last executing test programs:

41.511413617s ago: executing program 0 (id=2139):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x541b, 0x0)

41.324533777s ago: executing program 0 (id=2140):
socket(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
inotify_init1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0)
syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0)

41.284930458s ago: executing program 0 (id=2141):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f3f00001a0059"], 0xfe33)

40.706189008s ago: executing program 0 (id=2145):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f000000cf00), 0x0, 0x0)

40.647934337s ago: executing program 0 (id=2146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
io_setup(0x0, &(0x7f0000000280))
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x4)
finit_module(r3, 0x0, 0x0)

17.88034748s ago: executing program 0 (id=2149):
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x408440, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x4010640a, &(0x7f0000000e40)={0x0, 0x0})
syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ed806abf77aaaaaaaaaabb08004500004c00611000002190780a0101000000000005009078ac1e03014c000000fffe000000000000ac1414bbe0000001075300ac1414aafffffffeac1414bbffffffff89072de00000020000"], 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x10, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"})
readv(r1, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1b}], 0x2)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000300)="c70f1c13", 0x4}], 0x1, 0x7ffffd, 0x0)
fallocate(r5, 0x3, 0x80000, 0x80000001)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
gettid()
r9 = memfd_create(0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES64=r9, @ANYBLOB="c523339da09c66caaed1fbcdf9529c2cd8880f601306c6f7dd95a1ff9a10fb81fc94323c5167e6695eaa076982c67becb7394e1b710a2b926fd6eda172a9d8cd34945e70f79219543186c1"], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socket$unix(0x1, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582"], 0x0)

17.213962864s ago: executing program 3 (id=2283):
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0xee01, r1, 0xffffffffffffffff)
semget$private(0x0, 0x4000000009, 0x82)
semop(0x0, 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0}, 0x0, 0x0, 0x1})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2}, 0x0, 0x0, 0x2})

17.120647331s ago: executing program 3 (id=2284):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="05ff03076844268cb89e14f00800fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)

17.120308418s ago: executing program 3 (id=2285):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

17.097992148s ago: executing program 3 (id=2286):
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x890b, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000009})

16.950592082s ago: executing program 3 (id=2287):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000010000b0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

15.98534054s ago: executing program 3 (id=2291):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getrlimit(0xe5c672a11a1e321c, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff)
keyctl$set_timeout(0x10, r5, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

6.960698688s ago: executing program 2 (id=2319):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)

6.80977253s ago: executing program 2 (id=2320):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

6.784797826s ago: executing program 2 (id=2321):
socket(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
inotify_init1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0)
syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0)

6.746683239s ago: executing program 2 (id=2322):
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
unshare(0x8000000)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, &(0x7f00000003c0), &(0x7f0000000200)=0x4)

5.356315525s ago: executing program 1 (id=2330):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

5.352701803s ago: executing program 1 (id=2331):
socket(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
inotify_init1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0)
syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0)

5.319242926s ago: executing program 1 (id=2332):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

5.288240177s ago: executing program 1 (id=2333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000010000b0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

4.205024295s ago: executing program 1 (id=2334):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
pwritev2(r0, &(0x7f0000022e80)=[{&(0x7f0000000240)="8a8fa9a4fd711518fe0e9e4149db868356ddc80d3106a3ba4ba182e556b3c69cc44209ebc21772952577d924f8d11d62aaab7f93861471f6e33ead6ee3645d3ab16f814699cd4c867ee2297f9c56e59ee22286e6c904c002cc20ecffd7b1d93bc02da638ee85d19c1a366709f10be4e63ff4d2179581e6765e1dd48bf1efd11c6b1a8c27fa9ca79dce16359b4b1ad14c7b3c5a5c8e0fb954047a6be5fe4a5b2307b3bbefaf72c891c48f1fb5ed763ab8788c08dc8d4befc6", 0xb8}, {&(0x7f000001fc00)="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", 0xb76}], 0x2, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

3.616696602s ago: executing program 2 (id=2335):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)}, {0x0}], 0x2)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4)

3.616203284s ago: executing program 2 (id=2336):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getrlimit(0xe5c672a11a1e321c, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff)
keyctl$set_timeout(0x10, r5, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

2.733864686s ago: executing program 1 (id=2337):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x4840)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x4020}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0)

2.627174216s ago: executing program 4 (id=2338):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x24}}, 0x0)

592.748594ms ago: executing program 4 (id=2339):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

425.307777ms ago: executing program 4 (id=2340):
socket(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
inotify_init1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0)
syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0)

390.605653ms ago: executing program 4 (id=2341):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="05ff03076844268cb89e14f00800fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)

168.654573ms ago: executing program 4 (id=2342):
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
fchdir(0xffffffffffffffff)
close(0xffffffffffffffff)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0)

0s ago: executing program 4 (id=2343):
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
unshare(0x8000000)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f00000003c0), &(0x7f0000000200)=0x4)

kernel console output (not intermixed with test programs):

