last executing test programs:

18.334336392s ago: executing program 3 (id=675):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4100010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x40046f41, 0x1000000000000)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001e80)={0xa, @pix_mp={0x0, 0x0, 0xb5315241, 0x0, 0x0, [{0x0, 0xfffffffc}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {0x3}], 0x4}})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)

16.337238845s ago: executing program 3 (id=677):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12.964625911s ago: executing program 3 (id=682):
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000005050505050500000000000000000000000000100e805020202020202010003010d"], 0x31)
syz_emit_ethernet(0x183, &(0x7f0000000780)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000400", 0x14d, 0x3a, 0x1, @private0, @local, {[@fragment={0x0, 0x0, 0x3, 0x1, 0x0, 0x8, 0x67}], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a9d528", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [@routing], "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"}}}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x32)
syz_80211_inject_frame(0x0, 0x0, 0x4e7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400), 0x8)
unshare(0x20000400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x1c)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2)
preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/122, 0x7a}], 0x1, 0x0, 0x0)

12.485518099s ago: executing program 0 (id=686):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x24, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000000)="0048000000ff0000a15089a3e56118535ec8", 0x12)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='\x00\b\x00\x00\xf9', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
write(r4, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f046})
write(r4, &(0x7f0000000600)="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"/278, 0x116)

11.967783272s ago: executing program 3 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
lseek(r3, 0x401, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000068000100000000000000000a000000000000000400040004000b00436274a344f77b1139d0529ff254a303293623ef6fe19604337a0dcb73c9ed682df22db83e96abdd54a3fba33c2487cf"], 0x20}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

10.307332598s ago: executing program 3 (id=690):
syz_emit_vhci(0x0, 0x22)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c81040003c0001000a0702000002050932000400ffff040004090000070400de0c00040610090108004000000202d9ea050101010200010202d68c0142886e4db9b563d741241f8ac465672a1f9383f076b610b7657fa33d370013d56d5fb4a2b9d00439ce597e1f1c0834f7520753e3b6f76ac277b4fcd099dd789222776b3f45dcde04d83adc03d0b80dfd46ed2de50a61d01b000000000000000000"], 0x45)
write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "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"}, 0x1b3)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r1, 0x4, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6b38337b, 0x4, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x1, 0x8, 0x7ff], 0x100000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f000004ca80)=""/102388, 0x18ff4}], 0x1, 0x0, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
getpid()
dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0xdf1}}}}, 0x11)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)

9.081682718s ago: executing program 1 (id=692):
syz_open_dev$usbfs(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket(0x0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
syz_clone(0x81201000, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0)

8.908645442s ago: executing program 4 (id=693):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10)
unshare(0x2a020400)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x800443d3, 0x20000002)

7.783051554s ago: executing program 4 (id=694):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xf, 0x0, [@remote, @private, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.528977994s ago: executing program 1 (id=695):
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c9101800140001000a0002000200119f02000600100e0400faff03001f1c850912ca31368797492242a9"], 0x1d)

7.206091761s ago: executing program 1 (id=696):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")
ptrace$setregs(0xd, r0, 0x0, 0x0)

6.913698525s ago: executing program 0 (id=698):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xb, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

6.708540322s ago: executing program 1 (id=699):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
open(0x0, 0x141042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000080), 0xffffff1c)
close(0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
wait4(r4, 0x0, 0x0, 0x0)

6.560980323s ago: executing program 4 (id=701):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.49651534s ago: executing program 2 (id=702):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@private=0xa010101}, {}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@rand_addr=0x64010102]}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x2}]}]}}}}})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000080), 0xffffff1c)
close(0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x8, r4)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000))
syz_io_uring_setup(0x4b9c, &(0x7f0000000300)={0x0, 0xc1cf, 0x13910, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000002540))

4.958588734s ago: executing program 4 (id=703):
write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3, &(0x7f0000000740)='|2\n'}}}}], 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a00)={[], 0x0, 0x78469555c77fef7b})
socket(0x0, 0x1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)="10000000000000002900000043000000", 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x1001)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.727301923s ago: executing program 0 (id=704):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb)
listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x40046f41, 0x1000000000000)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001e80)={0xa, @pix_mp={0x0, 0x0, 0xb5315241, 0x0, 0x0, [{0x0, 0xfffffffc}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {0x3}], 0x4}})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)

4.443627247s ago: executing program 3 (id=705):
syz_emit_vhci(0x0, 0x22)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c81040003c0001000a0702000002050932000400ffff040004090000070400de0c00040610090108004000000202d9ea050101010200010202d68c0142886e4db9b563d741241f8ac465672a1f9383f076b610b7657fa33d370013d56d5fb4a2b9d00439ce597e1f1c0834f7520753e3b6f76ac277b4fcd099dd789222776b3f45dcde04d83adc03d0b80dfd46ed2de50a61d01b000000000000000000"], 0x45)
write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "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"}, 0x1b3)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r1, 0x4, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6b38337b, 0x4, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x1, 0x8, 0x7ff], 0x100000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f000004ca80)=""/102388, 0x18ff4}], 0x1, 0x0, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
getpid()
dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0xdf1}}}}, 0x11)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)

4.155197441s ago: executing program 2 (id=706):
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c9101800140001000a0002000200119f02000600100e0400faff03001f1c850912ca31368797492242a93adff2232079b8"], 0x1d)

3.91242412s ago: executing program 2 (id=707):
syz_open_dev$usbfs(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket(0x0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
syz_clone(0x81201000, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0)

3.506548943s ago: executing program 2 (id=708):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.899192813s ago: executing program 2 (id=709):
socket$inet(0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

2.712539348s ago: executing program 1 (id=710):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002540))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xffffffbc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x38, r3, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
socket(0x0, 0x3, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
sendmmsg$unix(r6, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0)

2.624537786s ago: executing program 0 (id=711):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.427374571s ago: executing program 4 (id=712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}})

1.409411375s ago: executing program 4 (id=713):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.280488475s ago: executing program 1 (id=714):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0)

1.225557109s ago: executing program 2 (id=715):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xb, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.159586545s ago: executing program 0 (id=716):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@private=0xa010101}, {}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@rand_addr=0x64010102]}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x2}]}]}}}}})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000080), 0xffffff1c)
close(0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x8, r4)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000))
syz_io_uring_setup(0x4b9c, &(0x7f0000000300)={0x0, 0xc1cf, 0x13910, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000002540))

0s ago: executing program 0 (id=717):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0)
syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
fanotify_init(0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0)

kernel console output (not intermixed with test programs):

