110][ T2989] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  563.611708][ T2989] CR2: 0000000020404030 CR3: 00000000644bd000 CR4: 00000000003506e0
[  563.619781][ T2989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  563.627850][ T2989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  563.635917][ T2989] Call Trace:
[  563.639198][ T2989]  <TASK>
[  563.642131][ T2989]  ? __warn+0x15b/0x300
[  563.646303][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.650993][ T2989]  ? report_bug+0x1b7/0x2e0
[  563.655516][ T2989]  ? handle_bug+0x3d/0x70
[  563.659868][ T2989]  ? exc_invalid_op+0x16/0x40
[  563.664553][ T2989]  ? asm_exc_invalid_op+0x16/0x20
[  563.669598][ T2989]  ? kthread_data+0x45/0xc0
[  563.674113][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.678801][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.683500][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.688184][ T2989]  ? bt_err+0x123/0x170
[  563.692534][ T2989]  ? queue_work_on+0xf6/0x250
[  563.697219][ T2989]  ? lockdep_hardirqs_off+0x70/0x100
[  563.702530][ T2989]  queue_work_on+0x14b/0x250
[  563.707164][ T2989]  ? wq_worker_last_func+0x40/0x40
[  563.712297][ T2989]  ? do_raw_spin_unlock+0x137/0x8b0
[  563.717531][ T2989]  ? hci_cmd_timeout+0x174/0x230
[  563.722482][ T2989]  process_one_work+0x8a1/0x10c0
[  563.727454][ T2989]  ? worker_detach_from_pool+0x260/0x260
[  563.733110][ T2989]  ? _raw_spin_lock_irqsave+0x120/0x120
[  563.738676][ T2989]  ? kthread_data+0x4e/0xc0
[  563.743192][ T2989]  ? wq_worker_running+0x97/0x170
[  563.748250][ T2989]  worker_thread+0xaca/0x1280
[  563.752968][ T2989]  kthread+0x3f6/0x4f0
[  563.757048][ T2989]  ? rcu_lock_release+0x20/0x20
[  563.761928][ T2989]  ? kthread_blkcg+0xd0/0xd0
[  563.766636][ T2989]  ret_from_fork+0x1f/0x30
[  563.771085][ T2989]  </TASK>
[  563.774125][ T2989] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  563.781406][ T2989] CPU: 1 PID: 2989 Comm: kworker/1:3 Not tainted 5.15.167-syzkaller #0
[  563.789656][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  563.799724][ T2989] Workqueue: events hci_cmd_timeout
[  563.804948][ T2989] Call Trace:
[  563.808242][ T2989]  <TASK>
[  563.811177][ T2989]  dump_stack_lvl+0x1e3/0x2d0
[  563.816047][ T2989]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  563.821703][ T2989]  ? panic+0x860/0x860
[  563.825807][ T2989]  ? __queue_work+0xae0/0xd00
[  563.830503][ T2989]  ? __queue_work+0xae0/0xd00
[  563.835218][ T2989]  panic+0x318/0x860
[  563.839134][ T2989]  ? __warn+0x16a/0x300
[  563.843303][ T2989]  ? fb_is_primary_device+0xd0/0xd0
[  563.848535][ T2989]  ? ret_from_fork+0x1f/0x30
[  563.853141][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.857915][ T2989]  __warn+0x2b2/0x300
[  563.861908][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.866596][ T2989]  report_bug+0x1b7/0x2e0
[  563.870947][ T2989]  handle_bug+0x3d/0x70
[  563.875111][ T2989]  exc_invalid_op+0x16/0x40
[  563.879628][ T2989]  asm_exc_invalid_op+0x16/0x20
[  563.884502][ T2989] RIP: 0010:__queue_work+0xbaf/0xd00
[  563.889817][ T2989] Code: 7c 24 10 e8 d3 61 77 00 e9 1c fd ff ff e8 b9 97 2d 00 89 ee 48 c7 c7 a0 18 7d 8c e8 bb 66 d8 02 e9 64 fc ff ff e8 a1 97 2d 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 97 2d 00
[  563.909439][ T2989] RSP: 0018:ffffc9000b8dfaf8 EFLAGS: 00010093
[  563.915528][ T2989] RAX: ffffffff8152c2cf RBX: 00000000000b0012 RCX: ffff888029f15940
[  563.923529][ T2989] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[  563.931510][ T2989] RBP: 0000000000010000 R08: ffffffff8154fba5 R09: ffffed100f888967
[  563.939490][ T2989] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  563.947581][ T2989] R13: ffff8880783ac800 R14: 0000000000000008 R15: 1ffff9200171bf74
[  563.955585][ T2989]  ? kthread_data+0x45/0xc0
[  563.960110][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.964817][ T2989]  ? __queue_work+0xbaf/0xd00
[  563.969506][ T2989]  ? bt_err+0x123/0x170
[  563.973679][ T2989]  ? queue_work_on+0xf6/0x250
[  563.978365][ T2989]  ? lockdep_hardirqs_off+0x70/0x100
[  563.983676][ T2989]  queue_work_on+0x14b/0x250
[  563.988291][ T2989]  ? wq_worker_last_func+0x40/0x40
[  563.993422][ T2989]  ? do_raw_spin_unlock+0x137/0x8b0
[  563.998728][ T2989]  ? hci_cmd_timeout+0x174/0x230
[  564.003768][ T2989]  process_one_work+0x8a1/0x10c0
[  564.008781][ T2989]  ? worker_detach_from_pool+0x260/0x260
[  564.014458][ T2989]  ? _raw_spin_lock_irqsave+0x120/0x120
[  564.020030][ T2989]  ? kthread_data+0x4e/0xc0
[  564.024547][ T2989]  ? wq_worker_running+0x97/0x170
[  564.029588][ T2989]  worker_thread+0xaca/0x1280
[  564.034300][ T2989]  kthread+0x3f6/0x4f0
[  564.038384][ T2989]  ? rcu_lock_release+0x20/0x20
[  564.043256][ T2989]  ? kthread_blkcg+0xd0/0xd0
[  564.047860][ T2989]  ret_from_fork+0x1f/0x30
[  564.052307][ T2989]  </TASK>
[  564.055616][ T2989] Kernel Offset: disabled
[  564.060254][ T2989] Rebooting in 86400 seconds..