0] usb 1-1: config 0 descriptor??
[  319.947422][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.953687][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.958314][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.958356][ T5155] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  319.980035][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.987805][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.003988][ T5155] usb 3-1: config 0 descriptor??
[  320.006591][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.035644][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.071073][T10492] netlink: 'syz.1.1559': attribute type 29 has an invalid length.
[  320.099523][ T5150] ath6kl: Failed to submit usb control message: -71
[  320.113707][ T5150] ath6kl: unable to send the bmi data to the device: -71
[  320.124255][ T5150] ath6kl: Unable to send get target info: -71
[  320.130829][ T5150] ath6kl: Failed to init ath6kl core: -71
[  320.138383][ T5150] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  320.159038][ T5150] usb 1-1: USB disconnect, device number 16
[  320.215255][T10446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.228315][T10493] netlink: 'syz.1.1559': attribute type 29 has an invalid length.
[  320.254849][T10447] hsr_slave_0: entered promiscuous mode
[  320.261278][T10447] hsr_slave_1: entered promiscuous mode
[  320.267585][T10447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.275226][T10447] Cannot create hsr debugfs directory
[  320.477562][T10496] team0: Device vxcan1 is of different type
[  320.692122][T10503] netlink: 'syz.2.1548': attribute type 1 has an invalid length.
[  320.699887][T10503] netlink: 9360 bytes leftover after parsing attributes in process `syz.2.1548'.
[  320.802011][T10503] netlink: 'syz.2.1548': attribute type 1 has an invalid length.
[  320.810254][T10503] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1548'.
[  321.310201][T10446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.717757][   T55] Bluetooth: hci0: command tx timeout
[  321.760295][T10518] netlink: 'syz.0.1568': attribute type 29 has an invalid length.
[  321.769064][   T55] Bluetooth: hci1: command tx timeout
[  321.779269][T10518] netlink: 'syz.0.1568': attribute type 29 has an invalid length.
[  321.849018][T10519] netlink: 'syz.0.1568': attribute type 29 has an invalid length.
[  321.888450][ T5155] wacom 0003:056A:0043.0007: unknown main item tag 0x4
[  321.896274][ T5155] wacom 0003:056A:0043.0007: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  321.909891][T10446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.921089][ T5155] wacom 0003:056A:0043.0007: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0
[  321.934065][ T5155] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0007/input/input20
[  322.161347][ T5155] usb 3-1: USB disconnect, device number 15
[  322.597289][T10446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.646215][T10546] netlink: 'syz.2.1578': attribute type 29 has an invalid length.
[  322.654713][T10546] netlink: 'syz.2.1578': attribute type 29 has an invalid length.
[  322.663727][T10546] netlink: 'syz.2.1578': attribute type 29 has an invalid length.
[  323.081314][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  323.088759][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  323.096138][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  323.104439][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  323.112981][ T5115] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  323.120757][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  323.663520][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.737841][T10446] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  323.853552][ T5115] Bluetooth: hci0: command tx timeout
[  323.862589][T10446] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  323.872655][T10578] hsr_slave_0: left promiscuous mode
[  323.882455][ T5115] Bluetooth: hci1: command tx timeout
[  323.889545][T10578] hsr_slave_1: left promiscuous mode
[  323.916787][T10446] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  323.942578][T10446] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  324.029612][T10557] chnl_net:caif_netlink_parms(): no params data found
[  324.213452][T10557] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.221338][T10557] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.228975][T10557] bridge_slave_0: entered allmulticast mode
[  324.238089][T10557] bridge_slave_0: entered promiscuous mode
[  324.259700][T10557] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.267898][T10557] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.275116][T10557] bridge_slave_1: entered allmulticast mode
[  324.282746][T10557] bridge_slave_1: entered promiscuous mode
[  324.391600][T10446] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.408323][T10446] 8021q: adding VLAN 0 to HW filter on device team0
[  324.540516][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.547729][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.556634][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.563747][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.575158][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.597293][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.633347][T10557] team0: Port device team_slave_0 added
[  324.775435][T10557] team0: Port device team_slave_1 added
[  324.810401][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.817374][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.843304][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.864777][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.879129][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.906530][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.989891][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.006771][T10446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  325.017847][T10446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  325.063536][T10557] hsr_slave_0: entered promiscuous mode
[  325.074578][T10557] hsr_slave_1: entered promiscuous mode
[  325.198120][T10557] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.205736][T10557] Cannot create hsr debugfs directory
[  325.239818][ T5115] Bluetooth: hci5: command tx timeout
[  325.294131][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1598'.
[  325.475972][T10446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.598708][T10446] veth0_vlan: entered promiscuous mode
[  325.610183][T10446] veth1_vlan: entered promiscuous mode
[  325.645013][T10446] veth0_macvtap: entered promiscuous mode
[  325.655014][T10446] veth1_macvtap: entered promiscuous mode
[  325.673484][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.684061][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.694338][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.710068][T10619] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1602'.
[  325.719608][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.729829][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.740572][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.751105][ T5155] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  325.759872][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.770307][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.780117][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.790523][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.800322][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.810799][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.822043][T10446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.832181][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.847986][ T5115] Bluetooth: hci0: command tx timeout
[  325.861688][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.873241][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.883477][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.894197][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.906380][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.917176][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.927317][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.939060][ T5115] Bluetooth: hci1: command tx timeout
[  325.944874][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.956422][T10446] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.041883][T10446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.050952][T10446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.059699][T10446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.068471][T10446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.110512][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.119591][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.238296][ T2824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.246171][ T2824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.452018][T10621] netlink: 'syz.2.1603': attribute type 10 has an invalid length.
[  326.459880][T10621] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1603'.
[  326.511799][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'.
[  326.520737][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'.
[  326.633164][   T11] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  326.641357][   T11] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  326.646277][ T5115] block nbd0: Receive control failed (result -107)
[  326.659580][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.678177][T10629] can0: slcan on pts0.
[  326.969547][T10629] can0 (unregistered): slcan off pts0.
[  327.145217][ T5155] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  327.156058][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.166935][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.176675][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  327.241511][   T11] bridge_slave_1: left allmulticast mode
[  327.327178][ T5115] Bluetooth: hci5: command tx timeout
[  327.338276][   T11] bridge_slave_1: left promiscuous mode
[  327.344109][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.358075][   T11] bridge_slave_0: left allmulticast mode
[  327.363747][   T11] bridge_slave_0: left promiscuous mode
[  327.378829][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.391935][   T11] erspan0: left allmulticast mode
[  327.397017][   T11] erspan0: left promiscuous mode
[  327.402098][   T11] bridge0: port 3(erspan0) entered disabled state
[  327.475810][   T11] bridge_slave_1: left allmulticast mode
[  327.485832][   T11] bridge_slave_1: left promiscuous mode
[  327.492814][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.553659][ T5155] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  327.563032][ T5155] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  327.564156][   T11] bridge_slave_0: left allmulticast mode
[  327.571107][ T5155] usb 1-1: Manufacturer: syz
[  327.582624][ T5155] usb 1-1: config 0 descriptor??
[  327.592282][   T11] bridge_slave_0: left promiscuous mode
[  327.598019][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.518473][ T5154] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  328.662959][ T5155] usbhid 1-1:0.0: can't add hid device: -71
[  328.669176][ T5155] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  328.686769][ T5155] usb 1-1: USB disconnect, device number 17
[  328.743601][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.754928][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.764818][ T5154] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  328.773906][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.786225][ T5154] usb 5-1: config 0 descriptor??
[  329.240513][T10677] netlink: 'syz.4.1614': attribute type 1 has an invalid length.
[  329.248472][T10677] netlink: 9360 bytes leftover after parsing attributes in process `syz.4.1614'.
[  329.257605][T10677] netlink: 'syz.4.1614': attribute type 1 has an invalid length.
[  329.265336][T10677] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1614'.
[  329.304197][ T5154] wacom 0003:056A:0043.0008: unknown main item tag 0x4
[  329.311695][ T5154] wacom 0003:056A:0043.0008: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  329.323706][ T5154] wacom 0003:056A:0043.0008: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0
[  329.337192][ T5154] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0008/input/input23
[  329.408247][ T5115] Bluetooth: hci5: command tx timeout
[  329.979364][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.990335][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.000339][   T11] bond0 (unregistering): Released all slaves
[  330.048219][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.061213][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.071941][   T11] bond0 (unregistering): Released all slaves
[  330.539181][T10704] netlink: 'syz.0.1619': attribute type 29 has an invalid length.
[  330.548231][T10704] netlink: 'syz.0.1619': attribute type 29 has an invalid length.
[  330.560008][T10704] netlink: 'syz.0.1619': attribute type 29 has an invalid length.
[  330.649392][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'.
[  330.658322][T10713] bridge_slave_1: left allmulticast mode
[  330.663977][T10713] bridge_slave_1: left promiscuous mode
[  330.797494][T10713] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.813184][ T8649] usb 5-1: USB disconnect, device number 13
[  331.486496][ T5115] Bluetooth: hci5: command tx timeout
[  331.861909][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  331.861927][   T29] audit: type=1326 audit(1720553814.546:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.2.1631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915fd75bd9 code=0x0
[  332.757289][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  332.999092][ T5115] Bluetooth: hci0: command tx timeout
[  333.013342][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.034877][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.065854][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  333.085403][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.108163][    T9] usb 1-1: config 0 descriptor??
[  333.356059][T10774] loop4: detected capacity change from 0 to 40427
[  333.500532][T10774] F2FS-fs (loop4): invalid crc value
[  333.512474][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'.
[  333.521396][T10792] bridge_slave_1: left allmulticast mode
[  333.524645][T10774] F2FS-fs (loop4): Found nat_bits in checkpoint
[  333.527251][T10792] bridge_slave_1: left promiscuous mode
[  333.527438][T10792] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.548314][T10792] bridge_slave_0: left allmulticast mode
[  333.553979][T10792] bridge_slave_0: left promiscuous mode
[  333.559731][T10792] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.596326][T10755] netlink: 'syz.0.1632': attribute type 1 has an invalid length.
[  333.616026][T10755] netlink: 9360 bytes leftover after parsing attributes in process `syz.0.1632'.
[  333.635831][T10755] netlink: 'syz.0.1632': attribute type 1 has an invalid length.
[  333.662569][T10755] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1632'.
[  333.684493][    T9] wacom 0003:056A:0043.0009: unknown main item tag 0x4
[  333.694550][    T9] wacom 0003:056A:0043.0009: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  333.708079][    T9] wacom 0003:056A:0043.0009: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.0-1/input0
[  333.721722][    T9] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0043.0009/input/input26
[  333.801396][T10774] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  333.819102][T10774] syz.4.1636: attempt to access beyond end of device
[  333.819102][T10774] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  333.833765][T10774] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  333.841779][T10774] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  334.403366][T10447] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  334.449753][T10557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.603526][T10447] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  334.613960][T10447] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  334.623734][T10447] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  334.695496][T10447] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.923603][T10447] 8021q: adding VLAN 0 to HW filter on device team0
[  334.970552][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.977698][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.013125][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.020293][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.187467][T10447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.470703][ T8649] usb 1-1: reset high-speed USB device number 18 using dummy_hcd
[  336.010430][T10447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.030528][T10557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.185629][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'.
[  336.194762][T10862] bridge_slave_1: left allmulticast mode
[  336.200494][T10862] bridge_slave_1: left promiscuous mode
[  336.206245][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.217982][T10862] bridge_slave_0: left allmulticast mode
[  336.223724][T10862] bridge_slave_0: left promiscuous mode