051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.971216][ T4071] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  108.974758][   T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  108.993856][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.037300][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.086501][ T3599] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  109.196250][ T4071] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  109.354762][ T3599] usb 4-1: Using ep0 maxpacket: 16
[  109.373909][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.404416][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.459353][   T22] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  109.495539][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.515954][   T22] usb 5-1: config 0 descriptor??
[  109.533877][ T3599] usb 4-1: unable to get BOS descriptor or descriptor too short
[  109.649167][ T3599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.659544][ T4073] loop1: detected capacity change from 0 to 40427
[  109.697060][ T4073] F2FS-fs (loop1): Invalid uid value -1
[  109.739513][ T3599] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  109.784110][ T3599] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  109.942665][ T3556] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  110.059532][ T3599] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  110.079240][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.146931][ T3599] usb 4-1: Product: syz
[  110.151162][ T3599] usb 4-1: Manufacturer: syz
[  110.188500][ T3599] usb 4-1: SerialNumber: syz
[  110.363649][ T4099] loop0: detected capacity change from 0 to 128
[  110.373406][ T4083] binder: 4082:4083 ioctl c0306201 20000580 returned -14
[  110.404105][ T4099] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  110.434869][ T3599] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  110.443987][ T3599] cdc_ncm 4-1:1.0: bind() failure
[  110.638306][ T3599] usb 4-1: USB disconnect, device number 7
[  111.423873][   T22] usb 5-1: string descriptor 0 read error: -71
[  111.464860][   T22] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71
[  111.568904][ T4109] netlink: 'syz.2.109': attribute type 11 has an invalid length.
[  111.577437][ T4109] netlink: 'syz.2.109': attribute type 11 has an invalid length.
[  111.585327][ T4109] netlink: 8520 bytes leftover after parsing attributes in process `syz.2.109'.
[  111.990867][   T22] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71
[  112.029050][   T22] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71
[  112.067873][   T22] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[  112.152990][   T22] uclogic: probe of 0003:256C:006D.0004 failed with error -71
[  112.211770][   T22] usb 5-1: USB disconnect, device number 2
[  112.493694][ T3599] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  112.903980][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.927425][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.967536][ T3599] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  112.998965][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.034578][ T3599] usb 4-1: config 0 descriptor??
[  113.441288][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  113.495589][ T4115] binder: 4114:4115 ioctl c0306201 20000580 returned -14
[  114.029450][ T4155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.123430][ T4154] loop1: detected capacity change from 0 to 128
[  114.764061][ T3599] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71
[  114.853198][ T3599] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  114.862628][ T4155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.881088][ T3599] uclogic: probe of 0003:256C:006D.0005 failed with error -71
[  114.930345][ T3599] usb 4-1: USB disconnect, device number 8
[  115.012655][ T4164] netlink: 'syz.1.124': attribute type 11 has an invalid length.
[  115.022215][ T4164] netlink: 'syz.1.124': attribute type 11 has an invalid length.
[  115.030117][ T4164] netlink: 8520 bytes leftover after parsing attributes in process `syz.1.124'.
[  116.051645][ T4170] loop2: detected capacity change from 0 to 128
[  116.096788][ T4170] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  116.625345][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.668668][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.769978][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.822872][ T4167] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.878965][ T3551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  116.903841][ T3551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  116.926811][ T3551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  116.938501][ T3551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  116.946310][ T3551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  116.954217][ T3551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  117.158730][ T4199] loop2: detected capacity change from 0 to 128
[  117.328638][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  117.366609][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'.
[  117.769962][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'.
[  118.306891][ T4216] loop4: detected capacity change from 0 to 128
[  118.450526][ T4216] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  119.013748][ T3551] Bluetooth: hci5: command tx timeout
[  119.129862][ T4188] chnl_net:caif_netlink_parms(): no params data found
[  119.539266][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.616428][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.644887][ T4188] device bridge_slave_0 entered promiscuous mode
[  119.689329][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.715763][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.724011][ T3565] Bluetooth: Unexpected continuation frame (len 64)
[  119.781420][ T4188] device bridge_slave_1 entered promiscuous mode
[  120.040303][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.112822][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.414390][ T4188] team0: Port device team_slave_0 added
[  120.436654][ T4188] team0: Port device team_slave_1 added
[  120.559275][ T4242] loop4: detected capacity change from 0 to 128
[  120.617952][ T4242] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  120.738894][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.791082][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.793951][   T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  120.904979][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  121.094347][ T3565] Bluetooth: hci5: command tx timeout
[  121.184323][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.245034][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.273964][   T14] usb 3-1: config 0 interface 0 has no altsetting 0
[  121.280643][   T14] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  121.292139][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.350408][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.408890][   T14] usb 3-1: config 0 descriptor??
[  121.452056][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.736824][ T4188] device hsr_slave_0 entered promiscuous mode
[  121.738965][ T3565] Bluetooth: hci1: command tx timeout
[  121.793943][ T4188] device hsr_slave_1 entered promiscuous mode
[  121.815275][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.826870][ T4188] Cannot create hsr debugfs directory
[  121.940576][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.061489][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.123905][   T14] video4linux radio32: keene_cmd_set failed (-71)
[  122.130632][   T14] radio-keene 3-1:0.0: V4L2 device registered as radio32
[  122.160340][   T14] usb 3-1: USB disconnect, device number 3
[  122.469711][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.685256][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.173706][ T3565] Bluetooth: hci5: command tx timeout
[  123.319850][ T4264] loop2: detected capacity change from 0 to 128
[  123.411136][ T4264] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  124.636205][ T4279] loop3: detected capacity change from 0 to 128
[  124.813357][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  124.850658][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  124.880197][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  124.953191][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  125.253725][ T3565] Bluetooth: hci5: command tx timeout
[  125.283243][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.487408][ T4279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  125.628496][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[  125.660347][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  125.685465][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.742280][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.765847][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.791639][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.798984][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.022829][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.039798][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.086634][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.135329][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.142475][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.218819][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  126.249416][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  126.299861][   T11] device hsr_slave_0 left promiscuous mode
[  126.400158][   T11] device hsr_slave_1 left promiscuous mode
[  126.468988][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.481235][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.592075][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.676123][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.831355][   T11] device bridge_slave_1 left promiscuous mode
[  126.867116][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.199640][   T11] device bridge_slave_0 left promiscuous mode
[  127.249889][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.649834][   T11] device veth1_macvtap left promiscuous mode
[  127.698508][   T11] device veth0_macvtap left promiscuous mode
[  127.744989][   T11] device veth1_vlan left promiscuous mode
[  127.750878][   T11] device veth0_vlan left promiscuous mode
[  128.902129][ T4315] loop3: detected capacity change from 0 to 4096
[  128.948344][ T4315] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  129.074109][   T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  129.083906][ T3593] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  129.085069][   T11] team0 (unregistering): Port device team_slave_1 removed
[  129.101433][ T4315] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  129.201586][   T11] team0 (unregistering): Port device team_slave_0 removed
[  129.281159][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.317367][   T22] usb 5-1: Using ep0 maxpacket: 16
[  129.400547][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.467579][ T3593] usb 3-1: config 0 interface 0 has no altsetting 0
[  129.480357][ T3593] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  129.490882][ T3593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.519554][ T3593] usb 3-1: config 0 descriptor??
[  129.525880][   T22] usb 5-1: unable to get BOS descriptor or descriptor too short
[  129.627455][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.648270][   T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  129.667853][   T22] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  129.882235][   T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.901769][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.920041][   T22] usb 5-1: Product: syz
[  129.924605][   T22] usb 5-1: Manufacturer: syz
[  129.930249][   T22] usb 5-1: SerialNumber: syz
[  130.002756][   T22] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  130.020702][   T22] cdc_ncm 5-1:1.0: bind() failure
[  130.233795][ T3593] video4linux radio32: keene_cmd_set failed (-71)
[  130.245498][ T3593] radio-keene 3-1:0.0: V4L2 device registered as radio32
[  130.271340][ T3593] usb 3-1: USB disconnect, device number 4
[  130.286568][ T3595] usb 5-1: USB disconnect, device number 3
[  130.421096][   T11] bond0 (unregistering): Released all slaves
[  130.571505][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.588171][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.597726][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.607903][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.618267][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.628394][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.637475][ T4309] netlink: 96 bytes leftover after parsing attributes in process `syz.1.158'.
[  130.679347][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.701491][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  130.720748][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.734980][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.743520][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.018304][ T3559] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  131.467349][ T4350] loop3: detected capacity change from 0 to 128
[  131.495427][ T4352] device bond0 entered promiscuous mode
[  131.525359][ T4352] device bond_slave_0 entered promiscuous mode
[  131.565904][ T4352] device bond_slave_1 entered promiscuous mode
[  131.632593][ T4350] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  131.648606][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  131.673089][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  131.715219][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.874223][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  131.888032][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.932406][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  131.989842][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  132.076846][ T4188] device veth0_vlan entered promiscuous mode
[  132.094513][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.112745][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.189951][ T4188] device veth1_vlan entered promiscuous mode
[  132.253224][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  132.309125][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  132.360605][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  132.374879][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  132.383206][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  132.395527][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  132.452211][ T4167] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  132.483714][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  132.498106][ T4188] device veth0_macvtap entered promiscuous mode
[  132.560793][ T4188] device veth1_macvtap entered promiscuous mode
[  132.645516][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  132.657347][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  132.689194][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.700831][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  132.707166][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  132.711803][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.727541][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.739644][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.770789][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.799426][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.813125][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.843492][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.873089][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.901059][ T4367] netlink: 96 bytes leftover after parsing attributes in process `syz.4.173'.
[  132.913730][ T3592] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  132.921444][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  132.938917][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  133.036488][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.068163][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.103838][ T3551] Bluetooth: hci5: command tx timeout
[  133.120865][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.138012][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.151146][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.162428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.173046][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.184355][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.210205][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.222796][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'.
[  133.296759][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  133.307619][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  133.316374][ T3592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.327562][ T3592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.352554][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.361803][ T3592] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  133.371732][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.381103][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.390481][ T3592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.404869][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.422347][ T3592] usb 4-1: config 0 descriptor??
[  133.744692][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.771374][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.856840][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  133.882265][ T4365] binder: 4364:4365 ioctl c0306201 20000580 returned -14
[  133.901199][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.930300][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.946348][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  133.982022][  T153] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  134.176841][ T4387] loop2: detected capacity change from 0 to 128
[  134.343938][  T153] usb 5-1: config 0 interface 0 has no altsetting 0
[  134.363163][  T153] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  134.397519][ T4387] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  134.416669][  T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.455632][  T153] usb 5-1: config 0 descriptor??
[  134.661183][   T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  134.721232][   T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  134.765714][   T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  134.797517][   T46] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  134.851717][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.908590][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.945948][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.033794][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.074483][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.126068][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.153839][  T153] video4linux radio32: keene_cmd_set failed (-71)
[  135.163398][  T153] radio-keene 5-1:0.0: V4L2 device registered as radio32
[  135.189259][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.210132][  T153] usb 5-1: USB disconnect, device number 4
[  135.286509][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.332784][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  135.432226][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.479013][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.524301][ T4390] loop1: detected capacity change from 0 to 4096
[  135.544534][ T3592] usb 4-1: string descriptor 0 read error: -71
[  135.557948][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[  135.575709][ T3592] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71
[  135.592155][ T3592] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71
[  135.622231][ T4390] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  135.670656][ T3592] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71
[  135.686654][ T3592] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[  135.734214][ T3592] uclogic: probe of 0003:256C:006D.0006 failed with error -71
[  135.795594][ T3592] usb 4-1: USB disconnect, device number 9
[  135.875618][ T4390] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  136.326015][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  136.326032][   T27] audit: type=1326 audit(1720816032.462:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  136.423633][   T27] audit: type=1326 audit(1720816032.482:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  136.543628][   T27] audit: type=1326 audit(1720816032.482:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  136.552394][ T4412] netlink: 96 bytes leftover after parsing attributes in process `syz.4.185'.
[  136.601466][ T3549] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  136.616324][   T27] audit: type=1326 audit(1720816032.482:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  136.828700][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[  136.848247][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  137.484618][ T4437] loop2: detected capacity change from 0 to 512
[  137.543244][ T4437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  137.613521][ T4437] UDF-fs: Scanning with blocksize 512 failed
[  137.674050][ T4437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  137.838388][ T4437] UDF-fs: Scanning with blocksize 1024 failed
[  137.867846][ T4437] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  137.965747][ T4437] UDF-fs: Scanning with blocksize 2048 failed
[  138.088192][ T4437] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  138.090198][   T27] audit: type=1326 audit(1720816034.222:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000
[  138.206658][ T4437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.214814][   T27] audit: type=1326 audit(1720816034.272:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000
[  138.273497][ T4458] netlink: 96 bytes leftover after parsing attributes in process `syz.1.199'.
[  138.324554][   T27] audit: type=1326 audit(1720816034.272:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000
[  138.570602][   T27] audit: type=1326 audit(1720816034.272:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000
[  138.708503][   T27] audit: type=1326 audit(1720816034.272:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4449 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1752d75bd9 code=0x7ffc0000
[  139.347207][   T27] audit: type=1804 audit(1720816034.522:94): pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.191" name="/newroot/46/file0/bus" dev="loop2" ino=43 res=1 errno=0
[  139.683033][ T4472] loop1: detected capacity change from 0 to 512
[  139.777352][ T4472] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  139.786673][ T4472] UDF-fs: Scanning with blocksize 512 failed
[  139.815874][ T4472] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  139.823331][ T4472] UDF-fs: Scanning with blocksize 1024 failed
[  139.883943][ T4472] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  139.908918][ T4472] UDF-fs: Scanning with blocksize 2048 failed
[  139.939253][ T4472] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  140.204821][ T4472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.431907][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.519619][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.659406][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.757271][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.948935][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.086881][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.118350][ T4480] loop0: detected capacity change from 0 to 4096
[  141.279467][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.368185][ T4480] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  141.385299][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.432647][ T4480] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  141.464507][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.514497][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.924113][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  141.924139][   T27] audit: type=1326 audit(1720816038.062:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000
[  142.018798][   T27] audit: type=1326 audit(1720816038.092:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000
[  142.094871][   T27] audit: type=1326 audit(1720816038.092:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000
[  142.300735][   T27] audit: type=1326 audit(1720816038.092:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c9175bd9 code=0x7ffc0000
[  142.436721][ T4513] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  142.532842][ T4519] ptrace attach of "./syz-executor exec"[3559] was attempted by "./syz-executor exec"[4519]
[  142.978309][ T4522] device bond0 entered promiscuous mode
[  143.055974][ T4522] device bond_slave_0 entered promiscuous mode
[  143.062349][ T4522] device bond_slave_1 entered promiscuous mode
[  143.240454][ T4527] loop3: detected capacity change from 0 to 512
[  143.263966][ T4527] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  143.306204][ T4527] UDF-fs: Scanning with blocksize 512 failed
[  143.324825][ T4527] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  143.384115][ T4527] UDF-fs: Scanning with blocksize 1024 failed
[  143.411346][ T4527] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  143.437726][ T4527] UDF-fs: Scanning with blocksize 2048 failed
[  143.469123][ T4527] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  143.528585][ T4527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.623276][   T27] audit: type=1804 audit(1720816039.752:100): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.217" name="/newroot/50/file0/bus" dev="loop3" ino=43 res=1 errno=0
[  146.109469][   T27] audit: type=1326 audit(1720816042.242:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  146.166889][ T4543] loop3: detected capacity change from 0 to 40427
[  146.242856][   T27] audit: type=1326 audit(1720816042.262:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  146.251507][ T4543] F2FS-fs (loop3): Invalid uid value -1
[  146.408738][   T27] audit: type=1326 audit(1720816042.262:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  146.573738][   T27] audit: type=1326 audit(1720816042.262:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  146.596221][   T27] audit: type=1326 audit(1720816042.262:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0431b75bd9 code=0x7ffc0000
[  146.598909][ T4565] netlink: 'syz.3.229': attribute type 10 has an invalid length.
[  146.710309][ T4565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.754355][ T4565] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  146.886787][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  148.257878][ T4589] loop0: detected capacity change from 0 to 128
[  148.429800][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'.
[  150.618468][ T4636] loop1: detected capacity change from 0 to 128
[  150.771153][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[  150.816290][ T4646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.886294][ T4648] device bond0 entered promiscuous mode
[  150.912889][ T4648] device bond_slave_0 entered promiscuous mode
[  150.944523][ T4648] device bond_slave_1 entered promiscuous mode
[  150.978666][ T4648] device batadv0 entered promiscuous mode
[  151.079295][ T3595] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  151.497686][ T4646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.523782][ T3595] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  151.543742][ T3595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.562411][ T3595] usb 1-1: config 0 descriptor??
[  151.846166][ T3595] kaweth 1-1:0.0: Firmware present in device.
[  151.948449][ T4661] tipc: Can't bind to reserved service type 0
[  152.053897][ T3595] kaweth 1-1:0.0: Statistics collection: 0
[  152.059812][ T3595] kaweth 1-1:0.0: Multicast filter limit: 0
[  152.079835][ T3595] kaweth 1-1:0.0: MTU: 0
[  152.109042][ T3595] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  152.273948][ T3595] kaweth: probe of 1-1:0.0 failed with error -5
[  152.325145][ T3595] usb 1-1: USB disconnect, device number 3
[  153.263151][ T4679] loop4: detected capacity change from 0 to 128
[  153.695125][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'.
[  154.556995][ T4711] loop4: detected capacity change from 0 to 1024
[  154.863073][ T3690] hfsplus: b-tree write err: -5, ino 4
[  155.085101][ T4726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.249146][ T3595] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  155.349850][ T4731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'.
[  155.565507][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'.
[  155.633798][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.664076][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.683875][ T4726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.803134][ T3595] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  155.833944][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.856496][ T3595] usb 5-1: config 0 descriptor??
[  156.376832][ T4722] binder: 4721:4722 ioctl c0306201 20000580 returned -14
[  156.481917][ T4750] loop1: detected capacity change from 0 to 1024
[  156.533719][  T153] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  156.558757][ T3640] hfsplus: b-tree write err: -5, ino 4
[  156.884820][ T4762] xt_hashlimit: overflow, try lower: 0/0
[  156.902236][ T4763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'.
[  157.054200][  T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.084232][  T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.129750][  T153] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  157.157762][  T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.193061][  T153] usb 3-1: config 0 descriptor??
[  157.815793][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'.
[  157.835894][ T4746] binder: 4745:4746 ioctl c0306201 20000580 returned -14
[  158.003793][ T3595] usb 5-1: string descriptor 0 read error: -71
[  158.023916][ T3595] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71
[  158.037354][ T3595] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71
[  158.053108][ T3595] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71
[  158.069573][ T3595] uclogic 0003:256C:006D.0007: failed probing parameters: -71
[  158.085188][ T3595] uclogic: probe of 0003:256C:006D.0007 failed with error -71
[  158.113853][ T3595] usb 5-1: USB disconnect, device number 5
[  158.622217][ T4792] loop4: detected capacity change from 0 to 1024