[  336.229493][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.494228][   T11] hsr_slave_0: left promiscuous mode
[  336.500167][   T11] hsr_slave_1: left promiscuous mode
[  336.595179][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.603073][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.613029][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.620649][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.632682][   T11] hsr_slave_0: left promiscuous mode
[  336.638941][   T11] hsr_slave_1: left promiscuous mode
[  336.644788][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.652255][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.660084][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.667539][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.753262][   T11] veth1_macvtap: left promiscuous mode
[  336.759342][   T11] veth0_macvtap: left promiscuous mode
[  336.765093][   T11] veth1_vlan: left promiscuous mode
[  336.770889][   T11] veth0_vlan: left promiscuous mode
[  336.777529][   T11] veth1_macvtap: left promiscuous mode
[  336.785041][   T11] veth0_macvtap: left promiscuous mode
[  336.798613][   T11] veth1_vlan: left promiscuous mode
[  336.804161][   T11] veth0_vlan: left promiscuous mode
[  337.062428][ T5102] usb 1-1: USB disconnect, device number 18
[  337.529859][   T11] team0 (unregistering): Port device team_slave_1 removed
[  337.543937][   T11] team0 (unregistering): Port device team_slave_0 removed
[  337.809311][   T11] team0 (unregistering): Port device team_slave_1 removed
[  337.823748][   T11] team0 (unregistering): Port device team_slave_0 removed
[  337.986254][T10557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.217654][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  338.335692][T10447] veth0_vlan: entered promiscuous mode
[  338.378554][T10447] veth1_vlan: entered promiscuous mode
[  338.478754][T10447] veth0_macvtap: entered promiscuous mode
[  338.489743][T10447] veth1_macvtap: entered promiscuous mode
[  338.505742][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.655515][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.666063][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.669788][T10883] loop4: detected capacity change from 0 to 2048
[  338.677806][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.715493][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.726144][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.736299][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.747974][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.756555][T10883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.893188][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.909162][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.920480][T10447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.931119][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.941588][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.951395][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.961801][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.971602][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.982018][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.109183][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.112038][T10447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.132984][T10447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.141888][T10447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.150607][T10447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.176531][T10447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.410784][T10557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.488268][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'.
[  339.590926][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.602683][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.625531][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.633615][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.640635][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'.
[  339.656860][    T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  339.903917][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.966250][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.986076][    T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  340.027753][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.187984][    T8] usb 5-1: config 0 descriptor??
[  340.648069][T10557] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  340.648144][T10943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1680'.
[  340.662168][T10944] netlink: 'syz.2.1679': attribute type 29 has an invalid length.
[  340.682446][T10557] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  340.689802][T10910] netlink: 'syz.4.1667': attribute type 1 has an invalid length.
[  340.717168][T10910] netlink: 9360 bytes leftover after parsing attributes in process `syz.4.1667'.
[  340.722413][T10557] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  340.729272][T10910] netlink: 'syz.4.1667': attribute type 1 has an invalid length.
[  340.767282][T10910] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1667'.
[  340.850547][    T8] wacom 0003:056A:0043.000A: unknown main item tag 0x4
[  340.859137][    T8] wacom 0003:056A:0043.000A: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  340.893236][    T8] wacom 0003:056A:0043.000A: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0
[  340.907333][    T8] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.000A/input/input29
[  340.926385][T10557] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  340.938633][T10944] netlink: 'syz.2.1679': attribute type 29 has an invalid length.
[  340.955681][T10947] netlink: 'syz.2.1679': attribute type 29 has an invalid length.
[  340.963934][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'.
[  341.186306][T10557] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.204283][T10557] 8021q: adding VLAN 0 to HW filter on device team0
[  341.225074][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.232209][ T8649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.428016][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.435168][ T8649] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.455191][T10557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  341.701422][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.752179][T10557] veth0_vlan: entered promiscuous mode
[  341.808276][T10957] Cannot find add_set index 0 as target
[  341.959605][T10557] veth1_vlan: entered promiscuous mode
[  341.983733][T10557] veth0_macvtap: entered promiscuous mode
[  341.993741][T10557] veth1_macvtap: entered promiscuous mode
[  342.009903][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.168106][    T9] usb 5-1: reset high-speed USB device number 14 using dummy_hcd
[  342.256522][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.266366][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.276787][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.286600][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.297024][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.306847][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.317268][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.327247][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.507395][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.517241][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.527786][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.539093][T10557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.558749][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.569856][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.580518][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.591043][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.745774][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.756236][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.766538][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.780622][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.783727][T10982] netlink: 'syz.4.1693': attribute type 29 has an invalid length.
[  342.791736][T10557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.809997][T10557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.819173][T10557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.828059][T10557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.858011][T10557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.950815][T10982] netlink: 'syz.4.1693': attribute type 29 has an invalid length.
[  343.299278][T10983] netlink: 'syz.4.1693': attribute type 29 has an invalid length.
[  343.644926][    T8] usb 5-1: USB disconnect, device number 14
[  344.231754][ T2824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.243346][ T2824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.356340][T11004] Cannot find add_set index 0 as target
[  344.417621][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.431976][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.488635][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.496071][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.503516][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.511100][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.669512][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.679317][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4
[  344.687045][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.697547][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2
[  344.705005][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.705709][T11020] netlink: 'syz.0.1706': attribute type 29 has an invalid length.
[  344.712396][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.712427][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.712450][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.742375][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4
[  344.875779][T11020] netlink: 'syz.0.1706': attribute type 29 has an invalid length.
[  344.887146][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.895073][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.902789][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.904458][T11025] loop3: detected capacity change from 0 to 512
[  344.910410][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910443][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910467][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910490][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910513][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910535][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910558][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910581][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910605][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910626][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910646][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910668][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910689][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910712][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910735][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.910755][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.930085][T11025] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1707: casefold flag without casefold feature
[  344.931808][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.939538][T11025] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1707: couldn't read orphan inode 15 (err -117)
[  344.946469][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.946497][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.946518][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.946550][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  344.955731][T11025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.138995][ T5102] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  345.191897][T10447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.708667][T11040] Cannot find add_set index 0 as target
[  346.089422][T11059] loop4: detected capacity change from 0 to 512
[  346.105267][T11059] EXT4-fs (loop4): Test dummy encryption mode enabled
[  346.125805][T11059] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.1718: corrupted in-inode xattr: invalid ea_ino
[  346.145824][T11059] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1718: couldn't read orphan inode 12 (err -117)
[  346.161353][T11059] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.599785][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  346.608126][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  346.618913][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  346.755805][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  346.764394][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  346.772862][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4
[  346.791078][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  346.802775][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x2
[  347.089808][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.104517][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.113438][T11072] overlayfs: missing 'lowerdir'
[  347.142965][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.152180][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.159620][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4
[  347.167432][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.177990][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.185497][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.192910][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.233941][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.335337][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.342870][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.355904][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.363468][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.371201][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.381045][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.391011][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.403171][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.416585][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.429691][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.446577][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.455214][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.465923][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.476759][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.504801][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.594206][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.660024][T10446] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  347.679001][T11076] Cannot find add_set index 0 as target
[  347.685865][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.885934][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.904150][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  347.991555][    T8] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  348.582686][T11108] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1734'.
[  349.066414][   T11] bridge_slave_1: left allmulticast mode
[  349.083465][   T11] bridge_slave_1: left promiscuous mode
[  349.101132][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.143636][   T11] bridge_slave_0: left allmulticast mode
[  349.300202][   T11] bridge_slave_0: left promiscuous mode
[  349.305969][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.891040][T11120] ebt_limit: overflow, try lower: 0/0
[  350.092834][T11125] overlayfs: missing 'workdir'
[  350.790013][T11139] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1745'.
[  350.941548][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  350.951741][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.962942][   T11] bond0 (unregistering): Released all slaves
[  351.663875][T11153] loop4: detected capacity change from 0 to 40427
[  351.673476][T11153] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  351.699346][T11153] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  351.728044][T11153] F2FS-fs (loop4): invalid crc value
[  351.739590][T11153] F2FS-fs (loop4): Found nat_bits in checkpoint
[  351.766175][T11162] Cannot find add_set index 0 as target
[  351.782195][T11153] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  351.789534][T11153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  352.211406][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.283537][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.295136][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.302821][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.310623][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.318243][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x4
[  352.325631][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.333383][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x2
[  352.344011][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.352017][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.360580][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.368356][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.375904][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x4