[  158.813794][  T153] usb 3-1: string descriptor 0 read error: -71
[  158.903856][  T153] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71
[  158.930108][  T153] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71
[  158.951045][  T153] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71
[  158.962346][  T153] uclogic 0003:256C:006D.0008: failed probing parameters: -71
[  158.970550][  T153] uclogic: probe of 0003:256C:006D.0008 failed with error -71
[  159.001346][  T153] usb 3-1: USB disconnect, device number 5
[  159.051983][ T3875] hfsplus: b-tree write err: -5, ino 4
[  159.325495][ T4807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'.
[  159.396169][ T4808] process 'syz.4.312' launched './file0' with NULL argv: empty string added
[  159.923407][ T4819] xt_hashlimit: overflow, try lower: 0/0
[  159.937794][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'.
[  161.717260][ T4839] loop4: detected capacity change from 0 to 16
[  161.838773][ T4839] erofs: (device loop4): mounted with root inode @ nid 36.
[  161.994053][ T3551] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  162.144112][ T4839] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  162.306848][   T27] kauditd_printk_skb: 18 callbacks suppressed
[  162.306867][   T27] audit: type=1800 audit(1720816058.442:124): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.322" name="file3" dev="loop4" ino=89 res=0 errno=0
[  162.498471][ T4839] syz.4.322 (4839) used greatest stack depth: 18864 bytes left
[  162.868182][ T4853] Bluetooth: MGMT ver 1.22
[  163.053703][ T3596] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  163.573892][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.591189][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.617441][ T3596] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  163.633763][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.645690][ T3596] usb 4-1: config 0 descriptor??
[  164.058905][ T4869] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  164.124934][ T4851] binder: 4850:4851 ioctl c0306201 20000580 returned -14
[  164.181496][ T4869] ptrace attach of "./syz-executor exec"[3549] was attempted by "./syz-executor exec"[4869]
[  165.060028][ T3596] usb 4-1: string descriptor 0 read error: -71
[  165.083929][ T3596] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71
[  165.101895][ T3596] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71
[  165.256428][ T3596] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71
[  165.266581][ T3596] uclogic 0003:256C:006D.0009: failed probing parameters: -71
[  165.283864][ T3596] uclogic: probe of 0003:256C:006D.0009 failed with error -71
[  165.315331][ T3596] usb 4-1: USB disconnect, device number 10
[  165.959800][ T4903] loop4: detected capacity change from 0 to 2048
[  166.125524][ T4903]  loop4: p3 < > p4 < >
[  166.172301][ T4903] loop4: partition table partially beyond EOD, truncated
[  166.180204][ T4911] loop3: detected capacity change from 0 to 2048
[  166.235569][ T4911]  loop3: p3 < > p4 < >
[  166.242090][ T4903] loop4: p3 start 4284289 is beyond EOD, truncated
[  166.255262][ T4911] loop3: partition table partially beyond EOD, truncated
[  166.268806][ T4911] loop3: p3 start 4284289 is beyond EOD, truncated
[  166.310725][ T3002]  loop3: p3 < > p4 < >
[  166.339800][ T3002] loop3: partition table partially beyond EOD, truncated
[  166.358848][ T3002] loop3: p3 start 4284289 is beyond EOD, truncated
[  166.439482][ T3002]  loop4: p3 < > p4 < >
[  166.449084][ T3002] loop4: partition table partially beyond EOD, truncated
[  166.479773][ T3002] loop4: p3 start 4284289 is beyond EOD, truncated
[  166.700125][ T4919] loop0: detected capacity change from 0 to 1024
[  166.871371][ T3879] hfsplus: b-tree write err: -5, ino 4
[  167.094219][ T4924] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  167.176334][ T4929] ptrace attach of "./syz-executor exec"[3737] was attempted by "./syz-executor exec"[4929]
[  169.097713][ T4936] loop0: detected capacity change from 0 to 4096
[  169.140413][ T4936] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  169.251182][ T4936] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  169.863792][ T4936] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  169.958429][ T4969] loop2: detected capacity change from 0 to 2048
[  170.012712][ T4969]  loop2: p3 < > p4 < >
[  170.120196][ T4969] loop2: partition table partially beyond EOD, truncated
[  170.129362][ T4969] loop2: p3 start 4284289 is beyond EOD, truncated
[  170.608005][ T4985] loop0: detected capacity change from 0 to 2048
[  170.709244][ T4988] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  170.729317][ T4988] ptrace attach of "./syz-executor exec"[3737] was attempted by "./syz-executor exec"[4988]
[  170.741561][ T4985]  loop0: p3 < > p4 < >
[  170.749337][ T4985] loop0: partition table partially beyond EOD, truncated
[  170.757932][ T4985] loop0: p3 start 4284289 is beyond EOD, truncated
[  170.963739][  T153] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  171.213875][  T153] usb 2-1: Using ep0 maxpacket: 16
[  171.333813][  T153] usb 2-1: unable to get BOS descriptor or descriptor too short
[  171.424014][  T153] usb 2-1: unable to read config index 0 descriptor/start: -71
[  171.443224][  T153] usb 2-1: can't read configurations, error -71
[  171.943770][ T3116] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  172.363911][ T3116] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  172.421110][ T3116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.530948][ T3116] usb 1-1: config 0 descriptor??
[  172.900427][ T3116] kaweth 1-1:0.0: Firmware present in device.
[  173.103825][ T3116] kaweth 1-1:0.0: Statistics collection: 0
[  173.109856][ T3116] kaweth 1-1:0.0: Multicast filter limit: 0
[  173.149377][ T3116] kaweth 1-1:0.0: MTU: 0
[  173.220917][ T3116] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  173.324044][ T3116] kaweth: probe of 1-1:0.0 failed with error -5
[  173.358691][ T3116] usb 1-1: USB disconnect, device number 4
[  173.632950][ T5014] loop1: detected capacity change from 0 to 4096
[  174.391109][ T5014] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  174.713901][ T5014] ntfs3: loop1: Failed to load $Volume.
[  176.227147][ T5044] loop4: detected capacity change from 0 to 16
[  176.374819][ T5044] erofs: (device loop4): mounted with root inode @ nid 36.
[  176.503354][ T3551] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  176.597839][ T5044] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  177.058773][   T27] audit: type=1800 audit(1720816073.192:125): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.379" name="file3" dev="loop4" ino=89 res=0 errno=0
[  177.220673][ T5047] loop0: detected capacity change from 0 to 2048
[  177.330180][ T5047]  loop0: p3 < > p4 < >
[  177.341401][ T5047] loop0: partition table partially beyond EOD, truncated
[  177.372660][ T5047] loop0: p3 start 4284289 is beyond EOD, truncated
[  180.205108][ T5095] loop0: detected capacity change from 0 to 4096
[  180.259865][ T5095] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  180.366266][ T5095] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  180.707706][ T5095] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  180.728997][ T5123] loop3: detected capacity change from 0 to 256
[  181.731923][ T5128] loop2: detected capacity change from 0 to 2048
[  181.824633][ T5128]  loop2: p3 < > p4 < >
[  181.851511][ T5128] loop2: partition table partially beyond EOD, truncated
[  181.919133][ T5128] loop2: p3 start 4284289 is beyond EOD, truncated
[  182.388087][ T3116] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  182.406313][ T5151] loop1: detected capacity change from 0 to 16
[  182.507047][ T5151] erofs: (device loop1): mounted with root inode @ nid 36.
[  182.599357][ T3551] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  182.632805][ T5151] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  182.659129][   T27] audit: type=1800 audit(1720816078.792:126): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.404" name="file3" dev="loop1" ino=89 res=0 errno=0
[  182.813887][ T3116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.840271][ T3116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.883741][ T3116] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  182.919608][ T3116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.957832][ T3116] usb 5-1: config 0 descriptor??
[  183.438726][ T5145] binder: 5143:5145 ioctl c0306201 20000580 returned -14
[  184.406245][ T5180] netlink: 'syz.3.410': attribute type 11 has an invalid length.
[  184.414580][ T5180] netlink: 'syz.3.410': attribute type 11 has an invalid length.
[  184.422890][ T5180] netlink: 8520 bytes leftover after parsing attributes in process `syz.3.410'.
[  187.454224][ T3116] usb 5-1: string descriptor 0 read error: -71
[  187.526996][ T3116] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71
[  187.555372][ T3116] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71
[  187.583015][ T3116] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71
[  187.624563][ T3116] uclogic 0003:256C:006D.000A: failed probing parameters: -71
[  187.651755][ T3116] uclogic: probe of 0003:256C:006D.000A failed with error -71
[  187.702232][ T3116] usb 5-1: USB disconnect, device number 6
[  188.780353][ T5199] loop3: detected capacity change from 0 to 2048
[  189.002666][ T5199]  loop3: p3 < > p4 < >
[  189.055140][ T5199] loop3: partition table partially beyond EOD, truncated
[  189.205186][ T5199] loop3: p3 start 4284289 is beyond EOD, truncated
[  189.449199][ T3002]  loop3: p3 < > p4 < >
[  189.453492][ T3002] loop3: partition table partially beyond EOD, truncated
[  189.597260][ T3002] loop3: p3 start 4284289 is beyond EOD, truncated
[  190.708451][ T5218] loop2: detected capacity change from 0 to 256
[  191.177297][  T153] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  191.543811][  T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.582760][  T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.633054][  T153] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  191.679627][  T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.737135][  T153] usb 1-1: config 0 descriptor??
[  192.216368][ T5224] binder: 5222:5224 ioctl c0306201 20000580 returned -14
[  192.598020][ T5241] netlink: 'syz.3.425': attribute type 11 has an invalid length.
[  192.606114][ T5241] netlink: 'syz.3.425': attribute type 11 has an invalid length.
[  192.614052][ T5241] netlink: 8520 bytes leftover after parsing attributes in process `syz.3.425'.
[  194.140407][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.149925][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  194.324075][  T153] usb 1-1: string descriptor 0 read error: -71
[  194.332741][ T5254] loop1: detected capacity change from 0 to 512
[  194.344008][  T153] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71
[  194.355308][ T5254] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  194.365058][  T153] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71
[  194.373321][  T153] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71
[  194.383927][  T153] uclogic 0003:256C:006D.000B: failed probing parameters: -71
[  194.391466][  T153] uclogic: probe of 0003:256C:006D.000B failed with error -71
[  194.399423][ T5254] UDF-fs: Scanning with blocksize 512 failed
[  194.428297][  T153] usb 1-1: USB disconnect, device number 5
[  194.454093][ T5254] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  194.488072][ T5254] UDF-fs: Scanning with blocksize 1024 failed
[  194.518869][ T5254] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  194.557201][ T5254] UDF-fs: Scanning with blocksize 2048 failed
[  194.588149][ T5254] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  194.652326][ T5254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.422576][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.520333][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.586404][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.702113][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.804414][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.820617][ T5288] loop2: detected capacity change from 0 to 2048
[  196.881299][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.923463][ T5270] loop4: detected capacity change from 0 to 4096
[  196.957999][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.985737][ T5270] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  197.054704][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.093877][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.126816][ T5270] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  197.153984][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.300466][ T5288]  loop2: p3 < > p4 < >
[  197.304954][ T5288] loop2: partition table partially beyond EOD, truncated
[  197.312991][ T5288] loop2: p3 start 4284289 is beyond EOD, truncated
[  197.657220][ T3551] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  197.787202][ T3551] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  198.130418][ T3737] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  198.702182][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  201.357083][ T3596] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  201.366838][ T3551] Bluetooth: hci5: command tx timeout
[  201.427548][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  203.289006][ T5328] netlink: 'syz.1.444': attribute type 11 has an invalid length.
[  203.297036][ T5328] netlink: 'syz.1.444': attribute type 11 has an invalid length.
[  203.304939][ T5328] netlink: 8520 bytes leftover after parsing attributes in process `syz.1.444'.
[  208.657926][ T5333] loop4: detected capacity change from 0 to 1024
[  208.905186][ T3996] hfsplus: b-tree write err: -5, ino 4
[  209.570517][   T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  209.613978][   T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  209.622200][   T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  209.631189][   T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  209.639933][   T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  209.647509][   T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  209.684111][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.700111][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.709903][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.719696][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.728575][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  209.737272][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.791879][ T3565] Bluetooth: hci6: command tx timeout
[  213.800577][ T3557] Bluetooth: hci2: command tx timeout
[  214.207450][ T3557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  214.231937][ T3557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  214.247020][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  214.264611][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  214.273325][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  214.281322][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  214.772318][ T5371] device bond0 entered promiscuous mode
[  214.811184][ T5371] device bond_slave_0 entered promiscuous mode
[  214.833833][ T5371] device bond_slave_1 entered promiscuous mode