[  352.383719][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.391473][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.401222][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.445803][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.855621][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.863111][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.870650][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.951880][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.960382][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.975893][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983400][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983430][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983455][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983478][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983501][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983524][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983549][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983573][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983596][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983621][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983647][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983679][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983705][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  352.983730][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  353.031184][ T5154] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  353.706237][T11207] loop4: detected capacity change from 0 to 2048
[  353.837599][T11198] Cannot find add_set index 0 as target
[  353.936868][T11184] tty tty23: ldisc open failed (-12), clearing slot 22
[  353.991108][T11207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.154468][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.174984][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.182410][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.190028][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.197483][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.204893][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.212295][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x4
[  354.219704][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.227106][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x2
[  354.234512][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.241913][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.372934][ T5155] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  354.380715][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.388133][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.395554][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x4
[  354.402981][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.413129][   T11] hsr_slave_0: left promiscuous mode
[  354.413479][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.426144][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.433572][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.433710][   T11] hsr_slave_1: left promiscuous mode
[  354.440963][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.440988][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441010][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441031][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441053][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441076][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441098][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441121][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441143][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441166][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441188][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441211][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441234][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441257][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441281][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441311][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441334][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441357][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441381][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.441405][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  354.442669][ T5102] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  354.901401][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.908863][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.007477][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.014994][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.152745][T11241] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  355.406550][   T11] veth1_macvtap: left promiscuous mode
[  355.412095][   T11] veth0_macvtap: left promiscuous mode
[  355.451738][   T11] veth1_vlan: left promiscuous mode
[  355.461895][   T11] veth0_vlan: left promiscuous mode
[  356.112384][T11250] loop4: detected capacity change from 0 to 40427
[  356.121131][T11250] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  356.128900][T11250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  356.143310][T11250] F2FS-fs (loop4): invalid crc value
[  356.156730][T11250] F2FS-fs (loop4): Found nat_bits in checkpoint
[  356.250598][T11250] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  356.317338][T11250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  356.347946][   T11] team0 (unregistering): Port device team_slave_1 removed
[  356.548506][   T11] team0 (unregistering): Port device team_slave_0 removed
[  357.137971][T11285] loop4: detected capacity change from 0 to 1024
[  357.565986][ T5155] usb 1-1: unable to read config index 0 descriptor/all
[  357.573208][ T5155] usb 1-1: can't read configurations, error -71
[  358.017016][ T5154] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  358.291235][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  358.301308][ T5154] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  358.310752][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.345003][ T5154] usb 2-1: config 0 descriptor??
[  358.486892][T11305] syz.4.1801[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  358.487041][T11305] syz.4.1801[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  358.715704][T11307] syzkaller0: entered promiscuous mode
[  358.724764][ T5154] ath6kl: Failed to submit usb control message: -71
[  358.727196][T11307] syzkaller0: entered allmulticast mode
[  358.764709][ T5154] ath6kl: unable to send the bmi data to the device: -71
[  358.775161][ T5154] ath6kl: Unable to send get target info: -71
[  358.781727][ T5154] ath6kl: Failed to init ath6kl core: -71
[  358.788140][ T5154] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  358.806074][ T5154] usb 2-1: USB disconnect, device number 14
[  358.918480][ T5155] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  360.079707][ T5155] usb 1-1: Using ep0 maxpacket: 32
[  360.511318][ T5155] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  360.519706][ T5155] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  360.528333][ T5155] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  360.537794][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  360.547450][ T5155] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  360.597137][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  360.610138][ T5155] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  360.619169][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.628278][ T5155] usb 1-1: config 0 descriptor??
[  360.779416][ T5155] usb 1-1: can't set config #0, error -71
[  360.786762][ T5155] usb 1-1: USB disconnect, device number 20
[  361.344634][T11380] validate_nla: 1 callbacks suppressed
[  361.344656][T11380] netlink: 'syz.2.1835': attribute type 4 has an invalid length.
[  361.495027][T11386] wg2: entered promiscuous mode
[  361.500199][T11386] wg2: entered allmulticast mode
[  361.586414][ T5155] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  362.147863][T11406] loop4: detected capacity change from 0 to 256
[  362.425685][T11410] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  362.754933][   T29] audit: type=1326 audit(1720553845.426:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.1846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0
[  363.312312][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  363.322117][ T5155] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  363.331529][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.341426][ T5155] usb 1-1: config 0 descriptor??
[  363.651741][ T5155] ath6kl: Failed to submit usb control message: -71
[  363.658906][ T5155] ath6kl: unable to send the bmi data to the device: -71
[  363.665960][ T5155] ath6kl: Unable to send get target info: -71
[  363.672212][ T5155] ath6kl: Failed to init ath6kl core: -71
[  363.678332][ T5155] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  364.332160][T11444] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  364.346573][T11444] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  364.546508][ T5155] usb 1-1: USB disconnect, device number 21
[  365.456078][T11469] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  365.794102][T11465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  365.922086][ T5156] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  366.100070][T11490] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.107463][T11490] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.293438][T11490] 9pnet_fd: Insufficient options for proto=fd
[  366.649004][ T5156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  366.658943][ T5156] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  366.667965][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.677052][ T5156] usb 5-1: config 0 descriptor??
[  366.712754][T11510] block nbd2: shutting down sockets
[  366.918785][   T29] audit: type=1326 audit(1720553849.606:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11512 comm="syz.2.1882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915fd75bd9 code=0x0
[  366.990459][ T5156] ath6kl: Failed to submit usb control message: -71
[  366.997097][ T5156] ath6kl: unable to send the bmi data to the device: -71
[  367.004105][ T5156] ath6kl: Unable to send get target info: -71
[  367.011276][ T5156] ath6kl: Failed to init ath6kl core: -71
[  367.017328][ T5156] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  367.079081][ T5156] usb 5-1: USB disconnect, device number 15
[  367.874868][T11523] loop4: detected capacity change from 0 to 512
[  367.895395][T11523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  367.908376][   T29] audit: type=1326 audit(1720553850.606:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915fd75bd9 code=0x0
[  367.969387][T11523] EXT4-fs (loop4): 1 truncate cleaned up
[  367.978319][T11523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.057758][ T5115] Bluetooth: hci2: command 0x0406 tx timeout
[  368.585336][T11535] ebt_limit: overflow, try lower: 0/0
[  368.609249][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.870634][T11562] netlink: 'syz.4.1898': attribute type 29 has an invalid length.
[  369.897092][T11562] netlink: 'syz.4.1898': attribute type 29 has an invalid length.
[  370.030940][T11562] netlink: 'syz.4.1898': attribute type 29 has an invalid length.
[  370.243609][ T5115] block nbd2: Receive control failed (result -104)
[  370.300031][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.307655][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.316021][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.325617][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.333339][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  370.340828][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.602102][T11547] block nbd2: shutting down sockets
[  370.862438][T11569] chnl_net:caif_netlink_parms(): no params data found
[  371.210840][T11572] loop4: detected capacity change from 0 to 32768
[  371.376206][T11572] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  371.390129][T11572] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  371.529336][T11569] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.536563][T11569] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.543830][T11569] bridge_slave_0: entered allmulticast mode
[  371.550876][T11569] bridge_slave_0: entered promiscuous mode
[  371.558582][T11572] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  371.560314][T11569] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.573233][T11569] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.574774][    T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  371.580428][T11569] bridge_slave_1: entered allmulticast mode
[  371.587925][    T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  371.593997][T11569] bridge_slave_1: entered promiscuous mode
[  371.663417][    T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 75ms
[  371.675923][    T8] gfs2: fsid=syz:syz.0: jid=0: Done
[  371.682148][T11572] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  371.833864][T11569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.847080][T11569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.046718][T11569] team0: Port device team_slave_0 added
[  372.187895][T11569] team0: Port device team_slave_1 added
[  372.205709][T11569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.214202][T11569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.240235][T11569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.262462][T11569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.269421][T11569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.277024][    T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  372.390410][T11569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.598195][   T55] Bluetooth: hci3: command tx timeout
[  372.608690][T11569] hsr_slave_0: entered promiscuous mode
[  372.619613][T11569] hsr_slave_1: entered promiscuous mode
[  372.626411][T11569] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  372.634533][T11569] Cannot create hsr debugfs directory
[  372.665700][T11623] loop4: detected capacity change from 0 to 512
[  372.673211][T11623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  372.739799][T11623] EXT4-fs (loop4): 1 truncate cleaned up
[  372.750688][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  372.762273][T11623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.775453][    T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  372.788127][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.817024][    T8] usb 2-1: config 0 descriptor??
[  372.889613][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.027805][    T8] ath6kl: Failed to submit usb control message: -71
[  373.036144][    T8] ath6kl: unable to send the bmi data to the device: -71
[  373.055018][    T8] ath6kl: Unable to send get target info: -71
[  373.154149][    T8] ath6kl: Failed to init ath6kl core: -71
[  373.186917][    T8] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  373.199442][T11569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.220942][    T8] usb 2-1: USB disconnect, device number 15
[  373.445776][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'.
[  374.210368][T11569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.413099][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  374.440531][T11654] loop4: detected capacity change from 0 to 512
[  374.467265][T11654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  374.544657][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  374.552679][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  374.560851][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  374.569324][ T5115] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  374.584442][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  374.592375][T11654] EXT4-fs (loop4): 1 truncate cleaned up
[  374.625489][T11654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.716908][ T5115] Bluetooth: hci3: command tx timeout
[  374.757106][T11569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.943336][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.983041][T11666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.990949][T11666] batadv_slave_1: entered promiscuous mode
[  375.003579][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1932'.
[  375.144715][T11569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.604366][T11651] chnl_net:caif_netlink_parms(): no params data found
[  375.916791][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  376.138961][T11651] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.146990][T11651] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.155816][T11651] bridge_slave_0: entered allmulticast mode
[  376.166961][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  376.252895][T11651] bridge_slave_0: entered promiscuous mode
[  376.260390][T11651] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.267797][T11651] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.274986][T11651] bridge_slave_1: entered allmulticast mode
[  376.322317][T11651] bridge_slave_1: entered promiscuous mode
[  376.324303][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  376.341339][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.403890][    T9] usb 5-1: config 0 descriptor??