[  215.137322][ T3880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.358333][ T3880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.563842][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  215.698548][ T3880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.761573][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  215.813675][   T48] Bluetooth: hci2: command tx timeout
[  215.892472][ T3880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.904161][   T48] Bluetooth: hci6: command tx timeout
[  216.373883][   T48] Bluetooth: hci4: command tx timeout
[  216.545276][ T5336] chnl_net:caif_netlink_parms(): no params data found
[  217.570935][ T5337] chnl_net:caif_netlink_parms(): no params data found
[  217.583774][   T48] Bluetooth: hci5: command tx timeout
[  217.697311][ T5372] chnl_net:caif_netlink_parms(): no params data found
[  217.891907][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.903102][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.903884][   T48] Bluetooth: hci2: command tx timeout
[  217.912493][ T5336] device bridge_slave_0 entered promiscuous mode
[  217.973992][   T48] Bluetooth: hci6: command tx timeout
[  218.053906][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.061088][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.081519][ T5336] device bridge_slave_1 entered promiscuous mode
[  218.260993][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.315547][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.428564][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.436958][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.453652][   T48] Bluetooth: hci4: command tx timeout
[  218.521942][ T5337] device bridge_slave_0 entered promiscuous mode
[  218.600239][ T5336] team0: Port device team_slave_0 added
[  218.613373][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.644593][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.661542][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  218.724061][ T5372] device bridge_slave_0 entered promiscuous mode
[  218.805186][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.829364][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.844058][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  218.885680][ T5337] device bridge_slave_1 entered promiscuous mode
[  218.931454][ T5336] team0: Port device team_slave_1 added
[  219.116601][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.128257][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.184919][ T5372] device bridge_slave_1 entered promiscuous mode
[  219.310066][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.320341][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.410443][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.498609][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.588959][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.629888][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.664564][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.678933][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.782498][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.871283][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.973959][   T48] Bluetooth: hci2: command tx timeout
[  220.053864][   T48] Bluetooth: hci6: command tx timeout
[  220.125753][ T5372] team0: Port device team_slave_0 added
[  220.225571][ T5337] team0: Port device team_slave_0 added
[  220.233408][ T5372] team0: Port device team_slave_1 added
[  220.247687][ T5336] device hsr_slave_0 entered promiscuous mode
[  220.268902][ T5336] device hsr_slave_1 entered promiscuous mode
[  220.288635][ T5336] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.302723][ T5336] Cannot create hsr debugfs directory
[  220.345196][ T5337] team0: Port device team_slave_1 added
[  220.483480][ T5470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.523418][ T3880] device hsr_slave_0 left promiscuous mode
[  220.533812][   T48] Bluetooth: hci4: command tx timeout
[  220.570911][ T3880] device hsr_slave_1 left promiscuous mode
[  220.604128][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.616068][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.659325][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.676321][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.695883][   T48] Bluetooth: hci5: command tx timeout
[  220.734342][ T3880] device bridge_slave_1 left promiscuous mode
[  220.740573][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.796664][ T3880] device bridge_slave_0 left promiscuous mode
[  220.816049][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.912032][ T3880] device veth1_macvtap left promiscuous mode
[  220.934557][ T3880] device veth0_macvtap left promiscuous mode
[  220.946644][ T3880] device veth1_vlan left promiscuous mode
[  220.952520][ T3880] device veth0_vlan left promiscuous mode
[  221.210511][ T5470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.416408][ T5482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.470'.
[  222.260226][ T5497] netlink: 'syz.0.473': attribute type 11 has an invalid length.
[  222.268448][ T5497] netlink: 'syz.0.473': attribute type 11 has an invalid length.
[  222.276473][ T5497] netlink: 8520 bytes leftover after parsing attributes in process `syz.0.473'.
[  222.634880][   T48] Bluetooth: hci4: command tx timeout
[  224.891792][   T48] Bluetooth: hci4: command tx timeout
[  226.119064][ T3880] team0 (unregistering): Port device team_slave_1 removed
[  226.187281][ T3880] team0 (unregistering): Port device team_slave_0 removed
[  226.219781][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.260412][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.576822][ T3880] bond0 (unregistering): Released all slaves
[  226.651653][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.658980][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.686859][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.730031][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.742995][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.790176][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.871940][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.877469][ T5503] loop4: detected capacity change from 0 to 128
[  226.893748][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.920498][ T5503] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  226.983288][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.017945][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.036183][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.064439][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.277746][ T5337] device hsr_slave_0 entered promiscuous mode
[  227.290067][ T5337] device hsr_slave_1 entered promiscuous mode
[  227.312881][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.323463][ T5337] Cannot create hsr debugfs directory
[  227.337913][ T5372] device hsr_slave_0 entered promiscuous mode
[  227.346033][ T5372] device hsr_slave_1 entered promiscuous mode
[  227.354675][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.362265][ T5372] Cannot create hsr debugfs directory
[  227.744846][ T5522] netlink: 'syz.4.478': attribute type 11 has an invalid length.
[  227.752835][ T5522] netlink: 'syz.4.478': attribute type 11 has an invalid length.
[  227.761554][ T5522] netlink: 8520 bytes leftover after parsing attributes in process `syz.4.478'.
[  232.116624][ T5518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.479'.
[  232.282944][ T3565] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  232.516235][ T5336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.637251][ T5336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.669622][ T3565] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  232.817213][ T5336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.861267][ T5539] netlink: 96 bytes leftover after parsing attributes in process `syz.4.481'.
[  232.996823][ T5336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.121916][ T5547] loop4: detected capacity change from 0 to 128
[  234.165463][ T5547] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  234.293821][ T3565] Bluetooth: hci5: command tx timeout
[  234.415568][ T5372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.640316][ T5552] loop4: detected capacity change from 0 to 4096
[  234.707016][ T5372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.739125][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  234.978688][ T5525] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  235.140408][ T5372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.313649][ T3593] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  235.326766][ T5372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.675533][ T3593] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  235.703764][ T3593] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  235.723656][ T3593] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  235.733001][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.742281][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.487'.
[  235.804203][ T5552] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  236.053382][ T3593] usb 5-1: USB disconnect, device number 7
[  236.576498][ T5337] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  236.603949][ T5337] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  236.733902][ T5337] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  236.781778][ T5337] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  237.068641][ T5336] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  237.136715][ T5336] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  237.546960][ T5336] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  238.013625][ T5372] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  238.060547][ T5372] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  238.084753][ T5372] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  238.111718][ T5372] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  238.196462][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  238.229311][ T5336] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  238.321684][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.405845][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  238.415746][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  238.447429][ T5337] 8021q: adding VLAN 0 to HW filter on device team0
[  238.646764][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  238.657623][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  238.685629][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.692820][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.724398][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  238.748700][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  238.771617][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.778869][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.921780][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.939286][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.969939][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.999269][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.036146][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.065747][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.183288][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.204641][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.242223][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.271533][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.298569][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.339465][ T5337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.365042][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  239.441721][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.460832][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.489227][ T5372] 8021q: adding VLAN 0 to HW filter on device team0
[  239.640110][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.667429][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  239.704564][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.716874][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.752444][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.792040][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.799284][ T3116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.817235][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.845059][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.864263][ T3116] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.871415][ T3116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.012798][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.022717][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.066177][ T5336] 8021q: adding VLAN 0 to HW filter on device team0
[  240.134623][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  240.154523][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  240.204438][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  240.263310][ T5638] loop4: detected capacity change from 0 to 4096
[  240.454550][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  240.469953][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  240.495132][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.514983][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.540227][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.549942][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.559024][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.568561][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.577191][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  240.586662][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  240.595476][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.602607][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.613104][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.675381][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.694304][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.702523][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  240.714670][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  240.723262][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.730805][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.783629][ T3116] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  240.883086][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.934600][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.949057][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.987269][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  241.000045][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  241.013220][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  241.032126][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  241.042881][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  241.060282][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  241.071945][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  241.163156][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  241.174593][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  241.199536][ T5336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.064029][ T3116] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  242.084519][ T3116] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  242.094658][ T3116] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  242.114988][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  242.124027][ T3116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.132986][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  242.152016][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  242.337720][ T5638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  243.284184][   T14] usb 5-1: USB disconnect, device number 8
[  243.444879][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  243.464570][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  243.540570][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  243.548901][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  243.564060][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  243.584833][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  243.631938][ T3880] device hsr_slave_0 left promiscuous mode
[  243.659561][ T3880] device hsr_slave_1 left promiscuous mode
[  243.684469][ T5556] udevd[5556]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.705945][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.724077][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.752133][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.779366][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.796337][ T3880] device bridge_slave_1 left promiscuous mode
[  243.809408][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.841981][ T3880] device bridge_slave_0 left promiscuous mode
[  243.848719][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.862887][ T3880] device hsr_slave_0 left promiscuous mode
[  243.870174][ T3880] device hsr_slave_1 left promiscuous mode
[  243.880463][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.893370][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.905512][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.913071][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.927651][ T3880] device bridge_slave_1 left promiscuous mode
[  243.940586][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.957650][ T3880] device bridge_slave_0 left promiscuous mode
[  243.969847][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.058768][ T3880] device veth1_macvtap left promiscuous mode
[  244.073183][ T3880] device veth0_macvtap left promiscuous mode
[  244.079643][ T3880] device veth1_vlan left promiscuous mode
[  244.092483][ T3880] device veth0_vlan left promiscuous mode
[  244.101897][ T3880] device veth1_macvtap left promiscuous mode
[  244.115267][ T3880] device veth0_macvtap left promiscuous mode
[  244.121538][ T3880] device veth1_vlan left promiscuous mode
[  244.127958][ T5667] loop0: detected capacity change from 0 to 32768
[  244.133393][ T3880] device veth0_vlan left promiscuous mode
[  244.203953][ T5667] XFS (loop0): Mounting V5 Filesystem
[  244.294034][ T5667] XFS (loop0): Ending clean mount
[  244.329313][ T5667] XFS (loop0): Quotacheck needed: Please wait.
[  244.431769][ T5667] XFS (loop0): Quotacheck: Done.
[  244.576657][ T4188] XFS (loop0): Unmounting Filesystem
[  244.617269][ T5692] loop4: detected capacity change from 0 to 4096
[  244.713363][ T5583] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  245.043715][ T3594] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  245.122443][ T3880] team0 (unregistering): Port device team_slave_1 removed
[  245.168405][ T3880] team0 (unregistering): Port device team_slave_0 removed
[  245.204565][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.213329][ T3880] device bond_slave_1 left promiscuous mode
[  245.250238][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.260021][ T3880] device bond_slave_0 left promiscuous mode
[  245.403952][ T3594] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  245.424384][ T3594] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  245.444171][ T3594] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  245.454105][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.496051][ T5692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  245.515670][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  245.739905][ T3593] usb 5-1: USB disconnect, device number 9
[  245.762329][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  246.076116][ T3880] bond0 (unregistering): Released all slaves
[  247.340097][ T5714] loop0: detected capacity change from 0 to 256
[  247.610783][   T48] Bluetooth: hci5: command tx timeout
[  249.160225][ T3880] team0 (unregistering): Port device team_slave_1 removed
[  249.199541][ T3880] team0 (unregistering): Port device team_slave_0 removed
[  249.237847][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.269823][ T3880] device bond_slave_1 left promiscuous mode
[  249.334458][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.359444][ T3880] device bond_slave_0 left promiscuous mode
[  249.548302][ T3880] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  249.557948][ T3880] device batadv0 left promiscuous mode
[  249.963106][ T3880] bond0 (unregistering): Released all slaves
[  250.048363][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.055992][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  250.065067][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  250.084001][ T5337] device veth0_vlan entered promiscuous mode
[  250.129358][ T5337] device veth1_vlan entered promiscuous mode
[  250.176769][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  250.199389][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  250.243631][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  250.252306][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  250.283752][ T3593] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  250.285512][ T5337] device veth0_macvtap entered promiscuous mode
[  250.321316][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  250.333465][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  250.342994][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  250.362151][ T5337] device veth1_macvtap entered promiscuous mode
[  250.381281][ T5372] device veth0_vlan entered promiscuous mode
[  250.390531][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  250.410355][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  250.428741][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  250.451907][ T5372] device veth1_vlan entered promiscuous mode
[  250.478769][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  250.495683][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.503317][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.521170][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.539425][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.550891][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.575675][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.593086][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.614552][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  250.624088][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  250.643286][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  250.670905][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.678212][ T3593] usb 1-1: config 0 interface 0 has no altsetting 0
[  250.694849][ T3593] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  250.715838][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.720880][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.733902][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.761121][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.768250][ T3593] usb 1-1: config 0 descriptor??
[  250.787150][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.825299][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.859054][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  250.873353][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  250.892779][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  250.914690][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  250.930675][ T5755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.513'.
[  250.940508][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  250.949686][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  250.999579][ T5337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.045801][ T5337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.077815][ T5337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.086811][ T5337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.108324][ T5372] device veth0_macvtap entered promiscuous mode
[  251.249918][ T5762] netlink: 'syz.4.514': attribute type 11 has an invalid length.
[  251.258344][ T5762] netlink: 'syz.4.514': attribute type 11 has an invalid length.
[  251.266295][ T5762] netlink: 8520 bytes leftover after parsing attributes in process `syz.4.514'.
[  251.808297][ T3593] video4linux radio32: keene_cmd_set failed (-71)
[  251.815124][ T5336] device veth0_vlan entered promiscuous mode
[  251.823736][ T3593] radio-keene 1-1:0.0: V4L2 device registered as radio32
[  251.868776][ T3593] usb 1-1: USB disconnect, device number 6
[  254.166810][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  254.450644][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  254.498099][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  254.676270][ T5372] device veth1_macvtap entered promiscuous mode
[  254.735373][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  254.746491][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  254.792744][ T5336] device veth1_vlan entered promiscuous mode
[  254.847182][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.884218][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.909479][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.937587][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.976949][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.998287][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.019928][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.054000][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  255.074468][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  255.091544][ T3996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.125989][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.126031][ T3996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.163678][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.210358][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.241485][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.262050][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.283053][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.306943][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.328268][ T5372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.353847][ T5372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.362685][ T5372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.383592][ T5372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.441328][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  255.449730][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  255.467232][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  255.514236][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.522341][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.560785][ T5336] device veth0_macvtap entered promiscuous mode
[  255.576558][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  255.582926][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  255.602592][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  255.611370][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  255.628563][ T5786] loop4: detected capacity change from 0 to 256
[  255.650691][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  255.681305][ T5336] device veth1_macvtap entered promiscuous mode
[  255.733834][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  255.742080][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  255.910456][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.962685][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.021454][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.032723][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.065953][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.078195][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.169724][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.275830][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.742890][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.756304][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.795257][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.803123][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  256.823091][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.854417][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  256.865426][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.896715][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.932906][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.969118][ T5798] loop2: detected capacity change from 0 to 2048
[  256.997728][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.023649][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.056662][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.089730][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.141378][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.209610][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.243841][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  257.260572][ T5798]  loop2: p3 < > p4 < >
[  257.266917][ T5798] loop2: partition table partially beyond EOD, truncated
[  257.280032][ T5798] loop2: p3 start 4284289 is beyond EOD, truncated
[  257.287664][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  257.356697][ T5336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.393724][ T5336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.429742][ T5336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.448828][ T5336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.482813][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.515459][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.622224][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  257.824416][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.832848][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.971777][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  258.028416][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.085523][ T5824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'.
[  258.086263][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.150421][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  258.163703][ T3597] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  258.283887][ T3594] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  258.583947][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.602315][ T5835] loop3: detected capacity change from 0 to 128
[  258.693910][ T3594] usb 1-1: config 0 interface 0 has no altsetting 0
[  259.039902][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.068135][ T3594] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  259.119125][ T5835] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  259.186954][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.199353][ T3597] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  259.245269][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.264479][ T3594] usb 1-1: config 0 descriptor??
[  259.328315][ T3597] usb 2-1: config 0 descriptor??