[  376.404512][T11651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.428330][ T5106] syz-executor (5106) used greatest stack depth: 19376 bytes left
[  376.469470][ T2851] bridge_slave_1: left allmulticast mode
[  376.475197][ T2851] bridge_slave_1: left promiscuous mode
[  376.483367][ T2851] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.560148][ T2851] bridge_slave_0: left allmulticast mode
[  376.565853][ T2851] bridge_slave_0: left promiscuous mode
[  376.575841][ T2851] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.640599][    T9] ath6kl: Failed to submit usb control message: -71
[  376.648381][    T9] ath6kl: unable to send the bmi data to the device: -71
[  376.655766][    T9] ath6kl: Unable to send get target info: -71
[  376.662753][    T9] ath6kl: Failed to init ath6kl core: -71
[  376.668891][ T5115] Bluetooth: hci6: command tx timeout
[  376.675291][    T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  376.686609][    T9] usb 5-1: USB disconnect, device number 16
[  376.809062][ T5115] Bluetooth: hci3: command tx timeout
[  377.025447][ T2851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.045863][ T2851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.063089][ T2851] bond0 (unregistering): Released all slaves
[  377.083068][T11651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.113030][T11695] netlink: 'syz.1.1938': attribute type 10 has an invalid length.
[  377.137843][T11695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1938'.
[  377.147209][T11695] ipvlan1: entered promiscuous mode
[  377.152476][T11695] ipvlan1: entered allmulticast mode
[  377.158366][T11695] veth0_vlan: entered allmulticast mode
[  377.166088][T11695] bridge0: port 3(ipvlan1) entered blocking state
[  377.177637][T11695] bridge0: port 3(ipvlan1) entered disabled state
[  377.187042][T11695] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  377.346372][T11651] team0: Port device team_slave_0 added
[  377.365051][T11651] team0: Port device team_slave_1 added
[  377.558129][T11569] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  377.579201][T11651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.586178][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.612064][T11651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.624310][T11651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.631268][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.921829][T11651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.939277][T11569] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  378.076389][T11651] hsr_slave_0: entered promiscuous mode
[  378.082695][T11651] hsr_slave_1: entered promiscuous mode
[  378.088713][T11651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  378.096265][T11651] Cannot create hsr debugfs directory
[  378.233833][T11569] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  378.356706][T11569] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  378.378401][T11651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.604230][T11651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.734385][ T5115] Bluetooth: hci6: command tx timeout
[  378.781729][ T2851] hsr_slave_0: left promiscuous mode
[  378.787784][ T2851] hsr_slave_1: left promiscuous mode
[  378.797599][ T2851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.805170][ T2851] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.817531][ T5115] Bluetooth: hci3: command tx timeout
[  378.858242][ T2851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.865650][ T2851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.874792][ T2851] veth1_macvtap: left promiscuous mode
[  378.880302][ T2851] veth0_macvtap: left promiscuous mode
[  378.885823][ T2851] veth1_vlan: left promiscuous mode
[  378.935010][ T2851] veth0_vlan: left promiscuous mode
[  379.025925][ T5155] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  379.088510][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  379.094907][ T1246] ieee802154 phy1 wpan1: encryption failed: -22
[  379.480191][ T2851] team0 (unregistering): Port device team_slave_1 removed
[  379.500825][ T2851] team0 (unregistering): Port device team_slave_0 removed
[  379.912437][T11569] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.936912][T11651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.043979][T11746] loop4: detected capacity change from 0 to 256
[  380.054588][T11569] 8021q: adding VLAN 0 to HW filter on device team0
[  380.159418][T11746] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72a6026c, utbl_chksum : 0xe619d30d)
[  380.240279][T11569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  380.251228][T11569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  380.356348][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.363593][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.376340][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.383474][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.816938][ T5115] Bluetooth: hci6: command tx timeout
[  380.829051][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  380.838840][ T5155] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  380.847878][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.857034][ T5155] usb 1-1: config 0 descriptor??
[  381.444979][ T5155] ath6kl: Failed to submit usb control message: -71
[  381.451716][ T5155] ath6kl: unable to send the bmi data to the device: -71
[  381.458763][ T5155] ath6kl: Unable to send get target info: -71
[  381.464986][ T5155] ath6kl: Failed to init ath6kl core: -71
[  381.471146][ T5155] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  381.482472][ T5155] usb 1-1: USB disconnect, device number 22
[  381.530183][T11651] bond0: (slave netdevsim0): Releasing backup interface
[  381.668601][T11651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.706188][T11569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.743743][T11763] loop4: detected capacity change from 0 to 512
[  381.767286][T11763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  381.810746][T11569] veth0_vlan: entered promiscuous mode
[  381.823553][T11569] veth1_vlan: entered promiscuous mode
[  381.858645][T11569] veth0_macvtap: entered promiscuous mode
[  381.868667][T11569] veth1_macvtap: entered promiscuous mode
[  381.892302][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.902992][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.913349][T11763] EXT4-fs (loop4): 1 truncate cleaned up
[  381.920570][T11763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.935186][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.952963][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.964453][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.975415][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.986126][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.997773][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.011313][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.022108][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.033613][T11569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.043926][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.064763][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.086639][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.105145][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.117017][T11569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.142668][T11569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.153803][T11569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.169553][T11569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.178719][T11569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.595066][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.603395][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.627777][ T2835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.635624][ T2835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.682239][T11651] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  382.769982][T11651] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  382.779904][T11651] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  382.793473][T11651] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  382.907820][ T5115] Bluetooth: hci6: command tx timeout
[  383.039644][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.351658][T11788] loop4: detected capacity change from 0 to 512
[  383.584203][T11651] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.603716][T11651] 8021q: adding VLAN 0 to HW filter on device team0
[  384.135755][T11788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  384.203016][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.210219][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.236538][T11788] EXT4-fs (loop4): 1 truncate cleaned up
[  384.242745][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.243312][T11788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.249913][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.277334][   T29] audit: type=1804 audit(1720553866.936:192): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1967" name="/newroot/85/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  384.353644][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.440698][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'.
[  384.684494][T11815] loop4: detected capacity change from 0 to 512
[  384.721115][T11815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  384.736357][T11815] EXT4-fs (loop4): 1 truncate cleaned up
[  384.742562][T11815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.911437][T11651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.184539][T11651] veth0_vlan: entered promiscuous mode
[  385.197215][T11651] veth1_vlan: entered promiscuous mode
[  385.250618][T11651] veth0_macvtap: entered promiscuous mode
[  385.258666][T11651] veth1_macvtap: entered promiscuous mode
[  385.307828][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.316397][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.356392][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.366720][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.378082][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.388169][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.506162][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.516177][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.581094][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.591811][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.602453][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.612369][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.763024][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.817285][T11651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.842665][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.868229][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.903483][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.914010][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.923840][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.962659][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.129503][T11651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.155702][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'.
[  386.239281][T11651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.267017][T11651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.275746][T11651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.309897][T11651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.324805][T11854] loop3: detected capacity change from 0 to 8
[  386.430543][T11854] SQUASHFS error: Unable to read directory block [1d0:32]
[  386.725915][T11870] loop3: detected capacity change from 0 to 128
[  386.738726][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.870402][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.890249][T11870] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  386.908502][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.908632][T11870] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  386.916319][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.097507][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'.
[  387.271628][T11569] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  387.479803][T11889] loop3: detected capacity change from 0 to 8
[  389.414021][T11953] loop3: detected capacity change from 0 to 8
[  390.336497][   T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  390.890628][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2039'.
[  392.001255][   T29] audit: type=1326 audit(1720553874.456:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.2035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1555175bd9 code=0x0
[  392.063052][ T5115] Bluetooth: hci3: command tx timeout
[  392.303628][T11996] loop3: detected capacity change from 0 to 2048
[  392.778095][T11996] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.2042: bad orphan inode 8192
[  392.800848][T11996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.070293][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.681840][   T29] audit: type=1326 audit(1720553879.356:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.2066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0
[  396.779774][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'.
[  396.883922][    T9] IPVS: starting estimator thread 0...
[  397.014467][T12083] IPVS: using max 33 ests per chain, 79200 per kthread
[  397.362654][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'.
[  397.636793][T12104] loop4: detected capacity change from 0 to 4096
[  397.647275][T12104] EXT4-fs: Ignoring removed i_version option
[  397.656682][T12104] EXT4-fs: Ignoring removed nomblk_io_submit option
[  397.916949][T12104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.948978][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents
[  397.984576][T12104] EXT4-fs error (device loop4): ext4_dirty_inode:6009: inode #15: comm syz.4.2080: mark_inode_dirty error
[  398.141582][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents
[  398.156691][T12104] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2080: mark_inode_dirty error
[  398.170358][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents
[  398.182562][T12104] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2080: mark_inode_dirty error
[  398.195221][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents
[  398.203635][T12114] ebt_limit: overflow, try lower: 0/0
[  398.367078][T12104] EXT4-fs error (device loop4): ext4_truncate:4236: inode #15: comm syz.4.2080: mark_inode_dirty error
[  398.378474][T12104] EXT4-fs error (device loop4): ext4_evict_inode:262: comm syz.4.2080: couldn't truncate inode 15 (err -117)
[  398.428438][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.825142][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'.
[  399.893715][T12138] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  399.988443][   T29] audit: type=1326 audit(1720553882.676:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.1.2085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0
[  401.177504][T12155] ebt_limit: overflow, try lower: 0/0
[  401.849269][T12146] loop3: detected capacity change from 0 to 32768
[  402.136181][T12146] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  402.150963][T12146] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  402.172820][T12146] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  402.196255][ T1147] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  402.203952][ T1147] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  402.420194][ T1147] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 216ms
[  402.436778][ T1147] gfs2: fsid=syz:syz.0: jid=0: Done
[  402.453524][T12146] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  403.010723][ T5115] Bluetooth: hci0: command tx timeout
[  403.337424][T12171] Cannot find add_set index 0 as target
[  403.825971][T12194] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  403.869083][ T5115] Bluetooth: hci6: command tx timeout
[  405.301838][ T5115] Bluetooth: hci0: command tx timeout
[  406.199821][T12212] loop4: detected capacity change from 0 to 32768
[  406.328272][T12212] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  406.343382][T12212] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  406.426385][T12212] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  406.435282][ T5156] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  406.442224][ T5156] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  406.444941][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2125'.
[  406.473436][ T5156] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms
[  406.481002][ T5156] gfs2: fsid=syz:syz.0: jid=0: Done
[  406.486251][T12212] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  406.936496][T12238] netlink: 16227 bytes leftover after parsing attributes in process `syz.2.2130'.
[  408.440657][ T5115] Bluetooth: hci0: command tx timeout
[  408.854798][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  409.936827][T12274] loop3: detected capacity change from 0 to 512
[  409.940794][T12275] netlink: 16227 bytes leftover after parsing attributes in process `syz.0.2141'.