[  259.461818][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  259.515257][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  259.631465][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  259.707585][ T3875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  259.798266][ T5820] binder: 5819:5820 ioctl c0306201 20000580 returned -14
[  260.033703][ T3594] video4linux radio32: keene_cmd_set failed (-71)
[  260.041481][ T3594] radio-keene 1-1:0.0: V4L2 device registered as radio32
[  260.082695][ T3594] usb 1-1: USB disconnect, device number 7
[  260.403649][   T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  260.763937][   T22] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  260.773062][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.792794][   T22] usb 3-1: config 0 descriptor??
[  261.074007][ T3597] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71
[  261.082925][ T3597] uclogic 0003:256C:006D.000C: failed probing parameters: -71
[  261.100743][   T22] kaweth 3-1:0.0: Firmware present in device.
[  261.107326][ T3597] uclogic: probe of 0003:256C:006D.000C failed with error -71
[  261.125216][ T3597] usb 2-1: USB disconnect, device number 6
[  261.305039][   T22] kaweth 3-1:0.0: Statistics collection: 0
[  261.311366][   T22] kaweth 3-1:0.0: Multicast filter limit: 0
[  261.331287][   T22] kaweth 3-1:0.0: MTU: 0
[  261.356105][   T22] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  261.523759][   T22] kaweth: probe of 3-1:0.0 failed with error -5
[  261.562023][   T22] usb 3-1: USB disconnect, device number 6
[  263.359094][ T5904] loop4: detected capacity change from 0 to 4096
[  263.685133][ T5583] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  263.833588][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  264.166762][ T3593] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  264.267153][ T3550] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  264.513418][ T3602] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  265.113907][ T3593] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  265.125262][ T3550] usb 2-1: config 0 interface 0 has no altsetting 0
[  265.132186][ T3550] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  265.162503][ T3593] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  265.198563][ T3550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.207469][ T3593] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  265.222585][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.232283][ T3550] usb 2-1: config 0 descriptor??
[  265.270210][ T5904] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  265.373956][ T3602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.507743][ T3594] usb 5-1: USB disconnect, device number 10
[  265.512864][ T3602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.540066][ T3602] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  265.565059][ T3602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.591672][ T3602] usb 1-1: config 0 descriptor??
[  265.753642][   T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  265.944021][ T3550] video4linux radio32: keene_cmd_set failed (-71)
[  265.953571][ T3550] radio-keene 2-1:0.0: V4L2 device registered as radio32
[  265.972596][ T3550] usb 2-1: USB disconnect, device number 7
[  266.087625][ T5934] binder: 5932:5934 ioctl c0306201 20000580 returned -14
[  266.173950][   T14] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  266.205475][   T14] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  266.226597][   T14] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  266.256991][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.294073][ T5942] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  266.551098][ T3116] usb 3-1: USB disconnect, device number 7
[  267.293730][ T3602] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71
[  267.302986][ T3602] uclogic 0003:256C:006D.000D: failed probing parameters: -71
[  267.313600][ T3602] uclogic: probe of 0003:256C:006D.000D failed with error -71
[  267.522505][ T3602] usb 1-1: USB disconnect, device number 8
[  268.094064][ T5983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.336812][ T3565] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  269.349720][ T3565] Bluetooth: hci6: Injecting HCI hardware error event
[  269.358137][   T48] Bluetooth: hci6: hardware error 0x00
[  269.746509][ T5983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.427929][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  270.491705][ T6000] loop0: detected capacity change from 0 to 2048
[  270.610708][ T6000]  loop0: p3 < > p4 < >
[  270.619657][ T6000] loop0: partition table partially beyond EOD, truncated
[  270.630359][ T6000] loop0: p3 start 4284289 is beyond EOD, truncated
[  270.804396][ T3565] Bluetooth: hci6: unexpected event for opcode 0x080c
[  271.113881][   T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  271.141133][ T6023] netlink: 684 bytes leftover after parsing attributes in process `syz.3.565'.
[  271.415958][   T48] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  271.425121][ T6040] netlink: 'syz.0.570': attribute type 11 has an invalid length.
[  271.433048][ T6040] netlink: 'syz.0.570': attribute type 11 has an invalid length.
[  271.442171][ T6040] netlink: 8520 bytes leftover after parsing attributes in process `syz.0.570'.
[  271.464338][ T3593] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  272.183811][   T22] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  272.207647][   T22] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  272.220513][   T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  272.230252][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.253640][ T3602] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  272.273907][ T6021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  272.398076][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.412577][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.422700][ T3593] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  272.455111][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.494935][ T3593] usb 2-1: config 0 descriptor??
[  272.537505][ T3550] usb 3-1: USB disconnect, device number 8
[  272.654019][ T3602] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  272.705619][ T3602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.747162][ T3602] usb 5-1: config 0 descriptor??
[  272.979219][ T6027] binder: 6024:6027 ioctl c0306201 20000580 returned -14
[  273.148918][ T3602] kaweth 5-1:0.0: Firmware present in device.
[  273.357045][ T3602] kaweth 5-1:0.0: Statistics collection: 0
[  273.363150][ T3602] kaweth 5-1:0.0: Multicast filter limit: 0
[  273.410855][ T3602] kaweth 5-1:0.0: MTU: 0
[  273.421536][ T3602] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00
[  273.575559][ T3602] kaweth: probe of 5-1:0.0 failed with error -5
[  273.589581][ T6064] loop2: detected capacity change from 0 to 2048
[  273.601679][ T3602] usb 5-1: USB disconnect, device number 11
[  273.646239][ T6064]  loop2: p3 < > p4 < >
[  273.650623][ T6064] loop2: partition table partially beyond EOD, truncated
[  273.668213][ T6064] loop2: p3 start 4284289 is beyond EOD, truncated
[  274.066021][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  274.276751][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  274.433917][ T3593] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71
[  274.451014][ T3593] uclogic 0003:256C:006D.000E: failed probing parameters: -71
[  274.465853][ T3593] uclogic: probe of 0003:256C:006D.000E failed with error -71
[  274.481014][ T3593] usb 2-1: USB disconnect, device number 8
[  275.234917][ T6089] netlink: 684 bytes leftover after parsing attributes in process `syz.1.582'.
[  275.384340][ T6090] device bond0 entered promiscuous mode
[  275.430508][ T6090] device bond_slave_0 entered promiscuous mode
[  275.462405][ T6090] device bond_slave_1 entered promiscuous mode
[  276.139039][   T48] Bluetooth: hci5: command tx timeout
[  276.727697][ T6108] loop2: detected capacity change from 0 to 2048
[  276.791087][ T3594] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  277.094612][ T6108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  277.164033][ T3594] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  277.360235][ T3594] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  277.930364][ T5337] EXT4-fs (loop2): unmounting filesystem.
[  278.143411][ T3594] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  278.198365][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.267540][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  278.413931][  T153] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  278.505301][ T3593] usb 2-1: USB disconnect, device number 9
[  278.540177][ T6131] loop4: detected capacity change from 0 to 512
[  278.638458][ T6131] loop4: detected capacity change from 0 to 512
[  278.813963][  T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.840841][  T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.878209][  T153] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  278.916637][  T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.968453][  T153] usb 4-1: config 0 descriptor??
[  279.449265][ T6124] binder: 6123:6124 ioctl c0306201 20000580 returned -14
[  279.539776][ T6142] device bond0 entered promiscuous mode
[  279.558073][ T6142] device bond_slave_0 entered promiscuous mode
[  279.569526][ T6141] netlink: 684 bytes leftover after parsing attributes in process `syz.2.598'.
[  279.635906][ T6146] loop4: detected capacity change from 0 to 16
[  279.913549][ T6146] erofs: (device loop4): mounted with root inode @ nid 36.
[  279.924141][ T3565] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  279.947043][ T6145] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  279.949257][ T6142] device bond_slave_1 entered promiscuous mode
[  279.974899][   T27] audit: type=1800 audit(1720816176.112:127): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.599" name="file3" dev="loop4" ino=89 res=0 errno=0
[  280.455382][ T3565] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  280.464218][ T3565] Bluetooth: hci4: Injecting HCI hardware error event
[  280.472843][   T48] Bluetooth: hci4: hardware error 0x00
[  280.887124][  T153] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -71
[  280.909244][  T153] uclogic 0003:256C:006D.000F: failed probing parameters: -71
[  280.955210][  T153] uclogic: probe of 0003:256C:006D.000F failed with error -71
[  280.999327][  T153] usb 4-1: USB disconnect, device number 11
[  281.055495][ T3592] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  282.486925][ T3592] usb 2-1: config 0 interface 0 has no altsetting 0
[  282.548260][   T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  282.645886][ T3592] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  282.694162][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.730357][ T3592] usb 2-1: config 0 descriptor??
[  283.108646][ T6187] loop4: detected capacity change from 0 to 4096
[  283.167034][ T5951] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  283.183841][ T3594] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  283.443684][ T3592] video4linux radio32: keene_cmd_set failed (-71)
[  283.463441][ T3592] radio-keene 2-1:0.0: V4L2 device registered as radio32
[  283.486585][ T3592] usb 2-1: USB disconnect, device number 10
[  283.555058][ T3594] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  283.563757][ T3595] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  283.579230][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.603087][ T3594] usb 3-1: config 0 descriptor??
[  283.753411][ T3550] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  284.166813][ T3594] kaweth 3-1:0.0: Firmware present in device.
[  284.624626][ T3594] kaweth 3-1:0.0: Statistics collection: 0
[  284.630479][ T3594] kaweth 3-1:0.0: Multicast filter limit: 0
[  284.651710][ T3594] kaweth 3-1:0.0: MTU: 0
[  284.663242][ T3594] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  284.694814][ T3550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.704858][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  284.707358][ T3595] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  284.734837][ T3550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.750466][ T3595] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  284.762827][ T3550] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  284.772959][ T3595] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  284.782494][ T3550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.801334][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.821003][ T3550] usb 4-1: config 0 descriptor??
[  284.843810][ T3594] kaweth: probe of 3-1:0.0 failed with error -5
[  284.856839][ T6187] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  284.892841][ T3594] usb 3-1: USB disconnect, device number 9
[  285.133658][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  285.161606][ T3594] usb 5-1: USB disconnect, device number 12
[  285.295301][ T6194] binder: 6193:6194 ioctl c0306201 20000580 returned -14
[  286.112870][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.203787][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.223787][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.340804][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.362428][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.387789][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.460885][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  286.473443][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.550377][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.599893][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.621968][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.651677][ T6223] loop1: detected capacity change from 0 to 4096
[  286.668701][ T6223] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  286.678224][ T3550] usb 4-1: string descriptor 0 read error: -71
[  286.703760][ T3550] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71
[  286.746655][ T3550] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71
[  286.770595][ T3550] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71
[  286.780275][   T48] Bluetooth: hci5: command tx timeout
[  286.786577][ T3550] uclogic 0003:256C:006D.0010: failed probing parameters: -71
[  286.797641][ T3550] uclogic: probe of 0003:256C:006D.0010 failed with error -71
[  286.809454][ T3550] usb 4-1: USB disconnect, device number 12
[  286.853845][ T3602] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  286.905429][ T6223] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  287.264411][ T3602] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  287.300475][ T3602] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  287.319959][ T3602] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  287.378595][ T3602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.423908][ T6227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  287.714893][ T3550] usb 5-1: USB disconnect, device number 13
[  287.756927][ T6234] loop2: detected capacity change from 0 to 2048
[  287.834464][ T5372] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  287.958339][ T6234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  289.228999][ T5337] EXT4-fs (loop2): unmounting filesystem.
[  289.693038][ T6255] loop2: detected capacity change from 0 to 4096
[  289.705818][   T48] Bluetooth: Unexpected start frame (len 0)
[  289.747175][ T6261] loop3: detected capacity change from 0 to 2048
[  289.772167][ T5583] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  289.803664][ T3550] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  289.892352][ T6261]  loop3: p3 < > p4 < >
[  289.899141][ T6261] loop3: partition table partially beyond EOD, truncated
[  289.927131][ T6261] loop3: p3 start 4284289 is beyond EOD, truncated
[  289.972248][ T3002]  loop3: p3 < > p4 < >
[  289.979469][ T3002] loop3: partition table partially beyond EOD, truncated
[  289.999980][ T3002] loop3: p3 start 4284289 is beyond EOD, truncated
[  290.123871][ T3595] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  290.233902][ T3550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.257451][ T3550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.289943][ T3550] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  290.316391][ T3550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.345314][ T3550] usb 5-1: config 0 descriptor??
[  290.534477][ T3595] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  290.556754][ T3595] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  290.571700][ T3595] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  290.582426][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.633979][ T6255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  290.815650][ T6258] binder: 6257:6258 ioctl c0306201 20000580 returned -14
[  290.872765][ T3595] usb 3-1: USB disconnect, device number 10
[  291.954252][ T3550] usb 5-1: string descriptor 0 read error: -71
[  292.196760][ T3550] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #200: -71
[  293.324507][ T3550] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71
[  293.332752][ T3550] uclogic 0003:256C:006D.0011: failed probing pen v2 parameters: -71
[  293.362380][ T3550] uclogic 0003:256C:006D.0011: failed probing parameters: -71
[  293.389448][ T3550] uclogic: probe of 0003:256C:006D.0011 failed with error -71
[  293.462621][ T3550] usb 5-1: USB disconnect, device number 14
[  293.655329][ T6281] loop0: detected capacity change from 0 to 4096
[  293.813907][ T6281] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  293.823676][ T3595] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  293.998674][ T6281] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  294.225447][ T3595] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  294.259879][ T3595] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  294.313444][ T3595] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  294.349358][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.394891][ T6304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  294.408531][ T6281] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  294.684973][ T3595] usb 2-1: USB disconnect, device number 11
[  295.133869][ T3592] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  296.013945][ T3592] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  296.049994][ T3592] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  296.103816][ T3592] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  296.137909][ T3592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.193929][ T6326] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  296.323623][ T3594] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  296.483432][  T153] usb 3-1: USB disconnect, device number 11
[  296.703846][ T3594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.740632][ T3594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.776566][ T3594] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  296.788899][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.877683][ T3594] usb 4-1: config 0 descriptor??
[  297.355178][ T6339] binder: 6338:6339 ioctl c0306201 20000580 returned -14
[  297.688026][ T6363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.353673][ T3594] usb 4-1: string descriptor 0 read error: -71
[  298.393984][ T3594] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71
[  298.405440][ T6363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.408952][ T6372] loop4: detected capacity change from 0 to 128
[  298.425693][ T3594] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71
[  298.453843][ T3594] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71
[  298.480588][ T3594] uclogic 0003:256C:006D.0012: failed probing parameters: -71
[  298.520133][ T3594] uclogic: probe of 0003:256C:006D.0012 failed with error -71
[  298.576759][ T3594] usb 4-1: USB disconnect, device number 13
[  298.605580][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  298.887128][   T48] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  299.383683][ T3594] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  299.763956][ T3594] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  299.792704][ T3594] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  299.851800][ T3594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  299.881464][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.957653][ T6394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  300.249343][ T3592] usb 4-1: USB disconnect, device number 14
[  300.613734][   T48] Bluetooth: hci5: command tx timeout
[  301.878389][ T6418] loop0: detected capacity change from 0 to 2048
[  303.990297][ T3565] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  303.999013][ T3565] Bluetooth: hci2: Injecting HCI hardware error event
[  304.008254][   T48] Bluetooth: hci2: hardware error 0x00
[  304.137514][ T6418]  loop0: p3 < > p4 < >
[  304.147604][ T6418] loop0: partition table partially beyond EOD, truncated
[  304.210964][ T6428] loop2: detected capacity change from 0 to 128
[  304.297996][ T6418] loop0: p3 start 4284289 is beyond EOD, truncated
[  304.467202][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.219155][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.549552][ T3550] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  305.963927][ T3550] usb 5-1: config 0 interface 0 has no altsetting 0
[  305.975951][ T3550] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  306.143749][   T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  306.151163][ T3550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.176278][ T3550] usb 5-1: config 0 descriptor??
[  307.069663][ T6449] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  307.265804][ T3550] video4linux radio32: keene_cmd_set failed (-71)
[  307.272352][ T3550] radio-keene 5-1:0.0: V4L2 device registered as radio32
[  307.298162][ T3550] usb 5-1: USB disconnect, device number 15
[  310.249013][ T6494] loop1: detected capacity change from 0 to 128
[  311.058444][ T6516] netlink: 'syz.2.700': attribute type 11 has an invalid length.
[  311.066410][ T6516] netlink: 'syz.2.700': attribute type 11 has an invalid length.
[  311.074629][ T6516] netlink: 8520 bytes leftover after parsing attributes in process `syz.2.700'.
[  312.843658][ T3116] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  312.983739][ T3592] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  313.243980][ T3116] usb 5-1: config 0 interface 0 has no altsetting 0
[  313.265985][ T3116] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  313.313864][ T3116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.335326][ T3116] usb 5-1: config 0 descriptor??
[  313.393806][ T3592] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  313.414709][ T3592] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  313.429706][ T3592] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  313.440048][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.523910][ T6533] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  313.780499][ T3594] usb 1-1: USB disconnect, device number 9
[  314.006337][ T6527] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  314.083803][ T3116] video4linux radio32: keene_cmd_set failed (-71)
[  314.100814][ T3116] radio-keene 5-1:0.0: V4L2 device registered as radio32
[  314.139952][ T3116] usb 5-1: USB disconnect, device number 16
[  314.168342][ T5556] udevd[5556]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  316.696103][   T48] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  316.705876][   T48] Bluetooth: hci5: Injecting HCI hardware error event
[  316.716701][   T48] Bluetooth: hci5: hardware error 0x00
[  317.228002][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.234410][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.259885][   T48] 
[  317.262272][   T48] ======================================================
[  317.269396][   T48] WARNING: possible circular locking dependency detected
[  317.276443][   T48] 6.1.98-syzkaller #0 Not tainted
[  317.281477][   T48] ------------------------------------------------------
[  317.288517][   T48] kworker/u5:0/48 is trying to acquire lock:
[  317.294524][   T48] ffff888029c01130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x104/0x300
[  317.305023][   T48] 
[  317.305023][   T48] but task is already holding lock:
[  317.312407][   T48] ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  317.322029][   T48] 
[  317.322029][   T48] which lock already depends on the new lock.
[  317.322029][   T48] 
[  317.332454][   T48] 
[  317.332454][   T48] the existing dependency chain (in reverse order) is:
[  317.341516][   T48] 
[  317.341516][   T48] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  317.349301][   T48]        lock_acquire+0x1f8/0x5a0
[  317.354408][   T48]        __mutex_lock+0x132/0xd80
[  317.359518][   T48]        hci_remote_features_evt+0x664/0xab0
[  317.365541][   T48]        hci_event_packet+0xa9d/0x1510
[  317.371010][   T48]        hci_rx_work+0x3cd/0xce0
[  317.375959][   T48]        process_one_work+0x8a9/0x11d0
[  317.381423][   T48]        worker_thread+0xa47/0x1200
[  317.386642][   T48]        kthread+0x28d/0x320
[  317.391245][   T48]        ret_from_fork+0x1f/0x30
[  317.396208][   T48] 
[  317.396208][   T48] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  317.403514][   T48]        lock_acquire+0x1f8/0x5a0
[  317.408556][   T48]        __mutex_lock+0x132/0xd80
[  317.413582][   T48]        sco_sock_connect+0x181/0x8f0
[  317.418967][   T48]        __sys_connect+0x2c9/0x300
[  317.424091][   T48]        __x64_sys_connect+0x76/0x80
[  317.429391][   T48]        do_syscall_64+0x3b/0xb0
[  317.434337][   T48]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  317.440758][   T48] 
[  317.440758][   T48] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
[  317.449882][   T48]        validate_chain+0x1661/0x5950
[  317.455263][   T48]        __lock_acquire+0x125b/0x1f80
[  317.460641][   T48]        lock_acquire+0x1f8/0x5a0
[  317.465674][   T48]        lock_sock_nested+0x44/0x100
[  317.470969][   T48]        sco_conn_del+0x104/0x300
[  317.475994][   T48]        hci_conn_hash_flush+0x10e/0x2a0
[  317.481629][   T48]        hci_dev_close_sync+0x9a9/0x1020
[  317.487264][   T48]        hci_error_reset+0x12c/0x3c0
[  317.492565][   T48]        process_one_work+0x8a9/0x11d0
[  317.498036][   T48]        worker_thread+0xa47/0x1200
[  317.503323][   T48]        kthread+0x28d/0x320
[  317.507919][   T48]        ret_from_fork+0x1f/0x30
[  317.512870][   T48] 
[  317.512870][   T48] other info that might help us debug this:
[  317.512870][   T48] 
[  317.523181][   T48] Chain exists of:
[  317.523181][   T48]   sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
[  317.523181][   T48] 
[  317.537448][   T48]  Possible unsafe locking scenario:
[  317.537448][   T48] 
[  317.544890][   T48]        CPU0                    CPU1
[  317.550345][   T48]        ----                    ----
[  317.555703][   T48]   lock(hci_cb_list_lock);
[  317.560204][   T48]                                lock(&hdev->lock);
[  317.566793][   T48]                                lock(hci_cb_list_lock);
[  317.573822][   T48]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
[  317.579720][   T48] 
[  317.579720][   T48]  *** DEADLOCK ***
[  317.579720][   T48] 
[  317.588037][   T48] 5 locks held by kworker/u5:0/48:
[  317.593140][   T48]  #0: ffff88807e1ee938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  317.603331][   T48]  #1: ffffc90000b97d20 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  317.615079][   T48]  #2: ffff8880235a50b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_error_reset+0x124/0x3c0
[  317.624759][   T48]  #3: ffff8880235a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  317.634443][   T48]  #4: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  317.644469][   T48] 
[  317.644469][   T48] stack backtrace:
[  317.650372][   T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.98-syzkaller #0
[  317.658387][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  317.668528][   T48] Workqueue: hci5 hci_error_reset
[  317.673565][   T48] Call Trace:
[  317.676844][   T48]  <TASK>
[  317.679863][   T48]  dump_stack_lvl+0x1e3/0x2cb
[  317.684555][   T48]  ? nf_tcp_handle_invalid+0x642/0x642
[  317.690028][   T48]  ? print_circular_bug+0x12b/0x1a0
[  317.695228][   T48]  check_noncircular+0x2fa/0x3b0
[  317.700167][   T48]  ? add_chain_block+0x850/0x850
[  317.705121][   T48]  ? lockdep_lock+0x11f/0x2a0
[  317.709836][   T48]  ? lockdep_unlock+0x165/0x300
[  317.714694][   T48]  ? lockdep_lock+0x2a0/0x2a0
[  317.719408][   T48]  ? _find_first_zero_bit+0xd0/0x100
[  317.724701][   T48]  validate_chain+0x1661/0x5950
[  317.729572][   T48]  ? reacquire_held_locks+0x660/0x660
[  317.734970][   T48]  ? reacquire_held_locks+0x660/0x660
[  317.740353][   T48]  ? __stack_depot_save+0x36/0x470
[  317.745471][   T48]  ? mark_lock+0x9a/0x340
[  317.749829][   T48]  ? __lock_acquire+0x125b/0x1f80
[  317.754880][   T48]  ? mark_lock+0x9a/0x340
[  317.759270][   T48]  __lock_acquire+0x125b/0x1f80
[  317.764176][   T48]  lock_acquire+0x1f8/0x5a0
[  317.768691][   T48]  ? sco_conn_del+0x104/0x300
[  317.773377][   T48]  ? read_lock_is_recursive+0x10/0x10
[  317.778850][   T48]  ? sco_conn_del+0xfa/0x300
[  317.783440][   T48]  ? __lock_acquire+0x1f80/0x1f80
[  317.788501][   T48]  lock_sock_nested+0x44/0x100
[  317.793278][   T48]  ? sco_conn_del+0x104/0x300
[  317.797958][   T48]  sco_conn_del+0x104/0x300
[  317.802466][   T48]  ? sco_connect_cfm+0xb10/0xb10
[  317.807412][   T48]  hci_conn_hash_flush+0x10e/0x2a0
[  317.812559][   T48]  hci_dev_close_sync+0x9a9/0x1020
[  317.817776][   T48]  hci_error_reset+0x12c/0x3c0
[  317.822548][   T48]  ? process_one_work+0x7a9/0x11d0
[  317.828012][   T48]  process_one_work+0x8a9/0x11d0
[  317.832961][   T48]  ? worker_detach_from_pool+0x260/0x260
[  317.838612][   T48]  ? _raw_spin_lock_irqsave+0x120/0x120
[  317.844164][   T48]  ? kthread_data+0x4e/0xc0
[  317.848679][   T48]  ? wq_worker_running+0x97/0x190
[  317.853722][   T48]  worker_thread+0xa47/0x1200
[  317.858416][   T48]  ? __sched_text_start+0x8/0x8
[  317.863283][   T48]  kthread+0x28d/0x320
[  317.867352][   T48]  ? worker_clr_flags+0x190/0x190
[  317.872378][   T48]  ? kthread_blkcg+0xd0/0xd0
[  317.876983][   T48]  ret_from_fork+0x1f/0x30
[  317.881412][   T48]  </TASK>
[  318.390704][ T6599] loop1: detected capacity change from 0 to 4096
[  318.413342][ T6599] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  318.446157][ T6599] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  318.806108][ T6599] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  319.987259][   T48] Bluetooth: hci5: Opcode 0x0c03 failed: -110