[  409.947901][T12274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  410.076844][T12274] EXT4-fs (loop3): 1 truncate cleaned up
[  410.102229][T12274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.942069][T12291] sctp: [Deprecated]: syz.4.2147 (pid 12291) Use of int in max_burst socket option.
[  410.942069][T12291] Use struct sctp_assoc_value instead
[  411.652977][T12296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2148'.
[  412.107059][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2150'.
[  412.426945][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'.
[  412.526660][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  412.534769][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  412.542395][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  412.550626][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  412.558373][   T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  412.565783][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  412.626267][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.713170][T12314] netlink: 16227 bytes leftover after parsing attributes in process `syz.4.2155'.
[  413.226854][T12306] chnl_net:caif_netlink_parms(): no params data found
[  413.969173][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  413.976453][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  413.984277][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  413.992087][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  413.999617][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  414.006908][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  414.187967][T12306] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.195103][T12306] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.225050][T12306] bridge_slave_0: entered allmulticast mode
[  414.232112][T12306] bridge_slave_0: entered promiscuous mode
[  414.240205][T12306] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.247408][T12306] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.496910][T12306] bridge_slave_1: entered allmulticast mode
[  414.516614][T12306] bridge_slave_1: entered promiscuous mode
[  414.677653][   T55] Bluetooth: hci1: command tx timeout
[  414.822610][T12306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.852598][T12306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.060156][T12306] team0: Port device team_slave_0 added
[  415.070318][T12306] team0: Port device team_slave_1 added
[  415.483464][T12332] chnl_net:caif_netlink_parms(): no params data found
[  415.524786][T12306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.531962][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.558820][T12306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.577020][T12306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.584201][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.611207][T12306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.706420][T12306] hsr_slave_0: entered promiscuous mode
[  415.712858][T12306] hsr_slave_1: entered promiscuous mode
[  415.719069][T12306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  415.726633][T12306] Cannot create hsr debugfs directory
[  416.010075][T12332] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.025984][T12332] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.042762][T12332] bridge_slave_0: entered allmulticast mode
[  416.049881][T12332] bridge_slave_0: entered promiscuous mode
[  416.082049][T12359] netlink: 'syz.1.2169': attribute type 29 has an invalid length.
[  416.090598][   T55] Bluetooth: hci2: command tx timeout
[  416.286776][T12332] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.293970][T12332] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.301225][T12332] bridge_slave_1: entered allmulticast mode
[  416.308472][T12332] bridge_slave_1: entered promiscuous mode
[  416.317865][T12359] netlink: 'syz.1.2169': attribute type 29 has an invalid length.
[  416.546065][T12362] netlink: 'syz.1.2169': attribute type 29 has an invalid length.
[  416.569840][T12332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.581524][T12332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.595511][T12364] Cannot find add_set index 0 as target
[  416.727020][   T55] Bluetooth: hci1: command tx timeout
[  416.753222][T12332] team0: Port device team_slave_0 added
[  416.775902][T12306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.796109][T12332] team0: Port device team_slave_1 added
[  416.798893][T12378] loop4: detected capacity change from 0 to 512
[  416.811567][T12378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  416.866356][T12378] EXT4-fs (loop4): 1 truncate cleaned up
[  416.873182][T12378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.945940][T12332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.953269][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  416.979278][T12332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.992092][T12332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.999047][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.024917][T12332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.035789][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2178'.
[  417.169847][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.214910][T12306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.344281][T12395] netlink: 'syz.4.2184': attribute type 29 has an invalid length.
[  417.433235][T12395] netlink: 'syz.4.2184': attribute type 29 has an invalid length.
[  417.464784][T12332] hsr_slave_0: entered promiscuous mode
[  417.471464][T12332] hsr_slave_1: entered promiscuous mode
[  417.483066][T12332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  417.497477][T12332] Cannot create hsr debugfs directory
[  417.505297][T12399] netlink: 'syz.4.2184': attribute type 29 has an invalid length.
[  417.967336][ T1147] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  418.097336][T12306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.176807][   T55] Bluetooth: hci2: command tx timeout
[  418.190010][ T1147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.208659][ T1147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.218825][ T1147] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  418.228421][ T1147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.242624][ T1147] usb 2-1: config 0 descriptor??
[  418.288011][T12306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.302911][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2194'.
[  418.468153][T12427] netlink: 'syz.4.2198': attribute type 29 has an invalid length.
[  418.477119][T12427] netlink: 'syz.4.2198': attribute type 29 has an invalid length.
[  418.486416][T12427] netlink: 'syz.4.2198': attribute type 29 has an invalid length.
[  418.589270][T12431] loop4: detected capacity change from 0 to 512
[  418.605719][T12431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  418.629595][T12431] EXT4-fs (loop4): 1 truncate cleaned up
[  418.636910][T12431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.766068][T12410] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2189'.
[  418.787945][ T1147] wacom 0003:056A:0043.000F: unknown main item tag 0x4
[  418.795798][ T1147] wacom 0003:056A:0043.000F: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  418.808495][ T1147] wacom 0003:056A:0043.000F: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0
[  418.822029][ T1147] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.000F/input/input34
[  418.839470][   T55] Bluetooth: hci1: command tx timeout
[  419.071920][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.109293][T12435] loop4: detected capacity change from 0 to 512
[  419.130108][T12435] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  419.152321][T12435] EXT4-fs (loop4): 1 truncate cleaned up
[  419.159362][T12435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.178643][   T29] audit: type=1804 audit(1720553901.846:196): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2201" name="/newroot/136/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  419.342412][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'.
[  419.565689][T12332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.652531][ T1147] usb 2-1: USB disconnect, device number 17
[  419.652554][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.706421][T12446] netlink: 'syz.1.2207': attribute type 29 has an invalid length.
[  419.839466][T12456] sctp: [Deprecated]: syz.1.2210 (pid 12456) Use of int in max_burst socket option.
[  419.839466][T12456] Use struct sctp_assoc_value instead
[  420.259720][   T55] Bluetooth: hci2: command tx timeout
[  420.543025][T12479] sctp: [Deprecated]: syz.2.2220 (pid 12479) Use of int in max_burst socket option.
[  420.543025][T12479] Use struct sctp_assoc_value instead
[  420.886690][   T55] Bluetooth: hci1: command tx timeout
[  421.239324][T12501] blktrace: Concurrent blktraces are not allowed on nullb0
[  421.419237][T12332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.515114][T12332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.555262][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2227'.
[  421.639657][T12507] sctp: [Deprecated]: syz.2.2229 (pid 12507) Use of int in max_burst socket option.
[  421.639657][T12507] Use struct sctp_assoc_value instead
[  422.325940][T12332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.336883][   T55] Bluetooth: hci2: command tx timeout
[  422.567534][T12516] loop4: detected capacity change from 0 to 32768
[  422.586348][T12516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  422.594592][T12516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  422.606134][T12516] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  422.615555][ T5150] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  422.622719][ T5150] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  422.673142][ T5150] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms
[  422.680909][ T5150] gfs2: fsid=syz:syz.0: jid=0: Done
[  422.688034][T12516] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  423.283710][T12535] sctp: [Deprecated]: syz.2.2240 (pid 12535) Use of int in max_burst socket option.
[  423.283710][T12535] Use struct sctp_assoc_value instead
[  423.499436][ T2824] bridge_slave_1: left allmulticast mode
[  423.505500][ T2824] bridge_slave_1: left promiscuous mode
[  423.517318][ T2824] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.527353][ T2824] bridge_slave_0: left allmulticast mode
[  423.533076][ T2824] bridge_slave_0: left promiscuous mode
[  423.543938][ T2824] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.806881][T12546] blktrace: Concurrent blktraces are not allowed on nullb0
[  424.211016][T12550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2244'.
[  424.741337][ T2824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.926173][ T2824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.952382][ T2824] bond0 (unregistering): Released all slaves
[  425.082374][T12332] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  425.208857][T12332] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  425.249317][T12332] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  425.278392][T12560] sctp: [Deprecated]: syz.2.2249 (pid 12560) Use of int in max_burst socket option.
[  425.278392][T12560] Use struct sctp_assoc_value instead
[  425.472187][T12306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  425.482270][T12332] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  425.504996][T12306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  425.742516][T12306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  425.759989][T12306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  425.806502][   T29] audit: type=1326 audit(1720553908.496:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.4.2251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a1575bd9 code=0x0
[  426.027417][T12332] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.044191][T12332] 8021q: adding VLAN 0 to HW filter on device team0
[  426.079802][T12332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  426.090183][T12332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  426.330018][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.337217][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.346366][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.386667][T12580] blktrace: Concurrent blktraces are not allowed on nullb0
[  426.551981][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.637605][T12584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'.
[  427.024549][T12306] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.231677][T12306] 8021q: adding VLAN 0 to HW filter on device team0
[  427.279999][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.287203][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.301196][T12332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.332327][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.339588][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.485864][T12332] veth0_vlan: entered promiscuous mode
[  427.487124][ T1147] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  427.497099][T12332] veth1_vlan: entered promiscuous mode
[  427.772035][ T1147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.788518][ T1147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.799040][ T1147] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  427.808401][ T1147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.821985][ T1147] usb 5-1: config 0 descriptor??
[  427.834742][T12332] veth0_macvtap: entered promiscuous mode
[  427.848965][T12332] veth1_macvtap: entered promiscuous mode
[  427.884836][T12306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  427.898548][T12306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  427.924149][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.935452][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.945778][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.959865][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.970452][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.981252][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.991586][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.041246][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.056141][T12593] sctp: [Deprecated]: syz.2.2261 (pid 12593) Use of int in max_burst socket option.
[  428.056141][T12593] Use struct sctp_assoc_value instead
[  428.075643][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.087004][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.102957][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.126956][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.138570][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.149457][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.265661][T12332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.275843][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.286278][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.296103][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.306611][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.316428][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.326847][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.336752][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.347177][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.358254][T12332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.514634][T12332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.523368][T12332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.529903][T12594] validate_nla: 2 callbacks suppressed
[  428.529922][T12594] netlink: 'syz.4.2259': attribute type 1 has an invalid length.
[  428.568169][ T1147] wacom 0003:056A:0043.0010: unknown main item tag 0x4
[  428.576101][ T1147] wacom 0003:056A:0043.0010: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  428.597985][T12332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.611562][T12594] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.2259'.
[  428.617208][ T1147] wacom 0003:056A:0043.0010: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0
[  428.619098][ T1147] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0010/input/input37
[  428.854506][T12332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.138196][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.150247][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.172671][T12306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.242206][T12306] veth0_vlan: entered promiscuous mode
[  429.256417][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.265182][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.285070][T12306] veth1_vlan: entered promiscuous mode
[  429.364141][   T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  429.374319][T12306] veth0_macvtap: entered promiscuous mode
[  429.427012][T12306] veth1_macvtap: entered promiscuous mode
[  429.468582][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.481375][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.491709][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.525477][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.535799][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.623824][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.633667][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.644082][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.653897][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.664402][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.674246][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.684724][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.694532][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.704952][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.708410][T12609] loop3: detected capacity change from 0 to 2048
[  429.714746][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.714762][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.754076][ T5154] usb 5-1: USB disconnect, device number 17
[  429.881097][T12306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.890938][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.901388][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.911530][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.922151][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.932206][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.942753][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.952591][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.963007][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.111270][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.127102][T12609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.142763][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.181049][T12306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.210909][T12609] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  430.227477][T12609] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28
[  430.239901][T12609] EXT4-fs (loop3): This should not happen!! Data will be lost
[  430.239901][T12609] 
[  430.250148][T12609] EXT4-fs (loop3): Total free blocks count 0
[  430.256139][T12609] EXT4-fs (loop3): Free/Dirty block details
[  430.269365][T12609] EXT4-fs (loop3): free_blocks=2415919104
[  430.275123][T12609] EXT4-fs (loop3): dirty_blocks=32
[  430.280681][T12609] EXT4-fs (loop3): Block reservation details
[  430.290072][T12609] EXT4-fs (loop3): i_reserved_data_blocks=2
[  430.348548][T12332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.366611][ T2824] hsr_slave_0: left promiscuous mode
[  430.372517][ T2824] hsr_slave_1: left promiscuous mode
[  430.387214][ T2824] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.425471][ T2824] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.577506][ T2824] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.585060][ T2824] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.593406][T12611] loop4: detected capacity change from 0 to 40427
[  430.601076][T12611] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  430.608851][T12611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  430.609056][ T2824] veth1_macvtap: left promiscuous mode
[  430.622849][ T2824] veth0_macvtap: left promiscuous mode
[  430.630351][T12611] F2FS-fs (loop4): invalid crc value
[  430.636526][ T2824] veth1_vlan: left promiscuous mode
[  430.641807][T12611] F2FS-fs (loop4): Found nat_bits in checkpoint
[  430.642064][ T2824] veth0_vlan: left promiscuous mode
[  430.737839][T12611] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  430.745320][T12611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  430.757208][   T29] audit: type=1326 audit(1720553913.436:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.3.2267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef48375bd9 code=0x0
[  430.799623][   T29] audit: type=1804 audit(1720553913.466:199): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2266" name="/newroot/154/file1/file0" dev="loop4" ino=10 res=1 errno=0
[  431.138373][ T2824] team0 (unregistering): Port device team_slave_1 removed
[  431.150508][ T2824] team0 (unregistering): Port device team_slave_0 removed
[  431.522232][T12633] blktrace: Concurrent blktraces are not allowed on nullb0
[  431.868178][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.874377][T12306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.879332][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.879363][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  431.879407][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  431.879428][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.882359][   T25] usb 3-1: config 0 descriptor??
[  431.905468][T12306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.941386][T12306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.062216][   T25] usb 3-1: can't set config #0, error -71
[  432.064602][T12644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2268'.
[  432.069755][   T25] usb 3-1: USB disconnect, device number 16
[  432.122883][T12306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.158093][ T5154] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  432.406310][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.423646][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.552252][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.576844][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.599383][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.611234][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.651537][ T5154] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  432.670994][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.805349][ T5154] usb 2-1: config 0 descriptor??
[  433.115897][   T29] audit: type=1326 audit(1720553915.816:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12656 comm="syz.2.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4679d75bd9 code=0x0
[  433.598033][T12642] netlink: 'syz.1.2275': attribute type 1 has an invalid length.
[  433.769164][T12642] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.2275'.
[  433.803741][ T5154] wacom 0003:056A:0043.0011: unknown main item tag 0x4
[  433.815736][ T5154] wacom 0003:056A:0043.0011: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  433.827609][ T5154] wacom 0003:056A:0043.0011: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0
[  433.844001][ T5154] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.0011/input/input40
[  433.896759][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  433.966108][  T927] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  434.258055][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.275922][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.283114][T12689] blktrace: Concurrent blktraces are not allowed on nullb0
[  434.286099][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  434.306401][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  434.316839][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.327202][    T9] usb 5-1: config 0 descriptor??
[  434.713833][T12691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2290'.
[  434.988545][ T1147] usb 2-1: USB disconnect, device number 18
[  434.999877][    T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  435.051788][    T9] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  435.081364][    T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  436.689740][T12699] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  436.696850][T12699] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  436.754918][ T2824] IPVS: stop unused estimator thread 0...
[  437.004592][T12699] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  437.139775][T12699] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  437.185348][   T29] audit: type=1326 audit(1720553919.856:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.2298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0
[  437.298089][  T927] usb 1-1: unable to read config index 0 descriptor/start: -71
[  437.305702][  T927] usb 1-1: can't read configurations, error -71
[  437.368945][T12699] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  437.382623][T12699] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  437.506317][ T5154] usb 5-1: USB disconnect, device number 18
[  437.744906][T12699] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  437.768678][T12699] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  437.791568][    C0] eth0: bad gso: type: 1, size: 1408
[  437.871762][T12699] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  437.882614][T12699] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  437.894920][T12754] blktrace: Concurrent blktraces are not allowed on nullb0
[  438.130199][ T5150] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  438.369041][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'.
[  438.448308][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.463655][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.500012][ T5150] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  438.509555][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.520369][ T5150] usb 3-1: config 0 descriptor??
[  438.776612][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  438.963385][T12747] netlink: 'syz.2.2303': attribute type 1 has an invalid length.
[  438.971331][T12747] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.2303'.
[  438.993135][    T9] usb 5-1: Using ep0 maxpacket: 32
[  439.008183][    T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  439.026903][    T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  439.050017][ T5150] wacom 0003:056A:0043.0013: unknown main item tag 0x4
[  439.058328][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  439.068697][ T5150] wacom 0003:056A:0043.0013: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  439.078747][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  439.094229][ T5150] wacom 0003:056A:0043.0013: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0
[  439.106205][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  439.118632][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  439.142466][ T5150] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0013/input/input43
[  439.237960][    T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  439.270020][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.287001][    T9] usb 5-1: config 0 descriptor??
[  440.514283][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  440.639273][ T1246] ieee802154 phy1 wpan1: encryption failed: -22
[  441.987291][    T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  442.050200][    T9] usb 5-1: USB disconnect, device number 19
[  442.069920][    T9] usblp0: removed
[  442.580075][ T5102] usb 3-1: USB disconnect, device number 17
[  442.658653][   T29] audit: type=1326 audit(1720553925.326:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.2312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a1575bd9 code=0x0
[  444.997139][   T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  446.260017][   T25] usb 3-1: Using ep0 maxpacket: 32
[  446.810704][T12855] loop4: detected capacity change from 0 to 262144
[  446.827982][T12855] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2324 (12855)
[  446.931937][T12855] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  446.952700][T12855] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  446.965943][T12855] BTRFS info (device loop4): using free-space-tree
[  447.269572][ T2824] BTRFS warning (device loop4): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0
[  447.284656][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22036480 (dev /dev/loop4 sector 43040)
[  447.295615][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22040576 (dev /dev/loop4 sector 43048)
[  447.306892][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22044672 (dev /dev/loop4 sector 43056)
[  447.318671][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22048768 (dev /dev/loop4 sector 43064)
[  447.331556][ T2824] BTRFS warning (device loop4): checksum verify failed on logical 30670848 mirror 1 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0
[  447.349813][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30670848 (dev /dev/loop4 sector 76288)
[  447.370588][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30674944 (dev /dev/loop4 sector 76296)
[  447.399003][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30679040 (dev /dev/loop4 sector 76304)
[  447.425483][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30683136 (dev /dev/loop4 sector 76312)
[  447.641018][ T2824] BTRFS warning (device loop4): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0
[  447.775582][   T25] usb 3-1: unable to read config index 0 descriptor/all
[  447.783661][   T25] usb 3-1: can't read configurations, error -71
[  447.895056][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30457856 (dev /dev/loop4 sector 75872)
[  447.912529][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30461952 (dev /dev/loop4 sector 75880)
[  448.242605][T10446] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  450.627620][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'.
[  450.687011][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'.
[  486.630845][ T1046] erspan0: left allmulticast mode
[  486.635937][ T1046] erspan0: left promiscuous mode
[  486.641680][ T1046] bridge0: port 3(erspan0) entered disabled state
[  486.669847][ T1046] bridge_slave_1: left allmulticast mode
[  486.675606][ T1046] bridge_slave_1: left promiscuous mode
[  486.681784][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.706606][ T1046] bridge_slave_0: left allmulticast mode
[  486.712275][ T1046] bridge_slave_0: left promiscuous mode
[  486.726617][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.109451][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  489.120307][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.130486][ T1046] bond0 (unregistering): Released all slaves
[  501.948357][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  501.954677][ T1246] ieee802154 phy1 wpan1: encryption failed: -22
[  563.580566][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  563.586931][ T1246] ieee802154 phy1 wpan1: encryption failed: -22
[  584.137187][   T30] INFO: task kworker/0:2:1147 blocked for more than 143 seconds.
[  584.144960][   T30]       Not tainted 6.10.0-rc7-next-20240709-syzkaller #0
[  584.152077][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  584.160764][   T30] task:kworker/0:2     state:D stack:20912 pid:1147  tgid:1147  ppid:2      flags:0x00004000
[  584.170952][   T30] Workqueue: events rfkill_global_led_trigger_worker
[  584.177653][   T30] Call Trace:
[  584.180934][   T30]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  584.183874][   T30]  __schedule+0x1800/0x4a60
[  584.188408][   T30]  ? schedule+0x90/0x320
[  584.192665][   T30]  ? schedule+0x90/0x320
[  584.196918][   T30]  ? lock_release+0xbf/0x9f0
[  584.201745][   T30]  ? __pfx___schedule+0x10/0x10
[  584.206615][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  584.211949][   T30]  ? __pfx_lock_release+0x10/0x10
[  584.218000][   T30]  ? kick_pool+0x1bd/0x620
[  584.222454][   T30]  ? schedule+0x90/0x320
[  584.398547][   T30]  ? rcu_is_watching+0x15/0xb0
[  584.403375][   T30]  ? schedule+0x90/0x320
[  584.407625][   T30]  schedule+0x14b/0x320
[  584.411787][   T30]  schedule_preempt_disabled+0x13/0x30
[  584.417256][   T30]  __mutex_lock+0x6a4/0xd70
[  584.421771][   T30]  ? __mutex_lock+0x527/0xd70
[  584.426462][   T30]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  584.432728][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  584.437771][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  584.444123][   T30]  ? process_scheduled_works+0x945/0x1830
[  584.449869][   T30]  rfkill_global_led_trigger_worker+0x27/0xd0
[  584.455953][   T30]  ? process_scheduled_works+0x945/0x1830
[  584.461695][   T30]  process_scheduled_works+0xa2c/0x1830
[  584.676145][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  584.682213][   T30]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  584.687792][   T30]  ? assign_work+0x364/0x3d0
[  584.692399][   T30]  worker_thread+0x86d/0xd40
[  584.697005][   T30]  ? rcu_is_watching+0x15/0xb0
[  584.701797][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  584.707707][   T30]  ? __kthread_parkme+0x169/0x1d0
[  584.712748][   T30]  ? __pfx_worker_thread+0x10/0x10
[  584.717882][   T30]  kthread+0x2f0/0x390
[  584.721962][   T30]  ? __pfx_worker_thread+0x10/0x10
[  584.727082][   T30]  ? __pfx_kthread+0x10/0x10
[  584.731688][   T30]  ret_from_fork+0x4b/0x80
[  584.736119][   T30]  ? __pfx_kthread+0x10/0x10
[  584.740762][   T30]  ret_from_fork_asm+0x1a/0x30
[  584.745556][   T30]  </TASK>
[  584.748682][   T30] INFO: task syz.0.2149:12655 blocked for more than 143 seconds.
[  584.756398][   T30]       Not tainted 6.10.0-rc7-next-20240709-syzkaller #0
[  584.763510][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  584.944364][   T30] task:syz.0.2149      state:D stack:23496 pid:12655 tgid:12652 ppid:12306  flags:0x00004006
[  584.954586][   T30] Call Trace:
[  584.957874][   T30]  <TASK>
[  584.960811][   T30]  __schedule+0x1800/0x4a60
[  584.965331][   T30]  ? schedule+0x90/0x320
[  584.969593][   T30]  ? schedule+0x90/0x320
[  584.973888][   T30]  ? lock_release+0xbf/0x9f0
[  584.978511][   T30]  ? __pfx___schedule+0x10/0x10
[  584.983376][   T30]  ? __pfx_lock_release+0x10/0x10
[  584.988426][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  584.993902][   T30]  ? schedule+0x90/0x320
[  584.999452][   T30]  schedule+0x14b/0x320
[  585.003617][   T30]  schedule_preempt_disabled+0x13/0x30
[  585.009080][   T30]  __mutex_lock+0x6a4/0xd70
[  585.013593][   T30]  ? kobject_put+0x443/0x480
[  585.018198][   T30]  ? __mutex_lock+0x527/0xd70
[  585.022882][   T30]  ? rfkill_unregister+0xd0/0x230
[  585.027921][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  585.032959][   T30]  ? __pfx_device_del+0x10/0x10
[  585.037826][   T30]  ? __pfx_nfc_genl_device_removed+0x10/0x10
[  585.043818][   T30]  rfkill_unregister+0xd0/0x230
[  585.245385][   T30]  nfc_unregister_device+0x96/0x2a0
[  585.250645][   T30]  virtual_ncidev_close+0x59/0x90
[  585.255697][   T30]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  585.261433][   T30]  __fput+0x24a/0x8a0
[  585.265437][   T30]  task_work_run+0x24f/0x310
[  585.270721][   T30]  ? __pfx_task_work_run+0x10/0x10
[  585.275857][   T30]  ? do_exit+0xa2a/0x27f0
[  585.280201][   T30]  ? kmem_cache_free+0x145/0x350
[  585.285154][   T30]  do_exit+0xa2f/0x27f0
[  585.289326][   T30]  ? rcu_is_watching+0x15/0xb0
[  585.294103][   T30]  ? __pfx_do_exit+0x10/0x10
[  585.298718][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  585.304096][   T30]  ? __pfx_lock_release+0x10/0x10
[  585.309133][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  585.315477][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  585.320614][   T30]  do_group_exit+0x207/0x2c0
[  585.325223][   T30]  get_signal+0x16a1/0x1740
[  585.329745][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  585.334793][   T30]  ? __pfx_get_signal+0x10/0x10
[  585.482911][   T30]  arch_do_signal_or_restart+0x96/0x860
[  585.488520][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  585.494709][   T30]  ? rcu_is_watching+0x15/0xb0
[  585.499590][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  585.505153][   T30]  do_syscall_64+0x100/0x230
[  585.509755][   T30]  ? clear_bhb_loop+0x35/0x90
[  585.514453][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.520373][   T30] RIP: 0033:0x7ff3183757db
[  585.524802][   T30] RSP: 002b:00007ff31906cf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  585.533234][   T30] RAX: 0000000000000012 RBX: 000000000000000c RCX: 00007ff3183757db
[  585.541224][   T30] RDX: 00007ff31906cfe0 RSI: 0000000040085503 RDI: 000000000000000c
[  585.549353][   T30] RBP: 00007ff31906dff0 R08: 0000000000000080 R09: 00007ff31906cfe8
[  585.557353][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[  585.565388][   T30] R13: 0000000800000000 R14: 0000000000000012 R15: 00007ff3183ecaf2
[  585.573392][   T30]  </TASK>
[  585.576465][   T30] INFO: task syz.3.2291:12699 blocked for more than 144 seconds.
[  585.776450][   T30]       Not tainted 6.10.0-rc7-next-20240709-syzkaller #0
[  585.783594][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  585.792763][   T30] task:syz.3.2291      state:D stack:23600 pid:12699 tgid:12692 ppid:12332  flags:0x00004006
[  585.802963][   T30] Call Trace:
[  585.806255][   T30]  <TASK>
[  585.809199][   T30]  __schedule+0x1800/0x4a60
[  585.813710][   T30]  ? schedule+0x90/0x320
[  585.817985][   T30]  ? schedule+0x90/0x320
[  585.822238][   T30]  ? lock_release+0xbf/0x9f0
[  585.826848][   T30]  ? __pfx___schedule+0x10/0x10
[  585.831709][   T30]  ? __pfx_lock_release+0x10/0x10
[  585.836744][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  585.842220][   T30]  ? schedule+0x90/0x320
[  585.846476][   T30]  schedule+0x14b/0x320
[  585.850742][   T30]  schedule_preempt_disabled+0x13/0x30
[  585.856221][   T30]  __mutex_lock+0x6a4/0xd70
[  585.860745][   T30]  ? __mutex_lock+0x527/0xd70
[  585.865438][   T30]  ? nfc_rfkill_set_block+0x50/0x310
[  585.870736][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  586.286441][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  586.292402][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  586.316428][   T30]  nfc_rfkill_set_block+0x50/0x310
[  586.321596][   T30]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  586.336602][   T30]  rfkill_set_block+0x1f1/0x440
[  586.341601][   T30]  rfkill_fop_write+0x5bb/0x790
[  586.362816][   T30]  ? common_file_perm+0x1a6/0x210
[  586.376514][   T30]  ? __pfx_rfkill_fop_write+0x10/0x10
[  586.381929][   T30]  ? bpf_lsm_file_permission+0x9/0x10
[  586.396711][   T30]  ? rw_verify_area+0x1d2/0x6b0
[  586.401582][   T30]  ? __pfx_rfkill_fop_write+0x10/0x10
[  586.419583][   T30]  vfs_write+0x2a2/0xc90
[  586.423864][   T30]  ? __pfx_vfs_write+0x10/0x10
[  586.436745][   T30]  ? __pfx_bpf_send_signal_common+0x10/0x10
[  586.442675][   T30]  ? __fget_files+0x29/0x470
[  586.466415][   T30]  ? __fget_files+0x3f6/0x470
[  586.471130][   T30]  ? __fget_files+0x29/0x470
[  586.475729][   T30]  ksys_write+0x1a0/0x2c0
[  586.536451][   T30]  ? __pfx_bpf_trace_run2+0x10/0x10
[  586.541734][   T30]  ? __pfx_ksys_write+0x10/0x10
[  586.556750][   T30]  ? rcu_is_watching+0x15/0xb0
[  586.561633][   T30]  ? trace_sys_enter+0x1f/0xd0
[  586.577002][   T30]  do_syscall_64+0xf3/0x230
[  586.581548][   T30]  ? clear_bhb_loop+0x35/0x90
[  586.586240][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.616430][   T30] RIP: 0033:0x7fef48375bd9
[  586.620894][   T30] RSP: 002b:00007fef49155048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  586.636754][   T30] RAX: ffffffffffffffda RBX: 00007fef48504110 RCX: 00007fef48375bd9
[  586.644753][   T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000005
[  586.676558][   T30] RBP: 00007fef483e4e60 R08: 0000000000000000 R09: 0000000000000000
[  586.684567][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.790062][   T30] R13: 000000000000006e R14: 00007fef48504110 R15: 00007ffe9994c5f8
[  586.807017][   T30]  </TASK>
[  586.810101][   T30] INFO: lockdep is turned off.
[  586.814873][   T30] NMI backtrace for cpu 0
[  586.819211][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-next-20240709-syzkaller #0
[  586.829217][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  586.839283][   T30] Call Trace:
[  586.842566][   T30]  <TASK>
[  586.845501][   T30]  dump_stack_lvl+0x241/0x360
[  586.850196][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  586.855408][   T30]  ? __pfx__printk+0x10/0x10
[  586.860008][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  586.865044][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  586.870014][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  586.875488][   T30]  ? _printk+0xd5/0x120
[  586.879655][   T30]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  586.885647][   T30]  ? __pfx__printk+0x10/0x10
[  586.890257][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  586.896246][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  586.902319][   T30]  watchdog+0xfee/0x1030
[  586.906572][   T30]  ? watchdog+0x1ea/0x1030
[  586.911003][   T30]  ? __pfx_watchdog+0x10/0x10
[  586.915769][   T30]  kthread+0x2f0/0x390
[  586.919843][   T30]  ? __pfx_watchdog+0x10/0x10
[  586.924527][   T30]  ? __pfx_kthread+0x10/0x10
[  586.929204][   T30]  ret_from_fork+0x4b/0x80
[  586.933628][   T30]  ? __pfx_kthread+0x10/0x10
[  586.938218][   T30]  ret_from_fork_asm+0x1a/0x30
[  586.942999][   T30]  </TASK>
[  586.946934][   T30] Sending NMI from CPU 0 to CPUs 1:
[  586.952158][    C1] NMI backtrace for cpu 1
[  586.952171][    C1] CPU: 1 UID: 0 PID: 4556 Comm: udevd Not tainted 6.10.0-rc7-next-20240709-syzkaller #0
[  586.952190][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  586.952201][    C1] RIP: 0010:rcu_is_watching+0x55/0xb0
[  586.952228][    C1] Code: ea de 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 0c b5 80 00 48 c7 c3 98 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d 11 2c 8a 7e 74 10 83 e0
[  586.952242][    C1] RSP: 0018:ffffc90000a188e0 EFLAGS: 00000806
[  586.952257][    C1] RAX: 1ffff110172a6f93 RBX: ffff8880b9537c98 RCX: ffffffff816f8b40
[  586.952270][    C1] RDX: 0000000000000000 RSI: ffffffff8c209860 RDI: ffffffff8c209820
[  586.952282][    C1] RBP: ffffc90000a18a30 R08: ffffffff8fafd2af R09: 1ffffffff1f5fa55
[  586.952295][    C1] R10: dffffc0000000000 R11: fffffbfff1f5fa56 R12: 1ffff9200014312c
[  586.952308][    C1] R13: ffffffff84b788d0 R14: ffffffff8ddeea48 R15: dffffc0000000000
[  586.952321][    C1] FS:  00007fc1db512c80(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  586.952335][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  586.952347][    C1] CR2: 000055d864ac6058 CR3: 0000000078e84000 CR4: 00000000003506f0
[  586.952361][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  586.952372][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  586.952383][    C1] Call Trace:
[  586.952389][    C1]  <NMI>
[  586.952396][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  586.952420][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  586.952443][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  586.952474][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  586.952499][    C1]  ? nmi_handle+0x14f/0x5a0
[  586.952515][    C1]  ? nmi_handle+0x2a/0x5a0
[  586.952530][    C1]  ? rcu_is_watching+0x55/0xb0
[  586.952552][    C1]  ? default_do_nmi+0x63/0x160
[  586.952576][    C1]  ? exc_nmi+0x123/0x1f0
[  586.952598][    C1]  ? end_repeat_nmi+0xf/0x53
[  586.952613][    C1]  ? debug_objects_fill_pool+0x80/0x9b0
[  586.952634][    C1]  ? lock_release+0xb0/0x9f0
[  586.952655][    C1]  ? rcu_is_watching+0x55/0xb0
[  586.952677][    C1]  ? rcu_is_watching+0x55/0xb0
[  586.952701][    C1]  ? rcu_is_watching+0x55/0xb0
[  586.952723][    C1]  </NMI>
[  586.952728][    C1]  <IRQ>
[  586.952735][    C1]  lock_release+0xbf/0x9f0
[  586.952756][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  586.952775][    C1]  ? kasan_save_stack+0x4f/0x60
[  586.952792][    C1]  ? kasan_save_stack+0x3f/0x60
[  586.952809][    C1]  ? __kasan_record_aux_stack+0xac/0xc0
[  586.952831][    C1]  ? task_work_add+0x8b/0x3a0
[  586.952845][    C1]  ? sched_tick+0x322/0x610
[  586.952860][    C1]  ? __pfx_lock_release+0x10/0x10
[  586.952879][    C1]  ? hrtimer_interrupt+0x396/0x990
[  586.952897][    C1]  ? __sysvec_apic_timer_interrupt+0x110/0x3f0
[  586.952920][    C1]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[  586.952937][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  586.952953][    C1]  ? unwind_next_frame+0xfbd/0x2a00
[  586.952976][    C1]  ? arch_stack_walk+0x151/0x1b0
[  586.952990][    C1]  ? stack_trace_save+0x118/0x1d0
[  586.953013][    C1]  ? debug_objects_fill_pool+0x80/0x9b0
[  586.953030][    C1]  ? debug_objects_fill_pool+0x80/0x9b0
[  586.953048][    C1]  debug_objects_fill_pool+0xc0/0x9b0
[  586.953067][    C1]  ? lock_release+0xbf/0x9f0
[  586.953090][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  586.953108][    C1]  ? __pfx_debug_objects_fill_pool+0x10/0x10
[  586.953128][    C1]  ? rcu_is_watching+0x15/0xb0
[  586.953150][    C1]  ? lock_acquire+0xe3/0x550
[  586.953170][    C1]  ? advance_sched+0xa02/0xca0
[  586.953197][    C1]  debug_object_activate+0x135/0x510
[  586.953216][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  586.953234][    C1]  ? __pfx_debug_object_activate+0x10/0x10
[  586.953251][    C1]  ? advance_sched+0xa02/0xca0
[  586.953276][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  586.953299][    C1]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  586.953323][    C1]  enqueue_hrtimer+0x30/0x3c0
[  586.953344][    C1]  __hrtimer_run_queues+0x6cb/0xd50
[  586.953362][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  586.953393][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  586.953412][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  586.953438][    C1]  hrtimer_interrupt+0x396/0x990
[  586.953467][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  586.953496][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  586.953515][    C1]  </IRQ>
[  586.953520][    C1]  <TASK>
[  586.953526][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  586.953542][    C1] RIP: 0010:unwind_next_frame+0xfbd/0x2a00
[  586.953566][    C1] Code: 52 00 48 83 c5 38 48 89 ef e8 ef 27 00 00 48 89 c6 4c 8b 64 24 28 48 89 74 24 10 49 8d 6c 24 01 48 8b 44 24 38 42 0f b6 04 28 <84> c0 0f 85 20 13 00 00 48 89 e8 48 c1 e8 03 48 89 44 24 78 42 0f
[  586.953579][    C1] RSP: 0018:ffffc9000367f7c8 EFLAGS: 00000282
[  586.953592][    C1] RAX: 0000000000000000 RBX: ffffffff90d4c88b RCX: ffff88807986da00
[  586.953604][    C1] RDX: ffffffff90d4c88a RSI: ffffc9000367ff58 RDI: 0000000000000005
[  586.953615][    C1] RBP: ffffffff90d4c88f R08: 0000000000000005 R09: ffffffff8140ff0e
[  586.953627][    C1] R10: 0000000000000008 R11: ffff88807986da00 R12: ffffffff90d4c88e
[  586.953638][    C1] R13: dffffc0000000000 R14: ffffc9000367f8f0 R15: 1ffff920006cff14
[  586.953653][    C1]  ? unwind_next_frame+0x7be/0x2a00
[  586.953680][    C1]  ? unwind_next_frame+0x8d6/0x2a00
[  586.953706][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.953730][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.953753][    C1]  ? __kernel_text_address+0xd/0x40
[  586.953768][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.953791][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  586.953812][    C1]  arch_stack_walk+0x151/0x1b0
[  586.953830][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.953856][    C1]  stack_trace_save+0x118/0x1d0
[  586.953877][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  586.953895][    C1]  ? lock_release+0xbf/0x9f0
[  586.953918][    C1]  ? __pfx_lock_release+0x10/0x10
[  586.953937][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  586.953956][    C1]  kasan_save_track+0x3f/0x80
[  586.953972][    C1]  ? kasan_save_track+0x3f/0x80
[  586.953988][    C1]  ? __kasan_slab_alloc+0x66/0x80
[  586.954006][    C1]  ? kmem_cache_alloc_lru_noprof+0x139/0x2b0
[  586.954030][    C1]  ? __d_alloc+0x31/0x700
[  586.954051][    C1]  ? d_alloc+0x4b/0x190
[  586.954070][    C1]  ? lookup_one_qstr_excl+0xce/0x260
[  586.954092][    C1]  ? do_unlinkat+0x297/0x830
[  586.954107][    C1]  ? __x64_sys_unlink+0x47/0x50
[  586.954123][    C1]  ? do_syscall_64+0xf3/0x230
[  586.954142][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.954187][    C1]  __kasan_slab_alloc+0x66/0x80
[  586.954205][    C1]  ? __d_alloc+0x31/0x700
[  586.954226][    C1]  kmem_cache_alloc_lru_noprof+0x139/0x2b0
[  586.954252][    C1]  __d_alloc+0x31/0x700
[  586.954273][    C1]  ? __down_write_common+0x162/0x200
[  586.954292][    C1]  d_alloc+0x4b/0x190
[  586.954314][    C1]  lookup_one_qstr_excl+0xce/0x260
[  586.954338][    C1]  do_unlinkat+0x297/0x830
[  586.954360][    C1]  ? __pfx_do_unlinkat+0x10/0x10
[  586.954376][    C1]  ? __check_object_size+0x49c/0x900
[  586.954402][    C1]  ? getname_flags+0x1e3/0x540
[  586.954424][    C1]  __x64_sys_unlink+0x47/0x50
[  586.954441][    C1]  do_syscall_64+0xf3/0x230
[  586.954461][    C1]  ? clear_bhb_loop+0x35/0x90
[  586.954477][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.954508][    C1] RIP: 0033:0x7fc1db117da7
[  586.954522][    C1] Code: f0 ff ff 73 01 c3 48 8b 0d 7e 90 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 90 0d 00 f7 d8 64 89 01 48
[  586.954535][    C1] RSP: 002b:00007fff0b505438 EFLAGS: 00000202 ORIG_RAX: 0000000000000057
[  586.954550][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc1db117da7
[  586.954562][    C1] RDX: 0000000000000080 RSI: 00007fff0b505628 RDI: 000055bb17c4d0d8
[  586.954573][    C1] RBP: 000000000000000b R08: 0000000022fa7f2b R09: 7fffffffffffffff
[  586.954584][    C1] R10: 00007fc1db6190b8 R11: 0000000000000202 R12: 0000000000000bb8
[  586.954595][    C1] R13: 0000000200000001 R14: 0000000000000001 R15: 0000000000000000
[  586.954613][    C1]  </TASK>
[  587.959121][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  587.966017][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-next-20240709-syzkaller #0
[  587.976005][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  587.986069][   T30] Call Trace:
[  587.989350][   T30]  <TASK>
[  587.992284][   T30]  dump_stack_lvl+0x241/0x360
[  587.996979][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  588.002182][   T30]  ? __pfx__printk+0x10/0x10
[  588.006775][   T30]  ? vscnprintf+0x5d/0x90
[  588.011113][   T30]  panic+0x349/0x870
[  588.015013][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  588.021188][   T30]  ? __pfx_panic+0x10/0x10
[  588.025616][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  588.031000][   T30]  ? __irq_work_queue_local+0x137/0x410
[  588.036563][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  588.041942][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  588.048110][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  588.054275][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  588.060441][   T30]  watchdog+0x102d/0x1030
[  588.064778][   T30]  ? watchdog+0x1ea/0x1030
[  588.069204][   T30]  ? __pfx_watchdog+0x10/0x10
[  588.073886][   T30]  kthread+0x2f0/0x390
[  588.077964][   T30]  ? __pfx_watchdog+0x10/0x10
[  588.082661][   T30]  ? __pfx_kthread+0x10/0x10
[  588.087274][   T30]  ret_from_fork+0x4b/0x80
[  588.091793][   T30]  ? __pfx_kthread+0x10/0x10
[  588.096394][   T30]  ret_from_fork_asm+0x1a/0x30
[  588.101182][   T30]  </TASK>
[  588.107876][   T30] Kernel Offset: disabled
[  588.112185][   T30] Rebooting in 86400 seconds..